security
-
🔐 Go makes it easy to respond to the eMudhra certificate issue
The recent eMudhra certificate issue increases the possibility of a man-in-the-middle attack on IoT devices. On a Linux-based edge device, updating the ca-certificates package fixes this, but a system update can take time to roll out. Apps …
-
🔐 Simple secret management for small teams
Small teams need to keep secrets out of Git and out of plain-text files, but they rarely have the time to run secrets infrastructure. This article describes a practical way to manage secrets with reasonable security and low friction. Let’s …
-
🛡️ How to get to secure and reliable
The best way to get to secure and reliable software is to fix the core issues. If your programming language is not reasonably secure and reliable, adding more external tools to check and track down problems is helpful, but is likely not the…