# The DevCentral Chronicles Volume 1, Issue 4 **URL:** \ **Category:** F5 Technical Articles\ **Tags:** big-ip, application-delivery, lightboard\ **Created:** [April 11, 2018, 1:05pm UTC](https://community.f5.com/t/the-devcentral-chronicles-volume-1-issue-4/67099 "2018-04-11T13:05:38Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![PSilva](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/psilva/32/13901_2.png) [@PSilva](https://community.f5.com/u/PSilva)\ **Post date:** [April 11, 2018, 1:05pm UTC](https://community.f5.com/t/the-devcentral-chronicles-volume-1-issue-4/67099/1 "2018-04-11T13:05:38Z")
If you missed our initial issues of the DC Chronicles, you can catch up with the links at the bottom. The Chronicles are intended to keep you updated on DevCentral happenings and highlight some of the cool content you may have missed since the last issue. Welcome! ![image_284033.jpg](https://d20hrnpixdzcsd.cloudfront.net/original/2X/7/7b2b79023bddd826e7c7dbb8ca3bfe62ee3c2cb8.jpeg) Like last month, we’re digging the OWASP Top 10 #lightboard series from @JohnWagnon. He wrapped it up this month with numbers 9 & 10 - [Using Components With Known Vulnerabilities](https://devcentral.f5.com/s/articles/lightboard-lessons-owasp-top-10-using-components-with-known-vulnerabilities-30213) and [Insufficient Logging and Monitoring.](https://devcentral.f5.com/s/articles/lightboard-lessons-owasp-top-10-insufficient-logging-and-monitoring-30735) To give you a sense of how these have been received, YouTube viewer Sanket Kamath says, ‘_Thank you for the excellent overview for all of the OWASP Top 10 2017! John made it really easy to understand each of the 10 attacks with his explanation!_’ Check out the [entire playlist](https://www.youtube.com/watch?v=rWHvp7rUka8&list=PLyqga7AXMtPPuibxp1N0TdyDrKwP9H_jD)! Speaking of LightBoard Lessons, we had a few fantastic ones this past month. John took on lighting up the [GitHub DDoS Attack](https://devcentral.f5.com/s/articles/lightboard-lessons-explaining-the-github-ddos-attack-30179) and [Explaining the Spectre and Meltdown Vulnerabilities](https://devcentral.f5.com/s/articles/lightboard-lessons-explaining-the-spectre-and-meltdown-vulnerabilities-29335) while Jason gave us the [OSI and TCP/IP Models](https://devcentral.f5.com/s/articles/lightboard-lessons-osi-and-tcp-ip-models-30201) and [What Are Containers?](https://devcentral.f5.com/s/articles/lightboard-lessons-what-are-containers-30700) I added [SAML IdP and SP on One BIG-IP](https://devcentral.f5.com/s/articles/post-of-the-week-saml-idp-and-sp-on-one-big-ip-30680) to round out our videos. ![image_284033.jpg](https://d20hrnpixdzcsd.cloudfront.net/original/2X/3/392ad21efd376a289399b9bf39327a06eeae2e5a.jpeg) On the Security front, we had a bunch of great articles covering a mess, and I mean a mess of stuff. The mess was some new vulnerabilities and our Security Researchers had the mitigations for many including [Spring Framework Spring-Messaging Remote Code Execution (CVE-2018-1270)](https://devcentral.f5.com/s/articles/spring-framework-spring-messaging-remote-code-execution-cve-2018-1270-30767), [Drupal Core SA-CORE-2018-002 Remote Code Execution Vulnerability](https://devcentral.f5.com/s/articles/drupal-core-sa-core-2018-002-remote-code-execution-vulnerability-30713) and [Jackson-Databind - A Story of Blacklisting Java Deserialization Gadgets](https://devcentral.f5.com/s/articles/jackson-databind-a-story-of-blacklisting-java-deserialization-gadgets-30714). We also learned how to [Protect your AWS API Gateway with F5 BIG-IP WAF](https://devcentral.f5.com/s/articles/protect-your-aws-api-gateway-with-f5-big-ip-waf-30667), how to configure [F5 BIG-IP as an Explicit Forward Web Proxy Using Secure Web Gateway (SWG)](https://devcentral.f5.com/s/articles/configuring-the-f5-big-ip-as-an-explicit-forward-web-proxy-using-secure-web-gateway-swg-30202) and how to set up [ADFS Proxy Replacement on F5 BIG-IP](https://devcentral.f5.com/s/articles/ad-fs-proxy-replacement-on-f5-big-ip-30191). The Cloud folks will love Lori’s [Three Types of Load Balancing You Meet in the Cloud](https://devcentral.f5.com/s/articles/the-three-types-of-load-balancing-you-meet-in-the-cloud-30704), DNS Admins will dig Eric’s [Unbreaking the Internet and Converting Protocols](https://devcentral.f5.com/s/articles/unbreaking-the-internet-and-converting-protocols-30756) and Coders will enjoy Jason’s [Debugging API calls with the python sdk](https://devcentral.f5.com/s/articles/debugging-api-calls-with-the-python-sdk-30758) and Satoshi’s [iControl REST Fine-Grained Role Based Access Control](https://devcentral.f5.com/s/articles/icontrol-rest-fine-grained-role-based-access-control-30773). And, we couldn’t let this Chronicle pass without mentioning an awesome [@haveibeenpwned](https://twitter.com/haveibeenpwned) [#Pwned](https://twitter.com/hashtag/Pwned?src=hash) Passwords Check [#CodeShare](https://twitter.com/hashtag/CodeShare?src=hash) from MVP Niels van Sluis. This snippet makes it possible to use [@troyhunt](https://twitter.com/troyhunt) ‘Pwned Passwords’ API to check if the password has been exposed. See it here: [http://bit.ly/2GOhi1y](https://t.co/LJgnlSZBjW) And wrapping up, a wonderful contributor Daniel Varela is [DevCentral’s Featured Member for April](https://devcentral.f5.com/s/articles/devcentrals-featured-member-for-april-daniel-varela-30731) and [F5 Agility is coming to Boston, MA this August!](https://devcentral.f5.com/s/articles/f5-agility-is-coming-to-boston-ma-this-august-30749) As always, You can stay engaged with @DevCentral by [following us on Twitter](https://twitter.com/devcentral), joining our [LinkedIn Group](https://www.linkedin.com/groups/4330383) or subscribing to our [YouTube Channel](https://www.youtube.com/user/devcentral/). Look forward to hearing about your BIG-IP adventures. ps Previous - [Volume 1, Issue 1](https://devcentral.f5.com/s/articles/the-devcentral-chronicles-volume-1-issue-1-29340) - [Volume 1, Issue 2](https://devcentral.f5.com/s/articles/the-devcentral-chronicles-volume-1-issue-2-29783) - [Volume 1, Issue 3](https://devcentral.f5.com/s/articles/the-devcentral-chronicles-volume-1-issue-3-30174)