#security

4 items tagged with "security"

Authentication Authorization Backend Career Growth Clean Code CleanArchitecture Cloud Command Line Communication Concurrency DDD Databases DevOps Docker JWT Kubernetes Leadership Learning Linux Mental Health Microservices Networking OAuth2 Refactoring Security Senior Engineer Soft Skills Software Engineering SoftwareArchitecture Sysadmin System Design SystemDesign TDD Teamwork Terminal Testing ZeroTrust ab-testing accessibility agile ai algorithms analytics anthropic appsec architecture async-communication authentication automation aws backend behavioral build-vs-buy burnout business-acumen business-impact career career-growth ci-cd claude clean-architecture clean-code code-review collaboration communication containers context-switching databases decision-making deep-work design design-patterns design-system developer-experience devops distributed-systems docker engineering-culture engineering-leadership engineering-management engineering-quality engineering-strategy experimentation feature-flags finance-for-engineers flow-state frontend hexagonal-architecture infrastructure-as-code interview job-search kanban kotlin kubernetes leadership lean-methodology learning llm mental-models messaging metrics microservices mtls networking north-star-metric note-taking oop orchestration outcome-driven owasp performance-review personal-branding ports-and-adapters prd probabilistic-data-structures product-discovery product-mindset product-thinking productivity progressive-delivery protocol qa react redis reliability remote-work requirements salary-negotiation scrum senior-engineers soft-skills software-design software-engineering staff-engineer supply-chain system-design tailwind tdd technical-debt technical-decisions technical-leadership technical-writing terraform testing theory-of-constraints user-research ux wcag web-security

Series

Software Testing: From Fundamentals to Modern Practice

A practical, engineer-focused guide to software testing — the testing pyramid, TDD/BDD, automation strategy, CI/CD integration, security testing, and modern AI-assisted practices.

7 chapters

testingqatddautomation

Start reading

Posts

Martin Fowler on LLMs: Six Things Worth Taking Seriously

A synthesis of Martin Fowler's August 2025 essay on LLMs and software development — covering workflow gaps, hallucinations as a feature, the Lethal Trifecta security risk, and why non-determinism changes everything.

May 19, 2026aillmsoftware-engineering

The OWASP Top 10:2025 Update: What Changed and Why It Matters

OWASP quietly replaced the 2021 Top 10 in November 2025. SSRF disappeared, misconfiguration jumped to #2, and supply chain got its own top-3 slot — here's the diff.

Jul 2, 2026securityowaspappsec

Service-to-Service Authentication: The Threat Model You're Ignoring

Most microservices deployments skip internal auth entirely. Here's what that costs you, and the three patterns that fix it.

Jun 24, 2026microservicessecurityauthentication