Skip to main content
Support OpenZiti, give us a GitHub Star Star

Extend Access to a Private S3 Bucket Using Python

· 3 min read

A private S3 bucket protects against a data leak by denying all public access. This approach moves access control from the public S3 API to the network layer. We can use OpenZiti's cryptographic identity and attribute-based policies to securely extend access to a trusted Python program at a remote site.

Why We Verify GitHub Commits

· 4 min read

Assigning the author on a commit is an essential feature of Git that allows you to send a commit on behalf of someone while preserving their authorship. I speculate this was the norm when the Linux Kernel authors, who also created Git, still received many contributions via email.

How to Prevent Path Traversal Attacks with OpenZiti BrowZer

· 6 min read

The web has revolutionized how the world operates, enabling everything from banking and shopping to social media and general business transactions. However, as with all technological advancements, malicious actors quickly found ways to exploit the web for fraudulent activities. The anonymity provided by internet usage allowed criminals to deceive users and providers, leading to significant financial losses. In response, technologies like SSL/TLS and public trust architectures were developed to enhance security, helping users verify the servers they communicate with and feel more secure in their online interactions. Despite these measures, software is inherently fallible, as it is created by humans who can make mistakes.

Signing Executables From GitHub Actions

· 10 min read

Hopefully, by now, we all know that we shouldn't download and run random, untrusted executables from the internet. Users want to feel good that the code they are executing is authentic and free from malware. Windows Defender is one of the better things Microsoft has done to keep the world safe. Defender is a free anti-virus application that scans executables for malicious code. Often criticized for its intrusiveness (among other reasons), it's still a vital tool for millions of Windows users around the globe. While it's not the only anti-virus/endpoint protection tool around, it comes with Windows by default so making sure it doesn't tell your users your application is suspicious by popping up some scary modal dialog is important!