PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ensuring Robustness in DynamoDB Operations: The Role of ReturnValuesOnConditionCheckFailure

hackerone.com | blog | #aws | #secure-coding | #dynamodb
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne explains DynamoDB's ReturnValuesOnConditionCheckFailure parameter: returning an item's pre-write attributes when a conditional write fails, and its role in optimistic locking, debugging and maintaining data integrity.
Published
Collected

Related coverage

blog · hackerone.com
The Top 5 Most Common Security Issues I Discover When Reviewing Code
A veteran code reviewer counts down the five security issues he finds most often, starting with PII and secrets leaking into logs and poor cryptography choices, with Python and Ruby examples.
blog · hackerone.com
5 Ways I Provide Value as a PullRequest Reviewer When I Start Reviewing a New Project
A PullRequest reviewer describes five ways to add immediate value on a new project, starting with catching security vulnerabilities that most updates introduce, often fixable with minor changes.
blog · hackerone.com
How Giant Data Leaks Happen - Understanding Cryptographic Failures (OWASP Number 2 for 2021)
Will Barrett breaks down OWASP's number two risk for 2021, cryptographic failures: sensitive data left unprotected or encrypted poorly, and the common implementation mistakes behind giant data leaks.
blog · hackerone.com
How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2
Part 2 of the series covers the rest of OWASP broken access control: privilege escalation, insecure user impersonation, JWT and cookie tampering, CORS misconfiguration, and force browsing.
blog · hackerone.com
CWE (Common Weakness Enumeration) and the CWE Top 25 Explained
Explains the CWE taxonomy run by MITRE for categorizing software and hardware weaknesses, how it differs from CVE, and what the CWE Top 25 ranking of the most severe flaw types means for developers.
blog · hackerone.com
Top 3 Security Vulnerabilities I Find in iOS and Android Projects
A mobile code reviewer describes the most common security issues he finds in iOS and Android projects, starting with hardcoded API keys and secrets committed directly into application code.
Back