DigiNotar: The Certificate Authority Hacked and Bankrupt in 2011
In 2011, attackers issued 531 rogue DigiNotar certificates, including one for Google. How a CA works, what went wrong …
Hardening 76 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
What Is XSS (Cross-Site Scripting)? 3 Types and Prevention
XSS makes the browser run attacker code as if it came from the site. See the 3 types (reflected, stored, DOM), a simple …
How to Find a Suspicious Process on Windows with Get-Process
Find a suspicious process on Windows with Get-Process: executable path, digital signature, parent process and network …
How to Create a Strong Password: 6-Word Passphrase (Diceware)
A password full of symbols is not a strong password. Learn how to build a 6-word Diceware passphrase, when to use it and …
SQL Slammer: The 376-Byte Worm That Slowed the Internet in 2003
On Jan 25, 2003, a 376-byte worm infected 75,000 SQL Server hosts in 10 minutes. Here's how Slammer worked and what it …
SPF, DKIM and DMARC: What They Are and How to Stop Spoofing
SPF, DKIM and DMARC stop others from sending email as your domain. Learn what each does, how to check your domain and …
How to Turn On Controlled Folder Access Against Ransomware
How to turn on Controlled Folder Access in Windows 11 to stop ransomware, allow legitimate apps and read the …
Windows XP Turns 25: The Security Lesson It Left Behind
Windows XP hit stores on Oct 25, 2001. Worms like Blaster and Sasser forced SP2 in 2004, and the 2014 end of support …
Password Spraying: What It Is and How to Detect the Attack
Password spraying tries a few common passwords against thousands of accounts and slips past lockouts. How it works, how …
How to Turn On BitLocker in Windows 11 and Save the Key
How to turn on BitLocker in Windows 11 (Home and Pro), where the 48-digit recovery key lives and how to check that your …