Collaborate Disseminate
When digital technology did not exist, but humans are also a source of information and protecting non-digital devices is also a form of infosec, or not?
To go back in late 50s, that time Ford went or rather wanted to produce… Continue reading Ford never produced the X Nucleon for what reason? [on hold]
In the picture below (screenshot from a pluralsight course on ISO 27005), we can see that “IT risk technology” is not “Information Risk”. The latter is broader. For information risk, methodologies I know are COBIT, MEHARI, EB… Continue reading Methodologies to conduct technical IT risk assessment [on hold]
I have always used long passphrases for my own Windows user accounts. But I know some people who use moderately common passwords (we’ll say they’re in the top 1,000 most used passwords, but not in the top 100).
From Why do w… Continue reading Do non-administrator Windows accounts need strong passwords?
I have tried viewing cookies in my Chrome settings, but I don’t see any human-readable data about my browsing. Most of what I have read stops at telling me how to view and delete cookies without explaining how to get meaningf… Continue reading How to log cookie data and make a human-readable report on them? [on hold]
Background:
I have a google home and I plan to buy 1 or 2 cheap cameras to monitor my home when I’m not in it. I plan to have the camera connected to a wifi plug, so I can switch it off via the app over the internet. The google home devic… Continue reading Network with one possible unsecure device and one home assistant device
I am attempting to place a numeric value on a range of security threats in the form of a risk level. My risk level range would be from low to high, 1 – 10.
The security threats are business specific and bespoke to the organi… Continue reading Mathematical Formulae for Quantifying Security Threat Risk Level [on hold]
I have to be able to wipe a stolen laptop remotely (contractual obligation), and the only product I found that supports that on Ubuntu is Prey Project. (Also appears in some other stack exchange questions, e.g. this.)
Howeve… Continue reading Prey vs SSH for remote wipe of stolen laptop under Ubuntu
A certain large Asian company and leader in 5G infrastructure has recently been accused of being compromised by its authoritarian government. Aside from the fact that it’s nearly impossible to audit closed-source hardware as … Continue reading What theoretical risks are posed by compromised 5G infrastructure?
I have been asked to perform risk assessment for a company. The scope covers about 100 applications and in various business units. Major task is to assess currently implemented security controls and provided recommendations a… Continue reading Security Testing Methods for Enterprise Level
Our manager often asks us for a quick understanding of what the risks will be based on some idea that the department has been working on during the ideation phase (the business requirements are generally written but no impla… Continue reading How to create non-generic security requirements for an idea phase?