Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 221296

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

1 vote
2 answers
328 views

What is a reasonable timeframe that should be defined and enforced for access token expiry t... [duplicate]

What is a reasonable timeframe that should be defined and enforced for access token expiry to reduce the risk of unauthorized access?
Nathan Aw's user avatar
  • 1,073
2 votes
2 answers
143 views

Are polyglot microservices (multiple technologies) more secure than using a single technolog...

As a full-stack cloud-native (AWS, Azure, and GCP) polyglot (Rust, Golang, Python, and Java) microservices developer, the nagging question that I have is if the use of multiple technology frameworks v …
Nathan Aw's user avatar
  • 1,073
32 votes
3 answers
6k views

How does one defend against software supply chain attacks?

the Solarwinds attack, since many organisations have no access to the source codes of the software vendors from whom they just consume the services, how can organisations defend against supply chain attacks
Nathan Aw's user avatar
  • 1,073
0 votes
1 answer
341 views

How does one detect and deter golden SAML attacks?

How does one defend, detect and deter golden SAML attacks? …
Nathan Aw's user avatar
  • 1,073