🔓 Unl0ckd

This post covers using AWS Config as a starting point to find public s3 buckets in your organization.

This article covers previous work and introduces a warning

This post covers increasing security for a static site hosted on s3 using cloudfront and cloudflare

Today on my Mastodon feed, several folks were discussing a new tool by TheMarkup called Blacklight.

The fresh new look of this site is provided by the Academic Hugo Theme.

When my Dad turned 70, I couldn’t decide what to get him.

I’ve updated this site’s appearance with a new hugo blog theme

Brave and Firefox bill themselves as privacy champions.

Use AWS Config to locate AWS resources

I’ve joined the Free Software Foundation and so should you!

I’ve switched to Mastodon and so should you.

I’ve adopted Linux on the desktop.

The easy way to compile Emacs 27 on macOS using Homebrew

This post covers how to secure an S3 bucket serving content through Cloudflare

This site now uses CloudFlare

AWS CloudWatch enables monitoring and alerting on cloud events.

AWS Security Hub eases the pain of cloud monitoring

Help protect APIGW from attackers with AWS WAF

AWS CloudTrail is the cornerstone of cloud SECOPS

No more contributing to the Evil Empire

How my career is changing.

Access Office 365 email from (Doom) Emacs with mbsync and mu4e!

Compiling emacs on macOS using Homebrew

My notes on compiling emacs for macOS

My personal spacemacs cheatsheet for daily use.

I share my experience and lessons learned from operating a public bug bounty.

Methods for sending and receiving data across a network with JavaScript

Extract files from tcpdump or wireshark captures

Use this to recover TLS session keys for a java program.

Use mallory proxy to view non-https encrypted mobile traffic

Nearly a year ago, I wrote about an emerging trend I observed with some of the bounty researchers I was interacting with.

Configuring Spacemacs Go layer and environment variables on macOS

Acknowledgment of the book I just finished reading [Jordan Peterson’s “12 Rules for Life:An Antidote to Chaos”](http://a.co/fjIjHzX “Jordan Peterson: “12 Rules for Life:An Antidote to Chaos””) and I can not say enough good things about this book.

Update: 2018-08-10 Shortly after writing this post, I switched to Spacemacs develop branch - cd ~/.spacemacs && git checkout develop This upgraded my Spacemacs to version 0.300@26.1.

In a post from 2015,, I write about some of the “Security 101” issues I considered to be fundamental.

I found this DevTube on HackerNews the other day and I want to save it for later.

Towards a working LISP environment on macOS

I found this MacOS Open Source apps list on HackerNews the other day and I want to save it for later.

I’m so far behind the times, it’s sad.

The Problem Secure file sharing using AWS S3: I upload a file to an S3 bucket with restricted permissions The client downloads the file and processes it The client uploads the results to the S3 bucket I download the processed file and the transaction is c…

Brave, the new Firefox?

I’m managing a bug bounty program that has shown tremendous benefit so far.

iOS Secure Boot Chain Each step of the startup process contains components that are cryptographically signed by Apple to ensure integrity and that proceed only after verifying the chain of trust.

Recently, work hosted an event designed to bring my team closer together.

Trello fascinated me upon its release in 2011.

A developer at work asked a general question to the group: “I’m thinking about using either LastPass or 1Password, anything I should know?”

Since my last post, I’ve left my position with the consultancy.

This morning, while I was trying to proxy traffic to this site in Burpsuite, I ran across an SSL handshake error.

Recently, I celebrated a birthday.

In a previous post I discussed the complicated process of configuring S3 to use Letsencrypt to obtain a TLS certificate.