-
Continue reading →: BSidesKC 2019 Keynote – Choose Your Own Cyberpunk Dystopia
I discuss the saga of my apartment migrating to “smart apartment” technology. Why I was concerned about the system’s cybersecurity and privacy policy, what I found, and what came of my research.
-
Continue reading →: Bad, Good, and Super-Cringey Infosec Lab EnvironmentsI’ve had the (dubious) honor and privilege of witnessing a couple decades of IT educational lab environments. Even after well over a decade of full-time cybersecurity work, I often still have to re-certify on various tasks which require I complete a live lab or CTF (capture the flag). I build…
-
Continue reading →: Human Honeypots: I Make Friends (and So Should You)I recently ran across a tweet by the very insightful Fernando Montenegro in which he makes an interesting point about a phenomenon we occasionally run into while examining social media profiles associated with a business: Do people also find it creepy/sleazy coming across fake LinkedIn profiles when researching a company/vendor?…
-
Continue reading →: Life Moves Fast, Smart-Apartment Style
I had no idea when I got the initial email about my apartment going “smart” how much my life would change in the course of a month. At the time I was speaking in front of a room of cybersecurity journalists, and it was all I could do to keep…
-
Continue reading →: Security Things to Consider When Your Apartment Goes ‘Smart’A couple weeks ago, I vented my frustration as an ICS security professional at my apartment building forcibly converting to networked smart locks. My tweets were widely misinterpreted, so I’d like to talk a little bit about privacy and security aspects to consider if (when) the property you rent from…
-
Continue reading →: I reviewed 600+ call-for-paper submissions, (and you’ll probably guess what happened next.)
Ever wondered if your conference talk proposal measures up? I definitely do, every time I submit to a conference. Over the past week I reviewed over 600 call for paper submissions for the Derbycon information security conference. This was definitely a unique experience – I had participated in review boards…
-
Continue reading →: Infosec Resume No-Nos [VLOG]
A brief vlog on stylistic and content problems I see on resumes at clinics and from candidates.
-
Continue reading →: Lesley on Brakeing Down Incident Response Podcast – All About Playbooks
Be sure and check out (and subscribe to) all of the episodes of the excellent Brakeing Down Security podcasts! Thank you for having me as a guest, Brian and Michael! Topic of the Day: The Incident Response Process, – Program, Plan, Policy, Process, Playbooks, and roles.
-
Continue reading →: The Biggest “Small” Personal Digital Security MistakesI recently read a friend’s post about her family’s catastrophic woes dealing with a hacked Apple ID account. Her story was so troubling that it inspired me to remind folks of some of a few small security things that slip through the cracks in our daily lives that can cause…
-
Continue reading →: The InfoSec Amnesty Q&AForeword (Lesley) One of the hardest things to accept in information security is that we as individuals will simply never know everything there is to know about the field, or all of its many niches. Despite this absolute reality, we still often feel embarrassed to ask basic questions about topics…






