London, UK -  Cyber security professional specialising in detection and response, blogging about technology, business, and life to scratch a writing itch from a previous life as a journalist

Recent blog posts

Grabbing domains and URLs from tcpdump data using Python
 -  There’s a lot more to most websites than meets the eye these days, and I thought an interesting Python project to take on at the start of my Christmas break would be to uncover the extra requests hidden below the surface with some help from tcpdump. The challenge? Tcpdump’s output...
Creating beautiful graphs in Python with Plotly
 -  After I managed to pull data from Twitter’s API using Python, I got thinking about what my next step would be. Then it hit me – I could draw data from external sources and find a nice extension to visualise it in some pretty graphs. Plotly is that extension. My...
The day Instagram advertising read my mind
 -  I was aware of the recent stories – an increasing number of people claiming that Facebook’s apps were listening in on their conversations and serving up ads based on what they’d heard – but I’d always thought this assumption was based on ignorance of how online advertising works, and when...
Fetching and filtering tweets in Python with Tweepy
 -  If you hadn’t already heard, I’ve been experimenting with some Python recently, trying to build on the foundation that I picked up at the SANS Cyber Retraining Academy. While I’d already had some success playing around with isolated little scripts, I decided it was time to start pulling data from...
Three of the best cyber security podcasts around
 -  I won’t just remember 2017 as the year I made the jump into the cyber security industry – I’ll also remember it as the year I properly welcomed podcasts into my life. I now listen to a wide range of shows, from daft comedies like My Brother, My Brother and Me...
Update: I now work in cyber security
 -  A lot has happened since April. In case you haven’t noticed, I haven’t blogged about it, so I wanted to give an update. Also, I was tired of seeing Rick and Morty at the top of my website and needed to publish something new to push that down the homepage...
Rick Sanchez explains command injection
 -  Rick and Morty returned this weekend, and the third season premiere unexpectedly showcased just how devastating a successful command injection attack can be. Held prisoner in a simulation of his own memories, sometimes-great, always-mad scientist Rick Sanchez is forced to relive the moment he created his portal gun so his...
Finishing line: I’ve passed my GCIH exam!
 -  The SANS Cyber Retraining Academy concludes this week, but before graduation there was time for students to take one last GIAC examination to assess our incident handling skills. I’d already passed the GIAC Security Essentials (GSEC) exam with 94 per cent a few weeks ago, but I was more nervous...
Automating a brute force web attack
 -  This week was all about hacking at the SANS Cyber Retraining Academy, as students attempted to take control of a drone before embarking on a two-day Netwars capture the flag marathon. The challenges spanned a huge range of skills – we found ourselves doing everything from setting up backdoors and...
How I became a Linux person
 -  I used to swear by macOS, but in recent years I found performance dropping and frustration growing. Luckily, my eyes were opened to what a great alternative Linux has become. Since 2009, I’ve been a pretty consistent user of macOS – or OS X, as it was called until recently....

Thinking about

Digital journalism
Coincidentally, in the space of a week I encountered both Zach Seward's article about Quartz and Craig Mod's excellent podcasts with Tim Ferriss. Both evoked fond memories of my time in journalism and the buzz surrounding digital journalism and media in the 2010s

Interests

  • Cyber security
  • Tech
  • Python
  • PowerShell
  • JavaScript
  • F1
  • Reading
  • Writing
  • Psychology
  • Philosophy
  • Exercise
  • Running
  • Gaming
  • Football
  • Music
  • Guitar