OWASP Project Dependency Check, Server-side Request Forgery, Din Tai Fung Tbt, Microservices: Five for Friday

Friday of May 28, 2021

During this lock down or aka heightened alert we really don't go out much. Really working and cooking at home is the norm. So I'll just throw out some photos as throw backs during time we are more free to go outside.


Din Tai Fung Dinings: Throwback 360

Eating is our hobby, DIn Tai Fung is one of our favorite restaurant...

Din Tai Fung is our favorite restaurant for its fried rice, dumpling, xiao long bao and others. It is even our favorite grab food to be delivered. Eating here is like casually eating in a fast food. We roughly spend $50-70 per dining for the 4 of us. Yes the 4 of us since Jace and Joyce also like eating here with the rice and noodles. They have one of the best fried rice in the industry.


OWASP Project Dependency Check

Our project do require us to scan the entire library against OWASP project dependency...

Working on security and vunerabilites this past few months. I just want to highlight one of the dependency check that we use aside from doing sonarqube, fortify and nexusiq scanns, we also need to do this dependency check on top of all of it owasp.org/www-project-dependency-check/


Server-side Request Forgery (SSRF)

Similar to the last entry, SSRF is always buggy every project once in a while...

Fixing library related SSRF is abit common, doing upgrades and all. Although we have placed a check and our project is not vulenerable we are still flagged for using old libraries. More about ssrf is indicated here portswigger.net/web-security/ssrf.


Continuous Delivery: The Problem With Microservices

Microservices are one of the most popular modern architectural approaches, but they are much more complicated to do well than most organisations think. So what is Microservices Architecture, what is it for...

This new channel that I have been folllowing is really cool, at least for a software developer like me. Getting insights from older people is really the best.