Sources say: I’ll be speaking at ATT&CKcon 5.0 in October
I’ve been on writing hiatus since the spring for a number of reasons, but one important reason has emerged and, to use a phrase, the cat’s out of the bag.
Category: Posts
Thoughts on the CISSP exam
I recently sat for the Certified Information Systems Security Professional (CISSP) exam. After 15 years in the industry full-time, and the last 6+ years in a dedicated security role, I
The obligatory annual predictions post, 2024 edition
I’m actually not a fan of the tech industry’s tradition of winter prognostications. It’s a weird combination of throwing darts, shoehorning guesses into the “but a clock is right twice
“Why you should not” disable mDNS; or, why Microsoft gave up on mDNS security
One of my most valuable but frustrating tools is Wireshark. Valuable: easy to slice and dice through network packet capture (PCAP) data. It’s like a network microscope on steroids. I
Happy TLS 1.2 Day!
Microsoft’s editor of the Windows release health page must be a fan of The West Wing, because they decided to take out the trash on the Friday night before Labor
When I said “Reset all the passwords”…
The lights dim, and the curtain rises Sysadmin 1: So I reset all the passwords in Active Directory, like you asked. I still can’t believe our security vendor reset everyone’s
Why AI won’t replace programming
Farhad Manjoo, opinion writer for The New York Times, recently published a column titled “It’s the End of Computer Programming as We Know It. (And I Feel Fine.)” in which
Greatly meliorated service accounts
I’m a fan of Latin. No, not the music; the so-called dead language that was recently praised by a novelist and Oxford professor as “useless.” So when I set out
A toast to Maximum PC in print (with minimum BS)
For all of the benefits of electronic publishing — not having to cut down a bunch of trees to produce paper, as a starting point — there’s nothing quite like
Time to play fetch with FIDO
I recently wrote about multi-factor authentication (MFA) in the context of voiceprint analysis as a biometric authenticator. One authentication method I briefly mentioned was Fast ID Online, or FIDO. It’s