Articles tagged with #Security
A curated list of engineering series, deep dives, and notes related to #Security.
Container Hardening: Non-Root Execution, Linux Capabilities, and Read-Only Filesystems
Master container security hardening: Non-root USER execution, Linux capability dropping (--cap-drop=ALL), read-only filesystems, and user namespaces.
Cluster Security & Authorization: RBAC, ServiceAccounts, and Admission Webhooks
Master Kubernetes security: Authentication (ServiceAccounts), RBAC Authorization (Roles, RoleBindings), and Admission Webhooks.
Exception Handling in Spring Web: ControllerAdvice, ExceptionHandlers, and Error Responses
Learn how Spring MVC intercepts exceptions using ControllerAdvice, evaluates HandlerExceptionResolvers, and formats RFC 7807 error responses.
Building Distributed Rate Limiters: Token Bucket, Leaky Bucket, and Sliding Window Logs
Master distributed rate limiters. Learn Token Bucket, Leaky Bucket, Fixed Window, and Sliding Window algorithms with atomic Redis Lua scripts.
Container Registries: Content-Addressable Storage, Push/Pull Protocols, Tags vs Digests
Master container registries: OCI Distribution Spec HTTP API v2, tag mutability vs immutable SHA-256 digests, and layer deduplication.
Frontend Security Architecture: XSS Mitigations, CSRF Defense, Content Security Policies, and OAuth2 PKCE
Master frontend security architecture. Hardness web apps against XSS, CSRF, insecure token storage, and implement strict CSP and OAuth2 PKCE.
Multi-Stage Build Architectures & Minimal Base Image Optimization
Master multi-stage Docker builds: build stage pipelines, selective artifact copying, distroless vs Alpine vs scratch base images, and CVE reduction.
Mastering Docker & Container Internals from First Principles: Series Introduction & Learning Roadmap
Discover what you will learn in this 20-part series on Docker Internals. Build a custom container engine and master Linux isolation primitives.