John Schroeder - Personal Cyber (Page 2)

Humor

Spice Up Your Organization's MFA to Thwart Attackers

Spice up your security with these humorous methods of multi-factor authentication. From singing passwords to dance moves, these ideas will make authentication more enjoyable.

Cybersecurity

Penetration Testing vs. Red Team Exercises: Understanding the Differences and Applicable Cybersecurity Frameworks

Discover the differences between penetration testing and red team exercises, explore the relevant cybersecurity frameworks, and learn why these assessments are commonly confused in this comprehensive article.

NIST 800-53

Understanding AAL and IAL2: Exploring Authentication Assurance Levels and Products Supporting the Standards

Authentication is a critical aspect of any security system, and ensuring that the right level of assurance is applied is crucial in protecting sensitive data. AAL and IAL2 are widely accepted standards that help organizations evaluate the trustworthiness of their authentication mechanisms.

Humor

Defining FedRAMP in Many Voices

There are many ways to define FedRAMP. Which way do you prefer?

Linux

Setting Up Complex Password Requirements with PAM (Pluggable Authentication Modules)

Pluggable Authentication Modules (PAM) can be used to enforce password policies on Unix-like systems. They provide a number of options that can be used to customize the password policy.

Linux

Hardening an OpenLDAP Server with LDIF

One important aspect of securing an OpenLDAP server is to configure it properly and use secure practices when storing user passwords. In this blog post, we will discuss how to use an LDIF (LDAP Data Interchange Format) file to harden an OpenLDAP server and improve the security of user passwords.

Cybersecurity

Deploy an OpenLDAP server with a Password Policy using Docker Compose

I hate LDAP, but one of the most important configurations is enforcing a password policy.

Technology

The Coming Wave of CMMC in 2023

The CMMC (Cybersecurity Maturity Model Certification) is a certification program created by the U.S. Department of Defense (DoD) to ensure that all contractors and subcontractors working with the DoD have adequate cybersecurity measures in place.