PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

Read More ›

All Entries

Brass Tacks

Brass Tacks: Experts Endorse Frequent Vuln Assessments

This article explains why it is so important to have regular vulnerability assessments and how Secure Ideas' Scout services can help....
Read ›
IAM Access Analyzer Review

IAM Access Analyzer Review

Turn it on. Turn it on now! Instructions are here. AWS misconfigurations are costly and difficult problems to solve....
Read ›
Security Review of Nest Camera

Security Review of Nest Camera

The simplicity of turning on a light bulb with a voice command makes me giddy, and I totally geek out over building scripts......
Read ›
IAM Root: AWS IAM Simulator Tutorial

IAM Root: AWS IAM Simulator Tutorial

Another reason to be paranoid about your personal information being exposed, the recent Capital One breach should be sufficient nightmare fuel for you....
Read ›
Why Should We Address Security? A Guide for Small and Medium Businesses

Why Should We Address Security? A Guide for Small and Medium Businesses

It is still common to hear "Why bother with security", so this article explains why it is important....
Read ›
Why are Penetration Tests Expensive

Why are Penetration Tests Expensive?

This article explains the expense and costs behind a Secure Ideas penetration test and how a client can save money....
Read ›
What are the Risks of a Penetration Test

What are the Risks of a Penetration Test?

Penetration testing is not without risks. This article explains some of the concerns organizations should consider....
Read ›
What’s the Difference between Penetration Tests and Bug Bounties

What’s the Difference between Penetration Tests and Bug Bounties?

This page describes the differences between bug bounties and penetration tests...
Read ›
My Experience in the CISSP Mentorship Program

My Experience in the CISSP Mentorship Program

An explanation of the class and one consultant's experience with it....
Read ›
Game Console Hacking: Part 1 Lab Setup

Game Console Hacking: Part 1 Lab Setup

This is the first in a series of blog posts on my journey through video game hacking and security....
Read ›
Using Components with Known Vulnerabilities

Using Components with Known Vulnerabilities

When dealing with cyber vulnerabilities, there are lots of threats that are unknown and ever changing that can put users at risk....
Read ›
Better API Penetration Testing with Postman – Part 4

Better API Penetration Testing with Postman – Part 4

This is the final part of this series. We will use some of Burp Suite’s extensions to augment your API testing toolchain....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy