Security

• Salesforce Id Iteration Attacks

  April 10, 2025
  Please stop using Salesforce Ids in URLs or other user accessible parts of your solution.

• Simple Electron Starter

  August 2, 2020
  A simple project template for starting Electron Projects with a good security baseline.

• FormAssembly Dynamic Parameter Signing

  April 28, 2019
  PHP Function to support FormAssembly dynamic parameter signing.

• Good Enough Passwords

  March 12, 2017
  Remember when you fight with your users about passwords the problem isn’t your users, the problem is we have made passwords unreasonably hard to do right.

• Responding to Drupal Break-ins

  December 3, 2016
  If you support any web site long enough you will suffer a break in. A few weeks ago my number came up again in the attack lottery.

• This Week's Drupal Fire Drill

  July 16, 2016