Skip to content

CanuteTheGreat's BLOG

    • About
    • I Love Coffee!
  • Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Security
  • Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Security
  • Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Software Engineering

    The gap between asymptotic analysis and real execution Big-O tells you how a cost grows as input grows, in the limit, with constants thrown away. That’s the right tool for comparing two sorting algorithms in a CS class. It’s the wrong tool, on its own, for predicting how a database executes a query. A query…

  • Threat modeling with STRIDE for a small team

    Threat modeling with STRIDE for a small team

    Security, Software Engineering
  • SPF, DKIM and DMARC, and why p=none isn’t enough

    SPF, DKIM and DMARC, and why p=none isn’t enough

    Security
  • Restore testing and your real recovery time

    Restore testing and your real recovery time

    Enterprise, Security
  • Segmentation and limiting lateral movement

    Segmentation and limiting lateral movement

    Enterprise, Security
  • Backups an attacker can’t delete

    Backups an attacker can’t delete

    Enterprise, Security
  • Container Escape Vectors: A Practical Walkthrough of Namespace and Cgroup Weaknesses

    Container Escape Vectors: A Practical Walkthrough of Namespace and Cgroup Weaknesses

    Linux, Security
  • Secrets in git: how credentials leak, how to find them, and what to do after a leak

    Secrets in git: how credentials leak, how to find them, and what to do after a leak

    Security, Software Engineering
  • Web application firewalls: what they catch, what they miss, and why they don’t fix the bug

    Web application firewalls: what they catch, what they miss, and why they don’t fix the bug

    Security, Software Engineering
  • Alert fatigue: tuning detections without going blind

    Alert fatigue: tuning detections without going blind

    Security
  • Writing detections as code: Sigma rules tested against real logs

    Writing detections as code: Sigma rules tested against real logs

    Security, Software Engineering
1 2 3 … 12
Next Page

CanuteTheGreat's BLOG

My random musings.

Designed with WordPress