Surviving and Thriving at Blackhat

Since it is that time of the year for all good security professionals to get ready to fly to Vegas I decided to put together my own “Surviving Blackhat” blog post. Make a Friend.Being in security is sometimes a thankless job. You are going to a place with 30,000 other professionals who do the same thing … Read more

RandomMAC.py

I spend a lot of time working in the starbucks near my office.  It is a great place to slip away from the office for an hour when I need to do some heads down work but dont want to be completely anti-social.  Even though I always use a VPN one thing that always bothered my … Read more

Disable Frequent Location Tracking in iOS 9

I have been using the iOS 9 Public Beta 2 and one of the things that I do not like (and has really been freaking me out) is the Frequent Location Tracking.  I was getting alerts like this: This made me have the following thoughts: I am not going to Columbia right now. Am I … Read more

Compare Two Files

At work this week I needed to compare two files to see if they had the same MD5 or SHA256 hash.  After spending way too long trying to get hashdeep and md5deep to work correctly and not finding anything else to easily do this I wrote compare.py today.  This script is the definition of utilitarian but I … Read more

Just Say No To Security By Listicle!

I see these types of listicles on LinkedIn or Twitter a few times a week: 5 tips to protect your business against cyber crimeTen ways to prevent a data breach and protect your small business3 tips to keep your company secure from hackers They are written by *security experts* and they say effective security is as easy as: … Read more

Fathers’s Day Performance Review

“Mr.Gamblin this is your sixth year in the role of my father.  How do you think this year has gone?” – My son during my imaginary yearly performance review.  Most holidays are set aside to celebrate an event that happened in the past while father’s day is mostly a day to celebrate what was accomplished … Read more

Writing Risk Statements

I spend a lot of time dealing with risk at my job.   I spend a lot of time dealing with how to communicate risk at my job.  I spend a lot of time dealing with how to accurately communicate risk at my job. I put together this risk statement flowchart to help make sure … Read more

Hacking My Weight (For Fun and Profit)

Last December I visited my Doctor for my yearly checkup and he told me I was getting a “little husky” and that I was over 200 pounds for the first time.  That was a wake up call. I had always thought of myself as “athletic” although I had slowly went from a waist size of … Read more

Who is responsible for your success?

“I am useless by myself. My success hinges entirely on the people in my life.”  I was challenged this weekend to think about this statement and decide if I really believed it or not.  It was such a thought provoking statement that I wanted to share it and not overly pollute it with my own … Read more

Bad Actors

I wrote Bad Actors this weekend to automatically generate a list of known bad IP addresses.  My plan is to use it to do data mining with against my ELK stack but It might also be handy for firewall and IPS rules or any other use you could come up with.