中文 English Français Русский Español العربية

Swift deserialization security primer

Snyk Blog2023-07-19 00:000 views

This blog will detail deserialization vulnerabilities in Swift that can occur when using the popular APIs, NScoding and NSSecureCoding, and how to prevent it properly.

Source：https://snyk.io/blog/swift-deserialization-security-primer/

My favorites

PreviousFinding and fixing insecure direct object references in Python NextBest practices for effective attack surface analysis

Three dates that catch a hard-coded time-zone bug in a session clock

A session that starts at 08:00 local time does not necessarily start at the same UTC hour all year. Less obviously, the

0dev.to

Laravel N+1 Query Problem: How to Find and Fix It

When a Laravel page that used to load in half a second suddenly takes four, the cause is very often the same: the N+1 qu

0dev.to

LongCat-2.5 at $0.30/$1.20: Thinking Locks Temperature, 1M Context, and Vendor Benches Between Opus 4.8 and 5

Attributed compile + one small offline run on my box Primary source: Introducing LongCat-2.5 — Native Multimodality for

0dev.to

Shipped: two packages, a registry listing, and the first seals

What happened Post 1 ended with a list: the verify package inside Fiador — human-backed attestation for Discord bots — i

0dev.to

AI Agent Memory Needs Garbage Collection, Not Just Storage

TL;DR — Most long-term memory systems for AI agents only know how to write and append — never to forget, consolidate, or

0dev.to

Securing the Analytics Pipeline and Pivoting for Demo Day

Sprint Retrospective: Implementing Zero-Trust Analytics The conclusion of Sprint 11 was entirely focused on access contr

0dev.to

Swift deserialization security primer

Related posts

Three dates that catch a hard-coded time-zone bug in a session clock

Laravel N+1 Query Problem: How to Find and Fix It

LongCat-2.5 at $0.30/$1.20: Thinking Locks Temperature, 1M Context, and Vendor Benches Between Opus 4.8 and 5

Shipped: two packages, a registry listing, and the first seals

AI Agent Memory Needs Garbage Collection, Not Just Storage

Securing the Analytics Pipeline and Pivoting for Demo Day