What’s the Risk from Fake Yubikeys?

shkspr.mobi
what’s-the-risk-from-fake-yubikeys?

I found this on a security-related Slack (shared with permission). It launched an entertaining discussion about the risks of taking a potentially fake FIDO token. We all know the risks of taking a free USB drive and shoving it in … Read more

Should you use Let’s Encrypt for internal hostnames?

shkspr.mobi
should-you-use-let’s-encrypt-for-internal-hostnames?

Julien Savoie has written a brilliant post explaining how you can enable https on your intranet. This is useful for several reasons. It means your employees aren’t constantly fighting browser warnings when trying to submit stuff internally. All your http … Read more

ProctorU Is Dystopian Spyware

shkspr.mobi
proctoru-is-dystopian-spyware

As part of my MSc, I have to take an online exam. Obviously, this means I am highly likely to cheat by looking up things on Wikipedia or by having a bit of paper with notes on it. EVIL! So, … Read more

Ebcdic Is Incompatible with GDPR

shkspr.mobi
ebcdic-is-incompatible-with-gdpr

Welcome to acronym city! The Court of Appeal of Brussels has made an interesting ruling. A customer complained that their bank was spelling the customer’s name incorrectly. The bank didn’t have support for diacritical marks. Things like á, è, ô, … Read more