Automating Data Protection at Scale, Part 1
Part one of a series on how we provide powerful, automated, and scalable data privacy and security engineering capabilities at Airbnb. Elizabeth Nammour, Wendy Jin, Shengpu Liu Read More
Category: Security
How WhatsApp is enabling end-to-end encrypted backups
For years, in order to safeguard the privacy of people’s messages, WhatsApp has provided end-to-end encryption by default so messages can be seen only by Read More
How Asana uses Asana: Security incident response
Typically, security teams coordinate security incident response with a few tools, such as text chat, video chat, collaborative documents, and so on. Asana’s Security team, Read More
How Asana uses Asana: Security incident response
Typically, security teams coordinate security incident response with a few tools, such as text chat, video chat, collaborative documents, and so on. Asana’s Security team, Read More
An analysis on developer-security researcher interactions in the vulnerability disclosure process
This blog post is a special report providing insights into developers’ interactions with security researchers through the vulnerability disclosure process and their views and perspectives Read More
GitHub security update: Vulnerabilities in tar and @npmcli/arborist
Between July 21, 2021 and August 13, 2021 we received reports through one of our private security bug bounty programs from researchers regarding vulnerabilities in Read More
How Cloudflare helped mitigate the Atlassian Confluence OGNL vulnerability before the PoC was released
On August 25, 2021, Atlassian released a security advisory for their Confluence Server and Data Center. The advisory highlighted an Object-Graph Navigation Language (OGNL) injection Read More
Protecting sensitive data at Gusto with HAPII – Part 2
In part 1, we covered the goals and benefits of isolating the most sensitive customer data to a separate service, that we call HAPII – Read More
Improving Git protocol security on GitHub
This post was co-authored with Senior Software Engineer @bk2204, who contributed all of the technical content. Any remaining mistakes are mine alone. Hello from Git Read More
Making Magic Transit health checks faster and more responsive
Magic Transit advertises our customer’s IP prefixes directly from our edge network, applying DDoS mitigation and firewall policies to all traffic destined for the customer’s Read More