Pinned Tweet
Today is the anniversary of the testimony I and other members of the l0pht gave to the US Senate in 1998.
It was the first time the US Govt. publicly referenced “hackers” in a positive context.
The coverage was national and even international.
Come behind the scenes.
/Thread
The irony of MSFT publishing this book (fun book btw) is they would go on to actively hunt down people discussing security issues, or reporting security issue to MSFT, attempting to have their employers fire them.
Other intimidation tactics were used as well.
Microsoft has admittedly come a long way in changing behavior and building a much better large scale SecDev process.
Still, I occasionally look at this book, the fact that it was published by Microsoft Press, and chuckle in confusion over the sheer cognitive dissonance.
Anyone remember Dockmaster (MULTICS) and Radium at NCSC?
NCSC being the National Computer Security Center (if you know, you know).
Follow up: do any of you remember some type of user and data dump from them just before CFAA was enacted?
Like it was a well timed “hehehe”?
Postfix: apologies for not being able to provide all of the details here.
With much appreciation to the people on those multiple teams.
You know who you are.
And thank you to the Board and Execs continually demonstrating over the years how much you appreciate the work of your current, AND former staff. Because of that, I have no doubt you will always have a pipeline of the best future staff eager to join.
(Word gets around when places play the long game)
Taking a moment for a PSA:
I still get occasional random messages saying I made a difference, or otherwise encouraged someone at some point.
Those messages mean a lot.
If someone’s contributions meant something to you along your journey drop them a note.
It’s a small thing with big impact.
Thanks for the artwork Eddie the Y3t1!






