Category: Technical

Getting multiple GitHub accounts on one Linux/WSL machine – 2023 update

Introduction I wrote the original version of this blogpost almost a year ago when I got a new laptop. The post offered a few options although in the end I only used the 3rd option. Also, during 2022, git added support for SSH commit signing and so did GitHub which significantly simplifies the process of … Continue reading Getting multiple GitHub accounts on one Linux/WSL machine – 2023 update →

Discover your inner security engineer with this one weird trick (hackers hate it!)

In 2022 I prepared a talk, aimed at non-security people working on building software such as developers and DevOps engineers. The aim was to introduce them to some key ways in which OWASP can help them level up their security knowledge and practices for either free or very cheap.

Getting multiple GitHub accounts on one Linux/WSL machine

BEFORE YOU START READING I created an updated version of this post for 2023 which focuses on the easiest method of setting this up, uses SSH commit signing instead of GPG which also significantly simplifies things and fixes a few errors. So if you are looking for an easier solution then you might want to … Continue reading Getting multiple GitHub accounts on one Linux/WSL machine →

Security through Non-testability

There are some great security technologies out there to act as a defensive layer in front of your application. However, if you want an efficient application security test, I would strongly suggest that you disable them for your tester unless you are looking for some really niche, edge-case bugs.

Setting up an OWASP Juice Shop CTF

I recently used the very excellent OWASP Juice Shop application developed by the very excellent Björn Kimminich to run an internal Capture the Flag event (CTF) for my department. It went really well and got really good feedback so I thought I would jot down some practical notes on how I did it.