Security on Nyghtowl

How to End User OAuth for GCP

Fri, 17 Jul 2020 22:05:26 +0000

How to End User OAuth for GCP

Let’s talk about end user authentication. I’ve been digging into the authentication space a bit and have some takeaways to share.

When you access a GCP service, there is authentication to determine who you are, authorization to determine what you can do and auditing that logs what you did. IAM is where you setup roles for authorization in regards what you can do in a project.

Cyber Security for the Previous Generation

Mon, 29 Oct 2018 23:08:53 +0000

Cyber Security for Previous Generation

After being tech support for my mom, sorting out my parents affairs when my father got cancer and my mom got Alzheimers, I’ve gathered some insights on the vulnerability of the previous generation to cyber threats like phishing, spoofing and identity theft.

This is my security perspective and it will be different for each person. Take what works and adapt. The goal is to raise awareness that helping the previous gen stay safe is as important for them as much as it can help keep you safe. And yes these tips can be applied to every generation.

What to Do When You are Hacked

Thu, 20 Jun 2013 12:42:29 +0000

I am someone who practices pretty decent technical security hygiene, but I had my Yahoo account hacked this week (despite using two factor identification). This post focuses on sharing what I did to deal with the attack, what I think went wrong and some steps and resources you can use for security.

Summary of attack…

The attacker logged in at 4:57PM PST and sent off 28 emails to about 5 recipients in each email from 4:58PM to 5:05PM. I learned about the attack from a friend at 5:08PM and logged in and changed my password at 5:10PM. The attacker appeared to pull email addresses from my account (I’m guessing from my contacts and sent file folders) to use in the spam emails.