Blog

August 7th, 2025 by David Simms

Categorized as: Tech Tips

Argon2 Password Hashing

This article details how ColdFusion developers may easily store user passwords using the Argon2id password hashing algorithm as recommended by the Open Web Application Security Project (OWASP). At the time of this writing, neither Adobe ColdFusion, nor Lucee support the ability to do this natively. However, being a Java application means ColdFusion can reach down […]

July 4th, 2025 by David Simms

Categorized as: Tech Tips

Secure Cookies

Here is the scenario. You have an application written in the ColdFusion Markup Language (CFML) and you have the Lucee application server installed and working properly to process that CFML code. All is good. But you know that as a security best practice—and security requirement if you need to comply with things such as the […]

May 24th, 2024 by David Simms

Categorized as: Other, Tech Tips

Blog

WordPress, the enormously popular Content Management System, is supported by a collection of tools and practices aimed at enhancing its security. But secure is a relative term and while those tools and practices can help make WordPress more secure than its default installation, cybersecurity professionals still cringe at the thought of using it on high-security […]

November 29th, 2023 by David Simms

Categorized as: Other, Tech Tips

SFTP to EC2 in Private Subnet

Using FTP to transfer files from one environment to another is a long-standing process. But when the destination for a file transfer is a server residing in a private subnet, one must get around the inability to connect directly to it over the Internet. This article describes how to easily accommodate doing this, but first, […]