[ Back In The Saddle Again ]

It's been a while since I've posted to this blog. I haven't disappeared, I have just been taking a break from doing research since Black Hat Vegas. I'm currently involved in a couple small projects, one of which could turn out to be pretty cool. I'll make sure to post any developments.

[ Black Hat Vegas 2008 Recap ]

First of all, I want to say thank you to all the people who came out and supported Nate, John and I for our talk.


We had a great turnout despite the fact that we were talking in the same time slot as such notable speakers (Dowd, Sotirov, Rutkowska, MSRC, Grossman). The audience was great (including the huge EY contingent that showed up) and we got some wonderful feedback after. We also did a podcast with Rich Mogull of Securosis right after the talk which you can find here.

On top of all this, Nate, Billy Rios and I won the Pwnie Award for Best Client Side Attack (which should have gone to Mark Dowd btw). This year's Black Hat Vegas (only my second) was a great time. I got to meet some great people and hang in some swanky places.

Special thanks to the entire Black Hat crew for having us come out and give our talk.

Now it's time to get back to the research ;)

[ We're In @ Black Hat Vegas ]

Holy crap! I can't believe we actually got in!


The first computer security conference I ever attended was Black Hat Vegas last year and now I'm going to be speaking there with Nate McFeters, Billy Rios and John Heasman. Crazy. I've spoken now at Black Hat Japan, Federal and Europe, but Vegas is The Big Show. Thanks to everybody who voted for us.

Our talk is entitled "The Internet Is Broken: Beyond document.cookie - Extreme Client Side Exploitation". We're going to show some pretty sick stuff there and it's going to be a two-session deal. Prepare yourself for a brain-meltingly awesome talk.



See you in Vegas!

[ I Survived! ]

Well, I've safely returned to the States with some great memories and some new friends. As you can see below, I narrowly escaped Death.


I had an awesome time at Black Hat Europe. I got to briefly meet FX finally. I saw his talk at Black Hat Federal on Cisco IOS and forensics and really enjoyed it. I also got to hang out with my good friends Nate, Billy, Nitesh, David and Tiller. Unfortunately, even though I've seen their presentation twice now I don't remember the URL for David and Tiller's blog.

Anyway, I had a blast and as always I came away with a ton of new ideas.

[ Black Hat Europe ]

After a nine hour flight and around four hours of sleep I'm finally in Amsterdam.


I've registered for Black Hat and taken in some of the sights that Amsterdam has to offer and am very much enjoying myself so far. Nate and I walked down to the Waag yesterday. Apparently it's a restaurant that looks a bit like a small castle and used to be a weigh house, whatever that is.

Too bad it's so cold here, but I come from a cold place so I guess I should stop whining. Can't wait for the talks to start on Thursday!