Ask Freelock

Code monster

Drupalgeddon2: Should I worry about critical security updates?


No, you should not. You should let us worry about them, and go back to your business.

Seriously, we're getting questions from all kinds of people about whether this matters. I'm a bit surprised that there is any question about that. Would you be concerned if your top salesperson was selling for somebody else? If your cashiers were jotting down credit card numbers when they charged a card? If your office became a well-known spot for illicit drug or gun dealers? If your office had a bunch of scammers squatting and running a pyramid scheme? If your confidential client information could be revealed as easily as using a bic pen on an old Kryptonite lock?

Bic Pen vs Kryptonite Lock

We've seen some variation of every single one of those scenarios. And all of them are possible with a remote code execution flaw in a web application, like yesterday's Drupal security vulnerability.

And yet people still

Read More

Cryptography: the foundation of e-commerce


Money is the very definition of motivation for many criminals. At least in the movies... In real life, there are plenty of criminals looking for ways to drain money out of bank accounts, buy stuff on other people's credit cards, intercept bank transfers, and more.

Read More
Matrix

Yet another messaging platform: Why Riot?


People who know me know I can get stubborn when I get sold on a particular technology. For the past year, my favorite is Matrix, a distributed chat system that addresses pretty much everything anyone wants from a messaging system. The only catch? Not that many "regular people" are using it yet.

Read More