Tag security

An interesting look at how using one key for everything (SSH to servers, SSH for git hosting, etc) can be a Bad Thing™

This is a really interesting post to hear how some other folks in a similar environment to us manage their secrets.

It's always cool to see how other folks are doing similar things, anyway, and as usual, Monzo have a great blog post.

This is a really interesting article about the flaws in PGP - I don't have enough security backing and understanding to argue it, but it sounds legitimate. It's a surprise this isn't being talked about more if it is as bad as it is

I found this when listening to episode 194 of the Bike Shed podcast: My PGP Shame. I'd only added this episode to my playlist as it was an interesting title, but listening to it, it was even better than I thought.

There was some great stuff in there about Thoughtbot's application security guide, linked, which is a definite must-read.

My favourite quote of the episode, though, is the following exchange:

I've got to be honest, how does anything work at all? Oh computers don't work

This is a great writeup about how to harden your SSH setup using 2-factor authentication. Would really recommend it!