{ "version": "https://jsonfeed.org/version/1.1", "title": "Ryan Basden", "home_page_url": "https://ryanbasden.com", "feed_url": "https://ryanbasden.com/feed.json", "description": "Writing on security, technology, and related topics.", "language": "en-us", "authors": [ { "name": "Ryan Basden", "url": "https://ryanbasden.com" } ], "items": [ { "id": "https://ryanbasden.com/blog/song-of-heists-and-drive-bys.html", "url": "https://ryanbasden.com/blog/song-of-heists-and-drive-bys.html", "title": "A Song of Heists and Drive-Bys", "date_published": "2026-08-02T00:00:00Z", "summary": "Why any organization with a public IP has to plan for un-patchable zero-day exploitation, not just targeted attacks.", "content_text": "Why any organization with a public IP has to plan for un-patchable zero-day exploitation, not just targeted attacks." }, { "id": "https://ryanbasden.com/blog/partial-exploits.html", "url": "https://ryanbasden.com/blog/partial-exploits.html", "title": "You Can't Just Publish Partial Exploits Anymore", "date_published": "2026-07-31T00:00:00Z", "summary": "Taking a 'safely' disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research, a patch diff, and an LLM, and the rest with a public PoC.", "content_text": "Taking a 'safely' disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research, a patch diff, and an LLM, and the rest with a public PoC." }, { "id": "https://ryanbasden.com/blog/one-home-for-everything.html", "url": "https://ryanbasden.com/blog/one-home-for-everything.html", "title": "One Home for Everything I Write", "date_published": "2026-07-30T00:00:00Z", "summary": "Consolidating my scattered writing under one roof, without giving up digital ownership.", "content_text": "Consolidating my scattered writing under one roof, without giving up digital ownership." }, { "id": "https://ryanbasden.com/blog/what-to-do-with-bad-ideas.html", "url": "https://ryanbasden.com/blog/what-to-do-with-bad-ideas.html", "title": "What To Do With Bad Ideas From People Who Also Have Good Ideas", "date_published": "2026-05-22T00:00:00Z", "summary": "On consuming valuable ideas from people whose other beliefs you find repugnant, and why avoidance is the choice to be passive.", "content_text": "On consuming valuable ideas from people whose other beliefs you find repugnant, and why avoidance is the choice to be passive." }, { "id": "https://ryanbasden.com/blog/infosec-training-is-weird-now.html", "url": "https://ryanbasden.com/blog/infosec-training-is-weird-now.html", "title": "Infosec Training Is Weird Now", "date_published": "2026-03-20T00:00:00Z", "summary": "Enshittification comes for us all.", "content_text": "Enshittification comes for us all." }, { "id": "https://ryanbasden.com/blog/how-purple-teams-fail.html", "url": "https://ryanbasden.com/blog/how-purple-teams-fail.html", "title": "How to Ensure Your Purple Team Fails Miserably", "date_published": "2026-03-15T00:00:00Z", "summary": "The misaligned incentives, on both the client and consultant sides, that doom most purple team engagements before they start.", "content_text": "The misaligned incentives, on both the client and consultant sides, that doom most purple team engagements before they start." }, { "id": "https://ryanbasden.com/blog/oceans-eleven-louvre.html", "url": "https://ryanbasden.com/blog/oceans-eleven-louvre.html", "title": "Ocean's Eleven Heists In a Louvre Four World", "date_published": "2026-03-02T00:00:00Z", "summary": "What real-world heists and insider-threat data reveal about who actually breaks into buildings, and what a physical penetration test is worth.", "content_text": "What real-world heists and insider-threat data reveal about who actually breaks into buildings, and what a physical penetration test is worth." }, { "id": "https://ryanbasden.com/blog/shadow-incentives.html", "url": "https://ryanbasden.com/blog/shadow-incentives.html", "title": "How Shadow Incentives Harm Real Security", "date_published": "2026-02-12T00:00:00Z", "summary": "The hidden incentive to make more money, not to reduce risk, that pushes the security industry toward compliance theater.", "content_text": "The hidden incentive to make more money, not to reduce risk, that pushes the security industry toward compliance theater." }, { "id": "https://ryanbasden.com/blog/you-will-get-phished.html", "url": "https://ryanbasden.com/blog/you-will-get-phished.html", "title": "You Will Definitely Get Phished, So Stop Simulating It", "date_published": "2026-01-16T00:00:00Z", "summary": "Why phishing simulations punish employees for a problem they can't solve, and what actually reduces the risk of a successful phish.", "content_text": "Why phishing simulations punish employees for a problem they can't solve, and what actually reduces the risk of a successful phish." }, { "id": "https://ryanbasden.com/blog/management-lessons.html", "url": "https://ryanbasden.com/blog/management-lessons.html", "title": "Lessons in Project Management", "date_published": "2025-12-31T00:00:00Z", "summary": "A largely unfiltered and slightly refined response to upper management's annoying idealisms.", "content_text": "A largely unfiltered and slightly refined response to upper management's annoying idealisms." }, { "id": "https://ryanbasden.com/blog/less-is-more.html", "url": "https://ryanbasden.com/blog/less-is-more.html", "title": "Less Pager For Persistence", "date_published": "2025-09-16T00:00:00Z", "summary": "New research for using `less` as a persistence mechanism.", "content_text": "New research for using `less` as a persistence mechanism." }, { "id": "https://ryanbasden.com/blog/stop-breaking-feeds.html", "url": "https://ryanbasden.com/blog/stop-breaking-feeds.html", "title": "Stop Breaking Your Feeds", "date_published": "2025-07-18T00:00:00Z", "summary": "RSS is supposed to be for the readers, not you.", "content_text": "RSS is supposed to be for the readers, not you." }, { "id": "https://ryanbasden.com/blog/lolc2.html", "url": "https://ryanbasden.com/blog/lolc2.html", "title": "C2 via Legitimate Services", "date_published": "2025-02-25T00:00:00Z", "summary": "A collection of legitimate services and how to use them for evil.", "content_text": "A collection of legitimate services and how to use them for evil." }, { "id": "https://ryanbasden.com/blog/link-blogs.html", "url": "https://ryanbasden.com/blog/link-blogs.html", "title": "Link Blogs", "date_published": "2025-02-21T00:00:00Z", "summary": "A nice way to share without writing an essay.", "content_text": "A nice way to share without writing an essay." }, { "id": "https://ryanbasden.com/blog/blogroll.html", "url": "https://ryanbasden.com/blog/blogroll.html", "title": "Recommended Blogs", "date_published": "2025-01-20T00:00:00Z", "summary": "A collection of blogs/feeds I read on a regular basis.", "content_text": "A collection of blogs/feeds I read on a regular basis." }, { "id": "https://ryanbasden.com/blog/burnout-prevention-part-0.html", "url": "https://ryanbasden.com/blog/burnout-prevention-part-0.html", "title": "Burnout Recovery and Prevention 101 (Part 0)", "date_published": "2023-08-13T00:00:00Z", "summary": "An introduction to burnout and how to recover from it.", "content_text": "An introduction to burnout and how to recover from it." }, { "id": "https://ryanbasden.com/blog/federation-myths.html", "url": "https://ryanbasden.com/blog/federation-myths.html", "title": "Mastodon, Musk, and Mythbusting: The Case for Federation", "date_published": "2022-11-06T00:00:00Z", "summary": "The old internet was better anyway.", "content_text": "The old internet was better anyway." }, { "id": "https://ryanbasden.com/blog/secure-messaging-paranoid-realists-vol2.html", "url": "https://ryanbasden.com/blog/secure-messaging-paranoid-realists-vol2.html", "title": "Secure Messaging for Paranoid Realists: Vol. 2", "date_published": "2022-06-11T00:00:00Z", "summary": "Reasons for not using Conduit anymore.", "content_text": "Reasons for not using Conduit anymore." }, { "id": "https://ryanbasden.com/blog/learn-exploit-dev-for-free.html", "url": "https://ryanbasden.com/blog/learn-exploit-dev-for-free.html", "title": "Learn Exploit Development for Free", "date_published": "2022-03-23T00:00:00Z", "summary": "A free guide to free resources for learning exploit development.", "content_text": "A free guide to free resources for learning exploit development." }, { "id": "https://ryanbasden.com/blog/secure-messaging-paranoid-realists.html", "url": "https://ryanbasden.com/blog/secure-messaging-paranoid-realists.html", "title": "Secure Messaging for Paranoid Realists", "date_published": "2022-03-01T00:00:00Z", "summary": "...like me.", "content_text": "...like me." } ] }