Don't archive everything* right away
May 25, 2023
A drawback I haven't seen discussed: The use of popular web archive tools in ongoing investigations could tip-off whoever owns the website
Should you sell your personal data?
May 11, 2023
Let's take a look at companies that claim to help you regain control of your data 🔐
Solving monkey CTF challenges with monkey CTF tactics (ISSessions CTF 2022)
Mar 07, 2022
It has been said that given enough time at a keyboard a monkey would write the complete works of Shakespeare. In ISSessionsCTF I (unintentionally) proved a monkey would probably solve some CTF challenges too.
Finding Relationships Between Sites From a Page Source
Jun 01, 2020
Many third party services use unique IDs to keep track of which of their customer's data is being requested. How can this be used to find sites that are related to each other?
The Dilemma of Releasing Tools
May 17, 2020
What should you do when the potential negative impact of what you make outweighs the positive?
Context: How a Simple Bug Can Be Dangerous (Dutch Government VRP)
Feb 29, 2020
A couple weeks ago, after finding out that the Dutch Government has a vulnerability disclosure program— and that they give out tshirts for valid findings— I decided to give it a shot over the weekend.…