Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Marc Rogers
My Thoughts on FaceID
FaceID keeps on getting more and more interesting. According to Vietnamese Security firm Bkav, they were able to unlock the device using a 3D printed mask, hand made prosthetic nose, and 2D printed eyes. This seems unlikely, especially given what Apple has said previously about testing they did to secure FaceID. What seems more likely is that Bkav were able to “weaken” the Neural Engine’s model by training it against the mask, essentially poisoning it and creating a backdoor.
SARS-CoV-2 Drug Discovery: Targeting Viral Ion Channels
Ion channels are well validated drug discovery targets based on their widespread distribution in the human body and involvement in many critical activities within the brain, heart, smooth muscle and endocrine organs.
Marc Rogers on CTI League's "Hackers without borders"
A fascinating chat with Marc Rogers, head of cybersecurity at Okta and long-time SecOps lead for legendary hacker conference DEFCON. We talk about the CTI League, an amazing collective of hackers helping to secure hospitals and take down bad actors aiming to use COVID-19 as a security threat. Plus a look at the future of passwords and where authentication is going next. Want to help CTI League? Here’s the link to all the details: https://cti-league.com/
How we Hackers and Makers can help save lives during the pandemic.
Across my timelines I see many of my friends looking for ways to help others. You fill me with joy. First and foremost a few thoughts on mental health. 1. The internet is our home. We above all in society are best equipped to handle physical isolation . We have huge support networks and deeply close connections. 2. Most in society are not like us. We can help them. I see non internet friends panicking about what they can do in isolation and their fear is visible.
Ion Channels Prominent at Key U.S. and U.K. Conferences
Ion channels continue to rise in prominence in both academic and commercial research laboratories. Metrion Biosciences, alongside Sophion Bioscience, Nanion Technologies, Evotec, and SB Drug Discovery sponsored the “Ion Channels in Drug Discovery XIX” satellite meeting held on Friday, March 1, 2019, at the Baltimore Convention Centre, as part of the 63rd annual meeting of the Biophysical Society.
Why I Hacked Apple’s TouchID, And Still Think It Is Awesome.
By now, the news is out —TouchID was hacked. In truth, none of us really expected otherwise. Fingerprint biometrics use a security credential that gets left behind everywhere you go on everything you touch. The fact that fingerprints can be lifted is not really up for debate— CSI technicians have been doing it for decades.
Follow-up to my Open Letter.
Can you believe it has been more than four weeks since DEF CON wrapped up? Im just shaking the ConCrud and still wake up every night at 4am wanting a status update. Anyway, I wanted to follow up, clarify a few things, and let you know what the next steps will be. This blog post will focus entirely on the DEF CON side of things. A blog in the not too distant future will look at tackling the much bigger problem of these security measures going national.
Open letter to the Hacker Community.
An open letter to the Hacker Community. I have been known by many names. Cyberjunky, Cjunky, CJ, Marc. I am a Hacker and a father. These two things shape my life and generally fill it with joy. I have done many things in my time on this blue marble flying through space. I have done things I probably shouldn’t have, like being somewhat responsible for the first case of “Hactivism” (yes my CDC brothers I know you coined the name), through to owning most of the internet through the 90’s.
Congress Must Act to Protect Military Readiness | Commentary
Military readiness and federal regulation of the greater sage grouse a bird are not things the average American would consider connected but unless Congress acts, they may well be. The U.S. Fish and Wildlife Service is imposing onerous restrictions on the Western United States, ostensibly to protect the grouse. While the FWS is eager to restrict human activities on these and other lands, the negative effects appear to come with few conservation benefits for the bird.
Of Phishing Attacks and WordPress 0days
Proxying around 5% of the Internet’s requests gives us an interesting vantage point from which to observe malicious behavior. However, it also makes us a target. Aside from the many and varied denial of service (DDoS) attacks that break against our defenses, we also see huge number of phishing campaigns. In this blog post I'll dissect a recent phishing attack that we detected and neutralized with the help of our friends at Bluehost.
Will the madness never end? Komodia SSL certificates are EVERYWHERE
So, as people have started turning over stones, looking to see how common these Komodia certificates are, some surprising (and depressing) things are beginning to surface. It does appear that Komodia is behind this. It appears that Komodia uses the same framework for many, many products. Here’s some that have been found so far: Komodia’s “Keep My Family Secure” parental control software.
Lenovo installs adware on customer laptops and compromises ALL SSL.
A pretty shocking thing came to light this evening – Lenovo is installing adware that uses a “man-in-the-middle” attack to break secure connections on affected laptops in order to access sensitive data and inject advertising. As if that wasn’t bad enough, they installed a weak certificate into the system in a way that means affected users cannot trust any secure connections they make – TO ANY SITE. We trust our hardware manufacturers to build products that are secure.
Response to the latest Sony comments by FBI Director Comey.
Here’s my responses to the latest comments on the Sony hack, as presented by Director James Comey at the International Conference of Cyber Security in New York this morning. “The tools in the Sony attack bore striking similarities to a cyber attack the North Koreans conducted in March of last year against South Korean banks and media outlets.” This is something they pointed out in their first press release.
Why attribution of North Korea in the Sony case worries me.
Attribution is hard. Out of all the digital forensic disciplines, it is probably the hardest. Digital forensics is nothing like what you see on TV – on so-called cyber-CSI shows, the investigator types in a few magical keystrokes and evidence comes flooding out of the completely unlocked computer. A few more keystrokes and a magical graphical app “backtraces” the perp all the way to his house switching on his webcam and locking his bedroom door. The reality is far less sexy.
Why I *still* dont think it’s likely that North Korea hacked Sony.
So the FBI has come out and said it. North Korea was behind the Sony hack. With some pretty strongly worded rhetoric, they lay out exactly why they feel confident enough to lay the blame for this criminal act at the doorstep of a foreign nation. Finally, they express their deep concern about how these events unfolded, stating that these events pose “one of the gravest national security dangers to the United States”. Pretty strong stuff. World-cyber-war One here we come.
Why the Sony hack is unlikely to be the work of North Korea.
Everyone seems to be eager to pin the blame for the Sony hack on North Korea. However, I think it’s unlikely. Here’s why:1. The broken English looks deliberately bad and doesn’t exhibit any of the classic comprehension mistakes you actually expect to see in “Konglish”. i.e it reads to me like an English speaker pretending to be bad at writing English. 2. The fact that the code was written on a PC with Korean locale & language actually makes it less likely to be North Korea.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Marc
Contact Marc, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack