-
Vulnerability Counts Are a Moving Target

At the end of each year, we see articles covering how many vulnerabilities were disclosed the prior year. Because the articles are written about the same time of year, it gives a fairly good initial comparison from year to year; at least, on the surface. This is the foundation of statements such as “Security vulnerabilities…
-
OSVDB, FIN, and Lessons Learned

[Note that this was half-written on 2020/11/13 but never finished and published. Going back through old blog drafts, I am opting to post this as-is, and back date it to when it was started. Toward the end it is not clear from notes if I am quoting the Tweet or making a note on how…
-
Photos: Presidential Race Called / Denver Celebration

I woke up this morning to the presidential race being called in favor of Joe Biden and started watching live feeds from around the country. After checking the Denver Channel 7 news feed from the helicopter I saw there were quite a few people at the capitol celebrating. Since I am fairly close I decided…
-
How Many Trees Are You Celebrating @arborday?
The Arbor Day Foundation is a 501c(3) nonprofit organization founded in 1972 that seeks to “inspire people to plant, nurture, and celebrate trees“. I received a “Colorado Tree Survey” from them today, part of what is a never-ending stream of snail-mail spam that I have written about before. For this envelope, the thing that caught…
-
Box of Shit: The Punkis Confluence

After removing many half-eaten Styrofoam peanuts I found the contents of this box sent by Punkis. Yes, that Punkis; the old, old, decrepit Attrition.org staff member. Bromancing the stone with Modify all those years he left the traffic of the greater Los Angeles region for the warm wonderful climate of a state within spitting distance…
-
Altered Carbon Nudity Index

For those who know me, they are well aware that I have a slight ‘spreadsheet’ problem. More specifically, Google Sheets since they are collaborative and sync across devices. Not the point! I tend to make Sheets for more and more things and track many data points in my life around my health. I also have…
-
Box of Shit: The U.K. @w1bble Variety

It’s been a while since I wrote up a ‘Box of Shit‘ but felt it was time after receiving one from Jamie (@w1bble). He sent it from that far away place trying to find an exit or something; U.K. politics are so weird, not like the U.S. They talk funny too. Speaking of weird, this…
-
A Small Ask of @JerseyMikes For the Greater Good

A proposal for Jersey Mike’s to cut as many as 31 billion calories from consumer diets a year.
-
“The History of CVE” and A Couple of Objections

I just read “The History of Common Vulnerabilities and Exposures (CVE)” by Ary Widdes from Tripwire and found it to be a great summary of the 20+ years of the program. I say that as an outspoken CVE and MITRE critic even! I do have a couple of objections however, with the conclusion, and then…
-
A String of Charity Auctions…

Auction #1: Attrition.org 2020 Custom Swag Pack (limited edition)Auction #2: Attrition.org Six Acrylic Coins w/ Pouch (quantity: 15)Auction #3: 270 Unique Stickers (Miscellaneous, InfoSec, Pop Culture, More!) Starting this week, I will post the first of several charity auctions to eBay. I don’t know how many there will be exactly, but these will be bigger…