Posts

Goodbye SHA-1 👋

https://thehackernews.com/2022/12/goodbye-sha-1-nist-retires-27-year-old.html?_m=3n%2e009a%2e2915%2ejk0ao4468z%2e1vvo&m=1

In 2022, I mastered the PHP and some of it's frameworks like Laravel and CodeIgniter. And also Learned some basic python and got a certificate. Also developed my MQL language skills and I'm now testing some decent bots out there.

2022 was so fruitful for me!
Happy holidays everyone

It's now 44 years that I work in computer IT (it was before the existence of the IBM PC). I'm still learning every day something new.

Todays, I'm trying to practice Azure and corresponding security, and to take the corresponding exams.

For those Microsoft Access Developers out there, Microsoft has released the ability to code sign Access Databases once again.  My advice is that unless you really need to use this feature, I would avoid it for the time being.

All the in's and out's of what will and will not invalidate a code signature, warning messages, etc, still seem to be a work in progress.   It very much feels like an "alpha" type feature.

---------------------------------------------------------------------------

Announcing Ability to Digitally Sign VBA Projects in Microsoft Access Databases
MC482182 · Published Dec 9, 2022

When creating a Microsoft Access database, authors will be able to use a code signing certificate to digitally sign the database. The signature will cover VBA code and other elements of the database such as Access macros and action queries.  This will enable databases to execute VBA code and other active elements when the Trust Center Macro Settings are set to only enable digitally signed VBA macros to run.

When this will happen:

Preview: This feature is available in Beta and Current Channel (Preview) now, for Office version 2211 and subsequent versions.

Standard Release: This feature will be available in Current Channel starting with Office Version 2211 in late November and will be available in Semi-Annual channel in July 2023.

How this will affect your organization:

This feature will have no impact on users or tenants, unless your organization chooses to…

The more knowledge I get, the more and more I've smoke a cigar. Life just like that, the more you drink, the more you become thirsty. I'm EE addicted.

2021 and 2022 have been a great years for learning, I completed AZ-900, AI-900, SC-900, and AZ-103 (legacy) Trying to have loads of hands-on experience on Azure and M365.
Completing the AZ-500 is a goal for 2023 Q1

a french adage say : << Patience, mother of all virtues >>
In french : Patience mère de toutes les vertus

CyberSecurity is important.  The weakest link is still the end user.  CyberSecurity Awareness shouldn't be a month.  It needs to be a continuous effort to educate and re-educate.

https://www.cisa.gov/cybersecurity-awareness-month#:~:text=Since%202004%2C%20the%20President%20of,confidential%20data%20become%20more%20commonplace.

Researchers found security pitfalls in IBM’s cloud infrastructure https://www.csoonline.com/article/3681450/researchers-found-security-pitfalls-in-ibm-s-cloud-infrastructure.html

something to be aware of https://jfrog.com/blog/invisible-npm-malware-evading-security-checks-with-crafted-versions/

Why we should always be aware of phishing emails and always think before you click.

https://thehackernews.com/2022/11/notorious-emotet-malware-returns-with.html?_m=3n%2e009a%2e2893%2ecq0ao44mlq%2e1v0a

Check out you.com

It’s a search engine with some cool features for generating content and code through AI. They are also claiming more privacy compared to Google.