Reading List on System Overlord

Hacker Culture Reading List

david@systemoverlord.com (David Tomaschik) — Fri, 26 Jun 2020 00:00:00 +0000

A friend recently asked me if I could recommend some reading about hacking and security culture. I gave a couple of quick answers, but it inspired me to write a blog post in case anyone else is looking for similar content. Unless otherwise noted, I’ve read all of these books/resources and can recommend them.

Getting Started in Information Security

david@systemoverlord.com (David Tomaschik) — Sat, 13 Sep 2014 19:30:22 +0000

I’ve only been an information security practitioner for about a year now, but I’ve been doing things on my own for years before that. However, many people are just getting into security, and I’ve recently stumbled on a number of resources for newcomers, so I thought I’d put together a short list.

Weekly Reading List for 5/30/14

david@systemoverlord.com (David Tomaschik) — Fri, 30 May 2014 07:00:00 +0000

It’s been a busy week, so I’m just going to drop some info about Radare2.

Radare2 Materials

Weekly Reading List for 5/23/14

david@systemoverlord.com (David Tomaschik) — Fri, 23 May 2014 07:00:00 +0000

###Radare2 Book Maijin on GitHub is in the process of putting together an online book for Radare2. I’ve been looking for a good resource for using Radare2, and this is a great start.

###Reverse Engineering for Beginners Dennis Yurichev has a free eBook on Reverse Engineering. I haven’t gotten through it yet, but it looks interesting, and you can’t beat the price.

###Hacker Playbook Finally, I finished up The Hacker Playbook: Practical Guide To Penetration Testing this week. You can find my full review here.

Reading List for 5/9/2014

david@systemoverlord.com (David Tomaschik) — Fri, 09 May 2014 07:00:00 +0000

###On XTS Mode for Disk Encryption Thomas Ptacek writes You Don’t Want XTS, and suggests that though XTS works well enough in practice, it is far from ideal for Full Disk Encryption, and should not be used at all for other encryption operations (i.e., anything that doesn’t resemble FDE). XTS is useful only in that it makes “random access” encryption more secure, as you need for a disk. For encryption of whole blocks of data at rest, you probably want CBC mode, and for anything on the wire, AES-GCM is the new hotness.