Limit the impact of a security intrusion with systemd directives
OpenSMTPD recently had a critical remote code execution vulnerability. I look at how you can limit impact with systemd-service security directives.
Security
Limit the impact of a security intrusion with
Email politics, security, and why you got an empty newsletter
Feb 2020 was full of email vows, both in the larger world and for the Ctrl blog newsletter. What happened and why you got an empty blog newsletter this week.
systemd service sandboxing and security hardening 101
The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
Firefox contained in Flatpak vs Snap comparison
A comparison of features, security, performance, and limitations of Firefox browser running in isolated sandboxes provided by Flatpak vs. Snap.
Mitigate “tabnabbing” without breaking window.open() features
Windows opened from your website can redirect the opening tab to a new destination. Mitigations break window.open() functionality like sizing and positioning.
How to switch firewalls from FirewallD to UFW
A quick tutorial for migrating from FirewallD and getting started with the Uncomplicated Firewall (UFW). Both are front ends for Linux’s iptables firewall.
Why my 7-year old Windows 10 laptop became unbearably slow
My aging PC’s processor didn’t support a new Windows 10 security feature, enabled by default, causing it to become slow and unstable.
Feitian MultiPass recall highlights need to use multiple security keys
The recall of the Feitian MultiPass FIDO security key demonstrates why you always should use multiple security key products from different vendors.
How quickly do Firefox derived browsers receive security updates
A case study in how timely Firefox derived web browsers (Waterfox, Cliqz, Pale Moon, and Tor) ship critical security updates.
What’s with the tech media’s obsession with VPN services
VPN providers are good advertisers and also pay good money to make even [formerly] reputable tech media websites “recommend” their services.
ProtonMail vs Mailbox.org comparison
Comparison review of the two secure PGP-oriented email providers ProtonMail vs Mailbox.org. A huge price discrepancy for the same service.
6 places to report phishing emails and websites
Here are 6 services you can report malware websites and phishing emails to help make the internet a safer place for everyone.