Skip to content

CanuteTheGreat's BLOG

    • About
    • I Love Coffee!
  • Hardware hacking, part 1: updating the firmware on a Pinecil V2

    Hardware hacking, part 1: updating the firmware on a Pinecil V2

    Hardware, Security
  • Zombie infrastructure: forgotten assets and attack surface management

    Zombie infrastructure: forgotten assets and attack surface management

    Enterprise, Security
  • Flipper Zero, part 2: why so many office badges are weaker than they look

    Flipper Zero, part 2: why so many office badges are weaker than they look

    Security, Technology

    Part 2 of 5 in the Flipper Zero series. Part 1: what it actually is and what it can’t do. Most buildings I have walked into run on one of four card technologies, and the reception desk usually cannot tell you which. That matters, because the four have wildly different security properties and they look…

  • Flipper Zero, part 1: what it actually is and what it can’t do

    Flipper Zero, part 1: what it actually is and what it can’t do

    Security, Technology
  • Security headers that matter: CSP, HSTS and friends

    Security headers that matter: CSP, HSTS and friends

    Security
  • Container image hardening: minimal images, non-root, read-only filesystems

    Container image hardening: minimal images, non-root, read-only filesystems

    Linux, Security
  • Patch SLAs that teams actually meet

    Patch SLAs that teams actually meet

    Security
  • SBOMs: what they’re actually good for

    SBOMs: what they’re actually good for

    Security, Software Engineering
  • Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Security
  • Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Software Engineering
  • Threat modeling with STRIDE for a small team

    Threat modeling with STRIDE for a small team

    Security, Software Engineering
  • Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Security
  • SPF, DKIM and DMARC, and why p=none isn’t enough

    SPF, DKIM and DMARC, and why p=none isn’t enough

    Security
1 2 3 … 13
Next Page

CanuteTheGreat's BLOG

My random musings.

Designed with WordPress