Infosec Reading List - September 2017

On a monthly basis I will publish my reading recommendations which mainly focus on Information Security (InfoSec) and Outdoor Sports. All InfoSec Reading Lists can be found here. Text in italic represent quotes from the original article.

Quotes from the Twitterverse

---

---

---

---

InfoSec

• Let’s get fancy with false flags - attribution is hard in the cyber field - don’t get fooled by evidence that isn’t any - [link]
• Breaking Out of Citrix and other Restricted Desktop Environments - including RDP sessions - nice overview - [link]
• 2017 Internet Organised Crime Threat Assessment (IOCTA) Report - [pdf] - [link]
• Equihax: fact enabled wild speculation - The important things are always simple. The simple things are always hard. The easy way is always mined. Murphy’s Laws of Enterprise Information Security - [link]
• How I got $13337 bounty From Google - as mentioned above, the simple things are always hard - [link]
• Cameradar hacks its way into RTSP videosurveillance cameras - [link]
• Analysis of the Facebook.app for iOS [v. 87.0] - including FBNativeAppModule_DO_NOT_USE_OR_YOU_WILL_BE_FIRED - [link]
• Hacking iOS Applications - a detailed testing guide - [pdf] - [link]

Outdoor

• ‘There Have Always Existed People Who’ve Simply Wanted to be Alone’: An Interview with Michael Finkel - [link]
• The Art of Adventure Writing - [link]
• Aidan Haley on How to Become an Adventure Filmmaker - [link]