Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

ionCube24

Weekly Cyber Security News 16/11/2018

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Quite an interesting stream of news this week, however, my choices this week focus on threat management. The first one, and its quite alarming and not at all funny, shows an example of someone didn’t accept reasonable proof of account ownership for a password reset – something many of us face with public websites.

Case Study: ionCube Encoder on BitBucket

Working with a wide variety of customers and technologies often brings interesting challenges and stories that usually end up buried in a support ticket never to see the light of day again. However, after a curious ticket regarding integration of our product into a BitBucket pipeline, we asked WeTek if they would like to contribute an article about this particular problem. Well, here it is, a great article highlighting the subtleties that can trip us up!

Cronview

Throughout my years working with Unix flavoured environments, one of the headaches I’ve had to deal with is cron. Don’t get me wrong, I love cron, it’s a necessity for any operation of such servers, however, there usually comes a point when the size of list reaches a critical mass that makes visualising the execution times a challenge.

Do I need to Fear My Toaster?

My mobile phone tells me my doorbell is ringing. Sweet. Of course I can hear the doorbell, but that’s not the point is it? Do I need my microwave oven to tell me by text something is cooked? No. Not sure if I can trust it that far, and of course I need to put the food in to start with so I know it won’t take long. I’m also hungry and eager to eat so I’m not going to wander off – certainly not to the shops for half and hour.

Weekly Cyber Security News 05/10/2018

A selection of this week’s more interesting vulnerability disclosures and cyber security news. Development frameworks are wonderful, can’t disagree there, they do make life easier by taking away tedious process. Obviously their increased complexity in hiding this tedium from the dev means debugging can be tricky at times. So they often included some quite revealing debug modes that can help…. Only that they really are for the eyes of the dev and not the public.