Security on dabase https://dabase.com/tags/security/ Recent content on dabase.com Hugo -- gohugo.io en hendry+podcast@iki.fi (Kai Hendry) hendry+podcast@iki.fi (Kai Hendry) Tue, 18 Aug 2026 13:28:09 +0000 Three Secrets Domains on Purpose https://dabase.com/blog/2026/three-secrets-domains-on-purpose/ Tue, 18 Aug 2026 13:28:09 +0000 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2026/three-secrets-domains-on-purpose/ Why a large org keeps developer, CI and workload secrets in three separate systems — 1Password, GitHub secrets and AWS — and how short-lived credentials and least privilege hold it together. AWS S3 Access Points https://dabase.com/blog/2025/s3-access-points/ Tue, 07 Oct 2025 11:57:43 +0100 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2025/s3-access-points/ Beware of mistakes in Bucket policies Gitlab Enterprise https://dabase.com/blog/2025/gitlab-enterprise/ Wed, 19 Feb 2025 11:23:55 +0000 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2025/gitlab-enterprise/ Tested on GitLab Enterprise Edition 17.9.0-pre AWS SSO with Google Chrome profiles https://dabase.com/blog/2024/aws-sso/ Wed, 16 Oct 2024 09:56:41 +0100 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2024/aws-sso/ Mapping AWS profiles to Chrome profiles Does Dockerfile USER prevent Linux container breakouts? https://dabase.com/blog/2023/dockerfile-user/ Sat, 25 Mar 2023 18:29:54 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2023/dockerfile-user/ Is adding a USER best practice? Separation of Duties https://dabase.com/blog/2023/sod/ Thu, 19 Jan 2023 15:01:04 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2023/sod/ Separation of Duties without the manual gatekeeping Why use AWS Customer Managed Keys? https://dabase.com/blog/2022/kms-cmk/ Wed, 14 Dec 2022 21:23:18 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2022/kms-cmk/ tfsec promotes CMK keys over AWS managed KMS, how come? Security Principles💂 https://dabase.com/blog/2022/security-principles/ Mon, 05 Dec 2022 11:23:49 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2022/security-principles/ AWS security principles Least Privilege in Practice https://dabase.com/blog/2022/least-privilege/ Wed, 24 Aug 2022 11:12:35 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2022/least-privilege/ You can't start from the bottom, it wastes time Do not complicate Serverless architectures with Private subnets https://dabase.com/blog/2022/private-subnets/ Tue, 29 Mar 2022 09:23:55 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2022/private-subnets/ Security in the cloud is identity-centric not network-based AWS Secrets Manager or AWS Systems Manager Parameter Store? https://dabase.com/blog/2022/aws-secrets-store/ Fri, 25 Mar 2022 14:22:21 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2022/aws-secrets-store/ AWS Secrets Manager is actually for databases Don't put secrets in your ENV https://dabase.com/blog/2022/env-secrets/ Fri, 25 Mar 2022 13:23:06 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2022/env-secrets/ Secrets as environment variables is a bad idea Mitigating security risks with NodeJS https://dabase.com/blog/2021/nodejs-project-cd/ Wed, 13 Oct 2021 17:36:57 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2021/nodejs-project-cd/ What is the best way to manage node JS security issues? Security Headers https://dabase.com/blog/2021/security-headers/ Tue, 05 Oct 2021 12:35:34 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2021/security-headers/ Bug bounty scams Global Protect Man in the Middle https://dabase.com/blog/2021/global-protect-mdm/ Thu, 30 Sep 2021 09:50:22 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2021/global-protect-mdm/ How mobile device management can work from a VPN client Secure or not? https://dabase.com/blog/2021/secure-or-not/ Mon, 08 Mar 2021 18:24:19 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2021/secure-or-not/ It's a trap to think there is a check box for security Amazon Certificate Manager Pro Tip https://dabase.com/blog/2020/Amazon-Certificate-Manager-Pro-Tip/ Thu, 03 Dec 2020 11:11:38 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2020/Amazon-Certificate-Manager-Pro-Tip/ Avoid email validation and use DNS Validation Method and wildcards for sanity reasons Account Security https://dabase.com/blog/2020/account-security/ Sun, 04 Oct 2020 23:17:07 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2020/account-security/ How I secure my online life AWS SSO versus Oauth https://dabase.com/blog/2020/AWS_SSO_Oauth/ Mon, 22 Jun 2020 14:38:33 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2020/AWS_SSO_Oauth/ SSO and Oauth2 are same same... but different Why I argued for keeping PHP updated https://dabase.com/blog/2015/Upgrading_PHP_for_security_reasons/ Wed, 02 Sep 2015 10:52:39 +0800 hendry+podcast@iki.fi (Kai Hendry) https://dabase.com/blog/2015/Upgrading_PHP_for_security_reasons/ Reflections after a 2015 Singapore PHP meetup about patching old runtimes, maintenance responsibility and moving a software ecosystem forward.