2022
-
Cryptopals: Set 1 – challenge 8
Mar 14
The final Cryptopals challenge in set 1 involves detecting AES when used in ECB mode. It will become a handy utility later on …
-
Cryptopals: Set 1 – challenge 7
Mar 13
Next up with Cryptopals is a challenge to decrypt AES in ECB mode. This is relatively easy in PHP!
-
Cryptopals: Set 1 – challenge 6
Mar 12
A return to Cryptopals means we get to break the repeating-key cipher we were working with before. Breaking crypto is fun!
-
Limiting network egress
Mar 11
Blocking incoming traffic is only half of a firewall’s features. Today let’s look at limiting outgoing traffic!
-
Basic firewall usage
Mar 10
If you run a server in the cloud, you need to use a firewall to protect it. Let’s look at the most basic settings of Ubuntu’s ufw system.
-
Cooking with credentials – pepper
Mar 6
No meal is complete without salt AND pepper. No password hashing scheme is truly secure without both, either!
-
Cooking with credentials – salting
Mar 5
Learn how to securely hash and anonymize user passwords in PHP using native functions that automatically apply salt.
-
Cooking with credentials – the basics
Mar 4
There are many ways to store user credentials for verification on the application side. Of all of them, only hashing is considered secure.
-
Why phishing attacks succeed
Mar 1
Phishing is all too common and far too successful, even today. What are some ways these scams succeed and how can you avoid them?
-
The journey to PCI compliance
Feb 27
Credit card issuers have standardized guidelines to better protect customers’ payment information from theft and abuse, PCI-DSS.
-
A Libsodium-based secure remote password scheme for PHP
Feb 24
Let’s geek out on my favorite form of authentication – not sending passwords over the wire in the first place!
-
Self-obfuscating value objects
Feb 22
Sometimes, certain design patterns can aid in security as well as reusability of code. Let’s look at value objects as an example.