惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

F
Full Disclosure
WordPress大学
WordPress大学
小众软件
小众软件
Cloudbric
Cloudbric
AWS News Blog
AWS News Blog
腾讯CDC
量子位
人人都是产品经理
人人都是产品经理
大猫的无限游戏
大猫的无限游戏
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
V
Vulnerabilities – Threatpost
Scott Helme
Scott Helme
Hugging Face - Blog
Hugging Face - Blog
博客园_首页
C
CXSECURITY Database RSS Feed - CXSecurity.com
The Hacker News
The Hacker News
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
IT之家
IT之家
Jina AI
Jina AI
Attack and Defense Labs
Attack and Defense Labs
S
SegmentFault 最新的问题
Simon Willison's Weblog
Simon Willison's Weblog
The Cloudflare Blog
阮一峰的网络日志
阮一峰的网络日志
T
Tailwind CSS Blog
Last Week in AI
Last Week in AI
博客园 - 【当耐特】
Google Online Security Blog
Google Online Security Blog
美团技术团队
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
V
Visual Studio Blog
罗磊的独立博客
L
LINUX DO - 最新话题
博客园 - Franky
博客园 - 叶小钗
Apple Machine Learning Research
Apple Machine Learning Research
The Last Watchdog
The Last Watchdog
J
Java Code Geeks
AI
AI
C
Cisco Blogs
酷 壳 – CoolShell
酷 壳 – CoolShell
C
Cyber Attacks, Cyber Crime and Cyber Security
Cisco Talos Blog
Cisco Talos Blog
博客园 - 三生石上(FineUI控件)
雷峰网
雷峰网
Help Net Security
Help Net Security
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
云风的 BLOG
云风的 BLOG
I
Intezer
S
Securelist

JonahDevs

Building in Public: The ‘Back to It’ VS Code Extension – Part 1 The Mindful Coder’s Workweek: 5 Themes to Enhance Your Craft and Satisfaction From Dirty Dishes to Clean Code: How Household Chores Mirror Programming Team Dynamics You’re Closer Than You Think: The Only 6 DNS Concepts You Really Need The Wasabi Method: Shocking Your Way Out of Anxiety Attacks Free Software: The New Nicotine? Big Tech’s Playbook Straight Out of Big Tobacco Your Gut is Smarter Than Your Spreadsheet: The Art of Software Estimation The Subtract Day: Why Less Code Can Lead to More Success ESLint
Time, the Silent Exploit: The Unseen Enemy in Every Codebase
Jonah · 2024-07-10 · via JonahDevs

You’ve got a bunch of gold sitting around because it’s holding its value great against inflation or because you are a dragon or something.

The first thing you will want to do is protect your valuable gold. The most obvious thing is to start off with a wall.

You do your research and build a wall or get someone to build one for you to the best standards of the time.

You now rest assured in the knowledge that your valuable plunder investment is safe.

People come from all over to marvel at your great wall.

It turns out that right under your nose, one of the people coming to look at the wall every day has been looking at it very closely and found a set of bricks they can use to climb up and over it.

Nothing has fundamentally changed in your wall’s construction, yet suddenly, with the knowledge of where to climb up, it your gold is effectively unguarded. Even worse, this person might sneak in and out many times, slowly taking gold bit by bit for days, weeks, or years without you noticing, or sharing this information with someone else that does the same.

In this case, the gold is your users’ data or elevated privileges to your system. The wall is any dependencies you are using or have written yourself.

In the end, our biggest enemy in cybersecurity isn’t just the hackers or the vulnerabilities – it’s time itself. Just as Andy Dufresne in Shawshank Redemption slowly chipped away at his cell wall over decades, patient attackers have all the time in the world to probe and exploit our code, as long as it remains public and unchanged.

The hard truth is this: if you want something you’ve released into the digital world to remain secure, you can never truly stop supporting or monitoring it. Like a vigilant guard constantly patrolling a prison’s walls, we must continually assess, update, and fortify our digital fortresses. Because in the realm of cybersecurity, there’s no such thing as “set it and forget it” – only eternal vigilance can keep our digital gold safe from those who would slowly, patiently tunnel their way in.