Collaborate Disseminate
Can there theoretically be any possible malicious code hidden in .ics files, which would steal your calendar data or something similar? For an example case, we’d be importing the .ics file into Google Calendar.
The truth is that a vast number of System Engineers, Systems Administrators, Backup Administrators and Security Engineers habitually fail to test backups of their respective organization’s data, resident at off-premises/on-premises cloud infrastructur… Continue reading There Are No Backups
Is there any vulnerability if an attacker orders a product using PBSA (Post Box Street Address) to hide that he is using PO Box, if the site adds extra amount for using PO Box? I could think of availability issue, where the a… Continue reading Using PBSA instead of PO Box
I run into this question a lot at work. Someone asks me why I might–from a security perspective–advocate for a high availability implementation versus a singleton implementation.
What’s the answer? I understand we want to en… Continue reading Why is availability considered part of the security triad?
When using Cloudflare’s free shared SSL feature, the certificate for your website is shared with dozens of others websites via the use of SANs (Subject Alternate Names).
Of course some of these websites may be malicious, con… Continue reading Could the use of Cloudflare’s free SSL feature result in loss of availability?
Bruce Schneier Writes Down Passwords. So Can You
…
But how should people deal with all of this in the real world, or on line? “Relax,” he says emphatically. Surprisingly for a security professional, he has a very easy-going … Continue reading Schneier is telling me to write my bank security password and keep it in my wallet? Is that right?
There are two branch office in my network and branch should be able to access head office network. There are two option for me and first one is ipsec vpn through public internet and second option is point to point dedicated … Continue reading IP Sec through internet or Point to point dedicated link. Which is more secure
When looking at the availability element of the CIA triad, most definitions mention that availability is addressed through ensuring system up-time by using controls such as disaster recovery, business continuity, rate limitin… Continue reading Addressing availability element of CIA triad using technical controls
Previously, I discussed how rerouting data center host infrastructure should be part of next-generation DDoS solutions. In this blog, I will discuss how link availability solutions should also play a part. Traditional DDoS solutions offer us a m… Continue reading Simple to Use Link Availability Solutions
There are many articles that reported the service giant experiencing global outage for over an hour from approximately 6 p.m. on Oct 16.
However no-one seems to offer explanation as to why. Furthermore what is my biggest que… Continue reading Why was YouTube down on Tuesday, 16 Oct, 2018 [on hold]