The Windows Security App 🔗
Going back as far as the 2004 release of Windows XP SP2, Windows has offered various GUIs to help users understand the security state of their PC. In [...]
text/plain
Posts
Attack Technique: AI Clones 🔗
Attackers are adept at using new technologies to enhance their attacks. Earlier this afternoon, for example, I got call from “American Express” sugges [...]
Fiddler in 2026 🔗
I’ve shared the stories behind the Fiddler Web Debugger a fair bit over the years, in the Fiddler Book, in a talk at the CodeMash conference in 2015, [...]
Web Security is Too Hard 🔗
It started innocently enough. I saw a tweet about a new product offering from one of my favorite companies, Cloudflare. Neat! I clicked through to the [...]
Authenticode and UAC 🔗
When a user attempts to run a file with elevated privilege, Windows will show a User Account Control elevation prompt that asks whether the user trust [...]
Attack Techniques: Fake Captive Portals 🔗
When a device first joins a network, the upstream network hardware has full control over its traffic and can allow/block any packets sent from the dev [...]
Offboarding from Microsoft Defender for Endpoint 🔗
Microsoft Defender for Endpoint is a paid security product that extends Microsoft Defender Antivirus (included for free in Windows) with enterprise ca [...]
Guidelines for URL Storage and Comparison 🔗
This document contains some thoughts about the storage and comparison of URLs, common operations crucial to the correct function of security software [...]
Driving (Large) Electric 🔗
Back in 2022, I brought home a new 2023 Nissan Leaf S and I’ve had a blast driving it since. In hindsight, it was one of my best purchases in a long t [...]
A Quarter Century in Tech 🔗
Today marks my 25th anniversary of full-time work in tech. June 18, 2001 – My third “New Employee Orientation” at Microsoft, starting my full-time emp [...]