Collaborate Disseminate
As reported yesterday the Linux and Windows kernels will receive a security update pretty soon to close vulnerabilities that concern ‘kernel memory leaking’.
What exactly the design flaw is, that was probably identified at … Continue reading Which attacks are known that exploit the vulnerability known as Spectre?
As reported yesterday the Linux and Windows kernels will receive a security update pretty soon to close vulnerabilities that concern ‘kernel memory leaking’.
What exactly the design flaw is, that was probably identified at … Continue reading Which attacks are known that exploit the new-found Intel x86-64 hardware vulnerabilities?
If you attended my talk “Using Technology to Defend Digital Privacy & Human Rights”, thank you! Here’s a list of supplemental material discussed during the presentation as well as where you can find out additional information abou… Continue reading Using Technology to Defend Digital Privacy & Human Rights – Presentation Notes
I was given an USB stick which was used to secure some data from a work computer. However – the USB stick seems broken now, or encrypted, which would mean the information might be lost.
So, when connecting the USB stick to … Continue reading Analyzing possible encrypted USB stick
Today I received a mail reminding me of another mail that the sender supposedly sent some days ago from a gmail adress. This was sent to a gmail adress as well.
I’m 99.9% sure, that I did not receive this mail before today. … Continue reading Is it possible to fake an email timestamp with a gmail address?
I’m currently looking into reporting processes in information security and I was wondering what kind of information should be reported when an IT security event or incident occurs.
The definitions of those would be (taken fr… Continue reading What are the most valuable information when handling an IT security event/incident?
I want to do a cost-benefit-analysis for a relatively small infrastructure with less than 10 components. I already put together a qualitative risk analysis and came up with roughly 10 controls. Now I need to do a CBA but I do… Continue reading What methodology can be used for a CBA if I can only guess costs for security measures?
In the Annex C of ISO/IEC 27005 typical threats are described, among others eavesdropping and remote spying. When searching on the internet for further description of the two terms I found them used synonymously.
So why are… Continue reading What is the difference between ‘Eavesdropping’ and ‘Remote Spying’ in ISO/IEC 27005?
I’m dealing with a hypothetical infrastructure for enabling workers to use RDP for remote access to their work PCs. These would be virtualized Win7 machines within a VMWare vSphere environment. Workers would have to use a VPN… Continue reading What are the most common security threats that have to be considered when dealing with RDP?
I have two websites which do both accept payments on a subdomain. The subdomain is an independent system from the main website.
I have a question regarding the best practice to decide which of the following setup is the mos… Continue reading Best practice / Risk Assessment payment websites