ForAllSecure

FEBRUARY 15, 2023

In May 2021, Peloton, the exercise company, found that its API was not authenticating users properly. To address issues such as authentication misconfigurations, organizations have been quick to adopt Web Application Firewalls (WAFs). It would be a shame if the API were non-performative, or worse if the API actually leaked data.

Security 40

Security Firewall Authentication Programming 40

Vox

AUGUST 7, 2023

In a recent exercise at MIT, it took just one hour for ChatGPT to instruct non-scientist students about four potential pandemic pathogens, including options for how they could be acquired by anyone lacking the skills to create them in the lab, and how to avoid detection by obtaining genetic material from providers who do not screen orders.

Artificial Intelligence 75

Artificial Intelligence Tools Exercises Training 75

ForAllSecure

NOVEMBER 24, 2020

I mean, it was open source, right? And this is open source software, meaning that there’s some developers or some project behind it that has already built out the basics of what you need to put it into your code and start using it. And is it better to be open source or commercial. No shame in that.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

I mean, it was open source, right? And this is open source software, meaning that there’s some developers or some project behind it that has already built out the basics of what you need to put it into your code and start using it. And is it better to be open source or commercial. No shame in that.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

SEPTEMBER 7, 2022

ZAP is an open-source web application security scanner that can be used by both those new to application security as well as professional penetration testers. The response will contain the token you will use for other parts of the exercise. { "auth_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE2NjIwNjkxNTIsImlhdCI6MTY2MjA2OTA5Miwic3ViIjoiZm9vIn0.7aB_94z7FmcGYNTaL67DW47Ht2WTBKlQ85eCbvmlBLM",

Comparison 40

Comparison Applications Tools Authentication 40

ForAllSecure

SEPTEMBER 7, 2022

ZAP is an open-source web application security scanner that can be used by both those new to application security as well as professional penetration testers. The response will contain the token you will use for other parts of the exercise. { "auth_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE2NjIwNjkxNTIsImlhdCI6MTY2MjA2OTA5Miwic3ViIjoiZm9vIn0.7aB_94z7FmcGYNTaL67DW47Ht2WTBKlQ85eCbvmlBLM",

Comparison 40

Comparison Applications Tools Authentication 40

ForAllSecure

NOVEMBER 24, 2020

I mean, it was open source, right? And this is open source software, meaning that there’s some developers or some project behind it that has already built out the basics of what you need to put it into your code and start using it. And is it better to be open source or commercial. No shame in that.

Open Source 52

Open Source Tools Security Software 52