Hello World! A very brief post, over the last couple days I attended ATT&CKcon 3.0. It was full of brilliant talks and interesting people. A talk from educators in the social sciences sector and their students from high school to postgrads. Demonstrating a social engineering attack and mapping it to the matrix, that was oneContinue reading “MITRE ATT&CKcon 3.0”
Monthly Archives: Mar 2022
Multi-factor authentication: What’s all the fuss?
Hello World! Here it is, what all the cool kids are talking about… even a passwordless future. The things these security keys can do in the way of certificates and biometrics are evolving with increasing pace. They will very likely become a primary authentication method soon. But that’s not now… I’ll start by giving theContinue reading “Multi-factor authentication: What’s all the fuss?”
Backup codes!
Hello World! Building on my misconfiguration of security keys, I had to use a backup code for the first time ever today. I cannot stress enough the importance of these codes for your accounts that have multi-factor authentication. Write them down and keep them in a safe place, they could really save your skin. EspeciallyContinue reading “Backup codes!”
That wasn’t supposed to happen…
Hello World! I’ve successfully broken a YubiKey and locked myself from the accounts, it’s not completely broken it just needs to be reset but what a pain in the backside. This is why I have my backup key, meaning this is nothing but an inconvenience to me. I was trying to setup my YubiKey withContinue reading “That wasn’t supposed to happen…”
KeePass and the argument for password managers.
[Update 11th May 2022: I am going to be making changes soon to improve readability of this post, I understand it’s a little more complex than what I am aiming for.] Passwords: So, let’s start off with the most important question, what makes a good password? Passwords should be at least 14 characters in length.Continue reading “KeePass and the argument for password managers.”
Am I being Phished? Remember C.O.P.S
Hello World! A little preamble to the upcoming guide but I wanted to put out my mnemonic for spotting phishing attacks, email, SMS or voice… This is all a work in progress, but whilst it isn’t polished by any means… It’s not going to do any harm by me sharing it with you. Content/Context –Continue reading “Am I being Phished? Remember C.O.P.S”
Coming Soon – Home/Internet security guides.
Hello World! Coming soon will be guides on improving your security, soon I will take a look at protecting your accounts from takeover. Aiming these guides at the home user who is curious, I want these guides to feel friendly and to explain things from my perspective, how I do things. I don’t want itContinue reading “Coming Soon – Home/Internet security guides.”
Planes are pretty cool! – Food for thought #3.
Just a little unstructured rambling today from me, I’m sure someone will enjoy the read… I have begun reading through a 2016 thesis on Security in next-gen Air Traffic communication networks by Martin Strohmeier, it was brought to my attention regarding discussions about a possible use case for software defined radio. This isn’t anything new,Continue reading “Planes are pretty cool! – Food for thought #3.”