HN Explorer

Ask HN: What’s your “don’t forget to check the power cord” advice?

2 points by jtaft ↗ HN
Mine is don’t forget to check authentication flows in depth.

Bugs in Mfa, password reset, oauth integration, and “signature check” flows are hot spots.

If a program is using cryptographic primitives, this often leads to vulnerabilities.

4 comments

[ 1.7 ms ] story [ 29.3 ms ] thread
h2odragon
Are the disks full? Flash don't like not having slack space.
accrual
I once read about old school sysadmins keeping a large dummy file that was a few percent of the total disk size (e.g. 2GB file on a 100GB disk). If a server ran out of disk in the middle of the night due to a bad config, logs filling up, etc., one could delete the file and create some troubleshooting time.