Recent content on Recyclebin.zip
Credential theft from developer workstations Let’s use a combination of open-source tools to detect problematic clear-text secrets on workstations and to ensure they’re not so easy for malware/scripts to steal. PyPI, npm, VS Code Extensions, OpenVSX, brew and other package managers expand the attack surface on workstations. While companies still lie to themselves that “all code…
Nothing beats realizing your MacBook is out of battery on a Monday morning at the airport when you take it out of the bag. Free adrenaline! You’re not alone, this is widely reported by Mac users. Post Description Date Reddit Discussion Users report that the YubiKey Nano 5C can cause significant overnight battery drain on MacBooks. 2021-01-03 Mac Power Users Forum A thread discusses how…
The term “Magic Links” once meant a futuristic PDA . Nowdays, companies like Auth0 use it to refer to the slightly-magical feat of including a login link in an email. Last week, the great website you should subscribe to if you haven’t already (it’s great, when you’re not logged out), 404 Media , posted “We Don’t Want Your Password” in defense of…
The Verge now has a subscription offering. RSS feeds? Great. Fewer ads and trackers? Sounds promising. But how much less annoying is it actually? To find out, I disabled my fortress of ad and tracker blocking (clean browser profile, no extensions, no Little Snitch, VPN-ed into a naked network). Then, I tested a car review across three setups, scrolling the page in 15 seconds each time. Here are…
Apple’s focus on security and privacy is making them release features that only work on devices on the same iCloud account, which will counterintuitively hurt people’s privacy as they log in to personal iCloud accounts on devices owned by their employers. As the Apple blogosphere is dominated by very good independant writers, this is an issue that is rarely discussed, as it impacts…
Originally posted on the JupiterOne blog . Some seem to love Cyber Security Awareness Month. Of course, at least as many despise it, because it makes no sense to have intense focus for one month and then forget about it for the other 11. Without saying if I love it or if I hate it, I decided to write a set of rules. If any of this is a problem in your organization, you HAVE to fix it before you…
This summer, since WWDC, I was repeatedly asked: How do I disable Apple Intelligence on our company laptops? Apple Intelligence didn’t exist yet. Not even in the betas, plus, Apple is pretty strict around betas and NDAs. The features were clearly going to roll out in stages throughout the year, so my answer was always, “Yeah, you’ll probably be able to control each one via MDM once the new…
Research can be interesting, useful for risk management purposes, helpful to those building software and even entertaining. Sometimes, the usefulness of research is undone by the public discourse on a security issue. In the last few weeks, you’ve heard of “ AutoSpill ”, a vulnerability affecting multiple password managers on Android. I’ve heard everything about this vulnerability on LinkedIn. The…
Security checklist for families using Apple devices If many people in your family are on the Apple ecosystem, here are a few things worth checking while you’re going to be in the same physical location over the holidays. Ensure they have enough iCloud data and recent backups, then, enable automatic updates, and nudge them into updating (bring a couple chargers!), as these features are recent. If…
This article was originally posted on Medium . As I am removing my Medium articles, this will be the archive for this content. Originally written on September 8, 2017. TL;DR Version: Make sure your iOS devices can connect to the HomeKit Devices on port 80 and 443, and replicate mDNS from VLAN/Subnet to VLAN/Subnet with Avahi. So, you’ve setup multiple VLANs and SSIDs at home, you’re keeping all…
Recyclebin.zip is written by: Guillaume Ross You can reach me at: @g@irrelephant.co on Mastodon.
Scams targeting Google Groups This article was originally published on the Fleet blog . Minor style changes were applied. The Fleet handbook contains detailed information on how we have configured Google Workspace to block spam and phishing . Gmail has some exciting email security features, such as flagging or blocking mail from people with the same name as employees or quarantining it. These…
This article was originally published on the Fleet blog . Minor style changes were applied. Securing bank accounts from business email compromise According to the FBI , business email compromise (BEC) attacks are increasing in popularity yearly, costing organizations over 43 billion dollars in losses between 2016 and 2021. As BEC is a form of social engineering, we often think education is the…
Ransomulator is a tool for BloodHound . BloodHound is an open source tool that uses the power of graph databases to help attackers and defenders determine how their Active Directory environments could be compromised. Traditionally used by red teams, it’s a tool that blue teams should leverage extensively. As BloodHound gathers information on computers, accounts, sessions and much more, it is an…