Signs of Triviality

Need to convince your boss to send you to a conference?

Wonder why you should bother attending or speaking at conferences?

Half a book is still better than not a book, so here, half a bit of content from my never-possibly-still-to-be published SysAdmin book.

Notes from the RealWorldCryptography conference at Columbia University in New York City on January 4th - 6th.

Write-up of a talk given at ConFoo Vancouver 2016, providing an introduction to operational security for developers and other non-infosec experts.

Write-up of a talk given at ConFoo Vancouver 2016, providing a high-level introduction to threat modeling for developers, ops engineers, and everybody in between.

An Ignite talk given at O'Reilly Security NYC 2016, presenting a whole bag of this one weird tricks that would never work for you.

My talk from Velocity NY 2016, covering information security with a focus on people and their ability to evaluate risk.

Help me give a better Velocity NYC talk by filling out this survey!

Does Betteridge's Law of Headlines really apply universally?

Bug Bounty programs are popular, and expensive.

Incident Response is a stressful, but often thankless job.

How we see ourselves vs. how others see us

Interviewing Delusions & Realities

Improve your root cause analysis by including this handy header.

Writing clean, realiable shell scripts is not rocket science.

A few notes on the difference between reducing your attack surface and eliminating attack vectors.

'Always wear underwear' and other practical advice for Computer Science students.

Industry vs.

Yes, we know shit's fucked up.

Defend smarter, not harder.

It's hard to figure out whether or not pretending to have created something you actually didn't constitutes plagirasm.

A short description of how to use the OS X Keychain for your passwords, including command-line usage.

Passing passwords to your tools is always tricky.

Interviewing is 90% bullshit, 10% first impressions.

A discussion of how Internet Operations is defined, and what our ethical responsibilites in this field are.

Results from my survey on Ethical Obligations in Internet Operations in the context of my talk at Velocity NY 2015

BA, MD preferred or equivalent work experience; experience performing brain surgery a plus

Appearing smart in meetings isn't easy.

Help me prepare for my talk at Velocity NY 2015 by filling out and sharing this short questionnaire on the topic of Ethical Obligations in Internet Operations.

Bad news, everyone.

I will be giving a talk at Velocity NY 2015, entitled "Primum non nocere - Ethical Obligations in Internet Operations".

Creating easy to read text documents is a subtle skill.

Avoid the Tyranny of the Vocal Minority: speak up!

An introduction to general infosec concepts, hoping to help sysadmins better understand the reasons behind some of the security requirements imposed on them.

It's that time of year again!

lish(1) implements a very simple, restricted command-line interpreter or shell to allow execution of only a fixed set of commands.

Yet another high-level summary of the POODLE SSLv3 vulnerability.

In an effort to avoid promotions to the level of incompetence, we're running the danger of making failure no longer an option.

On Facebook, everybody knows you're a Duck

LMAO if you don't continous rejuvenation

The internet is held together by Duct Tape and WD40.

A bug in the widely used OpenSSL library named 'heartbleed' affects almost all users on the internet.

Privacy and Social Media do not stand in direct conflict.

Sometimes content hosted in one country is restricted from viewing in another.

Despite apparent clashes between Privacy and Social Networks and ongoing revelations about dragnet surveillance, all is not lost.

For this quarter's Hackweek at Twitter, I put together a variation of the NPR News Quiz with a focus on information security and privacy news.

Im Deutschen gibt es mehr Üs als Äs.

A brief walk-through of a simple code example to show how to convert an ssh(1) RSA public key into PKCS8 format.

Why you can sign my PGP key just because I say so (on Twitter).