This one is called LINGUISTIC LUMBERJACK. Fluent Bit is a very widely used open source logging package in the cloud. It is used by all major cloud providers. It has been downloaded over 3 billion times just in 2022. Fluent Bit is described as “a lightweight, open-source data collector and processor” which collecting and processing […]
Continue reading → [DISPLAY_ACURAX_ICONS]There are folks who say that open source is safer than commercial software because, well, it is open source. Their theory is that since, technically, anyone can look at the source (ignoring the fact that you would need to be a trained programmer in whatever language that software is written in and have the time […]
Continue reading → [DISPLAY_ACURAX_ICONS]Security or convenience, pick one. Background: there is a difference between IDENTIFICATION and AUTHENTICATION. Identification is the equivalent of a userid. Userids are not secret. Authentication is the equivalent of a password. Passwords are secret. Many systems use biometrics like a face scan to BOTH identify a user and authenticate that it is really that […]
Continue reading → [DISPLAY_ACURAX_ICONS]DEF CON is Canceled, No Really It is a meme. Every year there are announcements that DEF CON is canceled, but this year it is real. Sort of. DEF CON is the world’s largest hacking convention and has, for years, been held at Caesars in Las Vegas. You may remember that Caesars had an unfortunate […]
Continue reading → [DISPLAY_ACURAX_ICONS]The feds are pushing pretty hard to get software makers to create and manage Software Bills of Materials or SBoMs. What the heck is an an SBoM anyway and why is it important. A very non-technical comparison would be the list of ingredients in packaged food. Let’s say you are allergic to some food, say […]
Continue reading → [DISPLAY_ACURAX_ICONS]While basically unenforceable, the agreement is a starting point. The US, UK and 23 domestic and international cybersecurity organizations, representing more than a dozen countries, signed on to the Guidelines for Secure AI Development. The Guidelines, complementing the U.S. Voluntary Commitments on Ensuring Safe, Secure, and Trustworthy AI, provide essential recommendations for AI system development and […]
Continue reading → [DISPLAY_ACURAX_ICONS]