I’m working on a new writeup. I have two coworkers who, when they start talking, I know I’d better start listening if I know what’s good for me.
I had lunch with them on Friday. I don’t know if it was the lunch discussion or after-lunch discussion, but they talked about a little-known security product. It’s free. It’s a little off-putting–one of these guys experimented with it and had difficulty figuring it out–but the other raved about it.
The problem is that we rarely live in an ideal world. We’re forced to run insecure, outdated software for business reasons, whether they’re good or bad. This mitigation, which he explained succinctly, is one of the best mitigations I’ve seen in my professional career, and it won’t cost you a dime to implement it.
I’m going to take an extra day or so to write up my own findings with it. So please stay tuned. I think this is going to be very good.