Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Stop Pasting Production JWTs into Random Websites: The Security Guide to JSON Web Tokens

How many times this week have you opened a random online "JWT Debugger", pasted an Authorization: Bearer eyJhbGci... token from your production network tab, and hit enter?

  • Developers often paste production JWTs into random debuggers, exposing sensitive user data
  • JWTs are signed, not encrypted; use JWE for confidentiality
  • Three critical vulnerabilities: alg: none attack, asymmetric key confusion, and ignoring expiration

Octogriffin: A Habitica x GitHub Integration. It's amazing, really.

Me and Habitica I'll be honest: I'm not really that much of a Habitica user. I learned about it from my colleague. Signed up for an account, thought the gamification was cool, and that's it.

  • Habitica and GitHub collaborate to create Octogriffin integration
  • Users earn XP and Gold in Habitica for GitHub activity
  • Integration supports code commits, pull requests, and reviews

Django 6.1's MAILERS setting opens as many SMTP connections as the EMAIL_BACKEND it replaces

Django 6.1 added a setting called MAILERS , meant to replace EMAIL_BACKEND and the ten or so EMAIL_* settings that go with it.

  • MAILERS setting replaces EMAILBACKEND and associated settings without reducing SMTP connections
  • MAILERS provides stronger error handling, causing fatal errors for misconfigured mailers at startup
  • Django 6.1 includes deploy checks (E001 and W001) for better early detection of configuration issues

More from Wednesday 28 October →