-
Book Review: Ready Player Two
TL;DR Ready Player Two is an enjoyable read that keeps the spirit and overall feel of the first book, with a few chapters in the middle that are a bit difficult to slog through. Worth a read though. Summary Ready Player Two is the aptly named sequel to Ready Player One. It picks up shortly…
-
Not all CVEs are Created Equal. Or even valid…
[I wrote this early 2019 and it was scheduled for January 7 but it apparently did not actually publish and then got lost in my excessive drafts list. I touched it up this week to publish because the example that triggered this blog is old but the response is evergreen. Apologies for the long delay!]…
-
Thoughts on 0-days and Risk in 2020
[Stupid WordPress. This was scheduled to publish Nov 23 but didn’t for some reason. Here it is, a bit late…] On Friday, Maddie Stone from the Google P0 team Tweeted about the 0-day exploits her team tracks. As someone who checks that sheet weekly and tracks vulnerabilities, including ones ‘discovered in the wild’, this is…
-
Why EVM Security Hasn’t Changed For More Than 15 Years
[This was originally published on RiskBasedSecurity.com in the 2020 Q3 Vulnerability Quickview Report. It was authored with Curtis Kang.] In our 2019 Year End Vulnerability QuickView Report, we presented a detailed history of public Electronic Voting Machine (EVM) vulnerabilities. We’ve seen little change to the overall EVM security picture since then. With the Presidential elections…
-
Dec 3 – Breckenridge Ski Report
The Good The people on the mountain are mostly good about social distancing in on the lift rides (two people for a four-chair lift), but not so much in line. You get a stark reminder of this when it is 10 degrees and you can see everyone’s breath. While not much of the terrain is…
-
The Hacker Jeopardy That Never Was
Many years ago, at early DEF CONs before 2000, I became a critic of Hacker Jeopardy after some of the questions had wrong answers. The host had written the questions and answers but got some wrong. The next year I offered to sanity check them before the game and did so, finding a few errors…
-
Comic: Criminal
So this idea for a comic goes way back to 2000/2001 and fortunately I had a friend who sketched it out. The file date is from August, 2001, but I don’t know for sure that is when it was created. Idea by me, art by H. Poteat.
-
Twitter, Companies, and your Complaints
The rise of social media has been interesting to say the least. Many on twitter have found it to give them a type of power as they can voice their complaints directly to a company that has wronged them. Everything from bad customer service, bad prices, minor inconvenience, or even perceived slights that likely never…
-
Comic: “Damn movies…”
I’m not an artist but I occasionally have ideas. I contracted ‘Quickcartoon‘ on Fiverr to put one of my ideas from early this year into a comic strip. Pretty sure I had this idea years ago and from time to time remember it, often after watching a movie that involves the C.I.A. Woman: Where do…
-
More authorities, more CVEs; Oh, and more commentary.
On November 10, TechBeacon published a great article by Rob Lemos titled “More authorities, more CVEs: What it means for app sec teams” in which I was quoted, along with several other people. Like many articles of this nature, those who provide input often will talk for as long as half an hour and ultimately…