Latest articles

FIRST provides the “Common Vulnerability Scoring System," which many people and organizations use to rate the severity of security vulnerabilities. However, some people misunderstand the scope of CVSS. In this article, we debunk three myths regarding CVSS.

In our tutorial for beginners, we set up KeePassXC for daily use. KeePassXC is a famous open-source password manager, helping you to combat weak passwords and password reuse.

In this tutorial for advanced users, we set up two YubiKeys to further increase your KeePassXC database’s overall security.

The Network Time Protocol (NTP) is one of the remaining protocols on the internet without modern security. The new RFC 8915 “Network Time Security for the Network Time Protocol” tries to change this by proposing cryptographic protection for NTP’s client-server mode. In this article, we use the NTP implementation “NTPsec” and NTS to securely synchronize the time.

We look at OpenBSD’s Signify. You can use Signify as an alternative to GnuPG or Minisign for signing and verifying files.

In July 2020, we hosted our first AMA (Ask Us Anything) event. In this article, we categorize and collect some questions and our answers.