A runtime permission model that restricts filesystem and network access, read carefully and left off. A sandbox that has to be opened far enough for the workload is…
A licence with a reputation, read rather than assumed, for a piece of infrastructure behind our own application. The obligation attaches to modification and to network interaction with…
A route with a permission callback that returned true for any logged-in user, on an endpoint that returned other people’s orders. The absence of a permission callback produces…
Scanning at build time answers whether the image was vulnerable when it was built, which is not the question anybody asks. A vulnerability disclosed after a build is…
WordPress changes its password hashing in April, and the migration completes only as fast as users log in. A rehash-on-login migration has no completion date, which is the…
A single sign-on bridge that read the stored hash and compared it, which stopped working when the algorithm changed. The comparison had never worked and the fallback path…