Easily Digestible Security Pills
summary
Concrete Laravel security techniques: explains that rotating APP_KEY requires decrypting and re-encrypting stored data or using libraries like Eloquent Encryption with RSA keys; shows a guardian implementation that aggregates stage weights (IP, fingerprint, proxy, rate) using FingerprintJS and ipapi to log fingerprints and block anomalous logins; runs a composer.lock scan with secure.it checker finding three vulnerabilities including a critical Laravel issue, and details where each mitigation works and where it can break data.
AI-written summary · about
chapters (6)
- 0:00Start
- 44:51Broken Access Control
- 45:33Misconfigured System
- 46:39Components with Known Vulnerabilities
- 47:14Insecure Deserialization
- 47:45Poor Monitoring
related talks
26mThink Like an Adversary: OPSEC for Laravel Developers
29mData encryption made easy
01h 01mSecurity: From basic principles to PHP specifics
31mHow your Laravel application can get hacked, and how to prevent that from happening
55mDip Your Toes in the Sea of Security
30mThink Like a Hacker
31mRails Application Security in Practice
27mLayered Security