-
The Charity Challenge for Banshee
Unfortunately for them, the fax machine was invented in 1843. Banshee admitted defeat, so Durian it is! But I wanted to give some encouragement and started a charity pledge drive. Of course, me being me, I created a tracking sheet for this and as of this blog, there is already $1945 in pledges to help…
-
CISA’s BOD 22-01: How to Prioritize 100 Vulnerabilities in Two Weeks
[This was originally published on riskbasedsecurity.com, and had considerable edits/enhancements done by Curtis Kang.] CISA BOD 22-01 introduces the directive for government vendors to mitigate 292 CVE IDs, or 301 vulnerabilities, 100 of them within a short timeframe. It is well-meaning and brings potentially valuable focus, but it will put pressure on teams working with…
-
Forbes: Lazy Vulnerability Reporting & A Bit of Bias
It may have been almost two decades ago, I joked with colleagues that many Information Security news articles could just be done via Mad Libs. We later joked that breach notifications often appeared to be done via Mad Libs, using the same phrases with different organization names and the number of affected customers. Over the…
-
An 83 Word Excuse Instead of a 1 Character Fix (NCSC.nl)
The National Cyber Security Center of the Netherlands (NCSC.nl) has a curious take on sharing security information. On October 25, 2021 I contacted them to inform them of a simple typo in one of their advisories. I send mails or Tweets like this several times a week to researchers, vendors, and news outlets as CVE…
-
Random Movie/TV Thoughts and Reviews (November 2021)
Finch (2021) Medium: Movie (Apple) Rating: 2 / 5 Tried too hard to bring a tear to the eye Reference(s): IMDB Listing || Trailer Post-apocalypse, robots, and Tom Hanks, sounds like a great recipe! Unfortunately they tried too hard to make it sweet. The feel-good movie they wanted is technically there, but I think they missed the mark.…
-
The Charity Challenge for The Only Mike E.
[4/8/2026 – Mike still has not put anything in his mouth for charity.] Well, maybe not the only one, but this one promises to be fun! It started with such a harmless Tweet, essentially Mike digging his own mouth-hole grave. From there it really spiraled out of control and it just keeps getting better. This…
-
Random Movie/TV Thoughts and Reviews (October 2021)
Mindhunter S1-2 (2017) Medium: TV (Netflix) Rating: 4.5 / 5 Criminal Minds should take note Reference(s): IMDB Listing || Trailer || Netflix I originally avoided this show because it was compared to Criminal Minds, which was a good show to start but went too far into procedural tedium. I’m glad I eventually came around to give it a chance because…
-
Random Movie/TV Thoughts and Reviews (September 2021)
The Protege (2021) Medium: Movie (Theatres or Usenet) Rating: 4.5 / 5 Maggie’s good, Michael’s better Reference(s): IMDB Listing || Trailer || Official Site As far as the “badass femme getting revenge” genre goes, this movie ranks up there. First, Samuel Jackson doesn’t play his usual self which is a plus. He’s a more muted and reserved version of himself…
-
Assessing the ‘War on Tech’: Huawei vs. U.S.
[I wrote this with Curtis Kang who did a lot of work researching various aspects of this article and provided invaluable help. His research and written contributions made this article possible. It was originally intended to be published on RiskBasedSecurity.com in early 2020 but was passed over so I am publishing it here.] In 2019,…
-
Commentary on Trend Micro’s Linux Threat Report 2021
On August 23, 2021, Trend Micro released a report titled “Linux Threat Report 2021 1H” by Magno Logan and Pawan Kinger. The report is based on Trend Micro’s Smart Protection Network (SPN) which they call “the data lake for all detections across all Trend Micro’s products“. Basically, every security product they make that detects vulnerabilities…