blog.kdgregory.com

A week ago, a lot of Java application developers learned that their applications harbored a severe vulnerability, courtesy of the Log4J 2.x...

I never thought very deeply about connection pools, other than as a good example of how to use phantom references. Most of the projects th...

Many applications today are like the human body: * a relatively small proportion of “in-house” code, leveraged by dozens if not hundre...

This past week we had a mini-fire-drill at work, in response to a CERT vulnerability note titled “Apache Commons Collections Java library ...

Twenty-five years later I can still remember how I felt, returning home that day. Being burgled is a surrealistic experience: you notic...

Security is the red-headed stepchild of the web-service world. Sure, there's WS-Security , which may be useful if you're using SOAP...