hayner.net

Technology Leadership Is About More Than Just Being Right

Sep 3, 2022 · 7 min read · Security Strategy Leadership ·

Implementing security policy is not easy. It's difficult from a technical perspective, sure, but convincing others in your company that the changes are necessary can be just as much of a challenge. Doubly so if you can't convince leadership.

The story of Twitter's current security woes is a great example.

The Mudge vs Twitter Security Breakdown

Sep 1, 2022 · 4 min read · Security Strategy Leadership ·

Share on:

The Peiter Zatko (aka "Mudge") vs Twitter situation has gotten very public. Mudge released a very long (84 pages) document that details what he says is a longstanding pattern of indifference to security. Here are the technical details of the alleged security failures.

NOTE: mDAU-free analysis. You're welcome.

Is QUIC too fast for security??

Jul 31, 2022 · 7 min read · Networking Infrastructure ·

Share on:

The long-debated QUIC protocol is getting serious attention these days. It has been in development since 2012, but is all the rage now because HTTP/3 (the main reason QUIC was designed in the first place) is now an official standard.

What is it, then, and what might it mean for security? Let's find out.

Cloud Field Day 14 - Event Details and Summary

Jul 21, 2022 · 6 min read · Conference GestaltIt CFD14 ·

Share on:

The 14th Cloud Field Day event put on by Gestalt IT was held last month in San Jose, California. 7 companies presented, with a lot of emphasis on multi-cloud.

Read on to learn a little more about the event.

Getting COVID was a dumb plan

Jul 21, 2022 · 5 min read · Off-Mic ·

Share on:

Haven't written anything in a while- but this time I have a pandemic-based excuse. I had Covid.
I didn't like it. Didn't love it. I don't want no moorrrrrre of it.

I survived the CISSP and I miiiiiiight get a t-shirt?

Jun 19, 2022 · 11 min read · Certification ISC2 CISSP Security ·

Share on:

So, after much rending of garments and gnashing of teeth (e.g., complaining), I passed the CISSP.
Let's talk about that.

Fixing A Hole Where The Cybercrime Gets In

May 9, 2022 · 10 min read · Cost-Management Strategy ·

Share on:

Security doesn't have to be a massive financial hardship. In fact, there are a great number of things that can be done in your organization to make systems and applications more secure. This post outlines some of the most helpful that can be used to make your organization more secure.

Security Wants To Be Free

May 2, 2022 · 8 min read · Cost-Management Strategy ·

Share on:

Not all security needs to come with a price tag, and organizations shouldn't give up on becoming more secure because of cost concerns. A lot of security comes down to education, mindset, and taking advantage of the security built into products and technologies that you already own.

ZPE Takes Out-Of-Band (You Guessed It) To The Cloud

Apr 26, 2022 · 8 min read · XFD7 Datacenter Security ·

Share on:

The basic idea behind out-of-band networks is simple: Don't put management interfaces on a public subnet. ZPE's products do this in a very modern way- but they also provide a lot more security and flexibility than a run of the mill KVM solution.

Reinventing the, uh, script, with Github Copilot

Apr 10, 2022 · 9 min read · Github Microsoft Copilot Bash-Scripting ·

Share on:

GitHub Copilot is a GPT-3 based AI tool that helps programmers write code faster. It definitely has value, but it comes with legitimate caveats that programmers and IT managers alike need to take into consideration before relying on it.