Grey Hat Python Review
This review comes almost a year late for a mate of mine extracted a blood oath to write a review on this book. My apologies for taking so long. - J.--"Grey Hat Python", written by Justin Seitz, a Senior Security Researcher at Immunity Inc, is a book which takes you ... Read More
Clarity
“For me life is continuously being hungry. The meaning of life is not simply to exist, to survive, but to move ahead, to go up, to achieve, to conquer.” - Arnold SchwarzeneggerI recently returned from Ruxcon and realised how much I enjoyed the conference and how much I enjoyed making ... Read More
Management vs Technical Career
"Everybody's a genius. But if you judge a fish by its ability to climb a tree, it'll live its life believing it's stupid." - Albert EinsteinI think I held off from writing this post for a long time. But it seems to keep cropping up this discussion wherever I go, ... Read More
VUPEN vs Google and the consequences for IT Security
I've been largely pre-occupied with other work as of late (read: university assignments), but not wanting to discuss AusCERT I did however want to touch on the VUPEN vs Google debate.For anyone that had missed this, simply put, a French security research firm claimed (displaying video footage) that they had ... Read More
The Risk Management Lie
Rumors of information security evolving as a process and an industry is really a mixed bag. On one hand, I’ve seen first hand the benefits of improved governance. This helps to ensure people can’t make adhoc changes to production environments and should those environments change outside of authorised change windows ... Read More
The best defence is a good offense
I recently read two articles that made me consider is the goals of cyber security shifting - or perhaps more precisely, could it shift? The articles:China Advances Cyber Warfare as Primary StrategyGlass Dragon: China's Cyber Offense Obscures Woeful DefenseThere's a heap relating to China that are worth reading on Threatpost - ... Read More
Advanced Persistent Nonsense
Lately the threat posed by APT has gained a lot of attention. As highlighted by my April Fool's Day post, there was the RSA incident, the HBGary incident (which was more "Persistent" than anything else), the Australian PM's laptop getting owned (which barely got more than a day's press), and ... Read More
I give up
A number of events in past months have forced me to reconsider my position on a number of issues.Foremost in my mind:The Vodafone scandal in Australia, the Australian Prime Minister’s Laptop being hacked, Office of National Assessment’s of Govt security (and SQL injection being described as “non-major”), RSA being owned, ... Read More