Bejtlich Books Explained

A reader asked me to explain the differences between two of my books. I decided to write a public response. If you visit the TaoSecurity Books page, you will see two different types of books. The first type involves books which list me as author or co-author. The second involves books to which I...

OkCupid: An XSS bug was fixed due to my report, but I didn't submit it through the h1

I wasn't notified of the security process, and received no bounty. On Jan 08, 2015 at 01:22AM UTC OkCupid User Feedback wrote: don't hover over this if you put this on your profile and they hover over it, they will "like" your profile this can be used to execute arbitrary clientside code...

Brad Arkin on Adobe Reader Zero-Day Flaws and Security Response

Dennis Fisher and Ryan Naraine talk with Brad Arkin, Adobe’s director of product security and privacy, about the new zero-day flaws in Acrobat and Reader, Adobe’s security response process and the challenges of getting updates to end users. Podcast audio courtesy of sykboy65 Subscribe to the...