Vault Authentication with YubiKey
Leverage PKCS#11 support in curl to authenticate with the Vault's TLS Certificates Auth Method
Posted
#Articles
Authentication
InfoSec Week 3, 2019
35-year-old vulnerability has been discovered in the SCP file transfer utility. According to the advisory impact section, 'Malicious scp server can write arbitrary files to scp target directory, change the target directory permissions and to spoof the client output.'
Posted
#Weekly-News
InfoSec Week 24, 2018
Yet another high severity attack against the Intel CPUs. Unpatched systems can leak SIMD, FP register state between privilege levels. These registers are used for private keys nowadays. The cost of a patch is more expensive context switches because the fix has to unload and reload all SIMD, FP state.
Posted
#Weekly-News
InfoSec Week 16, 2018
Google disables domain fronting capability in their App Engine, which was used to evade censorship. What a fortunate timing.
Posted
#Weekly-News