Adam Caudill

#security

2021-08

• Win by Building for Failure Aug 22
• On Apple, Privacy, and Device Control Aug 10

2021-07

• Declaring War on Ransomware Jul 4
• On Automatic Updates and Supply Chain Attacks Jul 3

2021-06

• LinkedIn: The Breach That Isn’t but Is Jun 30

2021-05

• Best Practices vs Inane Practices May 18

2020-12

• Proposal: Association of Security Researchers Dec 23
• The (Questionable) Future of YAWAST Dec 7

2020-11

• Developers, Developers, Developers Nov 28

2020-05

• Dezinformatsiya May 23

2020-04

• Book Review: Active Measures Apr 24

2020-03

• Checklist: Starting a Security Consulting Firm Mar 27

2020-01

• YAWAST: News & Mission Jan 5
• Utilitarian Nightmare: Offensive Security Tools Jan 4

2019-04

• YAWAST v0.7 Released Apr 19

2019-03

• TLS: 64bit-ish Serial Numbers & Mass Revocation Mar 10

2017-10

• Exploiting the Jackson RCE: CVE-2017-7525 Oct 4

2017-07

• Breaking the NemucodAES Ransomware Jul 13

2017-04

• Confide, Screenshots, and Imaginary Threats Apr 22
• Shadow Brokers, Equation Group, Oh My… Apr 14
• Looking for value in EV Certificates Apr 9
• YAWAST 0.5 Released Apr 5

2016-09

• On the need for an open Security Journal Sep 28
• Ruby + GCM Nonce Reuse: When your language sets you up to fail… Sep 19
• Testing for SWEET32 with YAWAST Sep 16

2016-08

• Developers: Placing Trust in Strangers Aug 17

2016-07

• Threat Modeling for Applications Jul 20

2016-05

• When Hashing isn’t Hashing May 23
• Seamless Phishing May 22
• PL/SQL Developer: HTTP to Command Execution May 1

2016-03

• Crypto Crisis: Fear over Freedom Mar 13

2016-02

• PL/SQL Developer: Nonexistent Encryption Feb 2

2015-12

• Verizon Hum Leaking Credentials Dec 26
• Juniper, Backdoors, and Code Reviews Dec 22
• Dovestones Software AD Self Password Reset (CVE-2015-8267) Dec 18
• Much ado about Juniper Dec 18
• The Manifesto Dec 16
• The Door to Nowhere Dec 12

2015-11

• Responsible Disclosure Is Wrong Nov 19

2015-05

• Making BSides Knoxville May 18

2015-04

• Crypto Front Door: Everyone Welcome! Apr 13

2014-12

• Irrational Attribution: APT3.14159 Dec 21

2014-10

• On The Ethics of BadUSB Oct 3
• Making BadUSB Work For You – DerbyCon Oct 3

2014-08

• SMIMP at the DEFCON Crypto Village Aug 16

2014-07

• On Strong Identity Management Jul 27
• Jumping through hoops… Jul 23

2014-04

• phpMyID: Fixing Abandoned OSS Software Apr 19

2014-03

• Security By Buzzword – Why I don’t support Ensafer Mar 23

2013-11

• Evernote for Windows, Arbitrary File Download via Update Nov 3

2013-10

• VICIDIAL: Multiple Vulnerabilities Oct 23

2013-04

• Linode: Another Breach Notification Gone Wrong Apr 13
• Security Done Wrong: Leaky FTP Server Apr 5

2013-03

• First, Do No Harm: Developers & Bad APIs Mar 27
• Evernote: XOR & Passwords Mar 4