Based in San Francisco Bay Area, Securesql is a blog by John Menerick. His insights dissect complex systems, offering a masterclass in cyber guardianship through expert analysis and cutting-edge protective strategies.

A recent incident involving the Equifax / Strut2 exploit

After formalities and introductions; this is how the conversation proceeded.  Obfuscated due to NDAs and Confidentiality agreements.

 

Me - something polite akin to "You are breached."

Them - something akin to "We are PCI compliant.  We are not breached." 

 

What I want to ask - Are you sure about that?

Overly Simplistic Crypto Code review

For those who wonder what a Digital authentication cyber arms race looks like