Curiosity in Practice
Yesterday Randy Westergren wrote this blog post: United Airlines Bug Bounty: An experience in reporting a serious vulnerability. I do not know Randy and do not think he did anything wrong but his post is a perfect example of why companies I talk to are afraid of implementing bug bounty programs. He hit the trinity of why … Read more
I have been using censys.io a lot lately to do network reconnaissance and noticed they just released a new API that didnt have a CLI frontend so I spent sometime writing a python based one. You can grab a copy here. Usage is: python censys.py -f (search term) It is still pretty rough and I will … Read more
I spend a lot of time working in the starbucks near my office. It is a great place to slip away from the office for an hour when I need to do some heads down work but dont want to be completely anti-social. Even though I always use a VPN one thing that always bothered my … Read more
I have been using the iOS 9 Public Beta 2 and one of the things that I do not like (and has really been freaking me out) is the Frequent Location Tracking. I was getting alerts like this: This made me have the following thoughts: I am not going to Columbia right now. Am I … Read more
At work this week I needed to compare two files to see if they had the same MD5 or SHA256 hash. After spending way too long trying to get hashdeep and md5deep to work correctly and not finding anything else to easily do this I wrote compare.py today. This script is the definition of utilitarian but I … Read more