A Brief History of Stuxnet

In 2009 something happened that had never been done before in the history of computer malware. A digital weapon was released with the express purpose of attacking specific machines and causing them to fail, sometimes spectacularly.

The Rise and Fall of RC4

RC4 is a stream cipher and variable length key algorithm, and it was once the go-to cipher suite for web encryption. Then someone figured out how to break it.

URL Hacking (or “How to Sanitize Your URLs”)

Most people don’t think twice about copy/pasting a ginormous web link into an email or social media post.
But they should!

Tips, Tricks, and Traps When Prepping for a GIAC Certification Exam

As a SANS Subject Matter Expert, I often get asked for tips on how to pass GIAC certification exams. Here are some tips and tricks I have learned.

Thoughts About Diversity

Diversity is one of the buzzwords of the day. But what does it really mean and why does it matter?

Making A GIAC Exam Index

Having a good index is critical to getting a decent GIAC exam score. Here are a few thoughts on making yours better.

A G33k Goes To DEFCON

Day of Shecurity sent me to DEF CON 26. I had a wonderful time, did some cool things, and have already made plans to attend DEF CON 27. If you want the full details, keep reading…

Why We Bother

When Wired published an article titled “The Worst Cybersecurity Breaches of 2018 So Far,” I asked myself, “Why do we even bother?”