How to auto-refresh LetsEncrypt certificate on Synology routers

21 Jun 2024 09:08 | synology | security | letsencrypt

I've been manually monitoring and renewing it like a chump. Turns out it's trivially easy to automate the renewal:

```` curl https://gist.githubusercontent.com/m4rkw/6c9b65dcd4914e1aa03188d2b5d5c5b8/raw/09632a5be4dddf029916367dd9fa463cd3d3b9ae/gistfile1.txt -o /usr/local/bin/renew_cert.py

chmod 755 /usr/local/bin/renew_cert.py

[read more...]

Sim swap defence

16 Mar 2024 00:00 | security

Several organisations still support SMS for OTP, often making it mandatory, and even when it isn't mandatory as the primary 2FA method it's often still enabled as a fallback, leaving you vulnerable. An attacker will always take the easiest path, you may have a passkey set up or even a hardware fido token but if it's possible to revert to sms-based OTP then you're just as vulnerable to a sim-swap as you would be without these extra tokens.

[read more...]