-
Continue reading →: KringleCon 2019 – Over 90,000: Ups and Downs of my InfoSec Twitter Journey
I chat about what it’s like to be an infosec “influencer” on social media – the cost, upsides, downsides, and what I’ve learned.
-
Continue reading →: BSidesKC 2019 Keynote – Choose Your Own Cyberpunk Dystopia
I discuss the saga of my apartment migrating to “smart apartment” technology. Why I was concerned about the system’s cybersecurity and privacy policy, what I found, and what came of my research.
-
Continue reading →: Bad, Good, and Super-Cringey Infosec Lab EnvironmentsI’ve had the (dubious) honor and privilege of witnessing a couple decades of IT educational lab environments. Even after well over a decade of full-time cybersecurity work, I often still have to re-certify on various tasks which require I complete a live lab or CTF (capture the flag). I build…
-
Continue reading →: Human Honeypots: I Make Friends (and So Should You)I recently ran across a tweet by the very insightful Fernando Montenegro in which he makes an interesting point about a phenomenon we occasionally run into while examining social media profiles associated with a business: Do people also find it creepy/sleazy coming across fake LinkedIn profiles when researching a company/vendor?…
-
Continue reading →: Life Moves Fast, Smart-Apartment Style
I had no idea when I got the initial email about my apartment going “smart” how much my life would change in the course of a month. At the time I was speaking in front of a room of cybersecurity journalists, and it was all I could do to keep…
-
Continue reading →: Security Things to Consider When Your Apartment Goes ‘Smart’A couple weeks ago, I vented my frustration as an ICS security professional at my apartment building forcibly converting to networked smart locks. My tweets were widely misinterpreted, so I’d like to talk a little bit about privacy and security aspects to consider if (when) the property you rent from…
-
Continue reading →: I reviewed 600+ call-for-paper submissions, (and you’ll probably guess what happened next.)
Ever wondered if your conference talk proposal measures up? I definitely do, every time I submit to a conference. Over the past week I reviewed over 600 call for paper submissions for the Derbycon information security conference. This was definitely a unique experience – I had participated in review boards…
-
Continue reading →: Infosec Resume No-Nos [VLOG]
A brief vlog on stylistic and content problems I see on resumes at clinics and from candidates.
-
Continue reading →: Lesley on Brakeing Down Incident Response Podcast – All About Playbooks
Be sure and check out (and subscribe to) all of the episodes of the excellent Brakeing Down Security podcasts! Thank you for having me as a guest, Brian and Michael! Topic of the Day: The Incident Response Process, – Program, Plan, Policy, Process, Playbooks, and roles.
-
Continue reading →: The Biggest “Small” Personal Digital Security MistakesI recently read a friend’s post about her family’s catastrophic woes dealing with a hacked Apple ID account. Her story was so troubling that it inspired me to remind folks of some of a few small security things that slip through the cracks in our daily lives that can cause…






