Jonsdocs

Wargaming: running incident response plan tests - part 3

Part two finished with our defenders heading in the right direction to find the simulated infection. They'll have used a combination of tools in order to get this far, likely including firewall and network logs. As a reminder, for this exercise there was a simulation running that reached out to

wargaming

Wargaming: running incident response plan tests - part 2

The time has come to run your wargame, let's look at what happens on the day itself.

wargaming

Wargaming: running incident response plan tests - part 1

Cyber exercising is important for checking how a team responds to an incident.

home automation

Making a smart doorbell - part two

Having built my proof of concept smart doorbell I move the parts inside the enclosure, and add an automation.

home automation

Making a smart doorbell - part one

As regular readers will know, I'm getting more interested in home automation and have had Home Assistant running in the house for a while (it's just been doing very little). Unfortunately, my plan to use a humidity sensor to check for leaks came to nothing[1] but now I've got

The dangers of default credentials

Passwords are a fact of life, whether they take the form of a simple PIN, a word or a random generated string of letters and numbers. The IT industry understands the need to protect devices so sets a username and password as the device leaves the factory - default credentials.

life

2020 in review

A look back at 2020.

hacking my old blog

Hacking my old blog: part 4, security fixes

To finish off the series, I discuss some of the mechanisms that could have been used to protect my old blog.

hacking my old blog

Hacking my old blog: part 3

The final post in the attack phase of this series.

hacking my old blog

Hacking my old blog: part 2

Let's get into the admin panel...

hacking my old blog

Hacking my old blog: part 1

A dig around my old blog to see if I can hack it.

development

Android code clean-up: concatenating strings with setText

The Android Studio code inspector is a useful tool for maturing your code and improving your style.

development

Android: Opening URIs using Intent - protocol case matters

Protocols need to be lower case in URIs used in Android, so why doesn' Android make sure they are?!

how to

Transferring data from a miniDV camcorder using Linux

Transferring data from old media is getting increasingly difficult.

hacktoberfest

Hacktoberfest 2020

Hacktoberfest has become a yearly feature in my diary since I participated in my first one two years ago. This year's event is something I've been looking forward to since probably early February and, given how the year is going, I think it's a good thing that I've been looking

Linux

Moving from NixOS to Ubuntu

It was time to move from one Linux distribution to another.

cyber security

Dealing with low hanging fruit

Deal with the easy quick wins before you have an external testing team perform their audit.

cyber security

My CISSP experience

In early September 2020 I studied for the CISSP at an intensive six day course.

life

Sensory Processing Disorder and sensory toys

In this guest blog post, Jules writes about some toys useful to those with SPD.

home automation

Raspberry Pi Zero humidity sensor using MQTT: part 3

How to add the temperature & humidity sensor data to Home Assistant.

home automation

Raspberry Pi Zero humidity sensor using MQTT: part 2

Using a Python script to get the temperature and humidity data from the DHT22 sensors.

home automation

Raspberry Pi Zero humidity sensor using MQTT: part 1

The first step in building my kitchen temperature and humidity sensors.

home automation

Home Assistant on a Raspberry Pi 4B

My first foray into home automation.

public speaking

Working with speakers

Having spoken at a local conference, local meetup and given a number of guest lectures at universities and schools I've had good and bad experiences working with inviting organisations. This post is designed to give some tips to those that might be considering inviting a speaker. You may also be

cyber security

"We have conducted a review to ensure this never happens again"

If you're going to claim to have "conducted a review" you need to make sure your response is appropriate and useful.