Avatar
Gonçalo Valério
c1f508d6095df2f21aad0aa196584a9cb74f804fe8e181daf205ecdc9a74b700
Full-stack developer with special interest in cybersecurity. Advocate of a free and safe Internet. Nature admirer and sports enthusiast.

"How to Build Smaller Container Images: Docker Multi-Stage Builds"

https://labs.iximiuz.com/tutorials/docker-multi-stage-builds

#docker #containers

"An open-source collection of cloud infrastructure best practices, for bootstrapping your own cloud platform."

https://www.cloudguardrails.com/

#security #cybersecurity #cloud #cloudsec

"TIL #105 – pytest selection arguments for failing tests"

https://mathspp.com/blog/til/pytest-selection-arguments-for-failing-tests

#python #pytest

"Simple trick to save environment and money when using GitHub Actions"

https://turso.tech/blog/simple-trick-to-save-environment-and-money-when-using-github-actions

#cicd #github #githubactions

"Apple silently uploads your passwords and keeps them"

https://lapcatsoftware.com/articles/2024/10/4.html

#apple #security #passwords #passwordmanagers

"An analysis of the Keycloak authentication system"

https://security.humanativaspa.it/an-analysis-of-the-keycloak-authentication-system/

Summary: 3 serious security issues found and reported

#security #authentication #authorization #keycloak

"10 principles for doing security and building cybersecurity products have remained unchanged since 1995"

https://ventureinsecurity.net/p/10-principles-for-building-cybersecurity

#security #cybersecurity

"Attacking APIs using JSON Injection"

https://danaepp.com/attacking-apis-using-json-injection

#security #cybersecurity #json #api

An experiment in fighting spam on public forms using “proof of work”

https://blog.ovalerio.net/archives/2996

#pow #proofofwork

"Apple Passwords’ Generated Strong Password Format"

https://rmondello.com/2024/10/07/apple-passwords-generated-strong-password-format/

#passwords #apple #security

"How to Use Hugging Face Models with Ollama"

https://danielmiessler.com/p/how-to-use-hugging-face-models-with-ollama

#ai #ollama #huggingface

"macOS sometimes leaks traffic after system updates"

https://mullvad.net/en/blog/macos-sometimes-leaks-traffic-after-system-updates

#vpn #macos #apple #mullvad #security #infosec

"New passkey specifications will let users import and export them"

https://9to5mac.com/2024/10/14/new-passkeys-import-export/

#passkeys #webauthn #passwordmanagers

"1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies"

https://gist.github.com/hackermondev/68ec8ed145fcee49d2f5e2b9d2cf2e52

#security #infosec #cybersecurity

"Deploying (Multiple) Django Apps to a Single Server with Kamal 2"

https://www.coryzue.com/writing/kamal-django/

#django #kamal

"A Guide To Subdomain Takeovers 2.0"

https://www.hackerone.com/community/guide-subdomain-takeovers

#security #subdomaintakeover #infosec