So we keep getting these phone calls from local numbers about a $499 charge on our Amazon Prime account. “Press 1 if you have any questions.“ If you’ve not gotten these calls, they’re a scam…Continue Reading

If you live on the East Coast of the US tonight, you’re paying the price for a poorly designed computer network. Think not? Go out and try to buy gas tomorrow. You’ll have lots of…Continue Reading

On March 24th, 2021 WhiteSource will be holding its annual Secure Coding Virtual Summit. I will be giving a talk at 16:30 EST called Threat Modeling: Finding the Worst Vulnerabilities You’ll Never Write. This is…Continue Reading

My CppCon 2020 talk, Modern C++ Safety & Security at 20 is now up on YouTube. This year CppCon went virtual because of the pandemic but we still had a great conference. Abstract: The C++20…Continue Reading

I’m happy to announce that I will be speaking at CppCon 2020 this September. CppCon will be going virtual this year but still has five full days of talks from some of the world’s best…Continue Reading

In part one of this series, I covered the basics of the threat landscape and his best practices for developers writing secure code. In this installment, I’ll cover architecture design choices and testing strategies. This…Continue Reading

In this two-part series, I cover some of my best practices for developing secure systems from design to testing. In part one, I’ll cover the basics of the threat landscape and development best practices. This…Continue Reading

On April 23rd, 2020 WhiteSource will be holding its annual Secure Coding Virtual Summit. I will be giving a talk at 11:30 AM EST called Secure Coding Best Practices. This is a language agnostic talk…Continue Reading

This Saturday in Prague, Czech Republic the C++ ISO Standards Committee voted in the C++20 standard. This is huge update to the standard three years in the making. Almost 250 committee members and observers attended…Continue Reading

For those of you in the Denver Metro area, SnowFROC ’20 is the premier applications security conference. The one day conference is held annually at The Cable Center in Denver, CO. This year the conference…Continue Reading