Farshid/Ashouri

security

9 posts tagged “security”.

  1. 2025

  2. Google Oauth2 is awesome

    I really enjoy using Google OAuth2. Essentially this completely removed my need to implement custom, often incomplete insecure authentication to my services.

    oauth2 google authentication security web-development
    1 min read

  3. Granting a PostgreSQL user read-only access to some tables

    I wanted to grant a PostgreSQL user (or role) read-only access to a specific list of tables. I created the role using the Heroku PostgreSQL web console. Having done that, it had the name .

    postgresql sql permissions database security
    1 min read
  4. 2024

  5. Google OAuth for a CLI application

    :warning: The OOB flow described in this document has been scheduled for deprecation by Google. See issue 39 for notes on how to replace it.

    google oauth cli python api
    2 min read

  6. Constant-time comparison of strings in Node

    When comparing secrets, passwords etc it's important to use a constant-time compare function to avoid timing attacks. In Python I use , documented here. I needed an equivalent in Node.js today.

    node.js security javascript cryptography web-development
    1 min read

  7. Getting Python MD5 to work with FIPS systems

    This issue by Parand Darugar pointed out that Datasette doesn't currently run on Linux systems with FIPS enabled, due to the way it uses MD5 hashes. I hadn't heard of FIPS before.

    python fips md5 security compatibility
    2 min read
  8. 2023

  9. GitHub OAuth for a static site using Cloudflare Workers

    My tools.simonwillison.net site is a growing collection of small HTML and JavaScript applications hosted as static files on GitHub Pages.

    github oauth cloudflare workers javascript
    6 min read

  10. Cybersecurity Diary: Reflections on Recent Retail Breaches

    Today I’m jotting down my thoughts on the spate of cyber incidents that hit three of the UK’s most recognised retailers—Marks & Spencer, the Co-op Group, and Harrods—over the past two weeks.

    cybersecurity ransomware data-breach retail security
    4 min read

  11. Accessing 1Password items from the terminal

    I save things like API keys in 1Password. Today I figured out how to access those from macOS terminal scripts.

    1password cli security macos bash
    1 min read

  12. Enabling a user to execute a specific command as root without a password

    I wanted a script running as a non-root user to be able to restart a systemd service on my Ubuntu machine without needing a password.

    linux sudo security cli ubuntu
    1 min read