Good Technical Infosec Blogs?

[rtkaratekid]

I'm looking for really good technical blogs or even blog posts. From stepping through gritty details of exploits to big picture ideas even to discussion about specific tools, how they work, and pros and cons. I am just finding myself, having been in field for five years or so, really hungry for more quality info.

There are tons of company marketing blogs that are largely superficial, but finding good technical or in-depth blogs is a bit harder. I've read some good stuff from Dark Reading and Bleeping Computer. The SANS blogs can be good as well. That about covers what I largely have followed. Hope some folks have some interesting reads to share.

edit: podcasts and other media forms are great as well

[twunde]

Chompie (https://twitter.com/chompie1337) does a great job on exploit writeups. Take a look at https://www.graplsecurity.com/post/iou-ring-exploiting-the-l.... She's got a few more blog posts at Grapl, but she's moved on to new things at xforcered at IBM.

[rtkaratekid → twunde]

Thanks! I'll have a look

[killjoywashere]

Darknet Diaries isn't terribly technical, but has some good history.

[rtkaratekid → killjoywashere]

Yeah it doesn't quite scratch the technical itch, but I think it's fun and informative on history and personal stories.

[gabrielsroka]

https://schneier.com

https://krebsonsecurity.com

[mikeodds]

https://reddit.com/r/netsec has a lot of good technical material posted

[rtkaratekid → mikeodds]

Thanks, I was surprised to have reddit suggested, but a couple of my respected friends in the field also generally look at r/netsec so it must be pretty good.

[ramimac]

Start with tldrsec.com - then accumulate blogs from the included links

[rtkaratekid → ramimac]

This is great, I'm excited to explore