User Enumeration in Web Applications
A short look at what user enumeration is, why it's worth preventing, and how to make user accounts harder to enumerate.
Welcome to my website! I write about various topics, including software engineering, cybersecurity, platform engineering, DevSecOps, Linux and self-hosting.
You can subscribe to future posts using the feed.
A short look at what user enumeration is, why it's worth preventing, and how to make user accounts harder to enumerate.
Introducing Go Spark, an open source Go and SQLite web app starter template with secure authentication, TOTP two-factor auth, passkeys, and Docker deployment.
A quick guide to managing local PostgreSQL databases for app development, including creating databases and roles, and cleaning up old ones.
Exploring the evolution of password hashing from MD5 to bcrypt to Argon2, with best practices for secure modern web applications.
A short guide to preventing and detecting Broken Access Control, the top risk to web applications in the OWASP Top 10 2025 list.