Latest news
Introduce yourself.Hello. This is Ed Skoudis, security geek.
How did you get interested in computer security?
I've always loved to tear things apart. As a child, I would "reverse engineer" various technical trinkets my parents would provide, such as analog and digital clocks, radios, remote control cars, etc. Of course, when I rebuilt them, they'd never, ever work properly!
However, flashing forward, in college, I realized that computer attacks are nothing more than the very careful tearing apart of computer systems with the goal of taking them over. I love that kind of thing, and have been hooked since I got my first security job at Bellcore.
What operating system(s) do you use and why?
I use Windows for my presentations, word processing, and e-mail. These programs work well in Windows, and I don't have to worry about compatibility problems as long as I worship at the shrine of Bill. For my computer attacks and defenses, I use Linux. With the source code, you can get a great deal deeper into the functioning of things. Also, scripting is far easier in Linux, so I can create custom techniques without having to rewrite a bunch of code.
How long did it take you to write "Counter Hack"?
One year. One very, very loooooong year. Day in, day out. Christmas... New Years... every single day. But in the end, looking back, it was fun.
You mention in the book that you thought it will be like writing a 500 page paper and then it turned out you were wrong. So, what was it like?
It was like writing thousands of pages. The level of reviews and scrutiny of a book are far greater than anything I've worked on before. It's a good process, in that solid reviewers challenge an author to be *extremely* clear, concise, and accurate. I had some of the best reviewers around, and they really helped to sharpen the resulting product. They'd write comments about how I could be clearer or cleverer, and the challenge was extremely helpful.
If you could start working on the book all over again, what changes would you make?
I like to use quotes from various sources in my work to illustrate an issue. I like to quote movies, songs, and other copyrighted materials. A cool line from a popular song or movie can really help solidify an idea in a reader's mind, and lets us all have some fun along the way.
If I had to do it again, I'd start getting permission for these quotes earlier in the process. Some of the copyright owners (from movies and songs) didn't respond fast enough, so we had to remove quotes from them in the book.
You mention numerous security tools in your book. What are your favourite security tools?
Spotlight

Is it time to professionalize information security?
Posted on 23 May 2013. | The issue of whether or not information security professionals should be licensed to practice has already been the topic of many a passionate debate.

Review: Logging and Log Management
Posted on 22 May 2013. | Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities
Posted on 22 May 2013. | Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage
Posted on 21 May 2013. | Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance
Posted on 20 May 2013. | Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.





