All opinions in this post are my own (and my colleague’s), and do not represent any employer, organization, or institution with which we are or have been affiliated. Whenever I’m asked for a password on the web, I try to be deliberately boring. This is a simplified explanation for the sake of the article , but the habit is basically: I prefer using bookmarked URLs (or typed URLs I’ve used a…
In the past decade, the landscape of technical roles has transformed dramatically. Where once software engineers, ops, and sysadmins had distinct skill sets, the advent of DevOps has blurred these lines, creating an expectation for multifaceted expertise. In the security field, while technical expertise remains paramount, it’s crucial to balance this with project management skills and a deep…
Why your 2FA might not be an actual 2FA: the story of how I broke my phone screen A common piece advice in the security world for securing your accounts/services is to use 2-Factor Authentication (2FA). “Use 2FA to be safe!” slogan often fails to take into account that many/most people have the second factor authentication on the same device that houses the first factor authentication. Some quotes…
If you ever needed a solution to find and monitor phishing domains related to your company, but didn’t have a budget (or didn’t want to spend too much money) for a full scale solution – you are in the right place. The goal of this post is to talk about combating phishing domains, what actionable and measurable steps you can take, advantages and disadvantages of this setup. Core functionality:…
Working in the software engineering field one of the concepts we often speak about is efficiency. It would be no surprise to many that we can apply efficiency to our personal finance as well. Credits by Eva K, CC BY-SA 2.5 This blogpost shares what you can do in terms of financial optimisation, money and finances in general. I am assuming a certain level of income, as it is impossible to optimise…
See original post on Medium If you browse r/homelab you would see a myriad of amazing homelabs, which is great unless you rent, can’t add proper cabling to the house/flat, can’t spend much money or do not have enough space for all equipment. My setup was primarily created due to my interest in different tech, improving security as well as a result of the requirements mentioned above. What is a…
See original post on Medium Last week was full of interesting cyber security meetups in London. I attended two, one hosted at Capital One office and another one hosted by OWASP at Revolut office. Cyber London, hosted by Capital One https://www.meetup.com/London-Cyber-Capital-One/events/262063647/ On the 17th of July Georg(my colleague) and I attended a cybersecurity event after work, hosted and…
See original post with 23k views on Medium For a while I had this security guide written for myself and finally decided to share it with everyone. This post will be a semi-detailed guide on what, why and how to secure your machine. Hope you enjoy it :) Full manual The reason why I called it Pretty Good Setup is that the security of this setup is pretty good for many situations, it’s good for the…
See original post on Medium It all started a while back when I was watching an amazing talk from Defcon https://www.youtube.com/watch?v=DU8hg4FTm0g and I decided to read more into SMS and telecom technology. Research into this topic showed a couple of companies who offered internet-to-SMS message delivery. I went with (name not given due to privacy) since they provide a nice API and enough…