A SECURITY ISSUE IN ANDROID THAT REMAINS UNFIXED – PULL-DOWN MENU ON LOCK SCREEN

Having your phone lying around when your kids are playing with everything they find is a great security test. They…

Read More »

OPEN APIS – PUBLIC INFRASTRUCTURE IN THE DIGITAL AGE

When “public infrastructure” is mentioned, typically people think of roads, bridges, rails, dams, power plants, city lights. These are all…

Read More »

Simple Things That Are Actually Hard: User Authentication

You build a system. User authentication is the component that is always there, regardless of the functionality of the system.…

Read More »

Obtaining TLS Client Certificates In Spring Integration

Spring Integration is a very powerful and extensible framework for, well, integrations. But sometimes it’s not trivial how to get…

Read More »

Every Serialization Framework Should Have Its Own Transient Annotation

We’ve all used dozens of serialization frameworks – for JSON, XML, binary, and ORMs (which are effectively serialization frameworks for…

Read More »

The Syslog Hell

Syslog. You’ve probably heard about that, especially if you are into monitoring or security. Syslog is perceived to be the…

Read More »

Developers Are Obsessed With Their Text Editors

Developers are constantly discussing and even fighting about text editors and IDEs. Which one is better, why is it better,…

Read More »

List of Open Source Security Tools

As a founder of a security company, I’m constantly looking for open source tools to either incorporate in our offering,…

Read More »

Always Name Your Thread Pools

Our software tends to use a lot of thread pools – mostly through java.util.concurrent.ExecutorService implementations (Created via Executors.new.... We create…

Read More »