Spring, Bugs, and the Crowd

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?

   by James Mickens, Harvard University.

   Watch : USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
2. /02

   The Journey to Try Harder: TJnull’s Preparation Guide for PEN-200 PWK/OSCP 2.0

   After releasing the first version of my PWK/OSCP guide, Offsec released an update to the PWK/OSCP and included a key classification system to help students understand how course designation work.

   Read : The Journey to Try Harder: TJnull’s Preparation Guide for PEN-200 PWK/OSCP 2.0
3. /03

   DEFCON 17: Failure

   Adam Savage, of MythBusters fame, talks about how he has screwed things up, lost friends and clients, and learned about himself in the process.

   Watch : DEFCON 17: Failure
4. /04

   CRLF + XSS + cache poisoning = Access to Github private pages for $35k bounty

   This video is an explanation of bug bounty report submitted by 17-years-old Robert Chen and 14-years-old Phillip on Hackerone to Github's private bug bounty program.

   Watch : CRLF + XSS + cache poisoning = Access to Github private pages for $35k bounty
5. /05

   Cybersecurity Ignorance Is Dangerous

   A new book gets the policy recommendations right while making technical errors that could undermine trust in its conclusions, by Tarah Wheeler.

   Read : Cybersecurity Ignorance Is Dangerous