http://localhost:1313/tags/cybersecurity/ Recent content in Cybersecurity on Victor Hugo Solis Hugo en-us Sun, 08 Mar 2026 09:00:00 -0700 http://localhost:1313/posts/100-days-of-python-day008-caesar-cipher/ Sun, 08 Mar 2026 09:00:00 -0700 http://localhost:1313/posts/100-days-of-python-day008-caesar-cipher/ <p>Day 008 of the <a href="https://github.com/victorhugo81/100daysofpython">100 Days of Python challenge</a> creates a Caesar Cipher encoder and decoder. Each letter is shifted through the alphabet by a user-selected amount.</p> <h2 id="project-overview">Project Overview</h2> <p>The core function accepts the original text, shift amount, and whether the user wants to encode or decode. Decoding reverses the shift by multiplying it by <code>-1</code>.</p> <div class="highlight"><pre tabindex="0" style="color:#e6edf3;background-color:#0d1117;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-python" data-lang="python"><span style="display:flex;"><span>shifted_position <span style="color:#ff7b72;font-weight:bold">=</span> alphabet<span style="color:#ff7b72;font-weight:bold">.</span>index(letter) <span style="color:#ff7b72;font-weight:bold">+</span> shift_amount </span></span><span style="display:flex;"><span>shifted_position <span style="color:#ff7b72;font-weight:bold">%=</span> len(alphabet) </span></span><span style="display:flex;"><span>output_text <span style="color:#ff7b72;font-weight:bold">+=</span> alphabet[shifted_position] </span></span></code></pre></div><p>The modulo operation wraps positions around the end of the alphabet. Spaces and punctuation are preserved because characters that are not in the alphabet are added to the output unchanged.</p> http://localhost:1313/posts/100-days-of-python-day004-password-generator/ Wed, 04 Mar 2026 09:00:00 -0700 http://localhost:1313/posts/100-days-of-python-day004-password-generator/ <p>Day 004 of the <a href="https://github.com/victorhugo81/100daysofpython">100 Days of Python challenge</a> creates passwords from user-selected quantities of letters, symbols, and numbers.</p> <h2 id="project-overview">Project Overview</h2> <p>The program keeps three character lists: upper- and lowercase letters, symbols, and digits. It asks how many characters of each type the user wants, then builds a list of randomly selected characters.</p> <p>The first two groups are placed into their requested positions, numbers are added after them, and <code>random.shuffle()</code> changes the order before the password is displayed. Shuffling prevents every password from following a predictable letters-then-symbols-then-numbers pattern.</p> http://localhost:1313/posts/the-importance-of-the-env-file-in-python-projects/ Tue, 20 May 2025 09:00:00 -0800 http://localhost:1313/posts/the-importance-of-the-env-file-in-python-projects/ <h2 id="what-is-a-env-file">What Is a <code>.env</code> File?</h2> <p>A <code>.env</code> file (environment file) stores key-value pairs that configure application behavior externally from source code. These variables can include API keys, database credentials, secret tokens, debug modes, and email settings.</p> <p>This approach separates configuration from code and can reduce accidental exposure when the file is excluded from version control. A <code>.env</code> file is not a security boundary, so protect its permissions and use a dedicated secrets manager for production systems when appropriate.</p> http://localhost:1313/posts/what-is-malware/ Fri, 08 Mar 2024 09:00:00 -0800 http://localhost:1313/posts/what-is-malware/ <p>Malware refers to any malicious software designed to cause damage to a computer system. Two delivery methods are common: network transmission (web browser or email) and infected USB drives. This software targets computers, mobile devices, and networks with varying capabilities depending on the attack objectives.</p> <p><img src="http://localhost:1313/images/posts/content/what-is-malware-1024x683.jpg" alt="What is Malware"></p> <p>Cybercriminals use this software to obtain data for financial gain, including financial information, personal emails, and passwords. Ransomware attacks have become highly profitable. Email remains the preferred delivery vector because most employees cannot determine the difference between a real email and a malicious one.</p> http://localhost:1313/posts/what-is-two-factor-authentication/ Fri, 08 Mar 2024 09:00:00 -0800 http://localhost:1313/posts/what-is-two-factor-authentication/ <p><img src="http://localhost:1313/images/posts/content/two-step-auth2-1024x683.jpg" alt="Two Step Authentication"></p> <h2 id="factors-of-authentication">Factors of Authentication</h2> <p>Authentication factors describe how a user proves their identity when logging in.</p> <ul> <li>Something you know – password, personal, PIN, or a pattern.</li> <li>Something you have – an ATM card, phone, or fob.</li> <li>Something you are – a fingerprint or a voice command.</li> </ul> <p>Using two independent factors can make unauthorized access more difficult than using a password alone.</p> <h2 id="what-is-two-factor-authentication">What Is Two-Factor Authentication?</h2> <p>Two-factor authentication, or 2FA, is an authentication process that adds a second factor to a password-based login.</p> http://localhost:1313/posts/honeypot-proactive-deception-defense/ Mon, 08 Nov 2021 09:00:00 -0800 http://localhost:1313/posts/honeypot-proactive-deception-defense/ <p><img src="http://localhost:1313/images/posts/content/honeypot2-1024x683.jpg" alt="Honeypot"></p> <p>A honeypot functions as &ldquo;a system on your network that attracts and reroute hackers away from important data within your network.&rdquo; It operates by deceiving intruders into targeting fake servers rather than live systems, affording security personnel time to detect malicious activities.</p> <p>All internet-connected computers face constant attack threats, with hackers increasingly seeking network vulnerabilities. Honeypots serve as decoys containing false information without granting access to legitimate data.</p> <h2 id="how-does-a-honeypot-work">How Does a Honeypot Work?</h2> <p>For honeypots to function effectively, the system architecture must closely resemble authentic servers. A critical design principle involves weakening security controls slightly compared to production systems — too robust and attackers won&rsquo;t engage; too weak and they&rsquo;ll suspect deception.</p> http://localhost:1313/posts/what-is-a-virtual-machine/ Tue, 29 Jun 2021 09:00:00 -0800 http://localhost:1313/posts/what-is-a-virtual-machine/ <p><img src="http://localhost:1313/images/posts/content/what-is-a-virtual-machine1.jpg" alt="What is a Virtual Machine"></p> <p>A virtual machine functions as &ldquo;a virtual computer that works like a computer within a computer.&rdquo; These systems operate on isolated partitions with dedicated CPU, memory, and storage resources borrowed from the host machine, contained within a computer file known as an image.</p> <p>Running a virtual OS requires sufficient computational power, as older computers lack the resources to support multiple operating systems simultaneously.</p> <h2 id="how-do-a-virtual-machine-work">How do a Virtual Machine work?</h2> <p>Virtual machines operate through virtualization — creating virtual versions of hardware, storage, and network resources using specialized hypervisor software. This technology distributes a physical machine&rsquo;s capabilities across multiple environments by simulating virtual hardware devices.</p> http://localhost:1313/posts/bring-your-own-device/ Mon, 09 Nov 2020 09:00:00 -0800 http://localhost:1313/posts/bring-your-own-device/ <p>Bring Your Own Device (BYOD) allows employees to use personal phones, tablets, or computers for work. This article summarizes the security risks and policy practices organizations should consider before allowing personal devices to access corporate resources.</p> <p>BYOD can improve flexibility and communication, but it also adds personal devices to the organization&rsquo;s security boundary. IT teams must define access requirements, protect company data, and explain employee responsibilities before connecting devices to corporate systems.</p> http://localhost:1313/posts/cybersecurity-awareness-month/ Mon, 09 Nov 2020 09:00:00 -0800 http://localhost:1313/posts/cybersecurity-awareness-month/ <p><img src="http://localhost:1313/images/posts/content/cybersecurity-awareness-month-600x450.jpg" alt="Cybersecurity Awareness Month"></p> <p>Nowadays, as technology has crept into every hour of our life. The average American is known to spend at least 24 hours per week surfing the net. This is why the U.S. Department of Homeland Security and the National Cyber Security Alliance name October as the Cybersecurity Awareness Month.</p> <p>The main purpose of Cybersecurity Awareness Month or NCSAM was to help individuals to stay safe and more secure online. Consequently, encouraging organizations to own their role in protecting their part of cyberspace.</p> http://localhost:1313/posts/safer-internet-day/ Mon, 09 Nov 2020 09:00:00 -0800 http://localhost:1313/posts/safer-internet-day/ <p><a href="https://www.saferinternetday.org/">Safer Internet Day</a> represents a cybersecurity movement designed to teach kids using the internet necessary tools to safely surf the web. With great power comes great responsibility: the internet provides instant access to information globally, but users must engage responsibly, respectfully, and critically with online content.</p> <p>Regardless of perceived safety, there is always a lot of room for improvement, so use Safer Internet Day as motivation for enhancing your cybersecurity knowledge.</p> http://localhost:1313/posts/the-threats-to-ecommerce-websites-research-project/ Thu, 24 Sep 2020 09:00:00 -0800 http://localhost:1313/posts/the-threats-to-ecommerce-websites-research-project/ <p>Zero-day vulnerabilities are a particular type of error in software applications. This is important because it enables attackers to exploit potentially serious security weaknesses on websites—eCommerce threats that endanger today&rsquo;s economy.</p> <p>In this new era of eCommerce business, these types of vulnerabilities have become more and more costly to companies and customers around the world.</p> <p>While zero-day vulnerabilities are known for being exploited by criminals trying to make a quick buck, government security agencies have also taken advantage of these security vulnerabilities and used them for surveillance or attacks (Frankenfield, 2019).</p>