Skip to content

CanuteTheGreat's BLOG

    • About
    • I Love Coffee!
  • Flipper Zero, part 3: Sub-GHz remotes, rolling codes and how gates should be built

    Flipper Zero, part 3: Sub-GHz remotes, rolling codes and how gates should be built

    Security, Technology
  • Flipper Zero, part 1: what it actually is and what it can’t do

    Flipper Zero, part 1: what it actually is and what it can’t do

    Security, Technology
  • Hardware hacking, part 1: updating the firmware on a Pinecil V2

    Hardware hacking, part 1: updating the firmware on a Pinecil V2

    Hardware, Security

    Part 1 of 7 in the Hardware hacking series. I do most of my soldering and rework with a Pine64 Pinecil V2, and it is the first tool in this series because it is the one I touch every time I open a device. This series is about the bench gear I actually own: the…

  • Flipper Zero, part 2: why so many office badges are weaker than they look

    Flipper Zero, part 2: why so many office badges are weaker than they look

    Security, Technology
  • Zombie infrastructure: forgotten assets and attack surface management

    Zombie infrastructure: forgotten assets and attack surface management

    Enterprise, Security
  • Security headers that matter: CSP, HSTS and friends

    Security headers that matter: CSP, HSTS and friends

    Security
  • Container image hardening: minimal images, non-root, read-only filesystems

    Container image hardening: minimal images, non-root, read-only filesystems

    Linux, Security
  • Patch SLAs that teams actually meet

    Patch SLAs that teams actually meet

    Security
  • SBOMs: what they’re actually good for

    SBOMs: what they’re actually good for

    Security, Software Engineering
  • Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Prioritising vulnerabilities: CVSS vs EPSS vs CISA KEV

    Security
  • Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Big-O in Practice: Why Your Database Query Planner Thinks Differently Than You

    Software Engineering
  • Threat modeling with STRIDE for a small team

    Threat modeling with STRIDE for a small team

    Security, Software Engineering
  • Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Cloud IAM misconfigurations: public buckets, broad roles and Capital One

    Security
1 2 3 … 14
Next Page

CanuteTheGreat's BLOG

My random musings.

Designed with WordPress