Infosec Reading List - November 2017

On a monthly basis I will publish my reading recommendations which mainly focus on Information Security (InfoSec) and Outdoor Sports. All InfoSec Reading Lists can be found here. Text in italic represent quotes from the original article.

Quotes from the Twitterverse

---

---

---

---

InfoSec

• The Dark Web’s Most Notorious Thief, Phishkingz, Gets Doxxed - OpSec principles apply to ordinary users and bad guys alike - don’t reuse passwords - [link]
• Infosec and Failure - hack.lu 2017 Keynote from Ange Albertini around some of the most important issues the infosec industry / community faces nowadays - and no, they are not technical - [link]
• The Problem with “The Seven Keys” - “Let’s be absolutely clear: there are no keys that cause the Internet to function (or not to function).” - [link]
• Attack of the week: DUHK - yet another case for: true-randomness-is-hard to implement - [link]
• Largest cybersecurity venture capital deals in 2017 - [link]
• How to use a single download to remotely steal proprietary files from MacOS - story focusing specifically on Safari on MacOS - [link]
• How i found an SSRF in Yahoo! Guesthouse (Recon Wins) - [link]
• An Introduction to the CAN Bus: How to Programmatically Control a Car - [link]
• Windows 10 platform resilience against the Petya ransomware attack - [link]

Outdoor

• A new age of discovery - - [link]