-
When a Security Device Quietly Ages Out
I pulled out a security device I bought in 2021 and found the companion apps no longer provided the data needed to use it. Firmware updates didn’t help. Without notice, support had essentially expired – leaving six figures locked behind a product still physically intact but digitally stranded. Read More
-
JWT Based Authorization
The author implemented JWT-based authentication in a Redux application. They used a separate refresh token to obtain new authorization tokens when the current one expires. They encountered challenges with token storage, header configuration, and state management within Redux. The author recommends using a custom middleware or listener to handle token refresh and local storage interactions.… Read More
-
Secrets Code Splitting
I setup the Angular application to have code-splitting for each route. I added pages to display the status of all portions of secrets, and edit database, encryption keys, and the cache server. Read More
-
Authentication Bearer
I created a login form and 2FA form, adding access controls to sensitive information within error logs. Endpoints were reconfigured to require a valid authorization header before allowing data to be returned. Read More
-
Key Recovery
Todays journey goes into key recovery in a simulated scenario where all keys have been deleted. I start a recovery process to reconfigure the database, two-factor authentication, and dropbox api token to import the backup keys. Read More
-
Encryption Key Backup
Without access to a key management service, I work on different solutions to backing up encryption keys off-site while thinking through security risks and the recovery process. Read More
-
Two-Factor Authentication
Explore the intricate world of Two-Factor Authentication (2FA). Discover the role of QR codes in securely storing provisioning secrets and delve into the generation of Time-Based and Counter-Based one-time passwords. Learn strategies to mitigate security risks and navigate potential limitations in programming. Read More