Writing a few thoughts on common security problems to avoid in Azure.
Shared responsibility. Configuration. Operations. Monitoring and alerts, etc.
What's your ideas to add to the list of things you shouldn't miss?
#azure#security#cybersecurity
@JakeWrightUK I would second what @kieranmch Even if its just to get an OpenId Connect Provider to allow you to have federated identity with Google etc
Does anyone know any good resources on authentication for web apps? Like "if you don't have any special requirements, do this" kinda thing... suggested auth flow, hashing algorithm, salting, database schema, token generation, etc.
It is with a very heavy heart to write this, Maple passed away last night. Maple has been my best friend over these past 12+ years and the bond we shared is indescribable. I feel so very lucky to have had her In my life. My heart aches. I love you Maple ❤️
Alright, these cows still need names! We will ship an @InterceptBV goodie bag to the person who comes up with the most original names for the two cows! Let me see that creativity! #InterceptInsights#Azure#CloudFamily
@TheRealNooshu That’s a real shame! Would love to see the GDS work carried through here - when renewing my driving licence recently on the DVLA website the experience was poor and the UI extremely dated.
I may sound like a broken record, but the attention to detail in the GOV.UK Design System always impresses me. The new v3.12.0 release looks at the readability of links and includes the use of the CSS `text-decoration-thickness` property.
github.com/alphagov/govuk…
For the coming second release of @daybridge we’ve re-written almost everything from scratch. I thought it was important for us to do it because we learned a tonne from the first try and we didn’t want to get stuck in a local maximum. First try took 6 months, this one took 6 weeks
@julielerman@ardalis@pluralsight The original one was absolutely fantastic, I rewatched clips so many times from it - excited to see the new additions!
Just submitted final clip of final module of the updated Domain-Driven Design course that @ardalis & I built for @pluralsight . The original 7 yr old course is still quite popular but we put 7 yrs more smarts into this one! New sample app uses things like Docker & RabbitMQ too!
Just spent almost an hour convinced kubernetes was broken and wasn't applying my changes as an env variable wasn't there. Turns out I just missed that file in my commit. :|
@davidwengier Had something similar this last week with Linq's Aggregate method. Could never remember which way round the seed and input args went in the lambda
@WestDiscGolf Seconding what @RehanSaeedUK said. Termination adds overhead so it could be done by a reverse proxy further up the call stack. Custom headers can the be set to indicate request was originally over tls
Just came across a blog post about setting up a new aspnet 5.0 web api which is quite good and in depth. However they unticked "Configure for HTTPS" and "Enable OpenAPI support"?!
I get the OpenAPI one as it can add some unnecessary noise, but why oh why untick https?! :-(