Author Archives: TCooper

Is it secure for a platform to use the same private key for multiple clients’ SSH connections?

Posted on by

https://nexla.zendesk.com/hc/en-us/articles/360053720333-Database-Connection-Options
Specifically:

In a text editor, add the below public SSH key to the authorized_keys
file. The key must be all on one line. Make sure that you don’t
intro… Continue reading Is it secure for a platform to use the same private key for multiple clients’ SSH connections?→

What could cause classic "ERR_CERT_DATE_INVALID" when I can confirm no error from numerous other clients?

Posted on by

The ERR_CERT_DATE_INVALID error, I’m sure we’re all familiar with, is below

Visiting the same site from numerous other locations, web clients, etc shows a valid certificate.
It’s issued by let’s encrypt (cert-bot) and auto-renews. Thousan… Continue reading What could cause classic "ERR_CERT_DATE_INVALID" when I can confirm no error from numerous other clients?→

Does combining a non-cryptographically secure string with a cryptographically secure string result in a cryptographically secure string?

Posted on by

I’m using php, but the general question applies to any confirmed cryptographically secure pseudo-random string concatenated with a non-cryptographically secure string.
I know random_bytes generates a cryptographically secure string
I know … Continue reading Does combining a non-cryptographically secure string with a cryptographically secure string result in a cryptographically secure string?→

Is it more or less secure to use IAM (AWS user management) if you only have one user?

Posted on by

This is an edge case, and as soon as multiple users are accessing the AWS Console in anyway, IAM is the only good option, but what if you only have one user?
I’ve always assumed that if only one person is accessing the account, and they ne… Continue reading Is it more or less secure to use IAM (AWS user management) if you only have one user?→