PROFESSIONALLY EVIL BLOG

We Break Things For a Living.

We Also Write About Things.

Our expert-led content ranges from deep-dives into penetration testing to explorations of hardware hacking. In this digital playground, we unravel the complex world of information security with a touch of fun. Whether you’re curious about Secure Ideas or passionate about cybersecurity, this blog is your quick, enlightening, and entertaining guide into the captivating world of information security. 

Professional Insights Blog

Latest Post

Compiling is Not Hiding: Hardcoded Secrets in Mobile Apps

Most of the secrets I’ve found in mobile apps were not stolen. They were shipped. What do I mean by that? I mean nobody needs to break into the vault when the combination is printed on every door. Compiling is not hiding: it changes the format of the code, not...

Read More ›

All Entries

Android App Testing on Chromebooks

Android App Testing on Chromebooks

As of March 2021, I’d recommend using Android Virtual Devices over Chromebooks....
Read ›
How to Test Your Security Controls for SmallMedium Businesses

How to Test Your Security Controls for Small/Medium Businesses

We often get contacted by small businesses requesting their first penetration test because of compliance reasons....
Read ›
Cave of Broken Mirrors: 3 Issues with AWS Cognito

Cave of Broken Mirrors: 3 Issues with AWS Cognito

Secure Ideas is currently working on a revamp and redesign of our website and client portal, to promote a better user experience for our clients....
Read ›
default

Cracking WPA Pre Shared Keys

WPA/WPA2, more specifically situations where pre-shared keys (PSK) are used to authenticate to an access point....
Read ›
Three C Words of Web App Security: Part 3 – Clickjacking

Three C-Words of Web App Security: Part 3 – Clickjacking

Prologue back in April, called A Brief Evolution of Web Apps, to set the scene for those less versed in web application history....
Read ›
Fuzz Testing

Fuzz Testing

A brand new piece of software, a program, a network, or an operating system, you will want to test it for any bugs, coding errors...
Read ›
#AffordableTraining requires change

#AffordableTraining requires change

In 2019 Secure Ideas is dedicated to offering affordable security training to everyone. This concept has been one of our core goals and passions....
Read ›
What is Physical Security?

What is Physical Security?

What’s Physical Security? Ok, I’m just going to say it, I’m a physical security guy in a IT security world. So why physical security for...
Read ›
Stored XSS: What Is It

Stored XSS: What Is It

In the cyber security world, there are a number of vulnerabilities to be aware of. Today we’re going to look at a specific one; Stored...
Read ›
A Container Hacker’s Guide to Living Off of the Land

A Container Hacker’s Guide to Living Off of the Land

Sometimes as a pentester you find yourself in tricky situations. Depending on the engagement, you might want to avoid making a lot of noise on...
Read ›
The Ignorant Human: Data’s Biggest Threat

The Ignorant Human: Data’s Biggest Threat

For all the money spent on expensive software solutions and expert consultation; an organization is still at a tremendous risk....
Read ›
Twelve Days of XSSmas

Twelve Days of XSSmas

This series of daily mini-posts, running from December 12, 2018 to December 24, 2018, is intended to provide cross-site scripting (XSS) related tips....
Read ›

Get the Debrief in Your Inbox

New findings, series updates, and usually some bad puns. Delivered when we actually have something worth saying.

No spam. Unsubscribe whenever. We’re evil, not rude.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy