I'm trying to understand what a practical offboarding process looks like for a small team without a dedicated security person. When a developer or contractor leaves, there may…
I'm trying to understand what a solid offboarding process looks like for a small engineering team. When someone leaves, we may have SSH keys on several servers, shared…
Is there a way to configure a KeePass database so that more than one Windows user account can authenticate and unlock it? I mainly use the database on…
We're setting up an on-premises Kubernetes environment on a powerful internal server and are trying to make some architectural decisions. First, is it a good idea to expose…
I'm designing a food-delivery application with separate frontend, backend, and admin containers. The frontend serves customers, while the backend handles the APIs and business logic. I'm trying to…
I built a custom web-based operations and POS system for a growing retail business that buys products from customers. Our workflow includes reverse logistics, inventory intake, required holding…
Suppose an entire application stack runs on Kubernetes, with the database in one Pod and the web server in another Pod on the same node. The web server…
Suppose an entire application stack runs on Kubernetes, with the database in one Pod and the web server in another Pod scheduled on the same node. The web…
Over the past six months, I built a custom web-based system for a growing retail business. Our workflow involves buying products from customers, reverse logistics, required holding periods,…
I'm running a small startup project on a single Oracle Cloud VM. The backend API and separate development and production PostgreSQL databases run in Docker containers. At the…
I'm designing a CRM for sensitive client information, including legal documents and case-related paperwork. It needs to support millions of documents, multiple concurrent users, strict access controls, and…
I'm trying to wrap my head around SQL injections and how attackers manage to exploit them. If a database requires authentication, how do these malicious actors retrieve data…
Hey all! I've set up three separate VPCs for development, staging, and production, with EKS clusters running in each of them. We use Redash in our organization to…
I'm working on a simple task management web app using PHP and MySQL, designed for local or small team use. To set it up, users will go to…
I'm wondering if I still need to enable SSL/TLS for the database connections between my backend and database server, considering my backend is running behind a reverse proxy…
I've been working on a side project as a first-year software engineering student where users can create flashcards stored in an SQLite Turso database. Currently, I keep my…
We're reaching a point where our customers want to access the raw data directly instead of going through our BI tools. I'm open to this idea since it…
I've been working on a new app and migration system in Django for my company, which currently uses a really old DBMS built in Visual FoxPro that's been…
I'm working on encrypting sensitive fields in a database, specifically user information like email addresses. I need to ensure that users can't create multiple accounts with the same…