Security
How things get broken into - and the habits that stop it.
- 1Deleted is not goneA secret committed once lives on in history, in every clone and in every fork. Leak a fake key, delete it, read it straight back - and learn the one fix that actually works.Runs in your browserOn your machine12 min+35 XP
- 2Why slow hashes winWhen a password database is stolen, how it was stored decides how many passwords leak. Attack one yourself, with real hashing on your own device, and watch a salt and a slow hash change the outcome.Runs in your browser14 min+35 XP
- 3When input becomes codeCross-site scripting and SQL injection are one bug in two costumes - text from a user crossing over into code. Break a toy comment box and a toy search, then fix both without changing a character of the input.Runs in your browser15 min+40 XP
- 4Trusting what you shipYou chose a handful of packages and installed hundreds. Five real ways the code you install stops being the code you meant - and why every defence is blind to at least one of them.Runs in your browserOn your machine17 min+40 XP
- 5Who can do what in a clusterAn app gets "forbidden". The one-line fix makes the error vanish and hands its stolen token the whole cluster. Grant exactly enough with RBAC, then see what NetworkPolicy and Pod Security add.Runs in your browserOn your machine18 min+45 XP
- 6Who are you, really?Logging in once and being trusted everywhere - how OpenID Connect hands an app a signed statement about you, why a token is readable by anyone, and the one header field that let forged tokens through.Runs in your browserOn your machine18 min+45 XP
Next track: Machine Learning →