security

I was creating a document in Office365 the other day, and when I tried to paste with their custom right-click menu I got a popup telling me to download a browser addon. Well, that’s weird.

I use 2FA on every site that supports it, but I’d never given much thought to how a 2FA code is generated. Let’s learn how!

Mozilla announced they’ll no longer accept extensions with obfuscated code. It’s good news for users, maybe not so much for developers. Obfuscated code is (intentionally) nearly impossible to understand, and could easily be malicious. Let’s unpack and break down a few concepts.

GitHub, GitLab, and Bitbucket just released a joint statement on a widespread ransomware attack that resulted in compromised accounts. That got me thinking, what can a person do to protect his or her code on GitHub? As it turns out, a lot…

I recently realized that somehow, in the 6 months since I last logged into my Mozilla developer account, none of my short list of emails would let me back in. Here’s how I regained access.

After writing about so many APIs and having to figure out the auth process for each, I wanted to compare and contrast how some of these services approach authentication and authorization, and why they might’ve decided to do it the way they did.