https://www.snakeeyessoftware.com/tags/security/Recent content in Security on Snake Eyes SoftwareHugo -- 0.164.0en-usWed, 10 Dec 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/supply-chain-vulnerabilities-npm-dependency-security/Wed, 10 Dec 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/supply-chain-vulnerabilities-npm-dependency-security/Explore NPM supply chain vulnerabilities including the React RCE exploit and Shai-Hulud worm. Learn dependency management best practices and AI-powered security solutions.https://www.snakeeyessoftware.com/blog/dear-ai-your-hashedpassword-implementation-has-trust-issues/Sun, 08 Jun 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/dear-ai-your-hashedpassword-implementation-has-trust-issues/An analysis of security flaws in AI-generated HashedPassword value object implementations, examining data leakage, memory persistence, and problematic code comments.https://www.snakeeyessoftware.com/blog/zero-trust-data-architecture-building-the-unbreachable-layer/Fri, 17 Jan 2025 00:00:00 +0000https://www.snakeeyessoftware.com/blog/zero-trust-data-architecture-building-the-unbreachable-layer/An exploration of implementing zero-trust data architecture as a fundamental component of application security, addressing encryption, key management, and compliance requirements.https://www.snakeeyessoftware.com/blog/the-security-tool-moat/Wed, 28 Aug 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/the-security-tool-moat/Security tools appear commoditized, but each has unique integration complexities creating a moat that makes switching between tools challenging and costly.https://www.snakeeyessoftware.com/blog/igniting-a-new-era-in-appsec-breaking-free-from-outdated-mindsets/Tue, 30 Jul 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/igniting-a-new-era-in-appsec-breaking-free-from-outdated-mindsets/A critique of counterproductive messaging in application security, arguing that the field should reframe security as an investment that improves engineering practices rather than a burden.https://www.snakeeyessoftware.com/blog/ui-drives-risky-user-behaviors/Sun, 21 Apr 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/ui-drives-risky-user-behaviors/Poor user interface design can frustrate users and lead them to work around systems, creating security risks and breaking trust between users and applications.https://www.snakeeyessoftware.com/blog/navigating-roles-and-security-a-deep-dive-into-myowntutorials-user-management/Wed, 06 Mar 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/navigating-roles-and-security-a-deep-dive-into-myowntutorials-user-management/MyOwnTutorial employs domain-driven design to tailor its User Management system to distinct institutional roles, using ubiquitous language to enhance clarity, security, and operational efficiency.https://www.snakeeyessoftware.com/blog/secure-by-design-exploring-technology-choices/Wed, 28 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/secure-by-design-exploring-technology-choices/Examination of consistent versus varied technology stacks in microservices, with focus on security implications for the MyOwnTutorial application.https://www.snakeeyessoftware.com/blog/building-blocks-architectural-principles-driving-higher-value-software/Wed, 21 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/building-blocks-architectural-principles-driving-higher-value-software/Examination of design principles including Domain-Driven Design, Hexagonal Architecture, Event-Driven Programming, CQRS, Micro-service Architecture, API-First Development, and Privacy-First approaches for building secure, cost-effective software.https://www.snakeeyessoftware.com/blog/reachability-and-exploitability-a-false-refuge-in-software-security/Mon, 19 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/reachability-and-exploitability-a-false-refuge-in-software-security/An examination of why using reachability and exploitability as justifications for delaying vulnerability fixes undermines software security posture.https://www.snakeeyessoftware.com/blog/when-reachability-and-exploitability-dictate-software-security-decisions/Mon, 19 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/when-reachability-and-exploitability-dictate-software-security-decisions/An examination of why relying on reachability and exploitability to delay or avoid reporting software vulnerabilities is fundamentally flawed and dangerous to security posture.https://www.snakeeyessoftware.com/blog/foundations-for-success/Wed, 14 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/foundations-for-success/An exploration of core values for the MyOwnTutorial educational platform, emphasizing student focus, privacy, and security.https://www.snakeeyessoftware.com/blog/designing-for-the-future-of-education-a-tutorial-on-building-secure-applications/Wed, 07 Feb 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/designing-for-the-future-of-education-a-tutorial-on-building-secure-applications/A tutorial exploring secure application design for educational software, balancing legal requirements with business and practical security needs.https://www.snakeeyessoftware.com/blog/the-secure-software-habit/Wed, 31 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/the-secure-software-habit/Guide to building secure software through intentional practices across building, testing, and deployment phases.https://www.snakeeyessoftware.com/blog/choose-your-own-adventure-design-for-security-or-struggle-with-support/Wed, 17 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/choose-your-own-adventure-design-for-security-or-struggle-with-support/Exploration of how software design choices impact security, including programming languages, code principles, and architectural patterns.https://www.snakeeyessoftware.com/blog/hiding-data-in-plain-sight/Wed, 10 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/hiding-data-in-plain-sight/Overview of four data protection methods: encryption, hashing, encoding, and compression, with applications in educational software security.https://www.snakeeyessoftware.com/blog/none-shall-pass/Tue, 02 Jan 2024 00:00:00 +0000https://www.snakeeyessoftware.com/blog/none-shall-pass/Explores access control strategies for protecting data privacy in software systems, using Monty Python references to illustrate security concepts.https://www.snakeeyessoftware.com/blog/the-honor-code-of-data-privacy-first-design/Wed, 27 Dec 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/the-honor-code-of-data-privacy-first-design/An examination of privacy-first design principles in software, covering data protection, confidentiality, access controls, and secure system architecture.https://www.snakeeyessoftware.com/blog/it-all-starts-with-design/Wed, 20 Dec 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/it-all-starts-with-design/An exploration of software design principles, drawing parallels with woodworking and emphasizing the importance of design throughout the development lifecycle.https://www.snakeeyessoftware.com/blog/software-security-is-software-quality/Wed, 13 Dec 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/software-security-is-software-quality/An exploration of how software security parallels craftsmanship quality, using woodworking analogies to explain why security testing is essential for consumer-facing software products.https://www.snakeeyessoftware.com/blog/security-posture-basics/Wed, 11 Oct 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/security-posture-basics/An overview of security posture fundamentals, covering weaknesses, vulnerabilities, threats, and risk management strategies.https://www.snakeeyessoftware.com/blog/availability/Wed, 04 Oct 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/availability/The third pillar of information security focuses on ensuring data accessibility according to established expectations through network, server, and application-level controls.https://www.snakeeyessoftware.com/blog/integrity-what-you-see-is-what-you-get/Wed, 27 Sep 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/integrity-what-you-see-is-what-you-get/Explores data integrity as a fundamental software security principle, examining how to ensure data accuracy and completeness through confidentiality controls, error handling, and digital signatures.https://www.snakeeyessoftware.com/blog/confidentiality/Wed, 20 Sep 2023 00:00:00 +0000https://www.snakeeyessoftware.com/blog/confidentiality/An exploration of confidentiality as a key pillar of system trust, covering data management, user authentication, access control principles, and data protection methods.