Writing Risk Statements

I spend a lot of time dealing with risk at my job.   I spend a lot of time dealing with how to communicate risk at my job.  I spend a lot of time dealing with how to accurately communicate risk at my job. I put together this risk statement flowchart to help make sure … Read more

Hacking My Weight (For Fun and Profit)

Last December I visited my Doctor for my yearly checkup and he told me I was getting a “little husky” and that I was over 200 pounds for the first time.  That was a wake up call. I had always thought of myself as “athletic” although I had slowly went from a waist size of … Read more

Who is responsible for your success?

“I am useless by myself. My success hinges entirely on the people in my life.”  I was challenged this weekend to think about this statement and decide if I really believed it or not.  It was such a thought provoking statement that I wanted to share it and not overly pollute it with my own … Read more

Bad Actors

I wrote Bad Actors this weekend to automatically generate a list of known bad IP addresses.  My plan is to use it to do data mining with against my ELK stack but It might also be handy for firewall and IPS rules or any other use you could come up with. 

rPlay Is Spying On You

I had a friend recently tell me about how he was using a tool called rPlay to airplay his apple devices through his raspberry pi.  As a guy who is always looking to save $67 I decided to give it a try. After configuring it I couldn’t get it to work and after some investigation I found an … Read more

Look For New Challenges And Accept Them

How Do You Handle Challenges? We have all been asked that question during a job interview and went on to talk lie about how much we love new challenges and how well equipped we are to handle them.  Most people hate challenges.  We strive for easy, stable and guaranteed results.  Challenges are hard, unpredictable and always … Read more

CISSP Communication

I had the chance this week to speak at the 44CON Cyber Security conference on communication skills.  One of the take aways from my talk is that security professionals should always think CISSP when they are communicating.   Not this CISSP (which is great) but they should think this CISSP when the communicate:  Clear The single biggest problem … Read more

Change It or Accept It?

I had lunch with a mentor last week and he closed lunch with this thought and it has been stuck in my head ever since:  There are two choices you are constantly making in your life, you either change things or accept them.  We make that choice hundreds of times a day and most of … Read more

Birthday Thoughts

Ever year on my birthday I always like to take an hour and write down some of the lessons I learned and quotes that have inspired and motived me over the year.   Here are some of my favorite from this year:  The only real things that matter in life are attitude and perspective. The … Read more

Remove CNNIC from OSX

After reading a few stories like this “Apple Leaves CNNIC Root in iOS, OSX Certificate Trust Lists” that didnt include instructions on how to remove them yourself I wrote a quick and ugly bash script that automatically removes the CNNIC and the China Internet Network Information Center EV Certificates Root certificates from OSX.  You can download it here. Use … Read more