Tag

Security

#security

More content

Read more stories on Hashnode

Articles with this tag

Code Smell 215 - Deserializing Object Vulnerability

Jun 1, 20232 min read 80 views

Metaprogramming is always a problem · TL;DR: Don't allow remote code execution Problems Security Solutions Validate and sanitize input Avoid...

Code Smell 215 - Deserializing Object Vulnerability

Code Smell 167 - Hashing Comparison

Oct 9, 20222 min read 131 views

Hashing guarantees two objects are different. Not that they are the same · TL;DR: If you check for the hash, you should also check for...

Code Smell 167 - Hashing Comparison

How a Hacker Stole $566M USD Exploiting a Code Smell

Oct 8, 20224 min read 470 views

I am not a security expert. But I do love Clean Code and Code Smells TL;DR: don't trust your hashes. The Hack Yesterday, 2022 Oct 7th one of the...

How a Hacker Stole $566M USD Exploiting a Code Smell

Code Smell 138 - Packages Dependency

Jun 3, 20222 min read 304 views

There's an industry trend to avoid writing code as much as possible. But this is not for free · TL;DR: Write your code unless you need an existing...

Code Smell 138 - Packages Dependency

Code Smell 120 - Sequential IDs

Mar 10, 20222 min read 1.6K views

Most IDS are code smells. Sequential IDs are also a vulnerability · TL;DR: Don't expose obvious consecutive IDs. Problems Bijection Fault Security...

Code Smell 120 - Sequential IDs