Mar 27 2018
A couple of weeks back, as part of our continuing education program at my dayjob I ran a hands-on class on locksport, the quasi-science (perhaps art) of picking locks for fun and... well... fun. I'm a security wonk so most of the talks I run have some security content in them, but I wanted to do something that was fairly suitable for everyone (coders and not). So, I got the go-ahead to expense a few more locks and some intro picksets to give away from The Lockpick Shop (no consideration for mentioning or using them, they had what I needed at a good price) and hauled most of my collection of locks and tools to work over the course of a couple of days.
I used the Creative Commons licensed lockpicking village slides from the TOOOL website for my talk after editing them a bit to condense them for time and spent a couple of evenings practicing both my slides and craft to gear myself up for the class.
What follows are some pictures and ruminations I have on the topic of locksport that come from years of playing around with locks (after spending about as long trying and failing to get any locks open) and doing formal and informal sessions on the topic. Please bear in mind, I'm far from a master of this particular art. I've competed only once (and pulled a Charlie Brown by picking the lock backwards, thus jamming it at the worst possible time) and, while I recognize that there are some very talented people out there who are into locksport for the sheer artistry of it, I'm not one of them. I'm a pragmatic lockpicker: I'm on assignment, I need into something, I'm going to pick the lock and get in. I'm not a spring steel artist.
Okay. Enough chitchat, here's what I actually wanted to write.
Nov 19 2017
I guess I should wish everybody out there a happy Thanksgiving that celebrates it.
I haven't been around much lately, certainly not as much as I would like to be. Things have been difficult lately, to say the least.
Around this time of year things go completely berserk at my dayjob. For a while I was pulling 14 hour days, capped off with feverishly working three days straight on one of the biggest projects of my career, which not only wound up going off without more than the expected number of hitches but has garnered quite a few kudos from the community. I'm rather proud of how it turned out. Unfortunately, it also took its toll, namely, on my health. During the final leg of the project I noticed that I was starting to get sick, and by that Tuesday my cow-orkers were telling me to go home and sleep because I looked like death warmed over. Unsurprisingly, I've been battling a nasty cold that's kicked the legs out from under me. I still haven't kicked out of big-project mode yet, because the last few times I've started to feel better I've run myself aground again without realizing I was doing so. This is not good. It also seems that I brought this particular nasty home, and now my family is in various stages of fighting it off.
Mar 18 2017
Slackpathy - noun - The phenomenon where conversations in a Slack channel are carried out using roughly 50% emoji or reaction gifs and 50% written natural language. The term derives from the hypothesized phenomenon of telepaths sending entire thought-complexes to each other rather than streams of speech.
Jan 01 2017
Here's to the sysadmins, who fight to keep everything up and running. And reboot printers along the way.
Here's to tier-1 tech support, who know the answers but are only allowed to recite from their scripts.
Here's to the pen testers, who keep plugging away.
Here's to desktop support, who occasionally see things they can never unsee.
Here's to the red team, who throw everything from Devo costumes to pork chops to ballroom gowns to the kitchen sink at the mission.
Here's to the hacktivists, who toil endlessly to make the world a better place.
Here's to the open source hackers, whose thankless tasks are labors of love.
Here's to the whistleblowers, who lay everything on the line to try to set things right.
Here's to the lawyers, who honestly answer the question "So, how much trouble could I get in if I did this?"
Here's to the reversers, who yank out their hair while asking the question "What the hell does this even mean?" over and over again.
Here's to the hackers who submit talks to DefCon every year but never get accepted. You keep trying, over and over again.
Here's to the people with the honest questions, who uncover horrors never before dreamed.
Here's to the newbies, who spend long hours punching away to learn arcane skills to satisfy their own curiosity.
Here's to you.
Oct 19 2016
I'm still here - haven't forgotten this blog. In the rush to get a bunch of stuff done at work with some alacrity, I seem to have run myself into the ground. More specifically, I seem to be an alpha tester for this year's version of the flu and I've spent the past couple of days sweating, throwing up, and sleeping. There was also a late-night trip to the ER somewhere in there. Oh, and let's not forget the lucid fever dreams - they're quite entertaining when you have control over them. Somewhere in the Dreaming I made the aquaintenance of a tribe of ants deep inside in the BART tunnel system and started cataloguing their graffiti while exploring the tunnel system. Once I'm back on my feet I'll queue up a few posts which are long overdue, and for that I apologize.
Back to bed for me.