3 posts
A confused deputy attack tricks a privileged service into using its authority against itself.
Your service has an API key to your cloud storage. A user sends a request. Your service dutifully writes a file. The file lands in the attacker's bucket, not…
Capability-based security replaces scattered role checks with unforgeable tokens of authority.
Every permission bug looks the same in hindsight. Some function deep in the call stack assumes the caller already checked . It didn't. Or a new role gets…
Most code runs with ambient authority: every function can touch everything.
Your function has access to the database, the payment gateway, and the audit log because it happens to live in the same process. If an attacker finds an…