Limit the impact of a security intrusion with systemd directives
OpenSMTPD recently had a critical remote code execution vulnerability. I look at how you can limit impact with systemd-service security directives.
Security
Email politics, security, and why you got an empty newsletter
Feb 2020 was full of email vows, both in the larger world and for the Ctrl blog newsletter. What happened and why you got an empty blog newsletter this week.
Linux
systemd service sandboxing and security hardening 101
The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
Web Browsers
Firefox contained in Flatpak vs Snap comparison
A comparison of features, security, performance, and limitations of Firefox browser running in isolated sandboxes provided by Flatpak vs. Snap.
HTML
Mitigate “tabnabbing” without breaking window.open() features
Windows opened from your website can redirect the opening tab to a new destination. Mitigations break window.open() functionality like sizing and positioning.
Fedora Linux
How to switch firewalls from FirewallD to UFW
A quick tutorial for migrating from FirewallD and getting started with the Uncomplicated Firewall (UFW). Both are front ends for Linux’s iptables firewall.
Microsoft Windows
Why my 7-year old Windows 10 laptop became unbearably slow
My aging PC’s processor didn’t support a new Windows 10 security feature, enabled by default, causing it to become slow and unstable.
Security
Feitian MultiPass recall highlights need to use multiple security keys
The recall of the Feitian MultiPass FIDO security key demonstrates why you always should use multiple security key products from different vendors.
Web Browsers
How quickly do Firefox derived browsers receive security updates
A case study in how timely Firefox derived web browsers (Waterfox, Cliqz, Pale Moon, and Tor) ship critical security updates.
Security
What’s with the tech media’s obsession with VPN services
VPN providers are good advertisers and also pay good money to make even [formerly] reputable tech media websites “recommend” their services.
ProtonMail vs Mailbox.org comparison
Comparison review of the two secure PGP-oriented email providers ProtonMail vs Mailbox.org. A huge price discrepancy for the same service.
Malware and Phishing
6 places to report phishing emails and websites
Here are 6 services you can report malware websites and phishing emails to help make the internet a safer place for everyone.