Weekly DevSecOps Updates - Issue #5

Links

An introduction on how to use browser built in tools to investigate the client-side source code and start hunting for security bugs.

Leveraging automation can contribute to an orderly production environment—and make the secure path the path to walk easily.

Stop obsessing about theoretical attacks and instead use real world scenarios to make sure you look into the right issues first.

Passwords are the keys to our digital kingdoms, and also the weakest link in our security chain. Securing them is a combination of applied technology and user education.

A modern cloud application with multiple microservices is filled with confidential data that needs to be separated and managed.

Been considering your app's security this month? Here's some security advice to help keep you safe from hackers and avoid any surprises.

Tools and Tech

Awesome Ruby Security resources. A curated list of security relevant information for Ruby and Ruby on Rails applications.

A project security/vulnerability/risk scanning tool - It will run security checks on your codebase and supports a variety of languages including Ruby, Node.js, Python and many more.

Watch & Listen

One of the main  benefits of serverless is the ability to shift server administration- and platform management-related tasks to a third party, allowing for a greater focus on development and deployment. But this freedom can come at a price — relying on serverless also means, for example, giving more control to a third party.

What is up?

BSides Bucharest event for 2018

BSides Dubai event for 2018