shlogg · Early preview
Warren Parad @wparad

Long time software architect, CTO Authress, creating application security plug-ins for any software application with Authress. Talk to me about security in microservices or service authorization.

Third-Party Apps' Email-Based Authentication Vulnerabilities Exposed

Third-party apps must delete user data after account deactivation to prevent domain vulnerabilities. Adding claims/properties won't solve the problem & may create complexity. Consumers should know who's handling their data & take steps to protect it.

AWS Quota Monitor Limitations: Building Custom Solutions

AWS Quota Monitor "broken by design". Relies on incomplete/inaccurate data from AWS. Build custom quota monitors instead!