Event Security and Sensitive Data in EDA
Secure event-driven systems with least-privilege identities, encrypted transport and payloads, careful data minimization, and a deliberate retention plan.
Posts tagged with #security
Forward and Reverse Proxies: Routing, Trust, and Use Cases
Learn how forward and reverse proxies handle HTTP traffic, CONNECT tunnels, TLS termination, caching, routing, trusted headers, and production failures.
Trace and Secure a Web Request
Trace a web request from DNS through routing, TCP, TLS, and HTTP with safe commands, then classify failures and review least-privilege security evidence.
Backend Configuration, Environments, and Dependencies
Learn how backend services load configuration, separate development from production, validate settings, and manage dependencies without leaking secrets.
Network Ports and Firewalls
Learn how TCP and UDP ports, listening sockets, and firewall rules shape backend reachability, with practical examples for safer production deployments.
API Clients, Servers, and Network Boundaries Explained
Understand what API clients and servers each own, how network boundaries fail, and how timeouts, retries, and trust boundaries shape reliable integrations.
JVM Bytecode Verification: Type Checking and Stack Map Frames
A technical deep dive into the JVM bytecode verifier, covering type checking, stack map frames, the four verification stages, and what happens when verification fails.
JVM Bytecode Verification: The JVMS Compliance Process
Understanding the Java Virtual Machine Specification compliance: bytecode verification phases, type checking, stack overflow prevention, and security guarantees.
Java Security Manager: Permission Checks and Policy Files
A deep dive into the Java Security Manager, policy file configuration, permission checks, and how to properly sandbox untrusted code in the JVM.
Git Secrets Management and Pre-commit Hooks
Preventing secrets from entering repositories using pre-commit hooks, secret scanning tools, and automated detection. Protect API keys, tokens, and credentials from accidental commits.