Topic

Security

Incidents I worked, controls I built, and the ones that were quietly missing. First-hand, including the parts that went badly.

Security

My site returned HTTP 200 for every one of the six days it was compromised.

A case study in detection: why uptime monitoring would have sat green through a six day compromise, the three monitors that replaced it, how each one was proven capable of failing, and the residual gaps that are still open.

· 14 min read

All writing