The Curious Engineer

All blogs / Security

Adam Caudill

adamcaudill.com

Adam Caudill: Security Leader, Researcher, Developer, Writer, & Photographer

SecurityEssays / personalAI / ML

Posts
372 from 20 Sep 2003 to 7 Feb 2026
Posting
monthly (18 in the last year)
Kind
personal blog
Feed
https://adamcaudill.com/index.xml

2026 9

  1. Sweet Dreams
  2. Five Years with Hugo
  3. AI & IAM: Focus on Fundamentals
  4. On Privacy Nihilism
  5. Dynamic Social Media Images for Hugo
  6. Lessons Learned from 20 Years & Why You Should Blog
  7. Five Hundred
  8. Whose Monkeys Are These?
  9. The Escape

2025 15

  1. Isle Civitas
  2. Is Long-form Writing Dead?
  3. Why I Will Never Write With AI
  4. 25% Unemployment in Tech?
  5. Welcoming Kessler
  6. The Waterfall
  7. Good Faith, Moral Duty, and Selfishness
  8. Developer Tools & Productivity
  9. Man of the Sea
  10. Poor Performance
  11. On AI, Art, Writing, and the Distillation of Creativity
  12. When AI Becomes I
  13. The House That Love Built
  14. The Precipice
  15. Millions of Jobs

2024 1

  1. Security Is a Shell Game

2023 3

  1. The Reset
  2. Whose CVE Is It Anyway?
  3. AI: Art Without Expression?

2022 5

  1. Twitter Becomes a Walled Garden
  2. On Art, Heritage, Nazis, & 3D Scanners
  3. Logseq: My External Brain
  4. On Productivity
  5. Death, Cancer, and Missed Chances

2021 18

  1. Trojan Source and Why It Matters
  2. Insane Ideas: NFT the Stars
  3. Generating Content Stats for Hugo
  4. Taking Responsibility for the Spotlight
  5. Communicating With Respect
  6. The End
  7. On Software Subscriptions
  8. Hugo & Content-Based Related Content
  9. Parasitic & Symbiotic Business Models
  10. Win by Building for Failure
  11. 1Password 8 Early Access: Security, Comments, & FAQs
  12. On Apple, Privacy, and Device Control
  13. Declaring War on Ransomware
  14. On Automatic Updates and Supply Chain Attacks
  15. LinkedIn: The Breach That Isn’t but Is
  16. Crew Resource Management for Security Teams
  17. Best Practices vs Inane Practices
  18. Insane Ideas: Stock in People

2020 11

  1. The Hibbing Test
  2. Proposal: Association of Security Researchers
  3. The (Questionable) Future of YAWAST
  4. Leading Experts
  5. Write Like You Are Running Out of Time
  6. Developers, Developers, Developers
  7. Dezinformatsiya
  8. Book Review: Active Measures
  9. Checklist: Starting a Security Consulting Firm
  10. YAWAST: News & Mission
  11. Utilitarian Nightmare: Offensive Security Tools

2019 3

  1. Insane Ideas: Blockchain-Based Automated Investment System
  2. YAWAST v0.7 Released
  3. TLS: 64bit-ish Serial Numbers & Mass Revocation

2018 1

  1. Bitcoin is a Cult

2017 7

  1. Exploiting the Jackson RCE: CVE-2017-7525
  2. Breaking the NemucodAES Ransomware
  3. 30 Days of Brave
  4. Confide, Screenshots, and Imaginary Threats
  5. Shadow Brokers, Equation Group, Oh My…
  6. Looking for value in EV Certificates
  7. YAWAST 0.5 Released

2016 15

  1. On the need for an open Security Journal
  2. TLS Certificates from the Top Million Sites
  3. Ruby + GCM Nonce Reuse: When your language sets you up to fail…
  4. Testing for SWEET32 with YAWAST
  5. Simple Messaging and Identity Management Protocol (SMIMP) - Final Version
  6. Developers: Placing Trust in Strangers
  7. Threat Modeling for Applications
  8. When Hashing isn’t Hashing
  9. Seamless Phishing
  10. PL/SQL Developer: HTTP to Command Execution
  11. Crypto Crisis: Fear over Freedom
  12. PL/SQL Developer: Nonexistent Encryption
  13. Rance, Goodbye Friend
  14. “New Atheism” & The Philosophy of Atheism
  15. 2015: Year In Review

2015 15

  1. on Unfair Judgement
  2. Battle Fronts in the Crypto War
  3. Verizon Hum Leaking Credentials
  4. Juniper, Backdoors, and Code Reviews
  5. Much ado about Juniper
  6. Dovestones Software AD Self Password Reset (CVE-2015-8267)
  7. The Manifesto
  8. The Door to Nowhere
  9. Responsible Disclosure Is Wrong
  10. Making BSides Knoxville
  11. Crypto Front Door: Everyone Welcome!
  12. On the Underhanded Crypto Contest
  13. The Evolution of Paranoia
  14. Utopia Found; Utopia Lost
  15. 2014: Year In Review

2014 18

  1. Irrational Attribution: APT3.14159
  2. Orwellian Justice
  3. Speaking at SC Magazine Congress
  4. On NSA-Proof Security
  5. A backdoor by any other name…
  6. Making BadUSB Work For You – DerbyCon
  7. On The Ethics of BadUSB
  8. IETF Action on Secure Email
  9. SMIMP at the DEFCON Crypto Village
  10. On Strong Identity Management
  11. Jumping through hoops…
  12. SMIMP - The Design Goals
  13. Introducing SMIMP
  14. The Sinking Ship of E-Mail Security
  15. phpMyID: Fixing Abandoned OSS Software
  16. Security By Buzzword – Why I don’t support Ensafer
  17. HTTP Considered Harmful – The Need For Negative Feedback
  18. On Opportunistic Encryption

2013 19

  1. Evernote for Windows, Arbitrary File Download via Update
  2. VICIDIAL: Multiple Vulnerabilities
  3. Worried about the NSA? Try AES-512!
  4. Making Android NSA-Proof
  5. Crypto, the NSA, and Broken Trust
  6. Is moving offshore really crazy?
  7. Hash Storage: Make Attackers Work
  8. Cryptocat: What is the measure…
  9. Do one thing right…
  10. OPSEC, The NSA, and You
  11. DEFCAD & Freedom of Information
  12. Password Hashing: No Silver Bullets
  13. The WikiLeaks We Deserve
  14. 1Password, PBKDF2, & Implementation Flaws
  15. Linode: Another Breach Notification Gone Wrong
  16. Security Done Wrong: Leaky FTP Server
  17. First, Do No Harm: Developers & Bad APIs
  18. Evernote: XOR & Passwords
  19. Evernote: Doing it (mostly) right

2012 28

  1. Revisiting Snapchat API & Security
  2. Netgear Admin Password Disclosure
  3. UPEK Windows Password Decryption
  4. WordPress: Don’t trust that update
  5. NeoInvoice Blind SQL Injection (CVE-2012-3477)
  6. Decrypting Spark Saved Passwords
  7. Yahoo’s Associated Content Hacked?
  8. Assange, Ecuador, and the Cyberarmy
  9. Snapchat: API & Security
  10. Monitor iPhone HTTP(S) Traffic with Fiddler
  11. LinkedIn: A little common sense
  12. Piracy is not Theft
  13. Slipping Past LastPass
  14. Gpg4win & IDEA
  15. MiniPwner
  16. Detecting .NET 4.0 Remotely
  17. A month with DuckDuckGo
  18. Absolute Deniability
  19. HP Folio 13
  20. Moving to Octopress
  21. QuickPacket Hosting
  22. My 5 minutes of infamy
  23. CCSRCH v1.0.7
  24. IIN (BIN) Database
  25. Poking Mykonos
  26. Google Chrome Leaking Credit Card Data?
  27. CCSRCH v1.0.5
  28. SOPA Is Inevitable

2011 19

  1. Masking Credit Cards for PCI
  2. Why Cringely is wrong about Java
  3. Pen-Testing Silverlight+RIA with SoapUI
  4. A brief look at the latest @LulzSec release
  5. Happy 20th birthday Visual Basic!
  6. bbPress 2.0 (beta-1) released!
  7. VB6: Not so open source
  8. Errors on ‘gem install mysql2’
  9. Facebook Scams
  10. Microsoft & Skype: PR Failure?
  11. You can’t fix stupid…
  12. Hosting Change
  13. TED: Stuxnet: a preview of future wars
  14. …and thanks for the fish (Twitter v. Developers)
  15. bbPress & WordPress 3.1 (Registration Issues)
  16. Need a cheap phone charger quick? Buy a Tracfone.
  17. Rails 3 & Dreamhost PS
  18. Google Chrome and H.264
  19. Thoughts on the iPad, from an Apple hater

2010 12

  1. Rosen Shingle Creek
  2. Buying a MacBook from CowBoom.com
  3. Thinking before you speak
  4. Being Fair
  5. WikiLeaks Biggest Problem: Julian Assange
  6. Christopher Adam Caudill – 6lbs, 7oz – Born 8/2/2010
  7. State of the (virus) art…
  8. Am I doing too much?
  9. Upgrading Windows 7 Pro VL
  10. on Hiring
  11. Android & Windows 7 64bit
  12. Secure Password Storage

2009 13

  1. What’s your Code Legacy?
  2. bbPress: Is the end near?
  3. Leaving GoDaddy
  4. Cancel GoDaddy’s Domain Privacy
  5. GetSatisfaction: Is it worth it?
  6. Start-up Tools: Microsoft BizSpark
  7. Start-up Tools: Open Atrium
  8. Silverlight 3 Tools Available
  9. Lumix DMC-FZ8 & Infrared
  10. Start-up Tools & Services
  11. Avatars – Why roll your own?
  12. Remember The Milk
  13. Switching hosts, again.

2008 5

  1. Programmers are Expensive
  2. Dell Mini 9 Spacebar / Keyboard Issues
  3. Working Late, Again
  4. Dell Mini Keyboard Issues
  5. Is this thing on?

2007 29

  1. Switching to Gmail, Again
  2. Backups with JungleDisk
  3. Well, looks like I was wrong…
  4. A bit behind…
  5. Another one bites the dust…
  6. So Ends The River of Schwag
  7. Under the Weather
  8. Windows Vista User Experience Guidelines
  9. .NET Reflector v5 Released
  10. WordPress 2.1.1
  11. Vista & ReadyBoost
  12. I Love My Job
  13. From Outlook, to Gmail, to The Bat!
  14. OpenDNS
  15. Still running Windows 2000?
  16. Xceed DataGrid for WPF Released – Free
  17. ASP.NET AJAX
  18. Visual Studio PowerToy Pack Installer
  19. Microsoft Mice: Another Reason to Love Them
  20. Task Management with Tasks
  21. Burning ISOs in Vista
  22. WordPress 2.1 RC1
  23. WordPress 2.0.7 & Upgrading to 2.1 (Beta 2)
  24. Crash Course in WPF
  25. WordPress 2.0.7 & 2.0.8
  26. IE Developer Toolbar
  27. WordPress 2.0.6
  28. Microsoft PageRank?
  29. Building a Windows PowerToy

2006 98

  1. IIf() May Get a Dose of Legitimacy
  2. Assertiveness for Software Developers
  3. Holiday Schwag
  4. OpenID: ID of The Future?
  5. Starting in WPF?
  6. Buying a Car
  7. Spam & Gmail
  8. Yes, I am alive!
  9. Things You Shouldn’t Worry About
  10. Microsoft Visual Studio 2005 Service Pack 1
  11. Want a free copy of Vista?
  12. The Optimus Ghost-town
  13. Fiddler2 – Now Available
  14. Installing Vista
  15. Vista Available via MSDN
  16. Power Users, Rejoice!
  17. Microsoft Office 2007 Pro Available via MSDN
  18. Like Power Toys?
  19. Monkey Powered Search Engine
  20. .NET Framework 3.0 Released!
  21. What Motivates Developers?
  22. Is Vista Gold?
  23. Vertical Column Indicator for Visual Studio
  24. Starting a Business?
  25. Site Updates
  26. Optimus: First Sign of Life
  27. Internet Explorer 7 Released
  28. Startup Mistakes
  29. bbPress Released
  30. Final Vista Public Beta Released
  31. Not a good idea…
  32. A look into Vista
  33. EventArgs: No need to pass a new Instance
  34. Make XP Pretty
  35. VB.NET 2005 Interop Toolkit
  36. FireFox Toys: ErrorZilla
  37. Running RegEdit as SYSTEM
  38. Kill CapsLock!
  39. Detailed CSS Changes in IE7
  40. XML Notepad 2006
  41. Hosting Woes and Down Time
  42. VB.NET 2005 Performance Issues
  43. WordPress 2.0.4
  44. What It Takes To Be A Great Developer
  45. Useful Notepad Tip
  46. In Comes The Schwag
  47. Another must-read for ISV’s
  48. Looking for a better calculator?
  49. Of Victory and Pair Programming
  50. Demise of The WWW
  51. Google Spreadsheets
  52. Blue Hole Waterfall
  53. Blog Traffic: Another View
  54. WordPress Update
  55. Data Theft: It’s happened again
  56. Valleyschwag Delivers
  57. Responsibility meets Marketing
  58. The Schwag Has Shipped
  59. Happy (Belated) Birthday VB!
  60. Internet Explorer 7+
  61. MaskedTextBox Madness
  62. Web Developer Toolbar & Menu for Opera
  63. Extreme Simplicity
  64. A Secure Mentality
  65. Valleyschwag
  66. The Pressure to Be Great
  67. What A Surprise!
  68. PowerEdge 2500
  69. USQL: Unified SQL Editor
  70. Piracy: Modern Marketing
  71. Wink 2.0
  72. Best Job In The US: Software Engineer
  73. Better late than never…
  74. First Impression: Google Calendar
  75. Development Abstraction
  76. IE7: Of Time & Standards
  77. Microsoft Virtual Server: Free
  78. Rebuilding My Network
  79. Superstars & Monkeys
  80. VB: The dumbing of a Great Language
  81. Look who’s blogging now…
  82. Advanced .NET Programming
  83. 1TB File Server, $500
  84. Server Move
  85. Mcts
  86. Move to Outlook
  87. ISO 17799
  88. Where’s the service?
  89. End on an Era
  90. Microsoft Visual Studio 2005 -Free
  91. WordPress Update
  92. Common Sense Email
  93. The Magician
  94. New Windows XP Theme
  95. How IT Projects Really Work
  96. evalTray Update
  97. It’s Official – IE7 is cool
  98. Starting Over

2005 12

  1. Glue & Reuse
  2. Visual Studio 2005 Released!
  3. Internet Explorer 7 (Beta 1)
  4. OpenIRCNet (RandomIRC) Link Policy Draft
  5. vArticles
  6. 4HowTo reaches 30,000 & vArticles dev.2
  7. Back From New York
  8. phpBB 2.0.13 released – dumb*ss coders strike again
  9. ExVB.com Online!
  10. Still using AWStats?
  11. Random User-Agent in VB.NET
  12. Suicide Bomb Kills 125

2004 3

  1. Why would somebody do that to Eric?
  2. ZipSight 2004.1 Released
  3. My greatest work!

2003 13

  1. Get Default Mail Client
  2. Get CPU Speed
  3. Simple INI API
  4. Simple String Hashing
  5. APISettings
  6. Conexant (formerly Rockwell) Softmodem HSF Modem
  7. SetFocusByCaption
  8. PageSource
  9. IsOnline
  10. Register ActiveX & TypeLibs
  11. XP-Style Controls In Visual Basic 6
  12. CloseApp
  13. The SWEBS Project & The SWEBS Control Center