Verification for computer networking: Is it possible?
What tools are available? What are the benefits? Let's find out
Gift cards, serial numbers and hard technology
I bought someone a digital gift card the other day. That’s generally a bad idea, since there’s so much waste and breakage, but it was the right answer to the problem in the moment. The …
How Do Authentication and Authorization Differ? - The New Stack
While related, authentication and authorization are two different concepts that need to be separate steps in an access policy and may well be managed by different teams using different tools.
What is SOAR (Security Orchestration, Automation, and Response) - Service Now
Keep up with the current threat landscape. SOAR refers to a collection of software solutions that streamline security operations in key areas. Learn more.
The Show Must Go On: Securing Netflix Studios At Scale
A Journey About Productizing Security
Is there a way out of password hell?
Passwords are hell. Worse, to make your hundreds of passwords safe as possible, they should be nearly impossible for others to discover—and for you to remember. Unless you’re a wizard, this a…
SASE breakdown: Using DNS-layer security to block unwanted or malicious content
Want to know how DNS-layer security features on your road to SASE? Click here to learn how this cybersecurity solution complements a SASE security stack.
Fluid Multi-Pseudonymity
Fluid multi-pseudonymity perfectly describes the way we live our lives and the reality that identity systems must realize if we are to live authentically in the digital sphere.
Norwegian student tracks Bluetooth headset wearers by wardriving around Oslo on a bicycle
Address randomisation not implemented on some, it seems
How does Google Authenticator work? (Part 1)
When you’re accessing services over the WEB – let’s pick GMail as an example – couple of things have to happen upfront:
The server you’re connecting to (GMail in our example) has to get to know who you are. Only after getting to know who you are it’s able to decide what resources you are allowed to access (e.g. your own email inbox, your Calendar, Drive etc.). Step 1 above is called authentication.
Calculate Your Ransomware Score With HYCU - Architecting IT
HYCU has developed a website to allow anyone to calculate their R-Score, a measure of ransomware readiness protection.
Are you prepared to recover from a ransomware attack?
Find out what your R-Score is today!
Rootkits Come to Containers and Bring Trouble with Them - The New Stack
Advanced Persistent Threats and rootkits go hand-in-hand.
What’s The Art of War got to do with cybercrime? Quite a bit, actually. | Microsoft Security Blog
Sun Tzu wrote that mastery in the art of war is about subduing one’s enemy without having to fight. As the modern world contends with increasingly sophisticated cyberattacks from both criminal and political adversaries, this 2500-year-old cliché is key to enterprise security strategy. Today, the “bad guys” of the Internet are both professional in their…
Steganography Decoded
What exactly is Steganography?
Design for Safety, An Excerpt
None of us want to build products that put our users’ safety at risk, but how do you reduce the risk that our products will be weaponized by abusers? In this excerpt from Design for Safety, Eva Pen…
The Case for Granular Permissions
When it comes to implementing access control in your application, the scheme you decide to use can either make authorization easy to manage as your application and user base grows, or it can really paint you into a corner.
GitHub Kisses Passwords Goodbye - The New Stack
The top developer site GitHub has had enough second-rate security. So, as of August 13th, GitHub blocked the use of account passwords when authenticating Git operations.
Why Decentralized Identifiers Are Changing The Future of the Internet, Identity and Finance - SelfKey
Data is a new asset class in the digital world - and identity is the new money. The most important piece of data is certainly personal data. ✅
Magazine of Early American Datasets | McNeil Center for Early American Studies (MCEAS) | University of Pennsylvania
data datasets colonial revolutionary America Atlantic caribbean
Command Line Login with the OAuth Device Grant
Tutorial: Learn how to log into input limited devices like TVs and terminals using the OAuth 2.0 Device Grant!
Sigstore: A Solution to Software Supply Chain Security
Everything you need to know about sigstore project and its role in software supply chain trust and security
Firewalls and middleboxes can be weaponized for gigantic DDoS attacks
In an award-winning paper today, academics said they discovered a way to abuse the TCP protocol, firewalls, and other network middleboxes to launch giant distributed denial of service (DDoS) attacks against any target on the internet.
An Investment Firm Built Its Own SIEM. Here’s How. | eSecurityPlanet
Tired of high costs and inefficiency? Consider crafting your own SIEM with a look at how Two Sigma built a faster, more effective solution.
How a WillowTree cybersecurity analyst gathers threat intelligence in just 30 minutes a day
Drew Gallis, analyst at WillowTree, leverages Feedly for Cybersecurity to track cyber threats across the company’s supply chain and protect clients
Cloud Security Requires Shared Responsibility - DevOps.com
Just who is responsible for cloud security when platforms are, in some ways, controlled by a third-party cloud services vendor?
Nation-state threat: How DDoS-over-TCP technique could amplify attacks
Researchers detail novel way of increasing cyber-attack surface
CrowdSec, the open-source massively multiplayer firewall
CrowdSec is a collaborative EDR leveraging the crowd power. Analyze behaviors, respond to attacks & share signals across the community. Security should be accessible to everyone. We make it happen. For free. Join our community and let's make the Internet safer, together.
Signature Formats
Envelopes and Wrappers and Formats, Oh My!