Embed Notice

@adamshostack @tess @sophieschmieg @david_chisnall @Vrimj @singe My work focuses on fraud detection and prevention, and in this context motivation and incentives help to inform what to look for.

I actually do find being an "attacker therapist" useful in anti-abuse contexts because there is an iterative processes of detections and evasions. Getting inside their head helps me predict what they'll do.

Conversely, to your point, nobody needs to care why someone would do an SQLi.