The Year of Threat

The Year of Threat

I am officially declaring 2017 the year of threat. Following years of rhetoric about state-based attacks and who is at fault for what major system compromise the public seems to finally have come to grips with a few indisputable notes us security pros have been...
Run of the mill “infosec researcher”.

Run of the mill “infosec researcher”.

A couple of months ago I reported a chained vector vulnerability which affected a corner case 2-Factor bug to Facebook. While their security department utilizes the same anonymous ticketing system their consumer support department I found the encounter professional...
The CISSP Crucible

The CISSP Crucible

How I Passed the CISSP in Two Weeks So it’s been on my mind a while, okay, maybe a long while. What’s a certification I can take that will provide assurance to my clients and not be a complete waste of time or lock me into a fixed mind set dependent on a...