Collaborate Disseminate
I’m currently securing a Linode VPS that will host a WordPress store and two Python web applications. Security-wise, I’ve run the most "basic" steps, such as hardening SSH access (i.e. disabling password & root login), settin… Continue reading Which of the following Linys auditing suggestions are worthwhile?
For a web app that will get heavily attacked, I figure one very useful tool will be audit tracking of what occurred for both getting a better picture of attacks and , if the worst happens, learning exactly what went down to both mitigate t… Continue reading Audit tracking for web users [closed]
I recently joined a start up company that specializes in software development as a cybersecurity risk management for an internship of 6 months, my first task was to audit the company’s gitlab page since all they use for their coding work i… Continue reading security audit for gitlab instance
I tried to find a resource about how one verifies a service’s security and their claims when they are not open source. Like 1Password, they describe many good approaches that they are using to secure the password. But, without access to th… Continue reading Verifying closed-source services’ security [duplicate]
As we all know, never trust the client, when they send data to your server. However what if you prevent data manipulation by completely restructuring the architecture to something like the following:
Here as soon as the User tries to conn… Continue reading Prevention of User Tampering the API by Serverless clients which are in sync with the real world client
We were task to perform Security Audit based on NIST Standards. Do you have any references for the list of NIST questionnaires that can be used for Security Audit?
Continue reading NIST Security Audit Questionnaires [closed]
I have seen reports of lenovo laptop being preinstalled with surveillance ,monitoring and tracking app in a completely new laptop shipped from offical lenovo store(https://securityaffairs.co/wordpress/40440/digital-id/lenovo-tracking-appli… Continue reading how to ensure safety when using a new lenovo laptop?
I copy / pasted a data:image/png;Base64 image from a Google search into a Google Slide, before realizing it was a BASE64 image. Is there any possibility that this contains malicious code, or any way to check it?
[…]data:image/png;base64… Continue reading Security Implications from Base64 Image
I am being told by a security consultant that there are two ISO 27001; one based on an application other on the physical office premise. I have a SaaS based product, and I am not sure which one to go for. What’s the usual practice? I am mo… Continue reading Do I need ISO27001 for Office or for Application [closed]
I’m attempting to conduct a thorough comparison of the popular tools available for secret scanning. Specifically, I’m currently comparing Gitleaks, TruffleHog, and git-secrets. I am only interested in the core secret scanning algorithms, i… Continue reading How to conduct a comparison of popular secret scanning tools? [closed]