Linode Blog > Alex Leung

9 posts

An ominous-looking room that mostly lies in the dark, with only the floor being visible. The text reads, "In the Dark about Shadow APIs?"

In the Dark about Shadow APIs?

Shadow APIs aren’t typically a risk you would think about when developing APIs. See real-world examples to understand the threats they pose.

Hero Image with text, Scrub EXIF Image Data in your DeOps Pipeline.

Scrub EXIF Image Data in Your DevOps Pipeline

When you take a photo with a digital camera or smartphone, you’re capturing more than just a beautiful image. Within that image file, you also have something called EXIF data (EXIF stands for “Exchangeable Image File Format”). This data includes camera settings, the timestamp of the photo, and GPS location information. Sometimes it’s best to […]

Illustration of an angled browser window that shows a mouse cursor close to the security lock symbol of a website address. The text reads, "Loose Lips Can Sink Websites Too", with the words "sink" and "websites" being highlighted in bold.

Loose Lips Can Sink Websites Too

This blog dives into how exposed version numbers in your tech stack can lead to serious vulnerabilities, and what you can do to tighten security.

Illustration with the text "Pay Attention to Your Non-Production Subdomains"

Pay Attention to Your Non-Production Subdomains

Security teams often focus on an organization's main production domain. Learn why paying attention to your non-production subdomains matters.

Illustration of a security question and answer entry capture screen, with text Pointless May Not Be Harmless.

Pointless May Not Be Harmless: The Story of a Login Page with a Blank Security Question

Discover how attackers exploit security vulnerabilities in login pages and learn how to protect your web applications with best practices.

A leaking pipe with the text "Security in your DevOps Pipeline: Is your GraphQL API leaky?"

Security in Your DevOps Pipeline

Not disabling introspection before going live can pose a major security risk. We offer steps to improve security in your DevOps pipeline.

Illustration of a collapsible caution sign, with text The Dangers of Never-Expiring JWT.

The Dangers of the Never-Expiring JWT: Hidden Security Vulnerabilities

In this blog post, we focus on non-expiring JWTs. We look at how this issue arises along with the associated security vulnerabilities.

Illustration of a bar graph with many data points creating a wave-like appearance with text: Defend Your GraphQL Server Against Excessive Resource Consumption.

Defend Your GraphQL Server Against Excessive Resource Consumption

We'll explore how GraphQL’s flexibility can be turned against you, focusing on a vulnerability highlighted by the OWASP API Security Top 10.

A red block symbol with the following text: "Defending Against a Login API Brute Force Attack: Because cutting corners can cripple you"

Defending Against a Login API Brute Force Attack

Learn the importance of implementing the 'maximum failed login attempt' safeguard to protect your user accounts.