Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
Why any organization with a public IP has to plan for un-patchable zero-day exploitation, not just targeted attacks.
-
Now published at Xora: taking a 'safely' disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research and an LLM.
-
Consolidating my scattered writing under one roof, without giving up digital ownership.
-
On consuming valuable ideas from people whose other beliefs you find repugnant, and why avoidance is the choice to be passive.
-
Enshittification comes for us all.
-
The misaligned incentives, on both the client and consultant sides, that doom most purple team engagements before they start.
-
What real-world heists and insider-threat data reveal about who actually breaks into buildings, and what a physical penetration test is worth.
-
The hidden incentive to make more money, not to reduce risk, that pushes the security industry toward compliance theater.
-
Why phishing simulations punish employees for a problem they can't solve, and what actually reduces the risk of a successful phish.
-
A largely unfiltered and slightly refined response to upper management's annoying idealisms.
-
New research for using `less` as a persistence mechanism.
-
RSS is supposed to be for the readers, not you.
-
A collection of legitimate services and how to use them for evil.
-
A nice way to share without writing an essay.
-
A collection of blogs/feeds I read on a regular basis.
-
An introduction to burnout and how to recover from it.
-
The old internet was better anyway.
-
Reasons for not using Conduit anymore.
-
A free guide to free resources for learning exploit development.
-
...like me.