#vault

#GetFediHired #FediHire : I'm looking for a job (EU-remote, preferably part-time). I have 12+ years of experience in security, from PhD to security engineer and security architect. I know my way around #ThreatModelling, #appsec , Hashicorp #Vault, #devsecops , #Kubernetes security, #Gatekeeper, infrastructure/#cloudsecurity, IAM/RBAC, #Keycloak and many other things. Also I'm able to pick up new things fairly quickly. I'm generally quite thorough, and good at paying attention to details (which I think is essential in security). If you need some experienced security engineer or architect, or know someone who does, let's talk!

Secure TOTP Storage & Usage #TindieBlog #TOTP #Hardware #Vault #Security #Cryptographyhttps://blog.tindie.com/2026/07/secure-totp-storage-usage/

Vault's TOTP API can validate a six-digit code. That is not yet a complete MFA flow. This Quarkus tutorial adds the missing boundaries: authenticated subject, stored enrollment mapping, strict input validation, a two-minute step-up JWT, normal RBAC, and a replay test against a patched Vault runtime. https://www.the-main-thread.com/p/quarkus-vault-totp-step-up-auth #Java #Quarkus #Vault #TOTP #APISecurity