Search hans.study
Indexed across articles, news, KB updates, knowledge base, books, learning, and tools. Press Esc to close.
// STUDY BYT3S · HANS STUDY
Practical articles on enterprise networks, physical security systems, Windows hardening, and the infrastructure work that sits between disciplines.
A week after the PHP2Shell bug, I looked at the public-facing side of 4,450 small businesses across seven regions of Southwest Ontario for the things I would flag in an audit. At least 149 are exposed to the bug, 83% can be impersonated by email, and most of the fixes are free.
Read postYour VMS doesn't hold blueprints, but it watches the factory floor. How to tell whether a camera system falls inside CPCSC scope, and what to change if it does.
Read postWhat the ITSP.10.171 physical protection requirements ask of card access and camera systems, the configuration that holds up, and the evidence an assessor will want to see.
Read postCPCSC reaches security integrators through project files, remote support, and the devices they install. Where integrators fall in scope and how to get ahead of it.
Read postAn RPAS pass produces evidence a walk-down cannot: true camera sightlines, fence-line condition in sequence, and mounting hardware at height. Flying it legally.
Read postCAD, CNC controllers, office PCs, and the owner's laptop on one flat network behind a home router. Getting from there to a defensible CPCSC Level 1 attestation.
Read postCPCSC will not stop at the prime. Allied programs already cascade cyber requirements down every subcontract tier. What lower-tier suppliers need to have ready.
Read postCPCSC levels are not chosen by suppliers. A cyber security risk assessment on each contract decides. What it weighs, and how to read your own contracts first.
Read postWhere each platform actually wins on multi-site enterprise deployments: unification versus openness versus integration, licensing shape, federation, analytics, hardening posture, the integrator community in Canada, and a decision table you can argue with.
Read postThe upgrade night itself: pre-flight checks, the order roles and clients go in, the Web Client retirement, the 64-bit media component, SDK plugins and federation, the rollback decision, and the first week after.
Read postRetention arithmetic that survives contact with real bitrates, throughput per Archiver and per volume, RAID and drive selection, iSCSI versus SMB, and the failure modes that produce missing video.
Read postExpress versus Standard, max server memory, recovery models, autogrowth, index maintenance, event retention, and the SQL failures that take Security Center down.
Read postBill C-8 received Royal Assent on 15 June 2026. Part 1 is already in force. The Critical Cyber Systems Protection Act is not, and Schedule 2 is still empty. Here is what is actually binding today, and why the supply chain clauses reach the people who install and maintain the systems.
Read postA practical hardening baseline for a Genetec Security Center deployment. Windows server baselines, Defender exclusions done right, service-account discipline, SQL, segmentation, certificates, and RBAC. The settings that survive an audit and a real recording load.
Read postThe security controls an operational technology network actually needs, applied in a way that respects how plant systems run. Zones and conduits, the iDMZ, protocol awareness, passive monitoring, secure remote access, and the patching reality nobody wants to admit.
Read postFortiBleed wasn't a firewall flaw. It was a pile of reused, never-rotated credentials with a brand name attached. The lesson is older than the headline.
Read postCameras, card readers, and building controllers are networked computers, installed by people who were never trained to secure a network. A field guide to hardening the systems nobody else will.
Read postWhen physical security systems sit on critical infrastructure networks, the most dangerous gap isn't technical. It's that no one is responsible for the seam between the people who install them and the people who run the network.
Read postSecurity Center 5.9 stopped getting security patches in December 2025. What end of life actually means for operators, and how to plan the move before somebody else picks the date.
Read postThe ten Genetec Security Center problems I see most often in the field, what they look like under load, and how to fix them. Field-tested, vendor-agnostic.
Read postAXIS Camera Station Pro reached version 6.14 in mid-2026, and the AI/analytics/search story is finally cohesive. Smart Search 2 with free text, Object Analytics integration, Data Insights dashboards, License Plate Verifier maturation. A field-level review of what works, what doesn't, and where it fits in a real deployment.
Read postField-level look at Genetec Security Center 5.13.3.0 (May 2026). What changed since 5.13.2.0, which features are worth the upgrade, which are marketing fluff, and the gaps that keep getting punted release after release.
Read postSecurity Center 5.14.0.0 released on May 12, 2026. Web App replaces Web Client, custom privilege templates land, the media component goes 64-bit, and HID VertX/Edge gets its retirement notice. What's in the release and why my upgrade clock starts at 30 to 60 days, not day 1.
Read postPower plan, NIC buffers, SQL Server memory, antivirus exclusions, video drive configuration, and camera stream settings for Genetec servers.
Read postAD prerequisites, OU structure, service accounts, Group Policy, Kerberos configuration, and common pitfalls for Genetec AD integration.
Read postGenetec Security Center server role architecture, sizing guidance, workstation optimization, federation, and common design mistakes.
Read postTwo tools run by default to help me understand how the site is used. You can turn either off at any time. Cloudflare's server-side analytics is always on and never sees your identity.