-
New Aug 4, 2026
Web Security is Too Hard
It started innocently enough. I saw a tweet about a new product offering from one of my favorite companies, Cloudflare. Neat! I clicked through to the site and there it is: And huzzah!, my preferred...
-
New Aug 3, 2026
Authenticode and UAC
When a user attempts to run a file with elevated privilege, Windows will show a User Account Control elevation prompt that asks whether the user trusts the file to run. For a regular file, the user...
-
New Aug 3, 2026
Attack Techniques: Fake Captive Portals
When a device first joins a network, the upstream network hardware has full control over its traffic and can allow/block any packets sent from the device from reaching the Internet. Many public...
-
New Jul 22, 2026
Offboarding from Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is a paid security product that extends Microsoft Defender Antivirus (included for free in Windows) with enterprise capabilities, including a full EDR product that...
-
New Jul 17, 2026
Guidelines for URL Storage and Comparison
This document contains some thoughts about the storage and comparison of URLs, common operations crucial to the correct function of security software like Microsoft SmartScreen. Importantly, URLs are...
-
New Jul 6, 2026
Driving (Large) Electric
Back in 2022, I brought home a new 2023 Nissan Leaf S and I’ve had a blast driving it since. In hindsight, it was one of my best purchases in a long time– it’s super fun to drive,...
-
New Jun 18, 2026
A Quarter Century in Tech
Today marks my 25th anniversary of full-time work in tech. June 18, 2001 – My third “New Employee Orientation” at Microsoft, starting my full-time employment after University. I...
-
New Jun 10, 2026
Participatory Extensible Security
In the past, I’ve explained how security products combine sensors and throttles with threat intelligence to protect users and devices from attack. I’ve also outlined how the evolution of...
-
New May 7, 2026
Spring 10Ks
After two solid half-marathons early this year, I was excited for the start of the 10K season to see whether I could keep improving my times. I had mixed results. Cap10K On Sunday, April 12th, I awoke...
-
New May 5, 2026
Cybersecurity Metaphors
Uneven Protection Attacks flow like water: if you have a hole in your defenses, attacks will flow through that hole. Unless they’re trying to win a prize or show off, attackers do not bother...