I wanted to quickly point out two instances of the GOP pretending they’re opposing overreaching liberal agendas when they’re actually doing exactly what their lobbyists want them to do. Gun Violence Research: Congress just outlawed the CDC and NHS from performing gun violence research for like the umpteenth time. They claim this is because they don’t want government…
Archives for 2015
[ Web Scanner Series ] Burp vs. Netsparker
![[ Web Scanner Series ] Burp vs. Netsparker](https://danielmiessler.com/images/burp-vs-netsparker.png){kind=small}
Basics The Test Site Methodology Results Analysis Summary In this series I’m going to be taking a look at how various web scanners perform at finding web application security issues. This installment compares Burpsuite Pro with Netsparker. Settings I am going to be using default settings for the most part with the following caveats: Netsparker is an automated…
Why Hipsters All Look Alike, or How to Do Science
But the beauty of Touboul’s model, which he sketches out in a meager four pages, lies in its succinctness. He doesn’t aim to explain everything. His goal is to express a single idea about how nonconformists might synchronize, and he does so in the most concise way possible. Touboul belongs to a breed of theoreticians who see themselves…
Liberals Criticizing Liberals (BLM Edition)
I have been very frustrated by the efforts of Black Lives Matter recently, and I wrote a tweet the other day that tried to capture it. It was something like this: If the mission of Black Lives Matter organization is to harm black interests, then the organization is having success. It was on the edge of my political…
When Interviewing, Make it Clear That You’re Vetting Them As Well
But how do you figure out the culture of a company you’ve never worked for? As Nicole tried to evaluate company cultures, she kept asking the Passover question: “How is this organization different from all other organizations?” And, as with Passover, I told Nicole, the answer should come in the form of a story. Ask people to tell…
Models + Data = Prediction
Even obscure variables such as how frequently a user recharges the phone’s battery, how many incoming text messages they receive, how many miles they travel in a given day or how they enter contacts into their phone — the decision to add last name correlates with creditworthiness — can bear on a decision to extend credit. Source: You…
Failing at the Basics in Intelligence and InfoSec
The current operational environment in Europe is so lax that it seems there is literally no security error ISIS terrorists can make that will derail their plans. – Interviewed in Dabiq #7Escapes arrest after rest of cell killed in a raid – Make plans over mobile phone callsDiscuss plans using game consoles (PS4) – Video driving a truck…
Never Send Sensitive Information in the URL, Even Over HTTPS
There is some confusion about how secure it is to send sensitive information in the URL (or query string) when the connection is over HTTPS. Here are some basic things to note on this: It’s true that everything in the HTTP request is encrypted, including the URL (query string) The fact that the URL is encrypted in transit…
The Difference Between Correlation and Causation
What’s crucial to understand about correlation is that it’s epistemic, meaning it is limited by our knowledge of the world.Said differently, if we knew all variables there wouldn’t be any such thing as correlation. Correlations are basically what people notice when they cannot see under the covers. Source: The Difference Between Correlation and Causation My latest piece on…
Social Engineering Attacks Targeting Seniors
There’s a dangerous type of social engineering attack that’s going around with a focus on seniors. Seniors tend to 1) have money, and 2) be less quick on their feet to detect maliciousness, so they’re great targets for scammers. The attack is pretty simple: Find an elderly target who has money Find out who their relatives are who…
A Nugget of Hope in Trump
I’m a believer that everyone is multiple people. There are good and bad versions of ourselves, and at various times they are in control. Sometimes he can be such an asshole! Yeah, well, sometimes he’s simply in that mode where he sees the world that way. It’s a thing. It’s something we all have. Trump I saw a…
Everyone is Multiple People
I subscribe to a model of human understanding that sees each person as a combination of multiple people. When you’re dealing with someone, you have to know which person you’re actually talking to. It’s not always so extreme, of course, but it often is. Here are some people (traits) that my friends are/have: Self-confident elitist Will give shirt…
Why Trump is Winning
I just watched my first Republican debate (as opposed to just hearing about what was said from the media) and I now understand what’s going on with Trump. It’s quite simple. He’s a billionaire with the biggest ego and the clearest language that expresses three things repeatedly: Strength (belief that he can get it done) Nostalgia (a vision…
How to Install VMware Tools in Kali Linux 2.x
It’s harder than it should be, but easier than it looks: Mount the VMware Tools virtual CD from the guest’s VMware menu Copy the VMware Tools tar.gz file to the Kali Desktop Extract the directory using tar xf nameoffile.tar.gz Run the installer with Perl, e.g. perl vmware-install.pl –d Follow the short wizard. The defaults are decent. Reboot That’s…
Security and Obscurity
[ Subscribe to the Podcast: iTunes | Android | RSS ] In this episode I explore the topic of Security and Obscurity by reading my popular essay on the topic. Notes The intro track is from one of my favorite EDM artists: Zomby. The song is ‘Orion’, and it’s from the ‘With Love’ album. Highly recommended if you…
T1SP: Episode 21
[ Subscribe to the Podcast: iTunes | Android | RSS ] Topics for this episode: News [ ] Stringing Shodan to exploitation [ ] Why you need to check HaveIBeenPwned [ ] Another DELL root cert hacked [ ] ISIS OPSEC advice (data privacy, tor, crytocat, telegram, proton mail, gps features on mobile devices, etc.) They also mention…
My Pre-fight Analysis of Aldo-McGregor
I’ve been waiting for this fight for a long time, and I want to give my thoughts before it happens later tonight. — I think Aldo has the highest chance to win (by decision), but I want McGregor to win McGregor’s greatest strength is speed, relaxation, and mobility. This can easily be removed by two of Aldo’s greatest…
The Amazon Hipster Knife
[ Gerber EAB Lite Pocket Knife ] I like knives. Always have. Back in high school I was all about some Spyderco. Then I had a Benchmade phase. Then I got into William Henry. And now I’ve gone hipster, and this post explains why. The hipster knife advantage The knife shown above I call my Hipster Amazon knife….
Music that Affects Me
I like a lot of music, but very little affects me in a powerful way. Here are two artists that do: Kimya Dawson Why? Kimya Dawson I’d describe as folk, or as a signer/songwriter, but those labels are somewhat silly. But when she sings it resonates with me strongly. I get the feels. It’s a sensation of deep…
Take 1 Security Podcast: Episode 20
Topics for this episode: News and analysis [ ] Ads using high frequency sound to communicate across devices. The ultrasonic pitches are embedded into TV commercials or are played when a user encounters an ad displayed in a computer browser. While the sound can’t be heard by the human ear, nearby tablets and smartphones can detect it. When…
How to Deploy Splunk AD Monitoring in 437 Easy Steps
I just had the privilege of getting Active Directory data into Splunk. It was pretty straightforward. Here are the steps. Consult two priests (preferably an old and a young one) Install 47 plugins on the Splunk indexer. Those won’t do anything. Just install them. Install 19 more plugins on your Domain Controller. Those also won’t do anything. Install…
Pacifism During Wartime
As an ex-Indian civil servant, it always makes me shout with laughter to hear, for instance, Gandhi named as an example of the success of non-violence. As long as twenty years ago it was cynically admitted in Anglo-Indian circles that Gandhi was very useful to the British government. So he will be to the Japanese if they get…
Expect Expanded Concealed Carry Laws in the United States
“There are multiple casualties and confirmed fatalities,” San Bernardino Police spokeswoman Sgt. Vicki Cervantes told reporters. Source: San Bernardino shooting: Multiple deaths reported – CNN.com Another week, another mass shooting. One thing that can be predicted to come out of all this is expanded concealed carry laws. Yes, expanded. Basically, the population is about to demand of its…
The Mind of a Compatibilist
Compatibilists are often quite confused. Most pivot between two different nonsensical ideas: I can break the laws of physics! Me being determined doesn’t mean I don’t have choice. You realize these are in conflict, right? Here’s a great example of someone suffering from the first problem. You’ve probably heard about causal chains. Well, all of the prior causes…
Adjusting Free Will Skepticism Based on Necessity
I wrote recently about Lupus Liberalism, an affliction where liberals turn their backs on what they’re supposed to be defending (humanism) by attacking other liberals who are attacking intolerant beliefs. It’s simpler than it sounds. Anyway, this got me thinking about applying that same concept to other beliefs, including beliefs that I have and that I care a…
- 1
- 2
- 3
- …
- 13
- Next Page »