Writingtransmissions
#Security
Authentication and account security, for engineers and for everyone else: multi-user identity, passkeys and why SMS one-time passwords need to go.
3 posts
2025
- Why your password is about to become obsolete
Passwords are on their way out. Discover why passkeys, biometrics and passwordless authentication are replacing traditional credentials for good.
- Centralized Secrets for .NET Services with HashiCorp Vault
Run Vault in Docker, lock each .NET service down with AppRole and policies, layer KV secrets over appsettings.json with VaultSharp, issue short-lived database credentials, and fix the 403s and sealed-vault errors you will meet.
2023
- Death to SMS OTPs!
SMS OTPs are insecure and outdated. Learn why SIM-swapping and phishing make SMS verification a liability.