HA - DR in SQL Server - Putting the Puzzle Pieces Together and Planning for the Future
Comprehensive overview of SQL Server's HA/DR capabilities, exploring options across Linux and Windows, discussing tradeoffs, and introducing upcoming developments in disaster recovery and high availability.
Tumblr's Vision - Platforms With Purpose
Explore Tumblr's vision and ethical responsibilities in social media with founder David Karp, discussing user demographics, social impact, and online discourse.
Autonomous Microservices Don't Share Data. Period.
Explore autonomous microservices architecture, focusing on data independence. Learn why technology alone doesn't solve coupling issues and discover strategies for truly autonomous services.
Some Assembly Required
Explore building a JIT compiler for Ruby from scratch, covering VM mechanics, JIT integration, and machine code generation, all implemented in pure Ruby.
A Month Off - Migrating a Robot Controller from the Proprietary INtime RTOS to Linux
Explore the journey of migrating a robot controller from INtime RTOS to Linux, including technical challenges, realtime requirements, and implementation strategies for system objects and processes.
Detecting the Elusive Active Directory Threat Hunting
Learn advanced techniques for detecting and hunting threats in Active Directory environments from security expert Sean Metcalf.
Trials and Tribulations of Setting up a Phishing Campaign - Insight into the How
Explore challenges and strategies for effective phishing campaigns, covering tools, frameworks, and key considerations for successful implementation and detection avoidance.
How I Inadvertently Outsourced My IT Job to a Fancy Bear
Discover how a cybersecurity expert accidentally outsourced their IT job to a Russian hacking group, exploring the risks and implications of unintended data exposure in the digital age.
Incident Response Evolved - A Preventative Approach to Incident Management
Explore preventative incident management strategies, evolving threat landscapes, and real-world case studies to enhance your organization's cybersecurity preparedness and response capabilities.
Next-Generation React Databases
Highly scalable, reactive database for React and React Native. Offers lazy loading, relational queries, and cross-platform support. Optimized for performance and built-in sync capabilities.
Lifting & Shifting Entire React Ecosystem into New Languages
Explore the process of migrating React, Jest, and GraphQL to a new language and system, accelerating maturity and uncovering hidden issues in React and TypeScript.
We Are the Enemy of the Good
Explore how perfectionism in cybersecurity can hinder progress and effectiveness, and learn strategies to balance excellence with practicality in the field.
3rd Party Data Burns
Explore third-party data analysis techniques, focusing on normalization, wildcards, and domain keys. Learn valuable lessons for effective red-teaming and data management.
Defeating the Transparency Feature of DBI
Techniques to break transparency in dynamic binary instrumentation tools, exposing limitations and enabling detection of analysis environments for malware and binary applications.
Mobile Device Mismanagement
Explore vulnerabilities in Mobile Device Management solutions, their impact on enterprise security, and the overlooked risks in deploying these widely-used security products.
Investigating PowerShell Attacks
Explore techniques used by attackers to exploit PowerShell for command-and-control, lateral movement, and persistence. Learn to collect and interpret forensic evidence from real-world incidents.
Errata Hits Puberty - 13 Years of Chagrin
Exploring the attrition.org Errata project's 13-year journey as an IT and security industry watchdog, including insights into its history, process, impact, and future direction.
Flowers for Automated Malware Analysis
Explore advanced malware obfuscation techniques that bind execution to specific host environments, making automated analysis ineffective. Learn about the arms race between malware authors and security practitioners.
Practical Attacks Against MDM Solutions
Explore novel proof-of-concept attack techniques on Android and iOS devices that bypass traditional mobile malware detection and circumvent common Mobile Device Management features.
Energy Fraud and Blackouts - Issues with Wireless Metering Protocols
Análisis de seguridad del protocolo inalámbrico M-Bus para medidores inteligentes, revelando vulnerabilidades que amenazan la privacidad, integridad y fiabilidad de las redes eléctricas avanzadas.
Pass the Hash 2 - The Admin's Revenge
Explore advanced strategies to detect and prevent Pass-The-Hash attacks in Windows networks, addressing vulnerabilities and enhancing enterprise security against lateral movement.