BSIT380

One of the more important aspects of software development is security testing, and specifically security regression testing. The first round of security testing is designed to run your program through a list of known vulnerabilities and other security assessments to determine if it is ready for prime-time use. If any bugs or, more concerningly, vulnerabilities are found in the code, it is your responsibility to patch it. However, even after patching out the found vulnerabilities, these patches can sometimes introduce other vulnerabilities themselves. This is the importance of security regression testing, to ensure code you have has not ‘regressed’ to a point less secure than before you started. I have taken a few coding classes when I first started college and I thought I was going for a Computer Science degree, and if there was one common theme I noticed, it was fixing a bug often made others appear. This I guess is an almost universal experience when coding, and there have b...

  One of the things I have been meaning to work on, essentially since I began my home-lab, was getting certificates set up so each of the locally hosted websites I use don’t give a “Potential security risk ahead” message. However, I’m not sure if it’s because I’ve heard people always claiming it’s a PITA to set up or that it costs money to get the certificate/domain, but I just never have. I’ve recently gotten a reverse proxy manager set up so I can access all my sites that utilize the non-standard 443 or 80 ports all running on one IP address. Perhaps when I have some more free time I will finally sit down, bite the bullet, and take care of it.