Articles

(There’s a ToC because this article ended up becoming way too long; I hope you find it useful) So at DEFCON 34 I sat down at the Kubernetes CTF and had one objective- complete all of the “Learning CTF” provided by the awesome folks who run the Kubernetes CTF with an agent harness that I had set up. With permission from the awesome folks at the Kubernetes CTF, I also ran it against the Competitive CTF on Sunday. Let’s talk about my preparation, hurdles I encountered, things that I would like to refine, and my results. ...

I know I don’t write a whole lot here anymore; granted, I was never a huge blogger. Most of the writing “itch” I have has gone into writing articles elsewhere, and posting links to them here. Not that this is a bad thing! I appreciate that people appreciate the things I want to understand better and therefore research enough to write about. I hope that continues. Anyway, here’s the article: https://bok.idpro.org/article/id/123/

Since the articles I had in 2600 have been out for some time, I figured I would post them here in the event that someone may want them in the future. I am presenting them as I wrote them, not as they had been edited in 2600 (Which admittedly was not a ton of editing). I have also done a tiny amount of additional editing to add headers and so on. Since I do this work mostly in Markdown, you’ll see there’s, well, Markdown-styled things in here. ...

Since the articles I had in 2600 have been out for some time, I figured I would post them here in the event that someone may want them in the future. I am presenting them as I wrote them, not as they had been edited in 2600 (Which admittedly was not a ton of editing). I have also done a tiny amount of additional editing to add headers and so on. Since I do this work mostly in Markdown, you’ll see there’s, well, Markdown-styled things in here. ...

Since writing my last article for IDPro on zero trust, the NSA went and put out their own guidance on zero trust (Which is actually pretty solid). I wrote a bunch on trying to compare the two- they’re a lot more alike than I anticipated, and I suppose that’s a good thing. It really feels like the US government has (Collectively) come out swinging on this topic, and I don’t think this is a bad thing at all. ...