Trump, Krebs, and ethics....

So I am amidst a makerspace upheaval in Columbus. Not a sudden thing, it's been a few years coming,...

Hackers Teaching Hackers (henceforth HTH) is a information security conference held in Columbus (Wel...

There will be a lot written about xz-util this week. I am not going to add to the hair-on-fire fray....

Much has changes and much has remained the same in the vulnerability assessment space....

POINT is a small company, just four employees, and I am the only tester.  We do most of our wor...

Like many, I have parents.  My mother and my father are still around and kicking, and we have a...

I finally got off my butt and decided what to do with this blog and the fifteen years of posts withi...

Seeing a couple of vulnerabilities that are higher risk than they used to be floating around out there. They are what the attackers are going after since the focus on AppSec from both backend and frontend libraries are preventing a lot of code injection errors (which is a good thing, don't get me wrong)...

When all finished with your testing, and have collected all the evidence, it is time for the report. The report is expressly in existence to make it easier for the development team to fix the bugs. A lot of people don't like reporting. I am distinctly not one of those people....