#security (165 links)
- Security checklists | Google Workspace Help knowledge.workspace.google.com
- Security - Fleet handbook fleetdm.com
We configure Google Workspace beyond the default settings to reduce the risk of malicious or vulnerable apps being used to steal data. Our current configuration balances security and productivity and is a starting point for any organization looking to improve the security of Google Workspace.
Youch.
Via leebryant.
- yokoffing/Betterfox github.com
Firefox user.js for optimal privacy and security. Your favorite browser, but better.
#anti-tracking #firefox#gecko #mozilla #performance #privacy #security#settings#speed #tracking#web-browser #javascript - A field guide to sandboxes for AI luiscardoso.dev
- We should all be using dependency cooldowns blog.yossarian.net
TL;DR: Dependency cooldowns are a free, easy, and incredibly effective way to mitigate the large majority of open source supply chain attacks. More individual projects should apply cooldowns (via tools like Dependabot and Renovate) to their dependencies, and packaging ecosystems should invest in first-class support for cooldowns directly in their package managers.
- Learning lessons from the cyber-attack blogs.bl.uk
Today, we’ve published a paper about the cyber-attack that took place against the British Library last October. Our hope is that doing this will help other organisations to plan and protect themselves against attacks of this kind.
- Ory ory.sh
API-first Identity Management, Authentication and Authorization.
- Learn and Test DMARC learndmarc.com
- An Opinionated YubiKey Set-Up Guide procustodibus.com
This article will show you how to set up a brand new YubiKey 5 with the following applications: : used for encrypting and signing PGP (aka GPG) messages, as…
- Passkeys - Apple Developer developer.apple.com
- Passkeys now support external providers | Hacker News news.ycombinator.com
- Calling time on DNSSEC - Matt Brown mattb.nz
- 2FA Directory 2fa.directory
An independent source of information on which services support MFA/2FA and help consumers demand MFA/2FA on the services that currently don’t.
- How to Yubikey: A Configuration Cheatsheet | Hacker News news.ycombinator.com
- How to Yubikey: a configuration cheatsheet debugging.works
- Managed Apple IDs: What are they for? 9to5mac.com
In short: not much unless doing device management.
- A Yubico FAQ about passkeys yubico.com
- Google Workspace Admin Security Guide — Digital Defense Fund digitaldefensefund.org
Some reasonable tips here.
- drduh/YubiKey-Guide github.com
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
- Ask HN: IT Security Checklist for Startups? | Hacker News news.ycombinator.com
This guidance is for domains which: * never send email like defensively registered domains or legacy domains * previously sent email but do not any more
- Same-Site Cookies By Default | text/plain textslashplain.com
- UC Browser for Android, Desktop Exposes 500+ Million Users to MiTM Attacks bleepingcomputer.com
The extremely popular UC Browser and UC Browser Mini Android applications with a total of over 600 million installs expose their users to MiTM attacks by…
- Security Checklist securitycheckli.st
- Securely using .npmrc files in Docker images – Alexandra Ulsh alexandraulsh.com
Building Docker images with private npm packages I recently completed a security audit of Docker images for a project. These images used .npmrc files ( npm…
- Details about the event-stream incident blog.npmjs.org
This is an analysis of the event-stream incident of which many of you became aware earlier this week. npm acts immediately to address operational concerns and…
- security.txt securitytxt.org
security.txt # Our security addressContact: mailto:[email protected]# Our PGP keyEncryption: https://example.com/pgp-key.txt# Our security policyPolicy:…
Add Services - Contribute Change Log Product Hunt Ask Questions 📧Email 🆘Backup 🛡️VPN 💰Cryptocurrency 💱Exchanges 📞Communication 🖥Hosting 👩💻Browser 🔒Encryption…
- Third party CSS is not safe - JakeArchibald.com jakearchibald.com
Posted 27 February 2018 A few days ago there was a lot of chatter about a 'keylogger' built in CSS . Some folks called for browsers to 'fix' it. Some folks dug…
The following is a true story. Or maybe it’s just based on a true story. Perhaps it’s not true at all. It’s been a frantic week of security scares — it seems…
Hundreds of web firms are tracking every single keystroke made by visitors, a study from Princeton University has suggested. The technique - known as session…
- Another Tor Browser Feature Makes It Into Firefox: First-Party Isolation bleepingcomputer.com
Unbeknown to most users, Mozilla added a privacy-enhancing feature to the Firefox browser over the summer that can help users block online advertisers from…
- Web Performance & Security: how to master Third Party Content impacts | DareBoost Blog blog.dareboost.com · Archived on
Third-party content are parasites. Friendly ones, with – most of the time – good intentions. But parasites anyway. Let’s discover some useful tips and…
- Captchas Suck - Axess Lab axesslab.com
Introducing the evil Nobody likes captchas. They are at best an irritating, conversion-killing step users need to get past. At worst, they can be a complete…
- Gemnasium gemnasium.com
Features Pricing Enterprise Blog Run Gemnasium Enterprise on-premise and find security issues in your dependencies as soon as they appear. Do you think security…
- LessPass lesspass.com
- No more excuses. It’s time to protect yourself online. letsgetsafe.org
Why Get Safe? We lock the doors to our houses, but our whole lives are stored on our phones and computers. If we don’t lock down our devices, all of our…
- Preventing cross-site attacks using same-site cookies blogs.dropbox.com
Our comms team told us we need an image; our legal team told us it needed to be freely licensed. Credit: Carsten Schertzer (Creative Commons Attribution 2.0 )…
- DNS leak test dnsleaktest.com