flawed.net.nz

sloppy, not slop!

Work can be a big part of your life, but it can be incredibly stressful.

The common quip “Attackers Advantage, Defender’s Dilemma” describes how an attacker must only find one way in, and the defender must plug every hole - and it gets one thing majorly wrong.

Between work and parenting and usual life distractions, things have been fairly busy.

TL;DR: Data over ham radio using LoRa published to github Background Quite some time ago, Travis Goodspeed (KK4VCZ) released code and notes on github describing LoRaHam - using LoRa radios on amateur frequencies with a simple and open protocol for exchang…

Overview This post is broken into two sections: A description of how an attacker views your organization and where they’ll target An exploration on why every organization over-invests in some areas and is wildly negligible in others The short version is t…

Hunting through code for potential security issues generally requires having a very in-depth understanding of the language being reviewed.

What follows is a few key considerations about the security of the Python Package Index (PyPI) ecosystem, commonly used when you pip install <thing>.

I regularly get asked the best path toward a job in infosec, specifically in pentesting or security-assessment type work.

With the modern web moving toward API-based single-page JavaScript applications, a lot of vulnerability classes are in theory on the decline.