Sim Nim Tau
Breach Report! Why am I writing about healthcare breach reports? Well I like data, especially unsexy data. Also a couple friends (you might know who) and I are looking into some unsexy parts of industries that are underserved and in need of help to make impact for the better good …
I have been pretty facinated with type promotion bugs in the recent months. Why? Because I love when there is some crazy mixed data types with arithmetic. Something about math (in)correctly implemented always makes me geek out. For those not familiar with Type promotion, it's when data type values …
Just an update Took some weeks off from the nightly grind. Although I mostly kept up with current events, research, reading, and watching some past con talks. Now it's Hacker Summer Camp time, and all the conferences are in full swing. I probably won't be attending them, but I do …
Distracted.. This post is more about a side quest, as I was a bit distracted awaiting some responses on some UAF and Format string vulnerabilities submitted to a couple bug bounty programs. In order to keep momentum going and my thirst for knowledge well fed with regards to vulnerability discovery …
Introduction to My Chronicles If you've been keeping up with my adventures, you know I've dived back into low-level vulnerability discovery and research. Recently, I took some time to refresh my understanding of low-level code (assembly) and architecture review, particularly of ARM systems. Given that most systems I work on …
Why? Because why not? I've already built a couple of LLM-specific focus bots that are truly locally hosted. But, documenting the process? That's new to me. Plus, I aimed for this to be a self-contained/isolated application. So, in this event, I wanted to document the basic setup since I …
Earlier, I was having a discussion with some friends about what feeds into alert severity. Given our background in cybersecurity, we've seen our fair share of security alerts, but also a fair amount outside of the security domain (think IT, SRE, DEVOPS, Compliance, Business risk, etc.). So, what goes into …
macOS setup on silicon Setting up virtual machines (VM) has always been fun for me, yet it seems to be a practice from the past. When setting up a VM of macOS Sonoma on Apple Silicon, particularly the Apple M1 Max with 64GB of memory, I was in search of …
Diving Back into Code I have been delving back into some lower-level code, specifically assembly. The goal is essentially a refresher for me on reverse engineering and exploit development techniques. It has been refreshing to relearn some of the techniques and tooling available today. Currently, I have been experimenting with …
The topic of vulnerability management and prioritization has been garnering significant attention lately. Traditional methods of prioritizing vulnerabilities often rely on the Common Vulnerability Scoring System (CVSS) or severity ratings, such as critical, high, medium, and low. However, CVSS and severity ratings lack context, limiting their effectiveness as prioritization systems …
A Day in the Life: Update Hey there, folks! It's been a hot minute since my last update. Between juggling a million different things, I had to set up an organized way to operate on a daily basis that is sustainable. But enough of that, let me catch you up …
The past extended weekend (MLK day) was full of fun with food and friends. A few items worth noting: Our LGDs remembered a past command leave it , during a situation when needed. TLDR; we were walking in the pasture with friends who also has a little one amongst us by …
The shepherd partnership training with LGDs continous to be an incremental success. Some days better than others. Even though its been raining almost two weeks straight, I continue to partner and train with them at least twice a day. One of our dogs is a bit ahead of the training …
Lots of updates since the last post, so I will just summarize in bullet points. Some of the bullet points will be future post themselves: ChatGPT fun and learnings LGD training has been going fairly well with "1%" improvements each day Having it rain almost none stop for the last …
Today marked the start of sheperd partnership training with our LGDs. As if you probably already have read ( Holiday fun! ), having an roaming LGD can be part of their duty but in today's modern world for sheperding and guarding livestock, the work of an LGD only typically needs to expand …
Merry Christmas and Happy holidays! I have this post under category thought , which in reality every post is technically under the category thought . Maybe I should give more thought into other categories :P. Today was pretty eventful. To jump right in, it was a day of baking, drinking and eating …
Just adding a second post for local deving. Helps see theme layout. Ill even publish this because why not, it was a thought
This is the first little thought to get the site up an running. More to follow.