krabelize
Re:Uber hack caused by contractor; MFA fatigue attack used by TA
on Wednesday September 21, 2022 @04:35AM (#32922238)
Nowadays, most companies enforce MFA (Multi-Factor Authentication) for initial and persistent authentication. Some companies claim to be secure once MFA is configured on all (non-service) accounts. However, this Uber hack proves cloud-based MFA push notifications can be abused, even when conditional access is configured. This article explains how to detect this attack: https://cryptsus.com/blog/azure-mfa-bombing-detection-sentin...
Security controls to mitigate MITRE ATT&CK threats on a Windows 10 domain
Re:Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
on Thursday May 21, 2020 @11:05AM (#23259235)
Yes - but it works smoothly: https://cryptsus.com/blog/how-to-configure-openssh-with-yubi...
Configuring OpenSSH with YubiKey Security Keys U2F Authentication
Re:OpenSSH 8.2
on Monday February 17, 2020 @03:55PM (#22350663)
Works smoothly: https://cryptsus.com/blog/how-to-configure-openssh-with-yubi...
WireGuard on OpenBSD 6.6 Hosted on Vultr with Full Disk Encryption
Edge OpenBSD PF Firewall Securing the First Gate of Your Network
Blog post on how to configure OpenVPN with X.509, LDAP and 2FA on Ubuntu 18.04
Re:Secure your SSH server with public key Ed25519 elliptic curve crypt...
on Thursday July 11, 2019 @11:35AM (#20412337)
Blog post on how to secure SSH sessions. The sshd_config is rather interesting.