Last week I attended a webinar by Roger A. Grimes on using a data-driven defense approach to cybersecurity. He points …
Keeping work and personal computers separate
As a LastPass user and someone who deals (a lot) with cybersecurity in my day job, I’ve followed the LastPass …
We should quit using the Pragma: no-cache response header
This article is already over 5 years old, and yet we still have security guidance that we should be including …
Converting a public certificate + key into a .PFX (PKCS12) file
One of those things I have to do infrequently enough that I need to write down the steps. Scenario: I’ve …
New features are sexier than making existing code more reliable…
With new technologies and applications, we’re usually wowed by new features and pay more attention to them than to an …
Why inject malicious code when you can get developers to willingly download it?
In case you weren’t worried enough about online security, I ran across this column recently that details a plausible exploit …