Mercari Engineering Portal

security

2025/12/22
Tales of OIDC & OAuth Security: What It Takes to Trust a Token
Security
Author: Kahla
2025/12/01
Websocket XSS vulnerability discovery: My security journey at Mercari
Client side
Development
Security
Author: Patrick Klitzke
2025/11/06
Mercari’s Phishing-Resistant Accounts with Passkey
Development
Security
Author: KarinoTatsuya
2025/07/29
Locked Shields 2025 Event Report
Security
Author: Sana
2025/05/27
Removing GitHub PATs and Private Keys From Google Cloud: Extending Token Server to Google Cloud
Security
Author: Hiroki Akamatsu
2025/05/23
When Caching Hides the Truth: A VPC Service Controls & Artifact Registry Tale
Infrastructure
Security
Author: south
2025/01/31
How to bypass GitHub’s Branch Protection
Security
Author: iso
2024/12/15
LLMs at Work: Outsourcing Vendor Assessment Toil to AI
AI
Security
Author: simon danny
2024/07/22
Mapping the Attack Surface from the Inside
Security
Author: f-viktor
2023/08/10
Mercari’s passkey adoption
Backend
Security
Author: KarinoTatsuya

See more