Author Archives: patrycja

Jakarta Persistence API (formerly Java Persistence API) is a standard approach to access a database in the Java world. Even though its usage is simple, developers sometimes struggle to achieve best performance. In this blog post, I’m going to showcase different JPQL techniques in fetching aggregated data along with their execution times.

Read more

Most Java applications use Jakarta Persistence API (formerly Java Persistence API) to access databases. Hibernate is the most popular ORM framework for Java. It is a straightforward and easy-to-use implementation of JPA. However, its simplicity of usage often becomes mischievous to developers and leads to serious performance issues in Hibernate-based applications. How to detect such issues? The answer might lay in smart logging.

Read more

Unfortunately, Jakarta Persistence API (formerly Java Persistence API aka JPA) does not support BIT having a parametrised length. Fortunately, hibernate (one of the implementation of JPA) supports custom types, thus you can define your own BIT type with a parametrised length.

Read more

What is none algorithm in JWT?

JWT RFC describes unsecured JWTs where there is no signature present. Such unsecured tokens have a header alg parameter set to none.

{"alg":"none"}

Read more

Introduction

In this article, I’m going to explain what hashcat is and how you can use it to crack an HS256 JSON Web Token using a brute-force attack.

With a weak JWT, your applications become vulnerable to identity theft as a hacker can impersonate any user he wants once the JWT is cracked and the HS256 secret is revealed.

Read more

It’s time to move to a new environment! I’m happy to announce that as of today, my security demos will be available 24/7 in Oracle Cloud! 🙂

How did I start my hacker’s guide demos? When did it start? And how have I moved to Oracle Cloud?

Read more

Wow! It’s official now! I have become an Oracle Groundbreaker Ambassador.

Read more

7/7