Security

Certificate Based Authentication

2nd Factor or Not?

I took January off for non security based pursuits and I’ve been a bit quiet on here as of late, however I had an interesting (YMMV) conversation, admittedly it fell out of a chat around the eminently dull PCI-DSS…

Security Vendors and Social Responsibility

Or why their products should be priced more affordably

Quick One: Stop Calling it ‘Identity Theft’

This is just a quick post inspired by some comments that I’ve seen recently on Twitter following some mega-breaches.

The term ‘Identity Theft’ implies, and its usage accepts, that the person whose identity is being stolen is the…

Equifax Shenanigans

As we enter the breach era, the sheer scale of the Equifax breach almost fails to register or most people; hundreds-of-millions of people being impacted is unimaginable for us. But one number — which seemed to be swallowed up by the wider story — was 44 million Brits are likely to be affected…

Bricking IoT devices gives incentives for better security

(was: ‘How to force manufacturers to take IoT security seriously?’)

This is just a brief thought which has popped into my head that I thought I’d share.

Blue Team Fundamentals.

It isn’t easy being blue…

I’ve complained about this before, blogging about Blue teaming is difficult. Blue teaming is difficult.

“Hey check us out, we didn’t have any breaches last month”.

To publish or not to publish…

In short, to publish.

I’m going to let you all into a secret, I suffer from a crippling condition. It has the snappy name of ‘blogging-intention-itus’ and has the following symptoms:

• Have ideas for things to blog about.

A Framework for Secure DevOps & Cloud Adoption

This is the first in a series of posts that will outline a framework I’ve developed and successfully deployed for applying effective security to a DevOps environment.

Vulnhub.com — Mr. Robot 1 CTF Walkthrough

As a grumpy architect, in collaboration with a grumpy analyst, it was decided that we should sharpen and hone our hacking skills by doing some CTF — capture the flag — challenges.