I'm a big advocate for YubiKeys - I think they're fantastic bits of hardware, but they're also quite poorly understood and even people who do use them often don't use the full set of features that these keys are capable of. I'm hoping to write a few posts about things you can do with YubiKeys, … Continue reading Using YubiKeys for TOTP 2FA
Category: Security
I recently passed the 2019 version of the AWS Security Specialty exam, which is one of their deep-dive technical certs entirely focused around building and running secure systems on AWS, including things like DDoS resiliency and encryption. I've used a lot of different resources for this so I thought I'd bring together a list of … Continue reading AWS Security Specialty Exam Prep
Whilst working with Amazon's object storage S3 service recently, it occurred to me that there were a lot of different options for encrypting objects in your buckets, and that people new to the service or AWS might find it difficult to understand the differences between them or know which one to use. There are two … Continue reading Understanding AWS S3 Encryption
At the recent Ekoparty security conference, it was revealed that several Samsung devices are vulnerable to a malicious exploit where the phone can be wiped and reset back to factory defaults. The devices that are vulnerable are the ones that run Touchwiz - popular handsets like the Galaxy S3, Galaxy S2 and Galaxy Ace for … Continue reading How an NFC Tag Could Wipe your Samsung phone
