Topics tagged security

Topic	Replies	Views	Activity
Important security fix in Erlang/OTP 23.2.2 Erlang/BEAM News erlang , security , ssl Erlang/OTP 23.2.2 is out, fixing a critical TLS certificate verification issue in 23.2 an 23.2.1 allowing MitM attacks and forged client certificates. I wrote a post to help you understand if your application or dev envi…	10	538	January 16, 2021
GraphQL gives away to much info and this hurts it's security Chat / Discussions security , api , graphql , rest , apis , rest-api	31	437	January 15, 2021
Throttling login attempts Questions / Help security , phoenix , rate-limiting , throttle	7	402	November 26, 2020
How to disable Absinthe GraphQL introspection Questions / Help security , phoenix , absinthe	4	287	November 17, 2020
Sobelow CSWH check, unsure about the validity of its finding Questions / Help security , phoenix , sobelow , cswh	3	345	November 3, 2020
NervesKey and Certificates Questions Questions / Help security , ssl , certificates	4	241	October 19, 2020
Wax: WebAuthn for Elixir Libraries authentication , security	5	1404	September 30, 2020
How we can Prevent SQL Injection in Phoenix framework? Questions / Help ecto , security , phoenix , sql	2	268	September 14, 2020
Authentication Strategy for token based authentication and Refresh tokens Questions / Help security , architecture , phoenix , jwt , guardian	3	324	August 28, 2020
Phoenix/Elixir project similar to OWASP Webgoat Questions / Help security , cybersecurity	3	341	June 30, 2020
Stealing Secrets from Developers Localhost Development using Websockets Chat / Discussions security , channels , phoenix , live-reload , websockets , liveview , cybersecurity	12	850	May 30, 2020
Secure Coding and Deployment Hardening Guidelines Guides/Tuts/Tips/Info security , beam , deployment	13	1016	May 11, 2020
LiveView Websocket Security Questions / Help security , phoenix , phoenix_live_view	16	1203	May 4, 2020
Absinthe - Restricting introspection of certain fields Questions / Help security , graphql , absinthe , introspection	7	674	April 27, 2020
Best practices to avoid Blind SQL Injection Questions / Help ecto , security , phoenix	13	1781	April 19, 2020
Creating a public vulnerabilities database Projects security	18	1672	April 14, 2020
Working content security policy for Phoenix channels? Questions / Help security , channels , phoenix	7	2514	April 7, 2020
Github security concern related to phoenix 1.4 app Chat / Discussions ecto , security , phoenix	6	1118	April 3, 2020
Using OpenID Connect in production, how to do full security checks Questions / Help security , phoenix , deployment , oauth2	7	1175	February 27, 2020
Crypto.sign with an engine stored private key Questions / Help erlang , security , crypto	3	611	February 26, 2020
Testing whether a string contains valid Elixir code? Questions / Help security	7	353	January 24, 2020
SBoM - Mix task to generate a Software Bill-of-Materials (SBoM) Libraries hex , security , mix	13	1334	January 23, 2020
Sometimes we want to clone someone else project repository for testing or for helping... What are the best security practices for Elixir projects case? General Programming (Archived) security , best-practices , git , elixir-project	1	260	January 7, 2020
Multiple Git vulnerabilities in Git 2.24 and older General Programming (Archived) security , git	3	416	December 13, 2019
PASETO vs JOSE (JWT - JSON Web Tokens) (protocols/standards for managing user sessions) Chat / Discussions authentication , security , discussion , session , paseto	14	4798	December 13, 2019
Run mix phx.gen.cert without adding phoenix as a project dependency? Questions / Help security , phoenix , deployment , troubleshooting , secrets	7	376	December 10, 2019
How to instruct Phoenix to set secure flag (HTTPS only) on session cookie? Questions / Help security , phoenix , session	7	2297	September 20, 2019
H2Dos CVE - has Phoenix’s HTTP/2 support has been tested against the new H2DOS security bulletins? Questions / Help security , http2	2	391	September 4, 2019
Annelid: Unwelcome, Replicating, Evasive, Self-Healing Infrastructure Projects security , distributed-systems	5	773	August 29, 2019
Plug_content_security_policy - Generate CSP headers with support for CSP Level 2 nonces Libraries security , plug , phoenix , plug_content_security_policy	0	419	August 10, 2019

Important security fix in Erlang/OTP 23.2.2

erlang , security , ssl

Erlang/OTP 23.2.2 is out, fixing a critical TLS certificate verification issue in 23.2 an 23.2.1 allowing MitM attacks and forged client certificates. I wrote a post to help you understand if your application or dev envi…