Özgür Özkök
Information security, often referred to as infosec, is the practice of protecting information from unauthorized access, use, disclosure, disruption, modification, or destruction to ensure its confidentiality, integrity, and availability.
In today’s digital age, organizations grapple with many authentication systems, each catering to different applications and user groups. This fragmented approach not only complicates operations but also poses potential security risks. Consolidating all authentication needs into a single platform, as authentik proposes, offers several advantages: 1. Simplified Management: With a […]
authentik is a unified platform designed to bring all authentication needs into one place. It aims to replace platforms like Active Directory, Okta, and Auth0. The platform offers a range of features: The platform also compares with other providers like Keycloak, Microsoft ADFS, Microsoft Azure AD, Okta, Duo, and Authelia, […]
Demonstration of using OpenSSL to create RSA public/private key pair, sign and encrypt messages using those keys, and then decrypt and verify the received messages. Commands used: OpenSSL. Created by Steven Gordon on 7 March 2012 at Sirindhorn International Institute of Technology, Thammasat University, Thailand. Using the RSA algorithm, RSA […]
JWT stands for JSON Web Token. It is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of […]
During Cloudflare’s “Birthday Week 2023”, the company unveiled the open beta of Hyperdrive. This new service leverages Cloudflare’s global network to accelerate queries to existing databases. Currently, Hyperdrive supports PostgreSQL-compatible databases, and there are plans to extend this support to MySQL shortly. Hyperdrive’s primary goal is to speed up data […]
Web development is dynamic, with new technologies, methodologies, and user expectations emerging regularly. As the digital landscape shifts, frameworks like Node.js and Django must adapt to stay relevant. Let’s explore how these two might evolve in response to the changing demands of web development. 1. Adapting to Evolving Web Development […]
GitHub has enhanced its secret scanning feature, extending validity checks to prominent services, including Amazon Web Services (AWS), Microsoft, Google, and Slack. Initially introduced earlier this year, these validity checks notify users if the exposed tokens detected by the secret scanning are active, facilitating effective remediation. Originally, this feature was […]
As the digital realm expands, so does the frequency and sophistication of cyberattacks. Password breaches have become a concerning reality, prompting a reevaluation of password management strategies. Both companies and users must adapt to these challenges to safeguard their digital assets. Here’s a roadmap for the future of password management: […]
The debate between integrated OS-level password managers and third-party solutions has been reignited, especially after recent breaches in popular third-party password managers. Both approaches come with their own set of advantages and challenges. Let’s dissect the security aspects of each to provide a clearer perspective: Type Category Description Integrated OS-level […]
OpenSSL 1.1.1, launched in 2018 as a Long Term Support (LTS) version of the open-source secure communication library, has reached its end of life. This means users must transition to a newer version unless they are willing to pay for extended support. For those not prepared to shift to the […]