TUF for Humans: Explaining software update security

11 minute read Published: 10 May, 2022 Author: Christopher Gervais

For the past few months, we’ve been working with the Drupal Association on a project to enhance the security of the Drupal.org software repository. The most succinct way of describing this project is:

Securing automated software deployments from supply chain attacks.

Recently, on a long drive with my mother, I tried to explain this project to her. She is probably the least technical person I know. This may sound like the common tech trope, but it’s not. This has nothing to do with …

Protecting your cloud networks with WireGuard VPN and Ansible

6 minute read Published: 24 Jul, 2020 Author: Colan Schwartz

Within cloud computing, there are various types of sites and services not meant for public consumption (e.g. analytics software, databases, log servers, etc.). For security reasons, it’s best to keep these accesssible only via the private network, which is behind the firewall.

To provide access to these resources, a virtual private network (VPN) should be used, with network access granted only to trusted individuals within the organization.

Traditionally, OpenVPN, IPsec and other …