Security Research

A note on scope: This is my first published piece of threat analysis. I built a custom honeypot as a learning project, and this post documents what I observed. I applied structured analytic standards (the NATO Admiralty Scale for evidence grading, ODNI-derived confidence levels, and Analysis of Competing Hypotheses) so that assessments are defensible rather than informal. Definitions for these frameworks are in Appendix B. I welcome corrections and feedback from more experienced researchers. ...

This article was originally published on SecJuice on May 26, 2019. One night I was waiting for a friend to do some collaborative bug bounty hunting and I was bored, so I thought of checking my local network to see if someway I could see anything remotely from a PS4 that I recently bought in order to exploit. But instead of my PS4 I saw something else that caught my attention, this time I saw something really really strange and this is the story of my ChromeCast bug. ...