security Archive

Pen-Testing is Dead, Long Live the Pen Test


Finally got around to uploading and converting my DEFCON 16 presentation with co-presenter Carric, entitled “PenTesting is Dead, Long Live the PenTest!”
Part problem dissection, part solution discussion, part political rant, peppered with a bit of humor and wit.
This talk explores the death and subsequent re-birth of the penetration test. Comprised of conclusions drawn from [...]

Travel a lot? Eat for (almost) free!


Traveling a lot generally means eating out a lot, and I’ve managed to hone a few techniques to both reduce my dining expenditures and generate occasional rewards. … The kicker here is that there are several restaurants within major cities that are members of both RewardsNetwork and OpenTable , which means you can get as much as %20 cash back for dining, plus as many as 1,000 points for making a reservation, which essentially translates into %20 of your total bill plus $10 towards future meal purchases.

12-Step Botnet Recovery Program


Believe that a power greater than yourself exists and is necessary to identify and eliminate malware, botnets, and the Windows hosts that contain them…. Seek through prayer, meditation and continuing malware research to improve your understanding of the growing malware threat as we know it.

ShmooCon: Bad Guys Gone Good?


I generally attend no less than 3 security conferences each year (though there are ~5 on my wishlist), and Shmoo has steadfastly claimed one of those spots, alongside Black Hat / Defcon and RSA.I’ve been going to technology and security conferences since about 1990, and while I truly miss the biannual Comdex in Atlanta, ShmooCon has quickly become one of my favorite to attend…. While the Shmoo Group describe themselves as: “a non-profit think-tank comprised of security professionals from around the world who donate their free time and energy to information security research and development,”their work on notable security projects such as AirSnort and Rainbow Tables has demonstrated their knack for developing tools that appeal to the “Ambiguously Off-White Hat” segment of the professional information security community otherwise known as “hackers.”