All blog posts
Page 27
-
Lessons Learned from Side-Channel Attacks
Patrick McManus
The largest category of difficult-to-anticipate security design weaknesses come from side-channel attacks. In this post, we take a tour of some of the more foundational and out-there side channel-related exploits that have afflicted the security conscious over the years.
Industry insightsSecurity -
Better diff view from feedback & research | Fastly
Joe Hoffend, Sayali Deshmukh
We’ve made improvements to our diff view by combining customer testing, feedback, and requests with our own inspiration with diff experiences we enjoy using. The result is an enhanced diff view experience that we think you’ll enjoy as much as we do.
Product -
Terraform now supports all Fastly logging endpoints
Dom Fee, Joe Hoffend
We’ve been hard at work at Fastly this year working on updates to our Terraform provider and have some exciting ones to announce: Terraform now supports all our logging endpoints, plus Fastly web application firewall customers can now manage their WAF within Terraform.
Product -
Fastly and Signal Sciences join forces
Joshua Bixby, Andrew Peterson
Today, Fastly completed the acquisition of Signal Sciences and took a giant step forward toward our vision of modern, unified web application and API security. We will call on our shared view of empowering developers as we chart a path toward building an incredibly secure, performant platform and unlock all-new possibilities, together.
Company newsSecurity -
BuzzFeed Optimize Gif-heavy Content with new Fastly Feature
Dom Fee
Fastly’s new Image Optimizer feature converts animated gifs to MP4 videos for a faster load time, smoother experience, and significant savings on end-users’ bandwidth. In fact, the new feature was able to condense BuzzFeed’s 250 MB, browser-freezing “100 Greatest Gifs of all Time” article to a much more manageable 6 MB.
Company newsProduct -
Web Application Firewall (WAF) Best Practices
Liam Mayron
Following WAF best practices is imperative to keep your business and customers secure. Learn about new regulations and security tips.
Security -
The state of QUIC and HTTP/3 2020
Jana Iyengar
QUIC and HTTP/3 have entered the final stages of development at the IETF. Distinguished Engineer, Jana Iyengar, elaborates on the current state of the protocols, their deployment across the internet, and his expectations for QUIC and HTTP/3 in the near future.
Industry insightsEngineering -
Deploying network error logging with Compute
Patrick Hamann
We’ve been experimenting with Network Error Logging with Fastly Insights and discovered that processing the NEL reports is a great use case for Compute. In this post, we’ll look at our first attempt to build a NEL reporting pipeline, discuss where there was potential for optimization, and how Compute solves these problems while introducing performance and security improvements along the way.
Product+ 3 more -
Fastly to Acquire Signal Science for Security at Scale | Fastly
Joshua Bixby
Security has always been a part of Fastly’s DNA, not just within products, but in our vision of trust and safety as a modern platform. Today, we are pleased to announce that we have announced our intent to acquire Signal Sciences.
Company newsSecurity -
Hard-earned insights from a pair of secure DevOps pros
Liam Mayron
Fastly CISO Mike Johnson and Brave Software Senior DevOps Engineer Ben Kero share their practical advice for cementing more holistic security practices within your CI/CD pipeline.
DevOps+ 2 more -
Why “by developers, for developers” matters
Joshua Bixby
Developer-centricity is now a mission-critical philosophy for companies to embrace. And during COVID-19, we all know that the stakes have never been higher. We’ve seen that businesses that operate with a dev-first mindset at their core will have the strategic advantage and will only increase it, today and into the future.
CultureWebAssembly -
Cloud Security for Developers
Stephen Kiel
If you’re evaluating web application security tools exclusively for their security requirements, you may be missing one of the most essential opportunities to successfully grow your secure DevOps culture: developer-centricity.
SecurityDevOps -
Fastly’s security DNA: a look at our culture of safety, privacy, and trust
Dana Wolf
Fastly's heritage of security runs deep — far beyond our portfolio of web application and API security products. Our philosophy of developer empowerment, focus on community, and values-driven culture each contribute to our security DNA in an important way. And we'd like to tell you how.
Security+ 2 more -
Apps That Shouldn’t Be Built at the Edge | Fastly
Sean Leach
Progressive developers are increasingly using the edge of the network to power more performant and customized apps. With the use cases mounting, it seems there's very little that can't be built at the edge. And aside from a few exceptions, that just might be true.
ComputeEngineering -
First things first: six resources for building on Fastly
Jacob Rosenbacher
If you’re among our newest community members, we’d love to show you more of what Fastly has to offer. Once you’ve covered the basics of our getting started guide, check out the resources in this article to take our programmable edge cloud platform further.
Product -
State at the edge
Peter Bourgon
With the introduction of Compute, Fastly provides a richer model for the CPU. WebAssembly, powered and secured by the Lucet compiler and runtime, unlocks essentially arbitrary code execution within each request lifecycle. This raises the immediate question: what would a richer model for memory, or state, look like?
Engineering+ 2 more -
The Future of Zero Trust: Continuous Authentication
The Fastly Collective
Being able to continuously authenticate users’ access to critical web and API services without causing them to pay the price of increased friction may sound like a lofty goal. Still, it can be achieved by integrating technologies you likely already have. Combining technologies built to continuously monitor applications and APIs for attacks and anomalous behavior with identity technologies already deployed to authenticate users allows administrators to protect their critical applications without inconveniencing the user.
-
What is Cache Control?
Mark Nottingham
The Cache-Control response header is one of HTTP’s more widely known header fields; it allows a site to control how caches handle their data in CDNs, browsers, and elsewhere
EngineeringIndustry insights -
Leveling up observability with Compute
MJ Jones
Observability is hard. Distributed systems, dev and testing environments, and outside vendors all complicate the problem. With Compute, Fastly wants to make observability easier. Here’s what we’re doing.
Performance+ 4 more -
TLS 1.3 is faster, more robust, and now available
Sudhir Patamsetti
TLS 1.3 is now available for Fastly customers. The newest version of the TLS protocol, TLS 1.3 is designed to improve the performance and security of traffic served over HTTPS.
SecurityPerformance
