Java Patching at Incident Speed: Lessons from the eMudhra CA Compromise
Browsers blocked the compromised eMudhra CA keys in hours. Learn why Java estates lag, and how security-only Java patching cuts testing and …
Security
From Google Drive to Syncthing over Tailscale
Why my KeePass database left Google Drive, and how Syncthing over a Tailscale mesh syncs it between a Synology NAS, a Mac, an iPhone, and an …
142 viewsFoojay Podcast #104: 53 CVEs, Two Emergency Releases: Why Java Security Holds Up with Simon Ritter
A record 53 CVEs and two out-of-cycle releases in one week. Simon Ritter explains what happened, why Java security holds up, and how to stay …
OpenID Federation with pac4j and CAS
Build an OpenID Federation with pac4j as the Java relying party and Apereo CAS as both OpenID Provider and trust anchor.
Free Java, Real Risk: Why Unsupported OpenJDK Is Now a Security Gamble
Learn why unsupported OpenJDK is a security risk in the age of AI.
How to Secure a Spring Boot Application with OpenID Connect and pac4j
Add OpenID Connect login to Spring Boot with pac4j: Maven setup, provider configuration, user profiles and logout.
OWASP Java Security Libraries: Please Update!
Fresh releases of OWASP Java Encoder and Java HTML Sanitizer: what changed, how to use them, and what to check when upgrading.
Scraping websites and bot-protection
The levels of bot protection I met while scraping genealogy sites, from a bare curl to shell-launched Chrome, and how to get past each one.
Keep WordPress If You're Looking for Trouble... Or Read This!
~13K WordPress sites get hacked every day. Here's why static site generators are the answer, and how to migrate.
Introducing cbGenesis: The AI-Native ColdBox Starter for BoxLang
cbGenesis 1.0 is a production-ready ColdBox starter for BoxLang with auth, RBAC, security, tests, admin tools, and AI-native guidance.