Ryan Basden https://ryanbasden.com/ 2026-08-02T00:00:00Z Ryan Basden Writing on security, technology, and related topics. https://ryanbasden.com/favicon.png https://ryanbasden.com/favicon.png Everyone Has A Plan Until They Get Punched In The SonicWall https://ryanbasden.com/blog/song-of-heists-and-drive-bys.html 2026-08-02T00:00:00Z Ryan Basden Why any organization with a public IP has to plan for un-patchable zero-day exploitation, not just targeted attacks. You Can't Just Publish Partial Exploits Anymore https://ryanbasden.com/blog/partial-exploits.html 2026-07-31T00:00:00Z Ryan Basden Now published at Xora: taking a 'safely' disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research and an LLM. One Home for Everything I Write https://ryanbasden.com/blog/one-home-for-everything.html 2026-07-30T00:00:00Z Ryan Basden Consolidating my scattered writing under one roof, without giving up digital ownership. What To Do With Bad Ideas From People Who Also Have Good Ideas https://ryanbasden.com/blog/what-to-do-with-bad-ideas.html 2026-05-22T00:00:00Z Ryan Basden On consuming valuable ideas from people whose other beliefs you find repugnant, and why avoidance is the choice to be passive. Infosec Training Is Weird Now https://ryanbasden.com/blog/infosec-training-is-weird-now.html 2026-03-20T00:00:00Z Ryan Basden Enshittification comes for us all. How to Ensure Your Purple Team Fails Miserably https://ryanbasden.com/blog/how-purple-teams-fail.html 2026-03-15T00:00:00Z Ryan Basden The misaligned incentives, on both the client and consultant sides, that doom most purple team engagements before they start. Ocean's Eleven Heists In a Louvre Four World https://ryanbasden.com/blog/oceans-eleven-louvre.html 2026-03-02T00:00:00Z Ryan Basden What real-world heists and insider-threat data reveal about who actually breaks into buildings, and what a physical penetration test is worth. How Shadow Incentives Harm Real Security https://ryanbasden.com/blog/shadow-incentives.html 2026-02-12T00:00:00Z Ryan Basden The hidden incentive to make more money, not to reduce risk, that pushes the security industry toward compliance theater. You Will Definitely Get Phished, So Stop Simulating It https://ryanbasden.com/blog/you-will-get-phished.html 2026-01-16T00:00:00Z Ryan Basden Why phishing simulations punish employees for a problem they can't solve, and what actually reduces the risk of a successful phish. Lessons in Project Management https://ryanbasden.com/blog/management-lessons.html 2025-12-31T00:00:00Z Ryan Basden A largely unfiltered and slightly refined response to upper management's annoying idealisms. Less Pager For Persistence https://ryanbasden.com/blog/less-is-more.html 2025-09-16T00:00:00Z Ryan Basden New research for using `less` as a persistence mechanism. Stop Breaking Your Feeds https://ryanbasden.com/blog/stop-breaking-feeds.html 2025-07-18T00:00:00Z Ryan Basden RSS is supposed to be for the readers, not you. C2 via Legitimate Services https://ryanbasden.com/blog/lolc2.html 2025-02-25T00:00:00Z Ryan Basden A collection of legitimate services and how to use them for evil. Link Blogs https://ryanbasden.com/blog/link-blogs.html 2025-02-21T00:00:00Z Ryan Basden A nice way to share without writing an essay. Recommended Blogs https://ryanbasden.com/blog/blogroll.html 2025-01-20T00:00:00Z Ryan Basden A collection of blogs/feeds I read on a regular basis. Burnout Recovery and Prevention 101 (Part 0) https://ryanbasden.com/blog/burnout-prevention-part-0.html 2023-08-13T00:00:00Z Ryan Basden An introduction to burnout and how to recover from it. Mastodon, Musk, and Mythbusting: The Case for Federation https://ryanbasden.com/blog/federation-myths.html 2022-11-06T00:00:00Z Ryan Basden The old internet was better anyway. Secure Messaging for Paranoid Realists: Vol. 2 https://ryanbasden.com/blog/secure-messaging-paranoid-realists-vol2.html 2022-06-11T00:00:00Z Ryan Basden Reasons for not using Conduit anymore. Learn Exploit Development for Free https://ryanbasden.com/blog/learn-exploit-dev-for-free.html 2022-03-23T00:00:00Z Ryan Basden A free guide to free resources for learning exploit development. Secure Messaging for Paranoid Realists https://ryanbasden.com/blog/secure-messaging-paranoid-realists.html 2022-03-01T00:00:00Z Ryan Basden ...like me.