Tag feed

#access-control

145 posts6 followers

Explore Hashnode

Alternatives

Trending tags this week

SSBcuri0us-dev.hashnode.dev15h ago · 6 min read

Fable and ChatGPT Authorization Refusals: Designing AI-Assisted Access Control That Fails Safely

AI coding agents can turn a permission model into policies, tests, integration code, and documentation. That makes authorization a natural target for AI-assisted development. It also creates a reliabi

0

SSunnycybersecurity-learning.hashnode.dev4d ago · 16 min read

TryHackMe OWASP Top 10 2025: IAAA Failures Beginner-Friendly Learning Guide

Introduction I recently completed the OWASP Top 10 2025: IAAA Failures room on TryHackMe as part of my ongoing cybersecurity learning journey. The OWASP Top 10 is one of the most important learning re

0

WWendelaboveinfranet.hashnode.devJul 22 · 3 min read

Understanding the Technical Flow of an RFID Hotel Locking System

The system begins at the hotel front desk and ends when the guest presents the card at the correct room. Core System Flow Lock management software → Card encoder → RFID key card → Electronic door lock

0

BTBiz tech pulse hubbiztechpulsehub.hashnode.devJul 20 · 1 min read

How to Fix AI Agent Privilege Escalation Security Risks

What Causes AI Agent Privilege Escalation Vulnerabilities AI agents often interact with enterprise applications, databases and cloud services to complete business tasks. If permissions are configured

0

YPYogeshwar Peelaexploitnotes.hashnode.devJul 17 · 4 min read

HackTheBox : WayWitch Writeup

Summary The ticket portal generates guest session JWTs client-side, signing them with an HMAC secret (halloween-secret) that's hardcoded directly in the page's JavaScript. Since the server verifies to

0

SSapotaCorpsapotacorpvn.hashnode.devJul 12 · 7 min read

Financial Account Roles (FAR): the seven roles and when to extend

A bank account is rarely owned by exactly one person in exactly one way. A joint current account has two primary owners. A brokerage account has a custodian who can trade but not withdraw. A trust acc

0

JJJeji Jamesjeji-james.hashnode.devJul 10 · 2 min read

Linux Log Fortress — Access Control & Threat Pattern Detection

In a real SOC environment, a log file is forensic evidence. Before you can analyze it, you need to protect it. This lab walks through the full workflow from locking down file permissions to hunting fo

0

VKVamsi Krishnablog.vamsiannamreddy.comJun 7 · 3 min read

Day 18: Why relevant data can still be unauthorized data

Your RAG system just found the perfect document for the question. It is the executive compensation file, and it is answering an intern. Everything worked. Retrieval was accurate, ranking was sensible,

0

AAAiyedogbon Abrahamfreecodecamp.orgJun 4 · 26 min read

How Attribute-Based Access Control Helps You Write Better Authorization Rules

Every application that handles user data eventually hits the same problem: not all users should see the same things. A junior nurse should not be able to access every patient record in the hospital. A

0

Kkristofprzybylakcyber-hunter.hashnode.devMay 12 · 3 min read

How a Voucher Validation Flaw Led to More Than €10,000 in Credit

The Discovery The platform offered newly registered users a welcome voucher that could be redeemed for credit. At first glance, the implementation appeared secure. Manually modifying the visible vouch

0

#access-control

Search Hashnode

#access-control

Explore Hashnode

Trending tags this week

Fable and ChatGPT Authorization Refusals: Designing AI-Assisted Access Control That Fails Safely

TryHackMe OWASP Top 10 2025: IAAA Failures Beginner-Friendly Learning Guide

Understanding the Technical Flow of an RFID Hotel Locking System

How to Fix AI Agent Privilege Escalation Security Risks

HackTheBox : WayWitch Writeup

Financial Account Roles (FAR): the seven roles and when to extend

Linux Log Fortress — Access Control & Threat Pattern Detection

Day 18: Why relevant data can still be unauthorized data

How Attribute-Based Access Control Helps You Write Better Authorization Rules

How a Voucher Validation Flaw Led to More Than €10,000 in Credit