This looms like a handy help to check your email client is doing the right thing and is not leaking information.

This is definitely a bad one, there seem to be quite a few popular devices affected. And there might be more devices affected of course.

Interesting tool. Indeed very often people send PDFs with useless redaction in them. Better check first.

Always hated this notarization with a passion when I had to target Macs... One reason being that it felt fairly useless, and it's confirmed: it is pretty much useless.

An oldie now but still the best way to create a passphrase.

Indeed, we might want to use dev containers more widely in the profession. If you're developing something for the desktop you're out of luck though.

This is what you're signing up to with such ecosystems. Can't use those for backups even though people are led this way. Sure technically the data is safe on their infrastructure, but is your access to said infrastructure guaranteed? This gilded cage looks less like a gift when you loose access.

I keep being surprised at how common this kind of mistakes are. I probably shouldn't, it's actually kind of easy to fall into such traps.

TLS inspection software is indeed a very bad idea. You'd better not have them in your organisation.

This is now critical infrastructure in my opinion. It's nice to see how much progress was made.

IDEs allowing to spawn actions in the user environment are still a big security risk.

This is a nice application level sandboxing feature on Linux. We should probably have more applications use it.

The idea is good, but it should be balanced with the necessity to react quickly when a new version is published with a fix for a vulnerability. It's not an easy balancing act when you keep both in mind.

Good list of hardening options indeed. That's a lot to deal with of course, let's hope this spreads and some defaults are changed to make it easier.

Interesting work from Apple and Google to have better hardening in libc++. It's nice to see it ripples through the upcoming C++26 standard as well.

Looks like an interesting tool to go with mise.

Git pre-commit hooks indeed bring nice benefits. Like everything else they're not a panacea though.

A very long read but contains lots of insights. Goes from two very famous security related failure, to highlighting how a test first approach could have helped. It then finishes with a long section on how to foster a testing culture in an organisation.

An old one but it shows quite well how social engineering works. It's often way more powerful than the technical defense you try to raise.

Interesting take. Indeed risks shouldn't be considered in isolation. They actually compound and that can add up fairly quickly.