top | item 33824919

Good Technical Infosec Blogs?

10 points| rtkaratekid | 3 years ago

I'm looking for really good technical blogs or even blog posts. From stepping through gritty details of exploits to big picture ideas even to discussion about specific tools, how they work, and pros and cons. I am just finding myself, having been in field for five years or so, really hungry for more quality info.

There are tons of company marketing blogs that are largely superficial, but finding good technical or in-depth blogs is a bit harder. I've read some good stuff from Dark Reading and Bleeping Computer. The SANS blogs can be good as well. That about covers what I largely have followed. Hope some folks have some interesting reads to share.

edit: podcasts and other media forms are great as well

9 comments

twunde|3 years ago

Chompie (https://twitter.com/chompie1337) does a great job on exploit writeups. Take a look at https://www.graplsecurity.com/post/iou-ring-exploiting-the-l.... She's got a few more blog posts at Grapl, but she's moved on to new things at xforcered at IBM.

rtkaratekid|3 years ago

Thanks! I'll have a look

killjoywashere|3 years ago

Darknet Diaries isn't terribly technical, but has some good history.

rtkaratekid|3 years ago

Yeah it doesn't quite scratch the technical itch, but I think it's fun and informative on history and personal stories.

gabrielsroka|3 years ago

https://schneier.com

https://krebsonsecurity.com

mikeodds|3 years ago

https://reddit.com/r/netsec has a lot of good technical material posted

rtkaratekid|3 years ago

Thanks, I was surprised to have reddit suggested, but a couple of my respected friends in the field also generally look at r/netsec so it must be pretty good.

ramimac|3 years ago

Start with tldrsec.com - then accumulate blogs from the included links

rtkaratekid|3 years ago

This is great, I'm excited to explore