Collaborate Disseminate
This question is inspired by someone’s comment on this question elsewhere
In the modern era of Internet and encryption it’s quite surprising that countries like Russia still regularly use coded radio systems (Mazielka/Perelivt) to communi… Continue reading Why would one use radio instead of the Internet for secure communications?
I look on all the corporations and firms that have embraced Microsoft Teams in the past and I can not stop wondering if it is a disaster waiting to happen or if I am missing something important. We have seen in the past already, that the t… Continue reading Threat and risk analysis of Microsoft Teams
I have to add provide a draft of a risk assessment for a small EU project.
As I’ve never done this, I struggle with identifying assets or vulnerabilities. I’m aware of very general lists, but I wonder how relevant it is to point out that f… Continue reading How does a risk assessment for an EU project look like?
I have a key-value database that uses asymmetric RSA-OAEP encryption to encrypt the data. The data is stored in tuples of (public key, encrypted data). The user identifies their data by the public key, and decrypts it with their private ke… Continue reading Are there any downsides to publically available encrypted data?
I’m studying "Governance, risk and compliance in cybersecurity". During my course, I learned to create strategies and risk analysis about cyber threats I want a tool to simulate scenarios so that I can apply my knowledge.
Do you … Continue reading Do you know some risk-analysis simulator? [closed]
While developing web software, I typically run a browser (chrome) from my IDE. Here’s an example launch.json in VSCode:
{
// Use IntelliSense to learn about possible attributes.
// Hover to view descriptions of existing attributes… Continue reading Is it dangerous to publicly surf the web while my browser is being run in an IDE?
I have a custom Debian router installation which I’m trying to keep both secure and low-maintenance. I’ve therefore set some scripts which keep my Docker containers, blocklists, and OS (security updates only) actual by checking for updates… Continue reading Security Implications of Automatic Updates?
I recently stayed at a hotel where outbound SSH traffic (and seemingly only SSH traffic) was blocked on the guest WiFi network, and I’m trying to figure out what security-based rationale they might have had for this policy. Unfortunately, … Continue reading What would be the security rationale for a hotel blocking only SSH traffic?
Is Cyber Threat Intelligence included (or can it be included/ fall under the umbrella of) in first two domains (namely "Security and Risk Management" and "Asset Security") of CISSP?
Continue reading Can first two domains of CISSP include Cyber Threat Intelligence?
Please see the image below which represents an algebraic definition of the Dolev Yao Closure. From reading around, it appears this is BAN logic and that the lines mean "If you believe the above statement is true, then you must believe… Continue reading How should I interpret this definition of the Dolev Yao Closure?