El control de acceso se reduce a tres preguntas (quién, qué y qué recurso) más la que se suele olvidar: dónde se realiza realmente la comprobación. Esto explica por qué solo la aplicación en el servidor protege verdaderamente sus datos.

Mathieu Morrissette
Hi everyone! At Devolutions, I help coordinate the team that tests our products for security. Together, we look for weaknesses, think like attackers, and help make sure everything we ship is as secure as possible. I also stay hands-on with testing and work with developers to help them write safer code.
Outside of work, I’m happiest solving a good puzzle, whether I’m stargazing, gardening, or exploring the Star Wars universe. Vulnerability, constellation, or stubborn tomato plant, I like figuring out how things work.


