Troy Hunt

JULY 21, 2021

Not just infosec headlines or tech headlines, but the headlines of major consumer media the likes my mum and dad would read. Not only do they control the access rights to the mailbox, they also control DNS and MX records therefore they control the routing of emails.

Accountability 364

Accountability Data breaches Government InfoSec 364

Troy Hunt

JANUARY 10, 2018

We are rapidly approaching a "secure by default" web and the green padlock is becoming the norm ( about two thirds of all browser traffic is now encrypted ). A great resource for getting a quick snapshot of how a site implements their SSL / TLS / HTTPS ("encryption of traffic", for the masses) is SSL Labs.

Hacking 280

Hacking Government Encryption InfoSec 280

SecureWorld News

SEPTEMBER 7, 2023

Quantum computing poses a potential threat to current cybersecurity practices, which are based on encryption algorithms that can be broken by quantum computers. Ultimately, regardless of how standards and technology continue to evolve and adapt, the shortest way to break encryption is to obtain the key.

Encryption 113

Encryption Technology Risk Architecture 113

ForAllSecure

MARCH 24, 2021

Not only do I get a much faster time to market, I don’t have to worry about rolling my own encryption. Really, never roll your own encryption. SSH or Secure Shell is an encrypted connection over Port 22. Why should I attempt to create my own SSL/TLS when I can integrate OpenSSL into my product. Just don’t.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

Not only do I get a much faster time to market, I don’t have to worry about rolling my own encryption. Really, never roll your own encryption. SSH or Secure Shell is an encrypted connection over Port 22. Why should I attempt to create my own SSL/TLS when I can integrate OpenSSL into my product. Just don’t.

Software 52

Software Passwords Internet Internet 52

eSecurity Planet

DECEMBER 3, 2021

How to screen for natural infosec talent: Ask for a worst case scenario for any common situation. Street is an industry-respected speaker and analyst and currently is the VP of InfoSec for SphereNY. Markstedter actively contributes to filling the infosec education gap. — Jack Daniel (@jack_daniel) October 10, 2018.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

ForAllSecure

JANUARY 11, 2023

They're basically entirely encrypted. I joined a Discord server called InfoSec prep. I discuss this in greater detail in EP 44, where the SAN Institute is deliberately looking to hire people without CS degrees into the infosec world. I could cause the server to do DNS requests. And they call home to a central server.

DNS 40

DNS Hacking Penetration Testing InfoSec 40