Collection: Security

Your infrastructure choices could be limited to vendors and products that the insurance industry deems worthwhile.

Have network owners started to use RPKI to secure the IP addresses and routing status on the Internet ?

I would be cautious about a vendor who sells security as a product or a critical/primary feature. Security-as-a-product is coming to an end. We need to return to making the things we already have work efficiently.

Security controls such as microsegmentation and zero-trust network access provide the best opportunity for stanching the spread of supply chain attacks and limiting their blast radius.

Paying the bad guys their ransom demand to get a key and decrypt your data might seem like the fastest way to recover from a nasty hack. But is it?

What is the strategy behind anti-tracking from Firefox and Webkit

Background material on the internet policy as countries control open access

How to create an RSA public-private key pair and configure clients and servers to use them for authenticating to remote hosts over SSH.

Another abject failure by public CAs

Is user surveillance by Google/Facebook a corporate security risk ?

This keynote gave me new ideas on cybersecurity.