In the previous post i recommended for non-critical web services to start using free certificates from “Let’s encrypt”.

Many people refuse to use this kind of certificates thinking that it’s not good enough and moreover it’s only for 3 months and that it would be annoying to prolong it manually each 3 months and not forget about it. As for “not good enough” – even if you don’t trust free SSL certificates for web server authentication it’s always better to have enabled SSL than to go without SSL – at least channel will be encrypted (unlike free self-signed certs which … Read the rest

Microsoft stopped the support for XP, but for WannaCry attack they made exclusion:

• Microsoft Customer Guidance for WannaCrypt attacks
• Microsoft Security Bulletin MS17-010

If you have too many XP as a pos stations you can use registry hack to enable again Windows Update for extra 5 years.

• Zdnet: Registry hack enables continued updates for Windows XP
• US DOD may still be receiving Windows XP patches from Microsoft 
• Registry hack enables continued updates for Windows XP
• Продлеваем получение обновлений безопасности для Windows XP еще на 5 лет
• How to get security updates for Windows XP until April 2019

 … Read the rest