Security Misnomers
In this article I’m not going to talk about IT security, instead I’m going to talk about the fallacies of security in our everyday lives in the real world.
Author: Brett Crawley (55)
Brett Crawley is a principal application security engineer and the author of Threat Modeling Gameplay with EoP (Packt, 2024). He created SBOM-Graph and the Elevation of Autonomy card deck for threat modelling AI, LLM and agentic systems, contributes to OWASP, and writes The Blast Radius newsletter on supply chain security, AI security and EU regulation.
Configuring Tomcat 7 Single Sign-on with SPNEGO (Kerberos & LDAP) Part 2
In this recipe you will see how to configure authentication cross forest and how you might implement cross forest authorization.
Programming Language Peculiarities: Java WAT!
I program in Java pretty much every day or at least every week day. Yet I could think of very few peculiarities.
Configuring Tomcat Single Sign-on with SPNEGO (Kerberos & LDAP)
So what is SPNEGO? SPNEGO stands for Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO). It is a mechanism by which an authenticating body negotiates with the authenticator what security protocol to use, for example Kerberos, NTLM, Digest or Basic
Programming Language Peculiarities: JavaScript WAT!
Last week I wrote about some of the strange statements that are considered syntactically correct in Ruby. This week I am going to write about function scoping peculiarities with JavaScript. Firstly there are a number of ways you can define functions in JavaScript
How Is Learning a Human Language Like Learning a Computer Language
As programmers we get used to moving from one programming language to another, among language families this is relatively simple. When I refer to programming language families, for the purpose of this article I mean high level or low level languages.
Ostering?
The name derives from two words, one in Italian “Osteria” and one in English “Running”.
Browse all Topics
- Agentic AI
- AI Security
- Application Security
- Auth
- AWS
- CAPEC
- Catasto
- Change
- Claude Code Security
- Cloud Security
- Compliance
- CRA
- Cryptography
- Culture
- Cursor AI
- Cybersecurity
- Dark Patterns
- DevSecOps
- DIY
- DORA
- Elevation of Privilege
- Games
- Garden Wildlife
- Graph Analysis
- Hedgehog
- Inner-Source
- Java
- JavaScript
- KMS
- languages
- learning
- Miro
- Mitre
- Model Context Protocol
- NIS2
- Open-Source
- Origins
- Osteria
- OWASP
- Post Quantum Cryptography
- Privacy
- Privacy by Design
- Python
- Risk
- Running
- SAST
- SBOM
- scarno
- Secure by Design
- Security
- Security by Design
- Security Culture
- Security Maturity
- SLSA
- Social Engineering
- Software Architecture
- Software Design
- Software Development
- Software Engineering
- Software Quality
- src2sink
- Strategy
- STRIDE
- Supply Chain Security
- Technical Dept
- Threat Modeling
- TRIM
- Woodworking