Since writing my last article for IDPro on zero trust, the NSA went and put out their own guidance on zero trust (Which is actually pretty solid). I wrote a bunch on trying to compare the two- they’re a lot more alike than I anticipated, and I suppose that’s a good thing. It really feels like the US government has (Collectively) come out swinging on this topic, and I don’t think this is a bad thing at all....
I wrote an article forever ago for 2600 on passwords, and they ended up publishing it finally. Once we get into like October or November (Whenever the last 2600 of the year comes out, I guess) I’ll post the article here as a PDF, shamelessly scanned from my copy, as 2600 has indicated the article is mine to do with as I wish, and I figure giving them the better part of a year before I make it more widely available is a nice thing to do....
The folks at IDPro were kind enough to let me write an article for their newsletter. I won’t spoil what the article is about, but I will link it here. Have fun.
So in moving to Hugo, and moving to a more personally defined blogging experience, I’ve come into a few interesting issues, stuff I might blog about in the future. As part of moving to Hugo, I also moved to using Cloudflare out in front of my site for a few reasons; DDoS protection (Which I never expect to use, but why not), DNS management, and so on. I deployed my site, I tested it in a few browsers, great....
I’m not going to mince words, this is going to be a rant and it’s going to get messy. There’s going to be diagrams and everything. The Flipper Zero is amazing. It has an amazing capability set that is growing weekly, and is a great entry-level (Or perhaps not even entry-level depending on how hardcore you get) tool for exploring signals, networks, and computing. Kissing the ring aside, the addition of U2F capabilities feels like a mixed bag for a few key reasons....