Bio

I'm the Director of Quality Assurance and an engineer with the Rapid7 Metasploit team. Day-to-day I'm focused on building quality into both the commercial and open source products. I've been with Rapid7 for over three years and have performed penetration tests, security consulting and holistic security assessment across a wide range of verticals, including financial, government, and retail. I've also been heavily involved in the open source and security communities for about five years, and i'm now an advisor for the SOURCE Boston conference (check it out!). Before that, i was a developer and network administrator at Iowa State University. If you'd like to know more about what i'm working on, you can follow me on twitter or keep an eye on the blog.

Ramblings

woot, officially done at rapid7! on to the next big thing :D Friday from Twitter - Comment - Like

RT @thedarktangent: Get your #DEFCON 20 CFPs in! You have 11 days left. I want your coolest stuff, worthy of a 20 year anniversay and the... Wednesday from Twitter - Comment - Like

The times they are a-changin Tuesday from Twitter - Comment - Like

RT @briankrebs: human rights, foreign policy sites hacked, seeded with Flash and Java exploits http://krebsonsecurity.com/2012..., including CVE-2012-0779 May 14 from Twitter - Comment - Like

RT @n00bznet: RT @WolfpackAlan Every 60 seconds in Africa, a minute passes. < the clock is ticking May 14 from Twitter - Comment - Like

Infosec insanity: Conference Angst http://infosec-insanity.blogspot.com/2012... May 14 from Twitter - Comment - Like

ugh May 14 from Twitter - Comment - Like

RT @mikko: The F-Secure Mobile Threat Report Q1/2012 is out: http://www.f-secure.com/weblog... May 14 from Twitter - Comment - Like

http://i.imgur.com/wGUTG.gif courtesy of @thelightcosine May 14 from Twitter - Comment - Like

RT @mikko: 11 years after Code Red, eEeye sold to BeyondTrust. @marcmaiffret to become the new CTO of BeyondTrust. http://www.darkreading.com/vulnera... May 11 from Twitter - Comment - Like

RT @ChrisJohnRiley: [SuggestedReading] IAmA a malware coder and botnet operator http://origin.reddit.com/r... May 11 from Twitter - Comment - Like

RT @todb: Time for the weekly #Metasploit update! Read up and fetch it from here: https://community.rapid7.com/communi... May 10 from Twitter - Comment - Like

RT @indi303: Some awesome reading for those of you who are interested in quantifying/qualifying attack paths http://sunset.usc.edu/csse... May 9 from Twitter - Comment - Like

RT @dacort: I like this approach. http://xkcd.com/1053/ May 9 from Twitter - Comment - Like

new github icons #donotlike May 9 from Twitter - Comment - Like

http://soundcloud.com/skrille... < this May 9 from Twitter - Comment - Like

RT @pengwynn: Current status: http://bukk.it/pewpoca... May 9 from Twitter - Comment - Like

RT @SOURCEConf: Mobile Penetration Training with @quine and @jonoberheide will run at #sourceseattle - http://www.sourceconference.com/seattle... May 9 from Twitter - Comment - Like

RT @n00bznet: RT @digininja Pipal analysis of the Twitter password leak http://www.digininja.org/project... <~ hooray for Pipal, standard password analysis May 9 from Twitter - Comment - Like

a simple way to build page object models with capybara: https://github.com/natritm... May 9 from Twitter - Comment - Like

RT @bcran: Genius. http://www.quiterly.com/wp-cont... < i know what i'm having for lunch May 9 from Twitter - Comment - Like

http://dev.metasploit.com/redmine... psnuffle ntlmv2 support #handy May 9 from Twitter - Comment - Like

RT @jeremiahg: OMG, Facebook "Likejacking" (aka Clickjacking) makes AdscendMedia $20M! Settles lawsuits for $100K http://www.itworld.com/it-mana... May 8 from Twitter - Comment - Like

RT @egyp7: New #metasploit blog post about running executables from memory with meterpreter: https://community.rapid7.com/communi... May 8 from Twitter - Comment - Like

hah "javaSucksBecauseItMakesMeCatchEverythingFuckingThing.printStackTrace();" May 8 from Twitter - Comment - Like

RT @csoghoian: Cloud backup service @SpiderOak publishes transparency report w/ stats on gov requests. Wish @Dropbox followed suit.... May 7 from Twitter - Comment - Like

RT @jeremiahg: "FBI: We need wiretap-ready Web sites - now" http://news.cnet.com/8301-10... < isn't this called a warrant? May 7 from Twitter - Comment - Like

RT @timoreilly: Really excellent piece about how to think about the value of Facebook's data and social network assets http://blogs.wsj.com/cio... May 7 from Twitter - Comment - Like

RT @dumpanalysis: Rosetta Stone for Debuggers is under inscription http://www.dumpanalysis.org/rosetta... Thanks to @jduck1337 and @jcran << :D May 7 from Twitter - Comment - Like

checking out @Thefuturefm's deep house channel - love it May 6 from Twitter - Comment - Like

more