how to

Setting up MTA-STS using AWS S3, CloudFront and AWS Certificate Manager

Mail Transfer Agent Strict Transport Security is a reasonably new protocol, that helps protect email you're being sent from interception. Here's how to set it up with AWS S3, CloudFront and Certificate Manager.

how to

Setting up MTA-STS using Azure Static Web Apps

Mail Transfer Agent Strict Transport Security is a reasonably new protocol, that helps protect email you're being sent from interception. Here's how to set it up with Azure static web apps.

Year in review

2021 in review

A look back at my 2021.

hacktoberfest

Hacktoberfest 2021

I didn't leave it to the last minute this year, woohoo!    Ok, I'm kidding.  As regular readers will know from posts about this, Hacktoberfest is something I always end up leaving to the last minute.  This year I started October by looking for projects that I

podcasts

Podcasts I listen to - 2021 edition

An updated list of the podcasts I listen to, recommended for you.

life

Changing energy usage

A reflection on my household's energy usage.

Security Congress 2021

(ISC)² Security Congress 2021 - the online experience

What was it like to actually attend a conference purely online?

Security Congress 2021

(ISC)² Security Congress 2021 - day three

Rounding out the conference on day three with some fantastic speakers.

Security Congress 2021

(ISC)² Security Congress 2021 - day two

Looking at my sessions on day two.

Security Congress 2021

(ISC)² Security Congress 2021 - day one

My reflections on the first day of the (ISC)2 Security Congress conference.

eVitabu dev week

eVitabu dev week October 2021

A run down of my October 2021 eVitabu development week.

honeypot

Playing with honeypots: part 4

Looking at a different attack on the honeypot I investigate an attempt to deploy a crypto currency miner.

work

Releasing people from their old roles

When changing roles in the same organisation you sometimes end up still doing your old job for a while.

honeypot

Playing with honeypots: part 3

Having built a honeypot and published it to the Internet, it's time to see what the attackers tried to do.

honeypot

Playing with honeypots: part 2

I build my honeypot in Microsoft's Azure cloud using open source software.

honeypot

Playing with honeypots: part 1

Let's look at what honeypots are, and why we might use them.

cyber security

Receiving a security disclosure for an old subdomain

After receiving a security disclosure from a security researcher I knew I needed to investigate.

review

Review: Flexispot E6 sit/stand desk

I'd heard standing desks could be much better for my body, so decided to buy one.

coronavirus

Over a year of working from home

After over a year of working from home, how have I got on?

fountain pen

Review: Gazing Far tmX fountain pen

In a departure from my normal tech blogging I'm reviewing my latest fountain pen acquisition - a Gazing Far tmX in rosewood.  I didn't have a wooden pen in my collection, nor a pocket pen, so this was a way to kill two birds with one

elementary OS

Switching to elementary OS - part two - applications

After installing elementary OS I wanted to spend some time getting to know some of its native applications.

elementary OS

Switching to elementary OS - part one

I decided to try out elementary OS.

wargaming

Wargaming: running incident response plan tests - part 3

Part two finished with our defenders heading in the right direction to find the simulated infection.  They'll have used a combination of tools in order to get this far, likely including firewall and network logs.  As a reminder, for this exercise there was a simulation running that reached

wargaming

Wargaming: running incident response plan tests - part 2

The time has come to run your wargame, let's look at what happens on the day itself.

wargaming

Wargaming: running incident response plan tests - part 1

Cyber exercising is important for checking how a team responds to an incident.