Özgür Özkök
Bilgi güvenliği hakkında paylaşımlarım
In today’s digital age, organizations grapple with many authentication systems, each catering to different applications and user groups. This fragmented approach not only complicates operations but also poses potential security risks. Consolidating all authentication needs into a single platform, as authentik proposes, offers several advantages: 1. Simplified Management: With a […]
authentik is a unified platform designed to bring all authentication needs into one place. It aims to replace platforms like Active Directory, Okta, and Auth0. The platform offers a range of features: The platform also compares with other providers like Keycloak, Microsoft ADFS, Microsoft Azure AD, Okta, Duo, and Authelia, […]
Demonstration of using OpenSSL to create RSA public/private key pair, sign and encrypt messages using those keys, and then decrypt and verify the received messages. Commands used: OpenSSL. Created by Steven Gordon on 7 March 2012 at Sirindhorn International Institute of Technology, Thammasat University, Thailand. Using the RSA algorithm, RSA […]
As the digital realm expands, so does the frequency and sophistication of cyberattacks. Password breaches have become a concerning reality, prompting a reevaluation of password management strategies. Both companies and users must adapt to these challenges to safeguard their digital assets. Here’s a roadmap for the future of password management: […]
The debate between integrated OS-level password managers and third-party solutions has been reignited, especially after recent breaches in popular third-party password managers. Both approaches come with their own set of advantages and challenges. Let’s dissect the security aspects of each to provide a clearer perspective: Type Category Description Integrated OS-level […]
The OpenSSL migration guide provides details on the changes required to migrate to new versions of OpenSSL, specifically covering OpenSSL 3.0 & 3.1. Some of the main changes include: Further details can be found in the original documentation.
In the digital age, where data breaches have become alarmingly frequent, password managers’ security is paramount. With third-party password managers like LastPass experiencing breaches, it raises a pertinent question: Should users trust significant providers like Google, Apple, and Microsoft for password management? Let’s delve into the pros and cons of […]
The article discusses the series of breaches that LastPass, a popular password manager, experienced. The initial breach notification in August 2022 suggested that no customer data or password vaults were accessed. However, subsequent updates revealed that some customer data was accessed, and eventually, it was disclosed that password vaults were […]
An .env file, short for “environment file,” is a plain text file that stores environment variables. Environment variables are settings that can be used to configure the behavior of an application. These files are often used in software development to store configuration settings that vary between deployment environments, such as […]
DoorDash, the prominent delivery company, is rolling out new safety features to enhance the experience for its riders. Key among these is a reduction in notifications for riders during deliveries. The updated iOS app will now limit notifications to essential ones, such as delivery address changes or customer messages. All […]