Practical Technology

Sigstore, the open source software signing service, is now available to everyone that needs to prove to a customer what’s what in their code. Which, by the way, is pretty much every commercial software developer on the planet. Some good has come out…Read More

Everyone depends on OpenSSL. You may not know it, but OpenSSL is what makes it possible to use secure Transport Layer Security (TLS) on Linux, Unix, Windows, and many other operating systems. It’s also what is used to lock down pretty much every…Read More

You can famously run Linux on anything. And, when I say anything, I mean anything, e.g. a Nintendo Wii, an iPod, DeLaval’s robotic system for milking cows, and possibly even a dead badger. Only Doom may have been ported to more devices. But, for…Read More

The Sysdig Threat Research Team has uncovered an extensive crypto mining operation, PurpleUrchin, which abuses free continuous integration and deployment service accounts. This is why we can’t have nice things. It’s great that many cloud and…Read More

When you think about cloud security — and who doesn’t these days? — chip-level security is probably not even on your radar. But, perhaps, it should be. The Open Compute Project (OCP), which brings open source methods and collaboration to the data…Read More

If an employee works two jobs, are they really stealing from your company? I don’t think so, but Canopy CEO Davis Bell apparently does. Bell, whose company is a midsized, Utah-based accounting practice management software firm, wrote on LinkedIn that…Read More