Defensive Security & Access Management
Hardening, MFA, least privilege, logging and incident readiness.
We renewed teh certificate on our internal API yesterday. On my desktop browser everything looks fine. But Python requests now fails with: the certificate isnt expired, the name matches... nothing else changed... why would only some clients complain?? Ive…
curious how others handled teh move away from authenticator app codes at a place like a law office... who got hardware keys, who stayed on app based approvals, and how did u handle lost devices? Im also curious about what happens when someone loses their…
hmmmm ok trying to SSH from WSL2 into a new EC2 instance and i get: Permission denied (publickey). I added my public key to authorized keys, double checked it's the right one, even regenerated it once. Password login is disabled so I can't get in any other…
im literally losing my mind here my key works on every other server. On a freshly built Ubuntu VM, from a CI job, nothing: A colleague set up the account... they swear they pasted my key... im starting to suspect the server, but i dont even know where to…
help!! integration partner says calls from Android phones to our webmail fail with a certificate error: When i open the URL in my browser its perfectly fine. Theyre blaming us, were blaming them. Whos right?? i dont wanna tell them to disable certificate…
