Keeping Secrets – How to make your code more secure

	[the cutting edge ]
Is your code secure or leaking secrets?	June 2021 \| View Online

Keeping Secrets – How to make your code more secure

Connection strings. They are a part of every project, easily overlooked and yet very important to do the right way. A connection string represents a potential vulnerability if it is not secured. I hope it’s widely understood that storing information in plain text could compromise your entire application.

Security vulnerabilities involving connection strings can arise based on the type of authentication used, how connection strings are persisted in memory, and the techniques used to construct them at run time.

When I think of connection strings, I think of error messages and messing around with permissions, because I just want to get things going on a new project. However, the way we store connection strings and other secrets is super important.

Keep reading to find out how to secure your code secrets

- Adam Cogan, SSW Chief Architect

Got a comment for Adam?
Comment on Adam's blog
Tweet @adamcogan
Email Adam Cogan

FEATURED VIDEO FROM SSW TV

Setting up your Ultimate Dev Environment | Matt Wicks

Everyone wants the ultimate dev environment – but more CPU, RAM, and (let’s be honest) screens can be very expensive toys. Learn how to make your computer sing and tweak your Visual Studio and VS Code experience to improve your life as a developer.

There is a myriad of tools out there and ways to customise them; in this talk, Matt will take you through all the tools he uses and will share his tips and tricks on how to get the most out of them to improve your life as a developer.After this talk, you’ll be able to create your ultimate dev environment and improve your entire team’s productivity! Watch videos

FEATURED TECHNOLOGY FROM SSW

Power Platform can help you create solutions for all of your internal and external processes. Microsoft's Power Platform is a set of low-code applications that can be used individually to create easy-to-use business solutions. These applications can be used together and combined with Office 365 and Azure to create a smooth flow throughout your whole business, from client communication to financial analytics.

Could you be supercharging your business through Power Apps? Learn more.

2-Day Angular Workshop

In this workshop we will build a CRM application with Angular using components, services, dependency injection, forms, Angular modules, and lazy loaded routes.

By the end of this workshop you will have built a working Angular application that you can extend into an enterprise application. You will also walk away with the source code and the course material.

JUN
21
MON

Brisbane, Australia

JUN
24
WED

Sydney, Australia & ONLINE

1-Day .NET 5 Superpower Tour

.NET 4.8 and .NET Core 3.1 will soon be superseded by .NET 5, are you ready for the changes? There will be just one .NET going forward, and we can help you get ready to use the most powerful and flexible version ever!

You will finish the day with a solid understanding of why you should be using .NET 5 and the capability to build enterprise apps using the new platform.

JUN
28
MON

Brisbane, Australia & ONLINE

JUN
29
TUE

Melbourne - ONLINE

JUN
30
THU

Sydney, Australia & ONLINE

[ ONLINE LIVE EVENTS ]

Join us at SSW – There will be news, chats, pizza, and a great talk from JK, William, & Bryden.
If you would like to join us in person please come to SSW Sydney or SSW Brisbane from 6pm for pizza.
The livestream will start broadcasting from Sydney at 6:30pm.

June User Group: 3 Lightning Talks, 1 Big Tech night! In Person or Online with JK Kavka, William Liebenberg, & Bryden Oliver

#1 Getting the most out of your logging in .NET by Jernej "JK" Kavka

Does setting up logging do your head in? Join JK, a battle-scarred .NET Core veteran as he attempts to reduce your logging headaches. Dissolve an aspirin, dim the lights, and let JK soothe your head. In this talk, you will learn from JK's experience and get straight into setting up logs like a pro!

#2 Taking control of your APIs with Azure API Management with William Liebenberg

In this lightning talk William covers his favourite features of Azure API Management such as the Developer Portal, Policies and Analytics and how easy it is for you to start using them to secure and monitor your own APIs. He will also highlight where Azure API Management becomes really difficult to manage and how to tackle those issues.

#3 An intro to Biceps of Steel with Bryden Oliver

In this talk Bryden will cover how to create Bicep templates, and how to add Managed Identities. He will then walk you through his awesome new GitHub Repo, "Biceps of Steel". Walk away with the code for your next project.

Jernej "JK" Kavka is a Microsoft AI MVP, SSW Solution Architect and organizer of the APAC AI Community user group, and Global AI The Podcast. JK is a full-stack .NET developer, but his passion lies in Azure Cognitive Services, AI, and machine learning.

William Liebenberg is a Solution Architect at SSW Melbourne with a strong focus on Azure, Automation, DevOps, and Serverless. He works closely with clients to build solutions, mentor development teams and have fun during the whole process. In his spare time, he dives into the world of Bots, Machine Learning and 3D Graphics.

William is an active member of the Melbourne developer community where you can find him attending or presenting at user groups, hack days and conferences every time he has a chance! He is a mentor on the Azure Superpowers Tour and President of the Melbourne .NET User Group.

Bryden Oliver is a SSW Solution Architect with over 25 years professional experience. He has a wealth of knowledge from a diverse range of areas but with particular focus on database, web services, Microsoft Azure and SaaS based solutions. He's had dealings with customers ranging from the world's largest companies right through to small business. He has a strong understanding of how software will deliver business value to his customers.

JUN
16
WED

SSW Sydney,
SSW Brisbane & Online Live

SSW is Hiring!

More SSW jobs

.NET & Python Developer
SSW Sydney, Brisbane, Melbourne, Newcastle

This role requires someone who can work closely with clients, think critically, and create the right solution for the right job. Python and .NET experience is a must.

More important than experience is attitude, we are looking for developers who are passionate about delivering awesome software using the latest technologies and best DevOps practices and want to fun while doing so!

Full Stack .NET Developer
SSW Sydney, Brisbane, Melbourne, Newcastle

This role requires great communication skills and solid experience in delivering production-ready web solutions. You will be working with our expert developers and designers in a wide variety of exciting enterprise projects.

This role requires someone who can work closely with clients, think critically, and create the right solution for the right job. .NET experience is a must.

Proudly developed by SSW Sydney Web Design

Advertise with SSW | Unsubscribe | Previous SSW Updates | Got a Hot Tip to share? | Got a comment?