Attacks on Your Fly Is Open

400

Sun, 28 Sep 2025 07:00:00 -0500

Did you really think I would stop when I got to 365?

Happy New Year!

Thu, 18 Sep 2025 07:00:00 -0500

Happy New Year!

Today, September 18, 2025, is the 261st day of 2025, but for me, it’s December 31.

Calculating Value

Tue, 03 Jun 2025 07:00:00 -0500

Today is the 154th day of 2025, and I’ve currently contacted 170 organizations to inform them that they have a compromised system connected to the Internet.

Beyond the Alert: How External Breach Notifications Should Reshape Your Security

Wed, 07 May 2025 07:00:00 -0500

I notify many, many organizations that they have compromised systems.

Some people collect coins, and some collect stamps. I spend some of my free time each week looking for hacked systems on the Internet.

Hey… it's a hobby.

Learning From The Outside: A Wake-Up Call For Security Teams

Tue, 10 Dec 2024 17:00:00 -0500

I spend significant time each week trolling through Google…

Opimized and Improved

Sun, 10 Nov 2024 14:00:00 -0500

Improving performance may be easier than you think.

Seeing Everything

Tue, 22 Oct 2024 15:30:00 -0500

What could you learn if you could see every attack?

Knowledge Problems

Tue, 22 Oct 2024 15:00:00 -0500

Sometimes people think they know more than they do…

Ethereum Bro, Go Home

Fri, 07 Jan 2022 14:29:24 -0600

I’m kinda done with the whole entitled mindset associated with a lot of the cryptocurrency community.

The Revolution Will Not Be Televised - It'll Be Printed

Sun, 19 Dec 2021 06:41:08 -0600

If you have the tools and the patience to look, you can find all sorts of crazy stuff going on out there on the Internet. Seriously… it rarely fails to disappoint.

"batman"

Thu, 10 Jun 2021 08:21:57 -0500

So, sometimes the Internet is just… well… weird.

And I suppose, sometimes, I am too…

RDP Hide-n-Seek

Fri, 21 May 2021 14:12:44 -0500

If you’ve ever thought that moving RDP to a non-default port was a security measure, don’t.

Call me Ishmael

Mon, 05 Apr 2021 07:40:09 -0500

I know you’ve seen my messages. I don’t understand your choice.

Why are you ignoring me?

"Mr. Watson, come here. I want some career advice."

Tue, 09 Mar 2021 23:37:25 -0600

Sometimes, I like to fire up a shell on one of my honeypot boxes, tail -f the logs from one of the tools I’ve written, and just sit and watch the attacks fly by.

That got me to thinking: What the heck is going on with SIP?

Putting the ED in EDU...

Fri, 05 Mar 2021 16:17:36 -0600

I seem to spend a lot of this blog ranting about blackhat SEO attackers.

You Done Brang It on Yourself

Tue, 02 Mar 2021 16:29:23 -0600

Don’t count on your CMS to do the right thing.

Wait... Wut?

Thu, 15 Sep 2016 16:00:06 -0600

With age, there comes a certain level of acceptance of our limitations.

A Miracle In University Park

Thu, 08 Sep 2016 15:32:20 -0600

We had our carpets cleaned yesterday. If anything is to blame, it’s probably that.

Fugget About It

Wed, 07 Sep 2016 15:18:55 -0600

Being attacked from one of our IPs? Fill out our online form and let us know…

Why Lie?

Mon, 11 Jul 2016 13:59:13 -0600

People lie to me.

A lot.

What Clinic Are You With?

Tue, 05 Jul 2016 11:54:48 -0600

I’ve said it before. I hate the phone calls.

MNSM for Dummies

Mon, 20 Jun 2016 00:05:42 -0600

Monitor our network? How quaint!

If You Leave a Hacker a Default Password...

Mon, 06 Jun 2016 21:58:33 -0600

In the interest of making security approachable, I’ve decided to attempt to bring proper security methodology down to a level that everyone can understand.

Now You're Messin' With 'Merica

Fri, 03 Jun 2016 21:33:11 -0600

Crime is wrong, but some crimes are more wrong than others…

Maybe You Should Do More Research...

Wed, 01 Jun 2016 18:47:39 -0600

Everyone needs a hobby. Mine is, I’ll admit, probably a bit odd. I collect justice…

Danger, Will Robinson!

Tue, 31 May 2016 18:29:18 -0600

Harry? David? Oh man, I really like those guys…

Shell Collecting

Fri, 27 May 2016 17:01:54 -0600

Running a honeypot has turned me into a bit of a “collector.”

Stoopid *

Tue, 24 May 2016 16:48:53 -0600

Mirrors are a wonderful invention.

And... Who Are You?

Wed, 18 May 2016 16:18:25 -0600

I really hate the phone calls… they are, unquestionably, the worst.

Adventures in Databasing

Tue, 17 May 2016 15:37:34 -0600

I am a database bubble-head…

If I Cant See It, It Isn't A Problem...

Mon, 16 May 2016 14:50:56 -0600

Yes. Yes, it is…

The Russian Linking Rings

Sun, 15 May 2016 15:55:40 -0600

There is a classic magic trick known as The Chinese Linking Rings where apparently solid metal rings appear to link together, unlink, and are made into chains and various fancy patterns. Everyone knows that all the rings aren’t solid, but the fun is in how the magician dupes us into not seeing the “gimmicked” ring.

Those Crazy Belgians

Thu, 12 May 2016 15:14:41 -0600

It all began with some Python code that wouldn’t run…

Partly Cloudy With a Chance of a Colon Clense

Tue, 10 May 2016 14:18:24 -0600

Let’s talk about one of the lesser known dangers of running a website with an open redirect, shall we?

Toyz From China

Tue, 10 May 2016 13:28:55 -0600

Earlier today, I was “given” some toyz from China.

The Kids Are OK OK OK OK OK OK OK

Mon, 09 May 2016 13:14:45 -0600

I’m seeing a disturbuingly high incidence of this lately:

Mirror, mirror on the 'Net...

Mon, 09 May 2016 08:23:41 -0600

…just how stupid can they get?