Using Deno's --allow-read Flag to Safely Read Local Files
Learn how to use Deno's --allow-read flag to grant secure file‑system access, with a concrete example, scoped permissions, and common pitfalls.
Loading…
ReadMeFeed / Community knowledge
#security
Real questions. Useful conversations. Find the people who know your stack.
Securely Storing User Passwords with PHP's password_hash API
Learn how to use PHP's password_hash API to store passwords safely, verify them, and trigger upgrades while respecting trust boundaries and operational checks.
Moodle File Subsystem Architecture: Requirements, Design, and Operational Safeguards
Moodle’s file subsystem relies on a thin API that delegates to pluggable backends. This guide covers the core requirements, minimal design, trust boundaries, operational checks, failure modes, and when the design should change—complete with examples and a practical audit checklist.
moodleRunning Scripts You Don't Fully Trust: Deno's Permission Flags as a Design Decision
Deno runs scripts with zero file, network, or env access by default. Here's how scoped permission flags turn running third-party scripts into a reviewable, least-privilege decision.
Stop Building Custom Password Reset: Ory Kratos Recovery Flow Does It Declaratively
Kratos provides a declarative, self-service account recovery flow that eliminates custom password reset code. Two strategies (link or code), single-use tokens, automatic session issuance — all configured in YAML. Here's how to adopt it and where the limits are.
oryConfigure Automatic Security Updates on Debian with unattended-upgrades
Learn how to enable automatic security updates on Debian using the unattended-upgrades package, with installation, configuration, verification, and rollback steps.
debianTroubleshooting macOS Gatekeeper: A Diagnostic Guide for Ventura and Later
When a macOS app refuses to launch with a Gatekeeper warning, this diagnostic guide walks you through the root causes, step‑by‑step checks, and targeted fixes—plus when to file a bug with Apple.
Securing Single‑Page Apps with OAuth 2.0 Authorization Code Flow and PKCE
Learn how to protect SPA backends by using OAuth 2.0 Authorization Code Flow with PKCE, storing tokens in httpOnly cookies and avoiding implicit‑flow leaks.
Hardening Electron Renderers: Choosing Between Context Isolation and Node Integration
A decision guide for Electron developers on implementing context isolation versus node integration to secure renderer processes and prevent RCE vulnerabilities.
electron