My Writing

• Tools Controlling Adobe Acrobat/Reader JavaScript Support
  Disabling JavaScript in Adobe Acrobat/Reader renders many PDF exploits ineffective. If full disabling isn't practical, Adobe's JavaScript Blacklist Framework lets users selectively disable risky API...
• Communication One-Year Anniversary of this Blog
• Social Networking Explaining Computer Security Terms to Ordinary People
  Technical jargon that security professionals use daily may be meaningless to non-IT people. A collaborative effort with SANS Institute defines commonly-used security terms like firewall, exploit, and...
• Social Networking Twitter Social Networking Among Information Security People
  Twitter offers three-fold value for security professionals: discovering curated content (users act as content curators), interacting with peers (social stigmas almost non-existent), and researching...
• Leadership 9 Convenient Lies in Cybersecurity
  Familiar security claims like "we use AES-256" or "we're SOC 2 compliant" are technically true. Each one omits conditions that determine risk, and we need to communicate them carefully to avoid...
• Malware 5 Events in 2011 That Challenged Online Security and Trust Assumptions