Pinboard (nickcharlton)
https://pinboard.in/u:nickcharlton/public/
recent bookmarks from nickcharltonO2 VoLTE: locating any customer with a phone call | mastdatabase.co.uk2025-05-18T09:36:36+00:00
https://mastdatabase.co.uk/blog/2025/05/o2-expose-customer-location-call-4g/
nickcharltonprivacy securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:823ee7aaec11/I use Zip Bombs to Protect my Server2025-05-01T16:30:44+00:00
https://idiallo.com/blog/zipbomb-protection
nickcharltonhttp securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:54f15a974eda/Mixing up Public and Private Keys in OpenID Connect deployments - Hanno's blog2025-04-28T23:23:22+00:00
https://blog.hboeck.de/archives/909-Mixing-up-Public-and-Private-Keys-in-OpenID-Connect-deployments.html
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:75da337a8a9e/You don’t want to be on Cloudflare’s naughty list | Ctrl blog2025-03-24T17:54:24+00:00
https://www.ctrl.blog/entry/cloudflare-ip-blockade.html
nickcharltoncloudflare securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:cbcec0859275/Haskell for all: Firewall rules: not as secure as you think2025-02-23T23:19:21+00:00
https://www.haskellforall.com/2024/08/firewall-rules-not-as-secure-as-you.html?m=1
nickcharltonnetworking ssh securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:634bf0199e0a/PySkyWiFi: completely free, unbelievably stupid wi-fi on long-haul flights | Robert Heaton2024-12-09T14:52:38+00:00
https://robertheaton.com/pyskywifi/
nickcharltonprogramming networking travel securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:69f888be3928/Your API Shouldn't Redirect HTTP to HTTPS2024-11-17T23:40:23+00:00
https://jviide.iki.fi/http-redirects
nickcharltonapi http securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:1909b56a2f97/The Entrust Distrust Will Be More Disruptive Than Intended - SSLMate Blog2024-11-13T16:04:22+00:00
https://sslmate.com/blog/post/entrust_distrust_more_disruptive_than_intended
nickcharltontls securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:06a8e85a0993/ongoing by Tim Bray · 0 dependencies!2024-09-08T12:40:21+00:00
https://www.tbray.org/ongoing/When/202x/2024/09/04/0dependencies
nickcharltonsoftware securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a699c0158c65/mjg59 | Client-side filtering of private data is a bad idea2024-08-21T09:38:42+00:00
https://mjg59.dreamwidth.org/70061.html
nickcharltonandroid graphql securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:0a77f6542b09/Free Monitor Certificate expiry via RSS2024-08-15T09:43:43+00:00
https://raphting.dev/posts/monitor-rss/?ck_subscriber_id=512832040
nickcharltonrss securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:78211bc25a01/Public CDNs Are Useless and Dangerous2024-08-13T20:15:51+00:00
https://httptoolkit.com/blog/public-cdn-risks/
nickcharltonjavascript securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:3d66d0a5987f/Concerns about passkeys2024-08-10T13:28:28+00:00
https://me.micahrl.com/blog/concerns-about-passkeys/
nickcharltonpasskeys securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:3a4e6c9d5fcf/Rails security quick wins | Fractaled Mind2024-07-14T13:37:39+00:00
https://fractaledmind.github.io/2024/01/16/rails-security-quick-wins/
nickcharltonrails securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:f2d990f91dc2/Lee Holmes | Security Risks of Postman2024-02-01T05:03:35+00:00
https://www.leeholmes.com/security-risks-of-postman/
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:1f406ce8323f/Signing a JWT in Bash / Unix Shell | Sapling2024-01-08T16:35:07+00:00
https://sapling.ai/programming-languages/jwt/bash
nickcharltonjwt securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:e98ddc62b73f/Clevis and Tang · Edd Miles2023-12-07T14:22:16+00:00
https://i.am.eddmil.es/clevistang/
nickcharltonsecurity encryptionhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:0409ecc4f13c/cohost! - "Paper: You Want My Password or a Dead Patient?"2023-12-04T10:16:29+00:00
https://cohost.org/mononcqc/post/3647311-paper-you-want-my-p
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:3f1dad6f3037/Stop deploying web application firewalls2023-11-14T23:50:09+00:00
https://www.macchaffee.com/blog/2023/wafs/
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:edbe04cad52f/How to Yubikey: a configuration cheatsheet · Hi, I'm kmille2023-10-30T13:44:15+00:00
https://debugging.works/blog/yubikey-cheatsheet/
nickcharltonsecurity yubikeyhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:62f745f2b557/Mothers Ruin Software | Apparency2023-10-10T09:15:12+00:00
https://www.mothersruin.com/software/Apparency/
nickcharltonmacos securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:aa340c73a9f5/too long to tweet2023-08-25T12:15:33+00:00
https://max.levch.in/post/724289457144070144/shamir-secret-sharing-its-3am-paul-the-head-of
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:f29a524ff247/Short session expiration does not help security2023-08-18T16:44:13+00:00
https://www.sjoerdlangkemper.nl/2023/08/16/session-timeout/
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:b870fdd83f0a/Hostnames and usernames to reserve - Geoffrey Thomas (geofft)2023-07-25T11:35:00+00:00
https://ldpreload.com/blog/names-to-reserve
nickcharltonemail security sysadminhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a6bde71fce6b/Certificate Authority Trustworthiness2023-07-24T22:00:46+00:00
https://alexsci.com/blog/ca-trust/
nickcharltonsecurity ca sslhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:6af2063db2ea/Russian hackers exfiltrated data from from Capita over a week before outage | by Kevin Beaumont | Apr, 2023 | DoublePulsar2023-04-24T22:24:04+00:00
https://doublepulsar.com/russian-hackers-exfiltrated-data-from-capita-over-a-week-before-outage-b67453e0bd59
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:4a807af25c76/Configure Lenovo Thinkpad T480s fingerprint reader on Debian Bullseye | [tekovic.com~]#2023-04-08T16:37:20+00:00
https://www.tekovic.com/blog/configure-lenovo-thinkpad-t480s-fingerprint-reader-on-debian-bullseye/
nickcharltonthinkpad debian securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:f8c15cb7812d/mjg59 | We need better support for SSH host certificates2023-03-27T22:48:38+00:00
https://mjg59.dreamwidth.org/65874.html
nickcharltonsecurity sshhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:7db78f89c678/Exploiting and Securing Jenkins Instances at Scale with GroovyWaiter | NVIDIA Technical Blog2023-01-27T12:02:34+00:00
https://developer.nvidia.com/blog/exploiting-and-securing-jenkins-instances-at-scale-with-groovywaiter/
nickcharltonsecurity jenkinshttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:b1035fa28016/Risk Assessments for AWS Access are Not Just for Large Companies2023-01-03T11:31:15+00:00
https://blog.symops.com/2022/10/20/risk-assessment-aws-iam/
nickcharltonaws securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:14e52653f4a0/Build a Tiny Certificate Authority For Your Homelab2022-11-30T11:03:52+00:00
https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi-yubikey/
nickcharltonca ssl securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:5afce26720cb/Attacking Firecracker: AWS' microVM Monitor Written in Rust - Blog | Grapl2022-10-22T11:22:22+00:00
https://www.graplsecurity.com/post/attacking-firecracker
nickcharltonfirecracker rust securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:fe0cd9f560e8/Introducing Flan Scan: Cloudflare’s Lightweight Network Vulnerability Scanner2022-08-17T22:23:46+00:00
https://blog.cloudflare.com/introducing-flan-scan/
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:629c7438f8d2/SOC2: The Screenshots Will Continue Until Security Improves · Fly2022-08-15T23:50:47+00:00
https://fly.io/blog/soc2-the-screenshots-will-continue-until-security-improves/
nickcharltonsecurity soc2https://pinboard.in/https://pinboard.in/u:nickcharlton/b:61afb50de119/mjg59 | Bearer tokens are just awful2022-06-15T14:08:34+00:00
https://mjg59.dreamwidth.org/59353.html
nickcharltonapi authentication security jwthttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:bcf2b449dfba/Learnings from 5 years of tech startup code audits - Ken Kantzer's Blog2022-06-15T12:54:09+00:00
https://kenkantzer.com/learnings-from-5-years-of-tech-startup-code-audits/
nickcharltonaudit programming security startupshttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:7624fe7c6a25/Windows Breakout Techniques2022-06-15T11:41:58+00:00
https://stmxcsr.com/micro/windows-breakout.html
nickcharltonsecurity windowshttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a6ba004ab1cd/Vitaly Parnas - Clever uses of pass, the Unix password manager2022-01-11T15:34:40+00:00
https://vitalyparnas.com/guides/pass/
nickcharltonlinux password securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:d5f93a767945/Should I block ICMP?2021-08-29T14:57:23+00:00
http://shouldiblockicmp.com/
nickcharltonsecurity networkinghttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:6106bdf21daf/Probably Are Gonna Need It: Application Security Edition - Jacob Kaplan-Moss2021-07-25T18:06:35+00:00
https://jacobian.org/2021/jul/8/appsec-pagnis/
nickcharltonsecurityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:f5e89a284679/How I Found An alg=none JWT Vulnerability in the NHS Contact Tracing App | zofrex.com2020-10-22T16:59:21+00:00
https://www.zofrex.com/blog/2020/10/20/alg-none-jwt-nhs-contact-tracing-app/
nickcharltonsecurity jwthttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:83f388310992/Sandboxing and Workload Isolation · Fly2020-08-19T16:46:48+00:00
https://fly.io/blog/sandboxing-and-workload-isolation/
nickcharltonlinux security containershttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:57c6732aa2dd/Stop using JWT for sessions - joepie91's Ramblings2020-08-19T14:14:05+00:00
http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/
nickcharltonsecurity web jwthttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:40c79bfb6fea/It's Time for OAuth 2.1 • Aaron Parecki2020-05-03T15:06:15+00:00
https://aaronparecki.com/2019/12/12/21/its-time-for-oauth-2-dot-1
nickcharltonoauth securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:d0000df9e037/SSL For Free - Free SSL Certificates in Minutes2019-10-09T16:16:27+00:00
https://www.sslforfree.com/
nickcharltonssl securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:d13c8c4ba77d/Home - endoflife.date2019-06-03T21:22:50+00:00
https://endoflife.date/
nickcharltoncommunity security softwarehttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:7441fb784508/GDPR: How small companies can get ready for it (and why you can’t just ignore it) | Postmark2018-04-03T12:10:02+00:00
https://postmarkapp.com/blog/gdpr-get-ready
nickcharltongdpr privacy security lawhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a4be46799a8c/How GDPR Will Change The Way You Develop — Smashing Magazine2018-04-03T11:55:27+00:00
https://www.smashingmagazine.com/2018/02/gdpr-for-web-developers/
nickcharltongdpr law privacy securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:cd94067f91c3/GDPR - A Practical Guide For Developers - Bozho's tech blog2018-01-11T22:46:33+00:00
https://techblog.bozho.net/gdpr-practical-guide-developers/
nickcharltonprivacy security gdprhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:786f6e45d270/raspbian - Is the Raspberry Pi vulnerable to the Spectre or Meltdown exploit? - Raspberry Pi Stack Exchange2018-01-05T17:12:03+00:00
https://raspberrypi.stackexchange.com/questions/77240/is-the-raspberry-pi-vulnerable-to-the-spectre-or-meltdown-exploit
nickcharltonraspberry-pi securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:2b517dfcd2cb/Patch paralysis and risk culture – dxw2017-07-16T22:36:37+00:00
https://www.dxw.com/2017/05/patch-paralysis-and-risk-culture/
nickcharltonsecurityhttps://pinboard.in/u:nickcharlton/b:fb9cd5714416/Things to Use Instead of JWT | Kevin Burke2017-05-08T23:32:04+00:00
https://kev.inburke.com/kevin/things-to-use-instead-of-jwt/
nickcharltonsecurityhttps://pinboard.in/u:nickcharlton/b:487c9443c9a5/Why you shouldn't use ENV variables for secret data2017-04-16T12:55:43+00:00
https://diogomonica.com/2017/03/27/why-you-shouldnt-use-env-variables-for-secret-data/
nickcharltondocker securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:264c2e7e72b0/Twitter2016-12-12T20:09:25+00:00
https://twitter.com/attilagyorffy/status/808403403525197824/photo/1
nickcharltonsecurity credibilityhttps://twitter.com/https://pinboard.in/u:nickcharlton/b:66bd587ea191/securitychecklist.org2016-04-09T17:38:15+00:00
https://securitychecklist.org/
nickcharltonsecurity server httphttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a99ca396d89d/Chef Audit Mode Introduction - jtimberman's Code Blog2015-04-14T08:54:38+00:00
http://jtimberman.housepub.org/blog/2015/04/03/chef-audit-mode-introduction/
nickcharltonchef audit securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:67315f43ce56/asprom: assault profile monitor2015-03-01T16:06:34+00:00
http://www.asprom.de/
nickcharltonoperations firewall securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:327de226cbea/Handling Security Issues In Open Source Projects2014-12-24T22:45:00+00:00
http://robots.thoughtbot.com/handling-security-issues-in-open-source-projects
nickcharltonsecurity rubyhttps://pinboard.in/u:nickcharlton/b:e8cd0b59fa22/What we give away when we log on to a public Wi-Fi network2014-11-15T21:47:59+00:00
https://decorrespondent.nl/1101/What-we-give-away-when-we-log-on-to-a-public-Wi-Fi-network/31040493-53737dba
nickcharltonprivacy securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:72ed1fe72937/Dawn - security ruby code scanner2014-11-06T17:39:04+00:00
http://dawn.codesake.com/
nickcharltonruby securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a180ca889304/How I Hacked My Own iCloud Account, for Just $2002014-09-05T19:31:57+00:00
http://mashable.com/2014/09/04/i-hacked-my-own-icloud-account/
nickcharltonsecurity ios icloudhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:ca7b32c0f8c3/Luis Abreu: iOS 8 Privacy Updates2014-07-20T15:53:46+00:00
http://lmjabreu.com/post/ios-8-privacy-updates/
nickcharltonapple iOS security privacy homekit healthkithttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:2e27aef53d62/Everything Is Broken — The Message — Medium2014-05-26T16:50:24+00:00
https://medium.com/message/81e5f33a24e1
nickcharltonsecurity culturehttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:fcdb69b8f0d6/Detectify - Stay secure - Go hack yourself!2014-04-14T13:28:20+00:00
https://detectify.com/
nickcharltonweb securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:910d3d2490a8/Hardening Your Web Server’s SSL Ciphers — Hynek Schlawack2014-04-10T16:21:36+00:00
https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
nickcharltonnginx security sslhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:460da52da62c/Qualys SSL Labs - Projects / SSL Server Test2014-04-07T13:52:56+00:00
https://www.ssllabs.com/ssltest/index.html
nickcharltonsecurity ssl webhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:5b00f477e356/AFNetworking SSL Pinning with Self Signed Certificates2014-03-15T14:37:03+00:00
http://initwithfunk.com/blog/2014/03/12/afnetworking-ssl-pinning-with-self-signed-certificates/#fnref:6
nickcharltonssl security ios cocoahttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:5d3701bebb8e/Robert Love: Strong SSL/TLS Cryptography in Apache and Nginx2013-12-15T14:57:00+00:00
http://blog.rlove.org/2013/12/strong-ssl-crypto.html
nickcharltonnginx apache securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:3553737e4ebb/Secure Salted Password Hashing - How to do it Properly2013-12-04T20:03:55+00:00
https://crackstation.net/hashing-security.htm
nickcharltonpasswords securityhttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a163e19f6747/A tcpdump Primer2013-11-20T15:30:44+00:00
http://www.danielmiessler.com/study/tcpdump/
nickcharltonlinux security tutorial tcpdumphttps://pinboard.in/https://pinboard.in/u:nickcharlton/b:a56b79edf0e9/