Blog.seancassidy.me

Phishing awareness training done via simulated phishing emails that your Security team sends does more harm than good. These simulations are often unrealistic, bypass real phishing controls, and raise more resentment than awareness. The way a typical...

A friend of mine posed this brain teaser to me recently: What's the length of shortest bit sequence that's never been sent over the Internet? We can never know for sure because we don't have a comprehensive list of all the data. But what can we say...

It's been over a year since I presented LostPass at ShmooCon, and in that time, many more bugs have been found in password managers. The most severe of which are in browser-based password managers extensions, like LastPass. This should be obvious to...

This is a summary of the talk I gave at GrrCon '16. We're always told: don't roll your own crypto! This has always felt like a kind of abstinence-only education to me. Of course, it's correct, that almost certainly if you decide to use your own encryption...

Two years ago, I wrote a post called "Meditations". I had just read Meditations by Marcus Aurelius and was inspired to create a short log of everything I had learned at my last job. I noticed that writing down what I learned as I learned it made it stick...