Dependency Confusion Attacks: How Package Names Steal Your Code
Dependency confusion attacks exploit package managers by uploading malicious packages with internal names to public registries.
Jan 6, 20265 min read5
Command Palette
Search for a command to run...
#developer
Articles tagged with #developer
When Cloudflare and GitHub Go Down on the Same Day: The Internet's Fragile Foundation
Cloudflare took down 20% of the internet in 4 hours. GitHub went down hours later. Here's why this keeps happening and why it won't get fixe
Nov 20, 20258 min read3
AI Code Review Tools Are Making Code Worse
Automated PR review tools are shipping buggy code faster while creating the illusion of thorough review. Here's why they're making the problem worse.
Nov 14, 20256 min read5Firebase Security Is Broken. Here's the Tool I Built to Fix It.
A couple of months ago I was doing a few penetration tests recently when I encountered Firebase configurations. Each time, I found myself stringing together a bunch of cURL commands and one-off Python scripts to check for common misconfigurations. Af...
Nov 7, 20253 min read9