Why do I know so many Dan's in infosec? Is there something about the name Dan? I strongly advise being cautious of your data around anyone named Dan, until we work this out.

My lesson from the past few days… Ignore the logical part of your brain that says “Nah ignore that, it’s not gonna be vulnerable”!

Heading off to Vegas for the first time. If you see me about, say hi. I’m the lanky blond British guy with round black glasses.

I was lucky enough to catch this talk at BH, and it was one of the highlights of the conference for me. Great research, and really well presented

This may in fact have been a good idea... but I think mopman deserves some kind of recognition for a beautifully crafted social hack that it would appear has actually resulted in an amendment to an Act of Parliament. Nice work.

A while ago I decided to try take on a big challenge and work out how to detect prototype pollution black-box. One thing I’m very happy with from this research is the simplicity of the solution I found

And here’s part 2, presenting new techniques for reliable, split-second DNS rebinding in Chrome and Safari intruder.io/research/split…