~/blog
Every transmission from the lab — adversarial AI research, offensive security tutorials, threat analysis, and the legacy Dr. Chaos archive.
238 articles
I was recently in a very high-cost (around $6K), one-week security course in San Francisco. You can infer the institution. The instructor was dynamic, and the topic was focused on technical hacking. A how-to for breaking into computers, detecting the break-in, etc. At the end of the week there was a
Cyber Fraud Affects 5 Percent of the Planet’s GDP The Association of Certified Fraud Examiners (ACFE) estimates typical organizations loses 5 percent of their revenues to fraud each year (ACFE Report). When fraud occurs, the integrity of the data is impacted; intellectual property is lost, stolen, o
Information Security professionals are akin to our policemen. They are equipped with advanced firewalls and porn filters, secure email and web traffic gateways, encryption keys, IPS signatures, security policies, and intrusion detection systems. The best of them are adept at using advanced threat pr
In light of all the cyberattacks that have been well publicized as of late, we see the increasing need for skilled IT security resources to both protect against and respond to rapidly evolving cyber-threats. IT professionals tasked with protecting their companies’ cyber assets are facing growing cha
FISMA is the Federal Information Security Management Act of 2002. The goal of FISMA is to encourage and to hold government agencies in securing their data and information. Additionally, it encourages organizations that do business with the government to secure their information as well. According to
Most people incorporate commonly used words as their passwords. Studies show when people select random passwords, there is very little randomization to the words. Furthermore, as more large sites have their user’s passwords leaked, attackers are figuring out common password obfuscation techniques pe
Kali Linux does not come with SSH enabled. SSH is the preferred method of remote management for most Linux based systems. Secure Shell (SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services betwe
Lately there has been some articles and conversations around the security profession, particularly the ‘how to get started’ aspect. My good friend, Aamir Lakhani wrote a great article on getting started in cyber security (https://www.doctorchaos.com/getting-started-with-a-career-in-cyber-security-an
The Information Security Profession – Where do I Start? I am often asked by individuals to provide advice or guidance on how to get started in the field of information security. Many college students tell me they want to be a hacker, an IT systems penetration tester, or other type of cyber security
Hydra is a very fast and effective network login cracker. It will help you perform brute force attacks against SSH servers, VNC, and other services. When you launch Hydra it will launch the GUI in Kali, however in this tutorial we will use xHydra, which is the command line version of the tool. The c
Bitcoin is a faith-based currency. That means its value is derived from what people think its worth and are willing to pay for it. It is very similar to a natural resource because it (1) is reasonably difficult to produce, (2) it has a limited finite supply, and (3) it is recognized to have value.Th
The retail and service industry is costly in terms of demands due to the difficulty of managing inventory and precious shelf space. Retailers must carefully plan when to put an item on sale, where to place the item, when to restock the item, and balance understand the potential for opportunity when