Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Gary Archer
Why Real-Time Authorization Is Best For Agentic AI
In many existing systems, enterprise data uses only basic security protections. For example, the backend of a web application might call an API and use an API key to secure the request. The solution may seem secure enough, since the web application only calls a subset of API endpoints and the user seems constrained by the frontend application’s user controls. However, API keys typically grant broad permissions that can lead to over-exposure of data.
Why AI Security And API Security Go Hand In Hand
Since the advent of the internet, software developers have used online assistants, like search engines, to improve their time to market. In the AI era, you can think of AI agents as a new type of user agent that goes beyond the capabilities of search engines to perform concrete tasks and provide further efficiency improvements. From an enterprise viewpoint, AI has the potential to further improve time to market and benefit digital products in multiple ways.
How to Update API Deployments to Enable AI Agent Access
With the rise of AI agents, many organizations want to expose information that differentiates their business. Doing so has several potential business benefits: attracting new parties at internet scale, monetizing those connections, and enabling new and dynamic user experiences. APIs expose data to the outside world and support many types of clients, like web or mobile applications and connections from business partners.
Behind 'Cloud Native Data Security with OAuth': Highlights from the Authors
We recently spent over a year writing a consumer-focused book on the big picture of modern application security. O’Reilly has now published the book, Cloud Native Data Security with OAuth, which explains a number of security requirements, along with design patterns to meet them. In this article, we give a taste of what the book is about. Data Security Design Organizations commonly utilize APIs to expose business data. Applications (clients) call APIs and provide a user interface for end users.
Master Difficult User Authentication Requirements with OAuth
User authentication has always been a complex topic for organizations building digital services. You need to implement low-level security to manage credentials so that malicious actors cannot perform account takeover attacks and gain access to data that belongs to your customers. Yet many organizations fail to recognize that user authentication for your digital services will evolve.
Use Passkeys for Painless Strong Customer Authentication
When building digital services, organizations often have to meet a strong customer authentication (SCA) requirement as part of their data protection. Yet the best ways to meet this requirement are often misunderstood. When suboptimal choices are made, you introduce complexity that can damage the user experience. Yet, the best all-around SCA solution for most organizations is available right now.
How To Secure API Access in Mobile Apps
When an organization provides mobile apps as part of its digital services, security requirements are not always understood. Here are some common issues and resolutions to consider when integrating mobile apps with secured APIs. With this knowledge, you can avoid expensive mistakes and enable the most up-to-date security behaviors in your apps. Avoid Authentication-First Security Mobile apps must call APIs to interact with secured data.
How To Secure API Access in Mobile Apps
When an organization provides mobile apps as part of its digital services, security requirements are not always understood. Here are some common issues and resolutions to consider when integrating mobile apps with secured APIs. With this knowledge, you can avoid expensive mistakes and enable the most up-to-date security behaviors in your apps. Avoid Authentication-First Security Mobile apps must call APIs to interact with secured data.
Don Dubb's "Loved Ones": A West Coast Funk Odyssey » West Coast Styles
In the heart of Compton, amidst the legacy of hip hop’s golden era, emerges an artist who embodies the essence of West Coast resilience and authenticity. Don Dubb, a name resonating through the streets, has once again struck gold with his latest single, “Loved Ones,” a testament to the struggles of navigating relationships tainted by selfishness and lack of genuine love.
5 Steps Toward Military-Grade API Security
Cyberattacks against software are becoming increasingly sophisticated. Advancements in technical tooling provide many ways for malicious parties to automate attacks. For many organizations that provide digital services, counteracting threats can feel daunting. How do you best manage security when you have limited resources and want to focus on your business objectives? Let me explain an iterative approach to embrace a “military-grade” security mindset.
3 Steps to Make Logins with Passkeys Reliable
Passkeys are a modern and secure way for users to authenticate. Every user login uses public key cryptography, where devices generate a distinct keypair for each server origin. Only signed material and a public key are sent to servers. Passkeys provide these security benefits: Cryptography-backed user authentication. Phishing resistance. Server breaches cannot reveal user credentials.
10 Best Practices for Building a Robust IAM Strategy in 2024
For most organizations, the main focus of identity and access management (IAM) is securing access to digital services. This enables users and applications to access secured data correctly, according to the organization’s business rules. If, instead, security is done incorrectly, it can result in data breaches. These can lead to reputational damage or significant fines in some cases. IAM is sometimes perceived to be a complex area of software engineering.
Getting Identity and Authz Right in Kubernetes
Most people involved in digital solutions will have heard the term “zero trust” from technology vendors concerning backend security. Proposed solutions typically involve Kubernetes clusters that run service meshes with modern techniques for enabling transparent mutual Transport layer Security (TLS) between backend components. Yet, these architectures often put solutions before requirements and are, therefore, insufficient. Let’s explore why security for digital solutions is a business problem.
How to Design Scalable SaaS API Security
Software as a Service (SaaS) is becoming the norm for many organizations providing digital services. Data is served by APIs and consumed by user-facing applications or made available to partners. Solutions can be rolled out to many tenants using the features of the cloud platform. Customers only need to run apps and do not need to manage any infrastructure. Yet APIs do not stand alone.
How to Integrate Social Logins the Right Way
Organizations providing digital services most commonly secure their applications and APIs using OAuth 2.0 and OpenID Connect. One benefit of this approach is externalizing difficult security operations, such as user credential management, from applications. Often, developers are first introduced to OAuth when integrating social logins.
Gary Archer
Should JavaScript developers abandon libraries and write directly to the HTML Document Object Model? CONTEXT: JavaScript co-founder Douglas Crockford recommends this approach as the best way to build web apps. Yes. Most JavaScript libraries are so bloated that it's easier to write directly to the DOM now. No, it is impractical. The DOM is imperative, not declarative. You need event handlers everywhere. No, because people will not learn the DOM — it is too weird. I dunno, I'm just here for the free beer.
How to Reduce API Sprawl With a Security-First Approach
These days most organizations are providing APIs as part of their digital solutions. Doing so has many benefits, such as the ability to expose data to many types of clients like web applications, mobile apps, and connections with business partners. A microservices approach is usually adopted to enable small code bases built by many separate teams. Yet microservice architectures must be designed carefully, with an early focus on the difficult areas.
How DevSecOps Teams Should Approach API Security
Software organizations need to store data and expose it over the internet to user-based applications. The standard way to manage this is to host APIs. In the following diagram, API endpoints are called by both web and mobile clients. APIs are usually also broken down into manageable codebases, sometimes called microservices, which then call each other. These components are likely familiar to anyone working in software, from business owners to developers, DevOps and compliance staff.
How to Take Control of Cookies in OAuth-Secured Web Apps
Cookies are a convenient method for browser-based applications to communicate the user's authenticated identity to the backend. But although issuing cookies only requires a few lines of code in a backend, cookies are more complex than they seem. You may need to deal with both first-party and third-party cookies. Doing so can also impact the web developer setup and how you design deployment domains.
5 Essential Principles of API Security
Application Programming Interfaces (APIs) are central to digital transformation and business innovation, allowing companies to create new products and services for customers. But as with every good thing, there are also challenges. APIs are great connectors, but these connections pose certain risks. Rarely a week passes without news about another API attack. Unfortunately, this cannot be viewed as just a warning anymore.
5 Steps to Modernize Large Websites using OAuth
One of the major concerns in software systems is keeping a code base maintainable over time as the amount of logic grows. In recent years it has been a best practice to break down code into modular components: microservices and micro-UIs. Each component can then be managed by different development teams working in parallel without affecting each other. Each team can operate at its own pace and more easily keep their tools, technologies and capabilities up to date.
5 Software Security Goals All CTOs Should Prioritize
Companies providing digital services need to secure access to information to protect data that belongs to the organization, its customers and its business partners. When software is developed with security gaps, there is a risk that it can be exploited by cyberattacks, which have become more sophisticated in recent years. Mitigations such as asking a third-party company to run penetration tests can help.
Designing Your OAuth Login Workflow
When developing digital experiences, it used to be common to implement all security behavior within the application. This provided full control over managing registration and login flows. However, security has become much more sophisticated in recent years with multiple sign-in methods. This includes the current trend of passwordless authentication via WebAuthn-related standards. It is no longer viable to implement authentication workflows within applications.
How to Improve Your OAuth Developer Experience
These days, developer experience (DX) is a term used frequently but is often misunderstood. The truth is that a poor developer setup can negatively affect the time to market of your digital services. Especially when implementing security solutions, DX can suffer when a suboptimal technical design is chosen, which, unfortunately, is not uncommon. Typically companies secure their apps using the OAuth family of specifications.
How to Build Zero-Trust Event-Based Architectures
Many companies break down complex backend flows into microservices. This makes it easier to delegate responsibilities and extend code for each business area. Microservices can communicate via point-to-point HTTP requests, but an alternative architecture is to use event messages that are processed asynchronously. This involves services calling each other via a message broker, where the caller publishes an event message and one or more consumers receive it.
Increasing Security For Single Page Applications
Gary Archer, Product marketing Engineer at Curity, gives us insights into User Experience (UX) and Security on web pages. The internet age has ensured we are spoilt for choice with cutting-edge technology, web speed, and accessibility. With so many options available, fast and reliable web pages are expected for most users online. And why shouldnât they be? If competitors can deliver a fast and responsive platform for users to access their products or services, then so can you.
Secure the Web with an API-Driven Backend for Frontend
Gary Archer Gary is a product marketing engineer at Curity. For 20 years, he has worked as a lead developer and solutions architect. Building and securing browser-based apps has always been a challenge. Development is much easier these days, with far better technical choices than we had only a decade ago. There are also fewer incompatibilities between browser vendors and some great JavaScript and CSS frameworks that allow us to build modern frontend web experiences.
Build Your OAuth Login User Experience | Blog
It used to be common for software companies to build standalone websites. This ensured that login screens looked the same as other areas of the app. An example theme for a bank website is shown below. These days, most companies instead use an Identity and Access Management (IAM) system to manage authentication for their apps. OAuth 2.0 and OpenID Connect are the main standards used, which have first-class support in any web, mobile, or API technology stack.
OAuth Security in a Cloud Native World Original
These days most software companies use cloud deployment with modern hosting capabilities that make everyone productive, from developers to DevOps and InfoSec staff. Gary Archer Gary is a product marketing engineer at Curity. For 20 years, he has worked as a lead developer and solutions architect. However, not all cloud deployments are the same, and you still need to make sound choices to meet your architectural requirements.
Securely Scaling the Myriad APIs in Real-World Backend Platforms
These days, the most standard way to secure APIs is via access tokens, which use the JSON Web Token (JWT) format. Although there are many online tutorials about receiving and validating JWTs, these do not usually convey how to manage security on a larger scale. In this article, I will explain how to scale the use of JWTs to real-world backend platforms, where there are many APIs and clients. OAuth Security Framework Gary Archer Gary is a product marketing engineer at Curity.
Modern Techniques for Securing SPAs | Blog
On the surface, Single Page Applications (SPAs) seem simple, using modern development stacks that streamline Web UI development and deliver rich user experiences. On the outside, SPAs typically need to interact with microservices. Since JWTs have become the dominant way for APIs to protect data, this requires the SPA to send an access token.
Modern Identity Onboarding Essentials
Gary Archer Gary is a product marketing engineer at Curity. For 20 years, he has worked as a lead developer and solutions architect. Many companies want to use modern identity and access management (IAM) capabilities in their software to improve the customer experience and stay competitive. But building a complete solution from scratch with these advanced behaviors would be difficult and expensive.
Managing User Access in Multiregion Deployments
Gary Archer Gary is a product marketing engineer at Curity. For 20 years, he has worked as a lead developer and solutions architect. Modern businesses need to win customers across multiple regions in order to grow and maximize their market opportunities. This results in application developers building digital services that could be used in multiple locations.
Essentials for Integrating Identity
Gary Archer Gary is a product marketing engineer at Curity. For 20 years, he worked as a lead developer and solutions architect for investment banking solutions. Businesses building digital solutions need to protect their apps against data breaches and meet difficult data privacy regulations. This needs to be done while continuing to deliver a great customer experience.
Gaugr Presents Miss Vicky "Alright" Produced by Dublin Beats
The rising San Francisco Star Miss Vicky is back! This time with a heartfelt song that hopes to spread a positive message to the world during hard times including this pandemic going on now. Miss Vicky teamed up once again with Dublin Beats to create this beautiful song. The beat itself brings you into a state of emotion and the lyrics relay a life message that will get you through your tough days with a brighter look on life.
Gaugr Presents - Dyvurse “We Aint Hating”
Bay Area, Ca – There are so many talented creatives seeking a platform to showcase their music and be heard. Law and Gary Archer recently created the Gaugr App that provides that exact platform. Gaugr’s artist, Dy’Vurse, then took the concept and benefits that the App brings and created not only a dope track but teamed up with director Gino Rocks to develop a video visual that has given the viewers motivation to build amongst other creatives and tap into the movement.
Gaugr Presents Miss Vicky featuring Mistah F.A.B. “With Me”
Gaugr Presents Miss Vicky featuring Mistah F.A.B. “With Me” March 15, 2020 Gary Archer FEATURES, ONEWEST TV 0 Gaugr.com Presents Miss Vicky Featuring Mistah F.A.B. “WITH ME” New Video Directed by Gino Rocks Produced by Super Producers Dublin Beats and JMoe. San Francisco – Miss Vicky and Oakland – Mistah F.A.B. come together to drop this Bay Area Banger and New Video for her single “WITH ME” Available every where you get your music. IG @MissVickyMusic @FabbyDavisJr1 @Gaugr_ VIDEO
New Video from Quad High "Way Up" Directed by Bro Jackson
New Video from Quad High “Way Up” Directed by Bro Jackson January 7, 2020 Gary Archer MUSIC, ONEWEST TV 0 San Francisco’s own Quad High drop the highly anticipated video to “Way Up” directed by Bro Jackson. Back with another one going all the way up. Millions of people are dedicated to their church and whether it’s the booth or a grow room, Quad is dedicated to his. Watch this new visual from the 415 representative now. VIDEO
New Video StreetLyfe Solo featuring Slim 400 "EveryDay"
Cali connects Streetlyfe Solo and Slim 400 drop a slapper on the fans! This is the introduction to Streetlyfe Solo (@StreetLyfeSolo) a young rising superstar coming straight out of Healdsburg, CA. Today we have his new video for his track “Everyday” featuring LA rapper Slim 400. Solo has been putting on for his STREETLYFE camp for a while speaking on the struggle and lifestyle that him and his associates experienced growing up in Northern Cali.
Watch Now - Biggie Babylon "Pulled Up Fresh" - One West Magazine
(Bel Air, CALIFORNIA – 2019) – Remaking one of the most iconic sitcoms of the 90’s, rapper Biggie Babylon releases his newest music video for “Pulled Up Fresh.” In Biggie Babylon’s music video, “Pulled Up Fresh,” the Chaldean rapper transforms into the Middle Eastern Will Smith and moves to Bel Air to live with his new family in this modern take on the classic Fresh Prince of Bel Air theme song and TV show intro.
Video - Fatty Atty and Rich Rocka "Got a Bag" - One West Magazine
San Francisco, CA – Fatty Atty x Rich Rocka – 2 San Francisco legends connect to record and shoot the video for the newest slap off the new Fatty Atty project. “GOT A BAG” Directed x Hatch 86 Films. Super slapping drums mixed with a melodic bassline hook brings these super bars together. Do yourself a favor and Tap In. Witness Greatness for yourself watch the video now. Follow the Fatty Atty movement on any of your favorite streaming services like YouTube, and Spotify.
[Out Now] Shah Cypha “Kings County” Album & “County Of Kings” Official Video
[Out Now] Shah Cypha “Kings County” Album & “County Of Kings” Official Video October 17, 2019 Gary Archer MUSIC, ONEWEST TV, Spotlight 0 Following up behind his single “Flyer Than The Rest”, Shah Cypha releases his latest album “Kings County” along with the official Video for “County of Kings” Directed by MB Media & Design. Kings County delivers 10 songs and 36 minutes of hard lyrics with dope concepts. Listen to Kings County and make sure you check out the official video to County of Kings below.
Video - Xian Bell "Top Flow" - One West Magazine
(Los Angeles, CA – October 17, 2019) – Following a packed show in his hometown with screaming women and heavy smoke, the smooth and melodic Xian Bell returns with a hilarious music video for his song “Top Flow.” In the visual for “Top Flow,” Xian Bell and his friends get together with some ladies for a kickback. The party eventually makes its way to an old school drop top as Xian and some ladies cruise around the LA while he serenades them with humor.
Video - Big Brother Biz "My Roses" Produced by Beat Hogan - One West Magazine
Video – Big Brother Biz “My Roses” Produced by Beat Hogan October 17, 2019 Gary Archer FEATURES, MUSIC, ONEWEST TV 0 Take a look at the visual for “My Roses” the lead single off of the Forever Forward Ep By Big Brother Biz. Produced by Beat Hogan ‘My Roses” is the Brother Biz way of saying “Show him love while he can still feel it in real time, In real life” The Music video is directed by MB Media And Design the in-house design team for microphoneBully.com .
SBTVMG New Single "Grind For Mine" ShoteBoi x Hot-Tunez x VictoryDaOne Produced by ShoteBoi
West Coast – California’s newest Super Group SBTVMG drops their new smash single “Grind For Mine” featuring ShoteBoi, Hot-Tunez, VictoryDaOne Produced by the Hit Maker ShoteBoi. #SBTVMG (Sound, Bass, Tone, Volume, Music Group) Tap in one time and get familiar with this movement. They are coming no matter what. New single Grind For Mine and other SBTVMG Music available anywhere you stream music. Follow the group on Spotify & IG @SBTVMG @ShoteBoiBeatz @Hot_Tunez @VictoryDaOne
So Vicious "Get Some Money" featuring Outrageous Karina x Alma Rose x DJ ShellHeart Directed by Wooyen
So Vicious back at it again wit a new Banger “Get Some Money” Spitting her catchy Lyrics as usual Where she Collaborates With A few other hot Dope Underground Bay Area female artists. She goes to San Jose to bring on Outrageous Karina known for her Hot Track “Good At This” Spun on 106 Kmel & CMC. Karina spits those fire lyrics & dope punch lines.
Amaar and Siege "Rolling" produced by Siege Video Directed by: AIW, Xiris
Amaar and Siege “Rolling” produced by Siege Video Directed by: AIW, Xiris September 28, 2019 Gary Archer HOME, MUSIC 0 Amaar and Siege “Rolling” produced by Siege Video Directed by: AIW, Xiris Rolling is the 2nd music video and single from Bay Area raised, Phoenix based brothers Amaar X Siege. Their album “8.19”, just released Friday Sept. 27th, peaked at #12 on iTunes top Rap/HipHop pre-orders Chart.
Magico the Mac Star "Nunca A La Fuerza" featuring Big Kangrina
After networking across Central America Magico is home back in the Bay Area with a sizzlin record entitled “nunca a la Fuerza” “Magico” como le Han dicho deste 2000… cuando empeso a grabar musica.. dice que “soy de San Francisco y mi familia es de El Salvador… ahi Tengo mis raizes..” “nunca a La Fuerza” a single recorded in Santa Ana El Salvador.. features Big Kangrina also from El Salvador. Magico proclaims “I’m trying to connect the dots and throw the country on my back like a soccer jersey..
Amaar & Siege Video "All Out" featuring Vee Tha Rula
Amaar & Siege Video “All Out” featuring Vee Tha Rula September 12, 2019 Gary Archer MUSIC 0 West Coast Tandem and brothers Amaar & Siege deliver their new video “All Out” featuring Vee Tha Rula. Directed by AIW. Single off the upcoming 8.19 album dropping September 27th currently #12 on the iTunes Preorder chart this album is featuring Freeway, The Jacka, Vee tha Rula, Young Gully, and more. Produced by Siege.
Video - Quad High featuring Baby Gas "More Grams" - One West Magazine
Video – Quad High featuring Baby Gas “More Grams” July 15, 2019 Gary Archer FEATURES, MUSIC 0 Quad High and Baby Gas link up for the new video to “More Grams” directed by Bro Jackson. If you looking for more grams, it’s in they backwoods with the way they smoking. Light one up and watch this new visual. Hit that Like Button and Leave a comment if you wanna come smoke with us. VIDEO
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Gary
Contact Gary, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack