Skip to content

CanuteTheGreat's BLOG

    • About
    • I Love Coffee!
  • Flipper Zero, part 2: why so many office badges are weaker than they look

    Flipper Zero, part 2: why so many office badges are weaker than they look

    Security, Technology
  • Security headers that matter: CSP, HSTS and friends

    Security headers that matter: CSP, HSTS and friends

    Security
  • Flipper Zero, part 1: what it actually is and what it can’t do

    Flipper Zero, part 1: what it actually is and what it can’t do

    Security, Technology

    Part 1 of 5 in the Flipper Zero series. I own a Flipper Zero, and the first thing that struck me was how ordinary the insides are. The internet has built it up into a skeleton key, and some people wave it off as a toy. Neither is right. If you are responsible for doors,…

  • Zombie infrastructure: forgotten assets and attack surface management

    Zombie infrastructure: forgotten assets and attack surface management

    Enterprise, Security
  • Container image hardening: minimal images, non-root, read-only filesystems

    Container image hardening: minimal images, non-root, read-only filesystems

    Linux, Security
  • Patch SLAs that teams actually meet

    Patch SLAs that teams actually meet

    Security
  • SBOMs: what they’re actually good for

    SBOMs: what they’re actually good for

    Security, Software Engineering
  • Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Security
  • Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Software Engineering
  • Threat modeling with STRIDE for a small team

    Threat modeling with STRIDE for a small team

    Security, Software Engineering
  • Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Security
  • SPF, DKIM and DMARC, and why p=none isn’t enough

    SPF, DKIM and DMARC, and why p=none isn’t enough

    Security
  • Restore testing and your real recovery time

    Restore testing and your real recovery time

    Enterprise, Security
1 2 3 … 13
Next Page

CanuteTheGreat's BLOG

My random musings.

Designed with WordPress