TaoSecurity
taosecurity.blogspot.com · Personal blog · on HN since 2007
Richard Bejtlich writes on network security monitoring, incident response, security strategy, and book reviews.
What HN saysCommenters recommend it as a good security blog and call the author one of the most knowledgeable incident response experts.
25HN people shared it
7linked it in comments
33stories submitted
204story points
2 years agolast shared
2007people per year2026
Most-shared posts
- 1Homepage3 people · first shared 2009
- 2Steve Jobs Understands Team Building1 people · 119 points · first shared 2010 · 33 comments on HN
- 3Cooking the Cuckoo's Egg1 people · 22 points · first shared 2011 · 4 comments on HN
- 4The Tragedy of the Bloomberg Code Issue1 people · 10 points · first shared 2015 · 4 comments on HN
- 5Seven Security Strategies, Summarized1 people · 4 points · first shared 2019 · discussion on HN
- 6Continuous Diagnostic Monitoring Does Not Detect Hackers1 people · 4 points · first shared 2015 · discussion on HN
- 7Going Too Far to Prove a Point1 people · 3 points · first shared 2015 · 1 comments on HN
- 8The Attack on GitHub Must Stop1 people · 3 points · first shared 2015 · 1 comments on HN
- 9Stop Killing Innovation1 people · 3 points · first shared 2010 · discussion on HN
- 10Why Would Iran Welcome Western Tech?1 people · 3 points · first shared 2015 · discussion on HN
- 11Where Russia and North Korea Meet1 people · 3 points · first shared 2015 · discussion on HN
- 12Are Nation States Responsible for Evil Traffic Leaving Their Networks?1 people · 2 points · first shared 2014 · discussion on HN
- 13If You Can't Patch Your Email Server, You Should Not Be Running It1 people · 2 points · first shared 2020 · discussion on HN
- 14Bejtlich Moves On1 people · 2 points · first shared 2017 · discussion on HN
- 15Focus on the Threat: Bank Heists1 people · 2 points · first shared 2015 · discussion on HN
What HN people wrote when they linked it
iuguy · 2011-04-16
The Cuckoo's Egg is a fantastic book and definitely worth a read for regardless of forensic interest. It's very well written and a great story.
The slide author is one of the most knowledgeable experts on incident response today, his blog[1] is definitely worth a read now and again.
If you want to see what large scale operations look like today, the Ghostnet report[2] makes for compelling reading.
[1] - http://taosecurity.blogspot.com/
[2] - http://www.scribd.com/doc/13731776/Tracking-GhostNet-Investigating-a-C…
fseek · 2010-10-28
Their blog is pretty good: http://blog.sucuri.net.
I also like: http://taosecurity.blogspot.com and http://scheneier.com
blacksmith_tb · 2023-12-28
Kind of a funny choice of names, "dark visitor" is a common English translation of 黑客, the title of a book[1] about hacking in China, for example.
1: https://taosecurity.blogspot.com/2008/02/review-of-dark-visitor.html
mattmcknight · 2015-01-02
Read the Kapersky analysis, it starts to answer your questions regarding the reuse of Shamoon by NK.
Doesn't matter though, my point was, this was not the media regurgitating a US gov opinion as the comment I replied to claimed.
I agree that the publically available evidence is never 100%, but the malware samples and c&c infrastructure point to NK. If you have evidence that someone else did it, that would be interesting. As it stands, NK has a very strong motive for the timing of this move, so that plus just the public info, and the FBI claim based on nonpublic info is enough to convince me they are responsible.
However, the spectrum of "responsibility" is quite broad: http://taosecurity.blogspot.com/2014/12/what-does-responsibility-mean-…
xenophonf · 2013-11-09
This is the primary reason I use ad blocking. Privacy is another (e.g., http://taosecurity.blogspot.com/2013/10/mozilla-lightbeam-add-on-shows… I don't mind ads so much as I mind surveillance.
bliving · 2011-01-12
Yes. And they're not shy about it either.
"The way in which the J-20 was unveiled also reflects China’s use and control of information technology to support national interests. The test airfield is located in the city of Chengdu and is not secure, with many public viewing points. Photography is technically forbidden, but reports suggest that patrols have been permitting the use of cell phone cameras."
http://taosecurity.blogspot.com/2011/01/more-on-chinese-stealth-fighte…
fossguy · 2009-08-10
Quite a few:
http://slashdot.org
http://serverfault.com
http://securityfocus.com
http://sucuri.net
http://matasano.com/log (well, while it was up and I hope it comes back)..
http://taosecurity.blogspot.com
http://linux.com