Curiosity in Practice
During a recent round of phone interviews while expanding my team at work I was amazed at how many security professionals have a hard time clearly answering the following question: “What’s the difference between a threat, a vulnerability and a risk?” I think being able to do so is a key to being a good … Read more
Often in my job I am given spreadsheets of IP addresses that look like this: One of the first things I always want to do is find if they have a FQDN. Sadly Google … Read more
At the start of every month I pick a quote I like and hang it at my desk and try to use it to guide my thought process for the month and I thought I would share them here as I was cleaning off my desk for the year. Here are the quotes I used … Read more
On Wednesday night I tweeted this: If you are using TrueCrypt you should stop. Hashcat is now optimized to crack TrueCrypt volumes. https://t.co/voBdtKuuHW — Jerry Gamblin (@JGamblin) December 10, 2015 I started getting retweets and replies like this on Friday from people I respect (and a bunch from people I don’t know): https://twitter.com/kylemaxwell/status/675420596025585664 https://twitter.com/averagesecguy/status/674768017864134657 So people … Read more
How the conversation goes when someone tells me they want to get into “hacking”: