Daniel Peck

There’s been no lack of pixels pushed talking about the current job market, and I don’t know how much I’ll add to it.

It’s interesting how a lot of old are new again.

I’m a long time novice user of LaTeX.

Hilton Head Rugby recently closed out our men’s XV 2024/2025 season.

This weekend I spent a few moments playing with some of the new generative ai engines that have recently been in the news so much lately.

Almost a year ago since I wrote about my DNS filtering setup.

Seasonal change has a way of making me feel reflective, and the transition from Summer to Autumn usually does it more than the others.

These days I don’t get much time to write code.

Today I am thankful for the process, and the markers along the way.

Previously I talked about using command line tools for efficiency in Command Line Leadership.

Originally posted to LeadDev, duplicated here for archival purposes because Cool URIs don’t change.

The current state of the web is poor… at best.

Earlier this month I had the pleasure of being a guest on The Data Standard podcast.

Being proficient with various *nix-style tools for working with plain text is a well known way to “level up” engineering skills.

Happy holidays to all of you.

I see fascinating levels of learned helplessness in so much software engineering articles/posts these days.

Folks, if you’re not getting a good slate of talent it’s your fault.

We live in an era of scale.

Earlier this month Luma was acquired by Newell (Fortune #208).

This was the first time I was able to go to the Consumer Electronics Show, and it was an experience.

Wow.

While lacking the sex appeal of memory corruption based attacks, phishing remains a problem for many end users.

While many of my colleagues were away at Blackhat, Defcon, and Bsides Las Vegas I decided to spend a day exploring through an Android app.

While many of my colleagues were away at Blackhat, Defcon, and Bsides Las Vegas I decided to spend a day exploring through an Android app.

Over the last 24 or so hours theres been a lot of commentary on Twitter reitterating their policy that developers should not implement full twitter clients.

Last night ruby stole back a few of those hours that it has saved me over the years, and made me feel like I was going just a little crazy in the process of doing it.

That old quote from Twain about the lie getting halfway around the world before the truth puts its pants on.

The security community echo chamber was rocking hard over the weekend with news of an online backup/sharing service, Dropbox, changing its Terms of Service to grant them “worldwide, non-exclusive, royalty-free, sublicenseable rights to…” do basically anyt…

I still believe that the presentations and panels being selected for most information security events are much too far removed from the “roots” of the art.

The question sounds crazy, especially for someone who’s spent a fair amount of the last year working on making spam and other malicious message detection on social networks better.

The Facebook data team released some interesting data a few days ago focusing on the connectedness of their social graph, taking six degrees of Kevin Bacon and looking at how many connections away from each other any two people on the network are.

Last week I had the opportunity to attend the first public planning/brainstorming session for the DHS seeded Open Information Security Foundation and their next generation IDS project.

Following up my last post on fuzzing an unknown proprietary protocol, we’ve now got a collection of packet captures to start ripping through to get some semblance of a fuzzer going to send packets to our target.

Thanks to the near constant stream of “the sky is falling, these protocols aren’t secure” presentations at security conferences around the globe, everyone is familiar with mainstream ICS protocols, Ethernet IP, DNP3, and of course Modbus, amongst others.

To a lot of you, this is post isn’t going to tell you anything you don’t already know, but for others I think it needs to be said again.

Code signing is a security feature that has been around for quite some time, and has been proven in many other areas, but is uncommon to find it in any control system component and very rare to find in control devices where firmware uploading is an import…

Dale Peterson and I demonstrate how using commonly available tools an attacker can learn how firmware is loaded into two different Programmable Logic Controller (PLC) Ethernet cards, write his own malicious firmware, and load that malicious firmware into…

This phrase was hammered into my head during an uncharacteristically interesting AI class during college (I later dropped the class, my hats off to those of you who enjoy writing search algorithms all day, I’ll never compete with you for a job), and it’s…

This paper and accompanying presentation was first presented at Blackhat USA 2007 and DEFCON 15 (OX0F).