Collaborate Disseminate
Consider a home user who runs Linux on a laptop with full-disk encryption and uses a cloud-based password manager. Assume the laptop is firewall-protected with no SSH access. It seems reasonable to reuse the same passphrase for the OS user… Continue reading What are the risks of reusing the same passphrase for FDE, user account, and password manager?
I’m attempting to reduce the number of passphrases that I must memorize. Currently I need a different passphrase for each of:
Password manager
FDE for my personal computer
User account for my personal computer
FDE for my work computer
Use… Continue reading How can I reduce the number of passphrases that I must memorize (password manager, FDE, user accounts)? [closed]
I’m attempting to conduct a thorough comparison of the popular tools available for secret scanning. Specifically, I’m currently comparing Gitleaks, TruffleHog, and git-secrets. I am only interested in the core secret scanning algorithms, i… Continue reading How to conduct a comparison of popular secret scanning tools? [closed]
I’m attempting to conduct a thorough comparison of the popular tools available for secret scanning. Specifically, I’m currently comparing Gitleaks, TruffleHog, and git-secrets. I am only interested in the core secret scanning algorithms, i… Continue reading How to conduct a comparison of popular secret scanning tools? [closed]
The workplace has a physical access key stored in a fire department lockbox (sometimes called a Knox Box), how it’s possible to mitigate the risk that the Knox Box gets picked, or that an unauthorized key may exist?
What cou… Continue reading How to safeguard physical keys stored in a fire dept. lockbox?