From the producers of that title

[JonL]

Feel free to add to this compilation of great titles.

How Do You Protect Yourself From Developer Penetration?

In my post about wanting a professional hacker (which I now know to be a process called penetration testing), @Dave pointed out that often the issue isn’t about your site being targetted, but your own storage of information about the site - passwords, auth keys, .pem files etc. So I’m curious to know what lengths you go to and what techniques you use to protect those things, while at the same time not losing them if you have a device go down.

Dealing with HEAD requests

Posting this solution here for anybody that might use “magic links” for login. I’m sure there are other use cases as well that entail sending out a link via email, and then performing some action based on that linked being clicked. Some email systems (eg. Outlook) have “safe links”, that do a HEAD request (rather than GET) to see if they will allow the user to continue to the link destination. If this link is an API action, the request will be processed on the HEAD request AND the GET request…

[Dave]

Hard to beat! Both classic and badge worthy!

[JonL]

We need the Carolina Reaper badge @Teodor

Carolina Reaper:

You like to spice things up from time to time in this community.

[Dave]

May I ask the the authors, respectfully of course, @Antony and @mebeingken, did you realise at the time of typing or were you oblivious to what was written?

[Antony]

Totally…

[mebeingken]

Completely oblivious…makes life more fun.