The LPL on security through obscurity, the mission of his youtube channel, and the hacker mindset

On phishing-prone UI design

This is a bit disconcerting... "The majority of calling state machines I investigated had logic vulnerabilities that allowed audio or video content to be transmitted from the callee to the caller without the callee’s consent. This is clearly an area that is often overlooked when securing WebRTC applications."

Successfully executing a replay attack against a wireless key fob using inexpensive hardware and GNU Radio (based on Samy Kamkar's original hack).

On the pitfalls of trying to keep secrets out of Python's memory. [Spoiler: there's no good way.]

Ange Albertini with some file polyglot wizardry.