YevhSec1·Apr 24OpenAI Parameter Golf — what I built, what worked, what didn’tA 4-week, $91.50 run at the challenge: 3 weeks of failed Rust compression work that produced one generalizable principle, then a 5-day…
YevhSec1·Sep 25, 2023Why Storing Plaintext Passwords in a Private S3 Bucket it’s bad idea?Let’s imagine that you store usernames and passwords in cleartext in the S3 bucket. Let’s assume that access to the entire bucket is…
YevhSec1·Jul 27, 2023AWS Account Hijacking via CI/CDIn the evolving landscape of cloud computing, AWS (Amazon Web Services) stands out as a leading service provider. However, as with any…
YevhSec1·Sep 21, 2022DevSecOps — integrating SAST, SCA, Secrets detection, Container security and IaC scanning with JIT.iDo you still remember when it took a long time to implement Security controls into your workflow? Let’s do it in a few minutes with JIT.io…A response icon3A response icon3
YevhSec1·Aug 24, 2022Could GitHub Copilot produce a vulnerable code?GitHub Copilot is an interesting solution that promises to simplify the developer’s day-to-day tasks. This short article aims to answer the…
YevhSec1·Jul 23, 2022Google Indexing — how to fixSearch engines doing really great job in indexing content. Of course everyone wants to be at the top of the search results. But sometimes…
YevhSec1·Feb 20, 2022iOS Apps Security scanners practical comparisonIn this article, I tried to overview: What iOS Apps Security Scanners exist on the market, What capabilities they provide, and what…
YevhSec1·Jan 15, 2022DevSecOps — What Security Controls exist and when to implement them?In this short article, I tried to overview what Security Controls exists, what stage it can be added to the CI/CD process, and what…
YevhSec1·Dec 22, 2021Implementing Application Security on your projectThe main purpose: CyberSecurity should help businesses succeed.
