https://ryanbasden.com Writing on security, technology, and related topics. en-us https://ryanbasden.com/favicon.png https://ryanbasden.com https://ryanbasden.com/blog/song-of-heists-and-drive-bys/ https://ryanbasden.com/blog/song-of-heists-and-drive-bys.html Sun, 02 Aug 2026 00:00:00 +0000 Why any organization with a public IP has to plan for un-patchable zero-day exploitation, not just targeted attacks. https://ryanbasden.com/blog/partial-exploits/ https://ryanbasden.com/blog/partial-exploits.html Fri, 31 Jul 2026 00:00:00 +0000 Now published at Xora: taking a 'safely' disclosed WordPress RCE most of the way to a full unauthenticated exploit chain with public research and an LLM. https://ryanbasden.com/blog/one-home-for-everything/ https://ryanbasden.com/blog/one-home-for-everything.html Thu, 30 Jul 2026 00:00:00 +0000 Consolidating my scattered writing under one roof, without giving up digital ownership. https://ryanbasden.com/blog/what-to-do-with-bad-ideas/ https://ryanbasden.com/blog/what-to-do-with-bad-ideas.html Fri, 22 May 2026 00:00:00 +0000 On consuming valuable ideas from people whose other beliefs you find repugnant, and why avoidance is the choice to be passive. https://ryanbasden.com/blog/infosec-training-is-weird-now/ https://ryanbasden.com/blog/infosec-training-is-weird-now.html Fri, 20 Mar 2026 00:00:00 +0000 Enshittification comes for us all. https://ryanbasden.com/blog/how-purple-teams-fail/ https://ryanbasden.com/blog/how-purple-teams-fail.html Sun, 15 Mar 2026 00:00:00 +0000 The misaligned incentives, on both the client and consultant sides, that doom most purple team engagements before they start. https://ryanbasden.com/blog/oceans-eleven-louvre/ https://ryanbasden.com/blog/oceans-eleven-louvre.html Mon, 02 Mar 2026 00:00:00 +0000 What real-world heists and insider-threat data reveal about who actually breaks into buildings, and what a physical penetration test is worth. https://ryanbasden.com/blog/shadow-incentives/ https://ryanbasden.com/blog/shadow-incentives.html Thu, 12 Feb 2026 00:00:00 +0000 The hidden incentive to make more money, not to reduce risk, that pushes the security industry toward compliance theater. https://ryanbasden.com/blog/you-will-get-phished/ https://ryanbasden.com/blog/you-will-get-phished.html Fri, 16 Jan 2026 00:00:00 +0000 Why phishing simulations punish employees for a problem they can't solve, and what actually reduces the risk of a successful phish. https://ryanbasden.com/blog/management-lessons/ https://ryanbasden.com/blog/management-lessons.html Wed, 31 Dec 2025 00:00:00 +0000 A largely unfiltered and slightly refined response to upper management's annoying idealisms. https://ryanbasden.com/blog/less-is-more/ https://ryanbasden.com/blog/less-is-more.html Tue, 16 Sep 2025 00:00:00 +0000 New research for using `less` as a persistence mechanism. https://ryanbasden.com/blog/stop-breaking-feeds/ https://ryanbasden.com/blog/stop-breaking-feeds.html Fri, 18 Jul 2025 00:00:00 +0000 RSS is supposed to be for the readers, not you. https://ryanbasden.com/blog/lolc2/ https://ryanbasden.com/blog/lolc2.html Tue, 25 Feb 2025 00:00:00 +0000 A collection of legitimate services and how to use them for evil. https://ryanbasden.com/blog/link-blogs/ https://ryanbasden.com/blog/link-blogs.html Fri, 21 Feb 2025 00:00:00 +0000 A nice way to share without writing an essay. https://ryanbasden.com/blog/blogroll/ https://ryanbasden.com/blog/blogroll.html Mon, 20 Jan 2025 00:00:00 +0000 A collection of blogs/feeds I read on a regular basis. https://ryanbasden.com/blog/burnout-prevention-part-0/ https://ryanbasden.com/blog/burnout-prevention-part-0.html Sun, 13 Aug 2023 00:00:00 +0000 An introduction to burnout and how to recover from it. https://ryanbasden.com/blog/federation-myths/ https://ryanbasden.com/blog/federation-myths.html Sun, 06 Nov 2022 00:00:00 +0000 The old internet was better anyway. https://ryanbasden.com/blog/secure-messaging-paranoid-realists-vol2/ https://ryanbasden.com/blog/secure-messaging-paranoid-realists-vol2.html Sat, 11 Jun 2022 00:00:00 +0000 Reasons for not using Conduit anymore. https://ryanbasden.com/blog/learn-exploit-dev-for-free/ https://ryanbasden.com/blog/learn-exploit-dev-for-free.html Wed, 23 Mar 2022 00:00:00 +0000 A free guide to free resources for learning exploit development. https://ryanbasden.com/blog/secure-messaging-paranoid-realists/ https://ryanbasden.com/blog/secure-messaging-paranoid-realists.html Tue, 01 Mar 2022 00:00:00 +0000 ...like me.