Ben Petito
  • Home
  • About
  • Recent Posts
  • Experience
  • Projects
  • Posts
  • Dark Theme
    Light Theme Dark Theme System Theme
  • Tags
  • AI
  • API
  • Architecture
  • CI/CD
  • Cloud
  • Data
  • DevOps
  • Enterprise
  • Government
  • Integrations
  • Java
  • Legacy
  • MFA
  • Observability
  • SaaS
  • Security
  • Speaking
Hero Image
Never Trust Your Caller

A couple of weeks ago a security researcher published an excellent write-up of how they could have hijacked every live camera feed of the FIFA World Cup. There was no clever exploit involved. They registered as a football agent on FIFA’s public portal, which quietly added their account to the same Microsoft Entra tenant that runs FIFA’s internal platforms. When they browsed to the internal streaming system, the front end correctly showed them an access denied page. The backend, on the other hand, served everything they asked for - including the ingest URLs and stream keys for every camera at every match. Their own summary of the impact: they could have rickrolled the World Cup final.

  • Security
  • Architecture
  • Enterprise
Saturday, July 4, 2026 | 4 minutes Read
Hero Image
APIs Don't Fail Loudly Enough

When enterprise integrations fail, they rarely fail cleanly. We inherited a system syncing financial data between a property development platform and our database. On paper, it “worked”. In reality, it was quietly dropping records and skipping certain transaction types. This is the worst kind of failure: no outage, no alert, just silent data loss over time. The bigger problem: there was no architecture or process documentation explaining how the sync worked — or was supposed to work.

  • Integrations
  • Enterprise
  • Architecture
Friday, April 10, 2026 | 2 minutes Read
Navigation
  • About
  • Recent Posts
  • Experience
  • Projects
Contact me:
  • benpetito
  • Ben Petito

Toha Theme Logo Toha
© Ben Petito
Powered by Hugo Logo