Shorter TLS certificate lifetimes increase coordination pressure for mobile teams that rotate keys and enforce certificate pinning. This article explains how signed runtime pin policies work, how they complement Certificate Transparency, and what their deli...
Shorter TLS certificate lifetimes increase coordination pressure for mobile teams that rotate keys and enforce certificate pinning. This article explains how signed runtime pin policies work, how they complement Certificate Transparency, and what their delivery, recovery, and rollout requirements...
A feature branch that never died. Fixes mixed with refactors, half a feature in the middle, and a release deadline getting closer. This post describes the GitHub flow I now use to turn a messy development branch into a clean, reviewable release — without relying on “it seems to work”.
QR codes are a staple in modern technology, offering a quick and convenient way to access information. In this post, we’ll explore how to enhance your QR codes by adding a logo at the center, using Java and the ZXing library. This technique ensures that your QR codes stand out, while maintaining ...
Automating the cleanup of GitHub workflow runs can save valuable time and keep your repository organized. Instead of manually deleting outdated or failed workflow runs through GitHub’s UI, which lacks bulk selection, you can set up a scheduled job using GitHub Actions.
This blog post provides an step-by-step walkthrough on creating the assetlinks.json for Android and apple-app-site-association for iOS files in IBM Security Verify.
In this article, I am going to show you how to implement the use of ‘Demonstration Proof-of-Possession’ (DPoP) tokens from IBM Security Verify (ISV) into your mobile and custom web app.
I experienced an event recently, which caused me to review my backup strategy. I was “somehow” backing up my data to a cloud sync service. Yes, I’m aware sync != backup, but the cloud service stores X versions of the file, so it provides some protection against accidental data loss and accidental...
The IBM Verify SDK 2.x provides developers a convenient way to create their own authenticator with IBM Security Verify (ISV - Cloud) and IBM Security Verify Access (ISVA - OnPrem ) solutions without the need of handling different APIs. This article will guide you through the necessary steps of h...
One-time passwords (OTP) are widely used as a 2nd factor to add an additional layer of security to your account’s login. Despite that its configuration is considered as “easy”, it can be time-consuming to identify the reason if the generated password on server and client site don’t match. This ar...
In Android 13, Google changed the way how push notification opt-ins are handled. It is now required that obtain the permission from the user in order to send push notifications. This change is great for Android users in terms of privacy and control, but with it comes some adjustments that mobile ...