The Swiss OWASP chapter invited me to talk about Advanced ModSecurity in Zurich on November 12, 2014. The audience of 40 people exceeded my expectations by far and I was not sure I could meet their expectations. Here is a brief summary of the topics I covered: Blocking Mode: Always start in blocking mode. Assign […]
Nftables has been selected for inclusion in the upcoming Linux Kernel 3.13. After years of development – including a iptable-compatibility mode – the new kernel module is now ready for release. Nftable is simpler than iptables, it cleans up ip6 integration and it allows for easier rule scripting. Those interested to get going fast can […]
The new version 7.x of SplashData’s SplashID wants my database password on their site, pretending they need it to sync my DB over my own local link. Either it’s extremely dumb, or they work for NSA and collect their customer’s private keys. I don’t want to speculate what reason is behind this, so I decided […]
Das Bundesamt für Bevölkerungsschutz (BABS) unterstützt die Umsetzung der im Juni 2012 vom Bundesrat verabschiedeten Nationalen Strategie zum Schutz der Schweiz vor Cyber-Risiken, indem es zusammen mit Spezialisten ein Cyberangriff-Szenario erarbeitet und bewertet hat. Das ausgewählte DDoS (Distributed Denial of Service) Angriffszenario ist eines von insgesamt 13 Gefährdungen, welche das BABS 2012 in einzelnen Workshops […]
