JohnsNotHere @JohnsNotHere@infosec.exchange

Times are a bit rough right now, and at EliteSec we'd like to do our part to help. If you are a SMB with less than 250 employees, we are offering a flat-fee network scan to ensure your company's WFH setup is secure.

https://elitesec.io/blog/scanning-smb-networks-during-covid-19/

Hey everybody. In the interest of giving back to the community (and the fact that I *really* need to start advertising more), my company (EliteSec) has created a simple project for setting up Sonarqube to test against your own codebase.

Sonarqube is an open source static code analysis tool. I've created a simple Vagrant script that will:

1. Download an Ubuntu 18.04 VM
2. Install Docker
3. Install Sonarqube
4. Setup all routing for your local machine.

Check it out:

https://github.com/EliteSec-io/vagrant-sonarqube

May the next decade treat you better than the last one. May the best of your past be the worst of your future. May intelligence and compassion guide you, and may the voice of reason temper your emotions. You are capable of anything - don't waste the opportunity.

Incorporation is complete, I can start making noise about https://elitesec.io

For those who are looking for #pentesting #vulnerabilityassessments or just #infosec help, make sure to consider us. We're based in Canada, but happy to help whomever we can reach. Many thanks!

Times are a bit rough right now, and at EliteSec we'd like to do our part to help. If you are a SMB with less than 250 employees, we are offering a flat-fee network scan to ensure your company's WFH setup is secure.

https://elitesec.io/blog/scanning-smb-networks-during-covid-19/

So, has anyone done any research into netflixparty.com yet? I haven't had time to dissect it yet, but I'm curious.

For those who didn't know, I started my own company called EliteSec. Here's the latest blog post I wrote up about actions to take if you find the majority of your organization working from home. Enjoy!

https://elitesec.io/blog/all-working-from-home-now-what/

Are you concerned about Privacy? A good friend is working on a pretty amazing project and could use some exposure. Check out Projekt: Oni!

https://home.oniprojekt.ninja

That should read "ONE of my only complaints". ;-)

My only complaint is the lack of logging, which makes monitoring who's connected from where a bit of a pain, but it depends on your use case.

Gotta say I"m deeply impressed by Wireguard.

New Podcast Episode - A Casual Conversation with The Cyber Mentor

https://purplesquadsec.com/episode/c64d1002c4614a86/episode-71-a-casual-conversation-with-the-cyber-mentor

#podcast #infosec #interview

Tell me a story Fediverse. Today is not a great day so far, and I'd like to hear something nice.

Very cool, I just discovered how to use Lambda@Edge on AWS to get my simple website to setup proper HTTP headers so I don't have issues with these "all-in-one" scanners that give you a letter grade for your website.

Even though I'm using a static site generator, hosting on S3, fronted by Cloudfront, it never hurts to make sure your site is passing these basic tests since you never know how your clients may evaluate you.

https://securityheaders.com/?q=elitesec.io&followRedirects=on

Hey everybody. In the interest of giving back to the community (and the fact that I *really* need to start advertising more), my company (EliteSec) has created a simple project for setting up Sonarqube to test against your own codebase.

Sonarqube is an open source static code analysis tool. I've created a simple Vagrant script that will:

1. Download an Ubuntu 18.04 VM
2. Install Docker
3. Install Sonarqube
4. Setup all routing for your local machine.

Check it out:

https://github.com/EliteSec-io/vagrant-sonarqube

Happy Wednesday peeps.

New Podcast Episode!

Mul-Tea-Factor with Kat Sweet
Episode 70 - Mul-Tea-Factor with Kat Sweet

https://purplesquadsec.com/episode/3fd15325affa4d66/episode-70-mul-tea-factor-with-kat-sweet