Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Space Rogue
How Old-School Hackers Are Enabling the Next Generation of Offensive Security Professionals
As an industry, cybersecurity has come a long way since it first started in the late 1990s. Back then we didn’t have degrees in cybersecurity from prestigious colleges, because they didn’t exist. Most of us were just “hackers.” Fast-forward to today, and many of the industry’s founders, those same hackers, are leading security programs for some of the largest companies in the world.
Book Review: Cult of the Dead Cow
TL, DR: It’s a good story, not a history book. If you are looking for a good story with a message, read it. If you are looking for a nuanced description of what was happening in history, look elsewhere. The NYTimes called “The Cult of the Dead Cow: How the Original Hacking SuperGroup Might Just Save the World” by Joseph Menn, a great piece of storytelling, and I will agree, it is definitely a story. This is not a history book.
Why Your Organization Should Invest in Cybersecurity Insurance
The consequences of a data breach extend far beyond the reputational damage that results from negative news headlines. Unless you are part of a large, successful enterprise, you likely can’t afford the financial cost of a data breach. Although this cost is rising year over year, many organizations still don’t recognize the value of having cybersecurity insurance to cover potential data security incidents.
Why, When and How Often Should You Pen Test?
A penetration test — or pen test, for short — is a simulation of a possible cyberattack against an IT system performed by a professional with no malicious intent. The main purpose of such tests is to find exploitable vulnerabilities before anybody else does so that they can be patched and addressed accordingly. A pen test should end with the presentation of a formal document explaining and detailing all the findings.
Threat Demos From Black Hat and DEF CON
As the annual security week in Las Vegas drew to a close, cybersecurity professionals left Black Hat 2018 and DEF CON 26 armed with knowledge, renewed energy and no shortage of exposure to emerging Internet of Things (IoT) security flaws.
Android 9 in the Enterprise: Easy as Pie
It’s that time of year again, when Google releases its latest version of the Android OS. In keeping with the tradition of dessert-themed names, the newest edition is dubbed Android 9 Pie. Focusing on more efficient workflows, Pie brings an array of new features to get tasks done quickly. But the new release offers more than just productivity enhancements; it’s built around the user’s everyday life. Aside from ease of use, Android is focusing on how users actually interact with their devices.
Revisiting L0pht testimony - 20yrs later
Here is a copy of my introductory statement from the May 22, 2018 briefing where L0pht revisited its historic Senate testimony of twenty years earlier. (supporting links at the end.) Good Afternoon, I’m Space Rogue. Twenty years ago, out of fear of corporate retaliation through lawsuits Space Rogue was the only name I used.
The Continuing Evolution of Cyber
The Continuing Evolution of Cyber 2017.04.262021.02.07 By Space Rogue 1 comment I don’t think there is another word in the English language that provokes as much of an emotional response from information security professionals as much as ‘cyber’. In fact, half of the people who just read that last sentence are like yeah, but cyber is not a word it’s a prefix.
Opinion: How to have a FUD-free RSA Conference
The key to a productive RSA Conference, the massive cybersecurity gathering that kicks off next week in San Francisco, is avoiding firms that push fear, uncertainty, and doubt. —If you've ever been to the RSA Conference, the world's biggest cybersecurity gathering that begins in San Francisco next week, you're all too familiar with the chaos that is the showroom floor. Maybe you're even an RSA veteran and you're well versed in getting around the roughly 45,000 attendees.
Opinion: Don't drop fitness standards for military hackers
The notion that the government needs to lower personnel standards to attract cybersecurity researchers just perpetuates stereotypes of hackers as basement-dwelling slobs. —As the world appears awash in cybercrime and nation-state cyberattacks, there's a global shortage of information security talent to confront new threats. It's a problem that not only impacts security companies but any firm looking to hire security professionals. Nowhere is this more apparent than in government.
Opinion: Trump has a point about 'the cyber'
During the last two presidential debates, Donald Trump cast doubt on US claims that Russia carried out cyberattacks on political organizations. But without clear evidence from the government, how can the public really be sure it was Moscow?
Tilting It Sideways
Trying to track down the origins of an Internet meme can be an almost fruitless endeavor. Other than giving credit to its originator and perhaps giving them a few minutes of Internet fame there really isn’t a lot at stake by determining who was the kid in the success.gif or what meme Laina Morris is responsible for. Finding the origin of a story involving the breach of critical infrastructure however, can be rather important.
Opinion: Before pointing fingers after cyberattacks, Remember the Maine
Without presenting evidence, Justice Department officials have blamed the Iranian government for a digital incursion at a small dam outside Rye, N.Y. But history shows unsupported accusations of that kind are dangerous. Officials at the Department of Justice are blaming Iran for a so-called "cyberattack" on the Bowman Avenue Dam outside Rye, N.Y. The dam's reservoir is pictured above.
Opinion: Squirrels are bigger threat than hackers to US power grid
While fresh reports of digital assaults on critical infrastructure facilities have stirred the cyberwar saber rattlers, it's worth remembering that squirrels cause far more destruction to the grid than rogue nation hackers. The cyberwar drumbeaters have been stoking fears for decades about the potential of cyberattacks causing devastating physical damage.
Transcription of L0pht Testimony
Transcription of the YouTube Video: Hackers Testifying at the United States Senate, May 19, 1998 (L0pht Heavy Industries) https://www.youtube.com/watch?v=VVJldn_MmMY Senator Thompson: …If you gentlemen would come forward.. We’re joined today by the seven members of the L0pht, Hacker think Tank in Cambridge Massachusetts. Due to the sensitivity of the work done at the L0pht, they’ll be using their hacker names of; Mudge, Weld, Brian Oblivion, Kingpin, Space Rogue, Tan, and Stephen Von Neumann.
Opinion: Fight phishing without blaming victims
Criminal hackers are skilled at crafting fake e-mails that dupe recipients. But instead of blaming the employees who click links that infect computers, organizations should work harder to fortify their networks. Signs of salt water on Mars: Could it boost possibility of life? (+video) Bogus e-mails designed to trick recipients into clicking malicious links are increasingly common.
Opinion: Why bug hunting security researchers are Digital Age heroes
Comments from an Oracle executive disparaging the work of security researchers misunderstands their value and ethic. While hackers poking around in code may irritate software companies, their work has made computers safer for everyone. Participants in superhero costumes arrived for the World DC Comics Super Heroes event in San Martin de Valdeiglesias in April. Maybe security researchers aren't at the level of decorated World War I Sgt. Alvin York when it comes to heroism.
Opinion: An Underwriters Laboratories for cybersecurity is long overdue
Noted security researcher Mudge left Google to launch what appears to be the cybersecurity equivalent of electronics testing outfit Underwriters Laboratories – an idea first proposed 16 years ago.
Opinion: Paper, the least terrible password management tool
Passwords are a bane of modern life. We need them for everything – banks, social media accounts, e-mail, online subscriptions and shopping sites, smartphones, voicemail, and apps. Ugh. And security experts like me are always reminding people to make sure passwords are long, have upper and lowercase letters, numbers, and special characters. Not only that, but make sure to use a different – and equally complex – one for each and every account and website that you visit. And don't write it down – ever.
Opinion: Why the aviation industry needs more hackers
Claims about a researcher infiltrating a plane's control systems have put a spotlight on aviation security. It's time for the industry to be more open about potential risks and let hackers test the strength of their networks. Federal agents claim security researcher Chris Roberts said he gained access to flight controls via onboard entertainment systems such as these on Air Canada's Boeing 787 Dreamliner.
I watched CSI:Cyber so you don’t have to.
CSI has a proven formula for making popular TV shows. Unfortunately that history does not include accurate TV shows. When it comes to tech and things ‘cyber’ this is probably the preeminent example of CSI being bad and wrong at the same time. I thought there was no way they could top this, I was wrong. Hollywood has had a long history of doing tech wrong. Take a look at the recent Scorpion TV show, on second thought don’t, its almost as bad.
In the Beginning There was Full Disclosure
Two of the largest companies in the world are bickering with each other about how best to protect users. I won’t get into just how historically hypocritical this is for both Microsoft and Google or how childish it makes them both look but it brings up a debate that has been raging in security circles for over a hundred years starting way back in the 1890s with the release of locksmithing information.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Space
Contact Space, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack