Java
Four Delivery Formats, One SBOM
First of two articles on software bills of materials. One application, four delivery formats, one server — and the question of what the …
Security
33 articles
Java
Vaadin Deployment on Hetzner — Part 0: Preparing a Debian Server
Foundation article of the series Vaadin – Deployment on Hetzner. It produces the server on which the following parts put a Vaadin …
Java
What an SBOM Reveals When You Ask It
Second of two articles about software bills of materials. The inventory is in place — what it can answer, and what it cannot: …
Security
When Security Boundaries Become Obstacles
Part I – The incident A screenplay that isn’t one A program leaves the sealed room in which it was meant to be examined, gains access …
Java
The Security Innovations in Vaadin 25.2
Basis: Vaadin 25.2 release post and the official security documentation at vaadin.com/docs/latest/flow/security. Table of Contents …
Java
Password Security: Why Hashing is Essential
Password security is an often underestimated but critical topic in software development. Databases containing millions of user logins are …
Java
Short links, clear architecture – A URL shortener in Core Java
A URL shortener seems harmless – but if implemented incorrectly, it opens the door to phishing, enumeration, and data leakage. In this first …
Security
DNS Attacks - Explained
1. Getting started – trust in everyday internet life Anyone who enters a web address like “www.example.de” into the browser expects a …
Java
Java Cryptography Architecture (JCA) - An Overview
The Java Cryptography Architecture (JCA) is an essential framework within the Java platform that provides developers with a flexible and …
Java
Cache Poisoning Attacks on Dependency Management Systems like Maven
Cache poisoning on Maven Caches is a specific attack that targets how Maven Caches manages packages and dependencies in a software …
Design Pattern
CWE-778: Lack of control over error reporting in Java
Learn how inadequate control over error reporting leads to security vulnerabilities and how to prevent them in Java applications. Safely …
Java
Understanding TOCTOU (Time-of-Check to Time-of-Use) in the Context of CWE-377
Building on the discussion of “CWE-377: Insecure Temporary File”, it’s essential to delve deeper into one of the most insidious …