stuff
Repos, books, tools and places I keep coming back to.
- projectdiscovery/nucleirepoTemplate-driven scanning that other people can read, review and argue with. The YAML being boring is the point.
- Sandworm — Andy GreenbergbookThe best answer I have found to "why does any of this matter" for people outside security.
- gitleakstoolA pre-commit hook that has saved me more embarrassment than any scanner I have ever paid for.
- Moda seafront, KadıköyplaceWalk it at sunset with the phone in your pocket. Cheapest incident recovery available in Istanbul.
- Reflections on Trusting Trust — Ken ThompsonpaperForty years old and still the last word on supply chain. Read it once a year until it stops being comfortable.