Viewing profile — x0ner

Don't just have a dedicated area, make it a place you want to work from. It seems obvious, but once you're working from home, it's easy to just cobble together a workspace in a roo…

“That’s one of the problems he seems to be grappling with: more money, generally, means less struggle, and if it’s struggle that made him, how does he find that going forward?”

P1) I don't see the current naming model as any worse than the disjointed CVEs of today. P2) What if all wide-impacting vulnerabilities were treated like this, regardless of theory…

Just to end this out, I do agree. I was not suggesting this resource be paid, but that they should have someone dedicated, even a volunteer.

I agree with your general sentiment, but if it were that easy, we wouldn't even be having the discussion. Nation states going after a campaign are likely to succeed, it's limiting …

Campaigns should be finding ways to work with professionals from the cybersecurity sector, not looking for ways to bolster defenses on their own. The adversaries these groups face …

The word "passion" is charged these days, but as someone who has successfully completed a number of long journeys (opensource projects, sale of company, 15 years of cardio, etc.), …

While it's expected a technology company dealing with communication would be the target of external threat actors, I think there's value in Slack being very clear that eliminating …

The security market is insanely hot right now and will continue to thrive. From my perspective, we are reaching a point where security is seen as a commodity, not some optional pro…

Having just finished the book, this article runs counter to what's discussed in Why We Sleep.

During the early part of high school, a few friends and I began attending community college night classes for subjects we got exposed to in our day classes. By the time I graduated…

Unfortunately, the legal process has not caught up with the speed in which malicious actors can conduct their attacks. In some cases, infrastructure is used for merely a few hours …

I'd assume so. More potential fake "subscribers" mean more bounced email and higher volumes which could be used as a early warning indicator for spam or reputation flagging. Slight…

I'd like to see OVH take a stronger stance on actioning abuse requests for hosts serving malware before hearing about some paid protection offering. For those not fortunate enough …

Acceptable, no. People not following rules, it happens.

This is pretty nifty. Cracking the extension open reveals a fairly basic API you can use to skip the extension. Here's some code to use it. https://gist.github.com/9b/f5fe434bf9965…

Planes work wonders for development too. After several trips and being on a deadline, I built my dev environment to be offline friendly (cached data, local libraries, etc.). Airpor…

If you take the offer, do yourself a favor and bake some extras into your employee contract or add them into the deal. Not sure of the terms, but if you need to stick around, don't…

I've done a significant amount of research on these threat actors. Despite the high tech exfiltration method and nation state support, researchers were still able to easily find th…

I wouldn't quit without a firm idea of what you want to start; leaving your current role without an idea is likely to leave you more bored and questioning your decision. Having sol…

Talk to your co-founder if you have one. If not, your wife is she's understanding. Having sold a company, it's one of the hardest processes to go through. It's not clear if your pa…

I'd be interested in volunteering some time or access to data sets to help protect these sorts of things. Feel free to DM me.

Information security.