Amazon AWS — we got caught out by CPU credits

Amazon is pretty good at providing a cloud platform with all the tools and infrastructure you may possibly need without looking into the small print. CPU credits are an exception.

Automate certificate monitoring with free API — KeyChest

Our certificate monitoring KeyChest has an initial RESTful API for remote enrolment of new certificates and for checking certificate expiry. Its design supports automation without any initial security/authorization setup.

ROCA vulnerability, Gemalto, eID cards, and UK passports

I almost thought this news is not new any more, only to get a call from Daily Mail — a UK tabloid.

Is The First True eGovernment A Goner? I Hope Not, Just.

When we researched impacts of the ROCA vulnerability, the Estonian government limited the impact with a cut-off date. ROCA only applied after that date. It now appears that Gemalto had another problem before that cut-off date.

Intruder — Pen Testing for SMEs & KeyChest

I met Chris Wallis a couple of weeks back for a cuppa and to talk shop as we both…

Dash cashless — design and operation (HTTPS)

I recently attended a workshop about app/web product design. The presenter asked us to think of a well and badly designed app. Dash sprang to my mind as an example of the latter. While its design is an ongoing issue, it happened at least once that its…

CyberSec is Janitorial

Point of discussion: “… No matter how much we rapture on about the virtues of Cyber Security, to The Business, we might as well be explaining the function of the U-bend. …”

Multiparty Encryption — Our Talk at DefCon 25 — August 2017

I just found a video of our presentation at DefCon last year, which I haven’t watched since. The talk included a live demonstration connecting to a bank of smart-cards in Cambridge, UK. Organizers warned us not to do it as the…