Security Issues with Cloud Network Devices like Cisco Meraki
A friend asked me to setup their Cisco Meraki device and here is why I told them no: We can see that the device has a built-in webserver that reverse proxies to my.meraki.com which...
Tagged: security
Should We Sue Companies That Get Data Breached?
Companies spend millions of dollars in marketing and advertising, with deep budgets that go from social media advertising, to Google advertising, to TV to even lavish advertising dollars at the Super Bowl. So you...
What Is A “Blind” XSS
The Blind XSS (BXSS) is a type of Persistent XSS attack where the hacker ‘blindly’ targets webpages that store user input in a database (like blogs, forums, contact forums, login pages etc etc) the...
Huawei’s Meng Wanzhou’s Arrest Highlights Data, Security and Privacy Concerns in Canada
One of China’s largest tech giants, Huawei’s CFO, Meng Wanzhou, has been arrested in Vancouver while in transit to Mexico. She is facing extradition to New York at the request of the US authorities...
Do Not Track Is Still Tracking
Ever click the “Do Not Track’ function in your browser settings assuming that it’s stopping pages and websites from ‘tracking you and your online activity’? Any reasonable person would think this. Except it’s still...
Were Amazon, Elemental, Apple and Thousands of Supermicro Servers Compromised by the Chinese Government?
I’m going to be discussing some astounding news from Bloomberg, which is an allegation that Chinese Operatives working for the PLA (People’s Liberation Army) forced subcontractors working for Supermicro to alter their hardware design...
Public Blockchain Breaks IT Security Standards
The thing that makes me nervous from an IT Security Administration perspective, is that I think a lot of the population has not been through the dot-com to dot-bomb era and seen the numerous...
The S in HTTPS
Have no fear and secure using the “s” in “https” So DuckDuckGo referenced this cool SSL Poem by Amber Wilson and I thought I’d share a few thoughts on SSL. And admittedly I think...
Verizon Throttling Creates Life and Death Situations
The Cost Of Net Neutrality For those who don’t know a lot of outrage has been directed at Verizon for throttling firefighter’s using an unlimited data plan (apparently once you hit 25GB they throttle...
Google Chrome now marking non-SSL sites as insecure
Another Google Unnecessity? Previously Google’s Chrome was just marking sensitive sites where you would input things like credit card details as insecure (and rightfully so) but what’s happened in July of 2018 here is...
