By applying science to security we help our partners build their security programs based on facts rather than feelings. Follow our blog for the latest case studies and projects.
This was originally posted on blogger here. RecentlyJanet Vertesi, an assistant professor of sociology at Princeton University, tried to hide her pregnancy from the internet. While she found it was extremely hard and some have questioned the value of going to the trouble, I believe her experiment may be seminal. ...
read more
This was originally posted on blogger here. Where I explain why no-one cares about the vulnerability you found. I've had many people try to convince me that infosec vulnerabilities are the base unit of infosec. ...
read more
This was originally posted on blogger here. Both the current core failure of infosec defense and it's ultimate success are fundamentally tied to what you think you know. ...
read more
This was originally posted on blogger here. Over the years of discussing vulnerable conditions and risks, I've come up with three assumptions which help ground the risk assessment in reality:If the threat actor has superuser privilege, they can realize the risk. ...
read more