2022
-
Adversarial mindsets
Mar 17
What’s the absolute worst thing that could happen with your application? How could an adversary leverage that mistake to their advantage?
-
Why phishing attacks succeed
Mar 1
Phishing is all too common and far too successful, even today. What are some ways these scams succeed and how can you avoid them?
-
Security by obscurity
Feb 7
The weakest form of security is that obtained through obscurity – hiding what would otherwise be plainly found in hopes it’ll be missed.
-
Lock picking can make you a better engineer
Jan 7
Learning to use a lock pick changes the way you see security and the way you think about code. It’s a great mental challenge and will help you build stronger, more secure systems.
2014
-
Layers of Security
Dec 29
There are many layers to any notion of security. How well do you understand each?
-
Debit Card (Lack of) Security
Nov 28
Debit card numbers have certain features to make them easy to produce. It also makes them easy to predict, allowing determined thieves to easily steal your money if you’re not careful.
-
Professional Paranoia
Nov 24
If you can get in, someone else can (and will) find a way to get in without your permission. If your software and systems can be used for good, someone can (and will) find a way to exploit the same for ill.
-
They Should’ve Built it Better
Jul 22
Once I mastered the skill of lock-picking, it changed the way I looked at the world. Locked doors that used to obstruct me became mere annoyances. It was a bit of a dangerous revelation.
-
Device Security
Jul 15
How much control are we really giving up to anonymous developers with access to an update hook? How secure are our machines?
-
Physical Security
Jul 11
All of the encryption software in the world is meaningless if you fail to practice a couple of simple habits regarding physical security.
-
Situational Awareness
Apr 7
How aware are you both of the objective dead ahead and of the potential vectors for surprises behind you?