Argusoft | Blog

One of the enduring problems of the web – regardless of its evolution – is spam and abuse. While it is getting progressively easier to gather and share data online, there also needs to be effective tactics to weed out bad actors. One such tactic is Invisible reCAPTCHA. Invisible reCAPTCHA is a technology developed by Google to protect websites from spam and abuse while also providing a more user-friendly experience compared to traditional CAPTCHA. Unlike…

Low code’s arrival is no longer fresh news. With its many benefits and versatile use cases, the low code paradigm is here to stay. Low-code frameworks are powerful tools that can significantly improve primary healthcare services in developing countries. These frameworks allow non-technical users to create/maintain custom software applications without extensive coding knowledge. This enables healthcare providers in non-compute intensive environments to quickly and easily develop digital solutions to support their patients and improve the…

Jamaica, the third largest of the Caribbean islands, is entering a new era of development, riding on the tailwinds of a digital transformation movement. This thrust comes directly from the government's policy direction. So much so that Jacky Wright, Chief Digital Officer and Corporate Vice President, Microsoft US Global Technology Leader, recently lauded the country for its progress towards becoming a digital society. In line with its national development goals,  Jamaica has witnessed concerted efforts…

Data lies at the heart of digital transformation. Not all data. But data that’s easily accessible, high quality in nature and relevant. Unfortunately, without adequate organizational data governance measures, data can easily devolve into data for data’s sake. Something that degenerates into policies and guidance made into a support function executed by organizational IT teams, and not to mention not widely followed organizationally. Therefore, high-quality data governance ensures organizations don’t miss out on data-driven opportunities.…

The Problem Encryption Alone Can't Solve  When we think about encryption, our attention naturally goes to the data. Medical records.Financial transactions.Identity documents.Personal photos. These are the assets we want to protect. Yet modern security systems don't spend most of their effort protecting the data itself. They spend it protecting something much smaller i.e. the encryption keys. At first, this might sound surprising. An encrypted document without its key is nothing more than a sequence of…

In an age where video calls, live chats, and screen sharing have become everyday experiences, WebRTC is the unsung hero behind many of these technologies. If you’ve ever used Google Meet, Discord, or even some telecommunication platforms—chances are, you’ve already benefited from WebRTC. In this blog, we’ll explore: What WebRTC isWhy it’s powerfulHow it worksHow you can build your own real-time communication apps using it 🚀 What is WebRTC? WebRTC (Web Real-Time Communication) is an…

For the better part of 15 years, my job as a software engineer has been to make data flow faster, store it cheaper, and analyse it deeper. Currently, at Tech Company, we tackle massive, complex architectures daily. When we design systems like Public Health Platform—a heavy-duty digital health platform—privacy isn’t just a feature; it is the entire foundation. When you handle patient records, you naturally build zero-trust networks and obsess over access controls. But a…

Introduction: Why Authorization Matters Imagine you’ve discovered an internal bank API. This API, when called, returns the last N transactions of the logged-in customer. If you’re logged in as User A, it should only return User A’s transactions.Even if you know User B’s account number, calling the API with your own session must not return their data. This is possible because authorization checks are enforced on top of the query. Now, suppose the bank launches…

When Code Talks Business: Thinking Beyond Code Ever feel like you're speaking a different language from the rest of the company? You know, you talk about APIs, microservices, and CI/CD, and they just nod and smile. Meanwhile, your product managers are talking about KPIs, ROI, and customer retention, and you just nod and smile. As software developers, it’s easy to get caught up in the code. We love clean architecture, elegant solutions, and bugs that…

You must have crossed the bridge where you might need your code to execute a task for you, but the task is decided at runtime. So you write a list of if-else statements or maybe a switch block. Boom! Problem solved. Yes, You solved the problem. And then… the client calls. They want changes. You dive back in, only to find yourself tangled in a messy web of conditional statements. But what if I told…

🚨 A Familiar Problem: The “Just One More Call” Spiral You’ve built a user registration API. It works great. Until your product manager says: “When a user signs up, we should send them an email. Oh, and an SMS. Oh, and a push notification.” You nod, smile, and write this: public void notifyUser(User user) { sendEmail(user); sendSMS(user); sendPush(user); } It works… at first. Then one day, the email service is slow, the SMS times out,…

Imagine you’ve just built a thriving healthcare platform. Everything is humming along nicely until one fateful afternoon. A doctor requests a critical OTP to log into the portal. Exactly 0.5 seconds prior, your marketing team triumphantly clicked “Send” on a promotional SMS broadcast to 500,000 users. In your monolithic server, a thread loops over the 500,000 users in the database. Think about the sheer weight of that transaction for a moment: fetching thousands of users…

What looked like a simple setup.exe turned out to be a stealthy info-stealer that stole Microsoft 365 session tokens from Chrome cookies — completely bypassing MFA. Here’s the full forensic breakdown. Introduction Suspicious login activity was observed from multiple geographic regions, inconsistent with known user behavior. Earlier this month, our team investigated a real-world malware incident involving the theft of Microsoft 365 session tokens via Chrome cookies. What initially appeared to be a harmless setup…