// Prerequisites
What to read before A Bug Hunter's Diary
If A Bug Hunter's Diary feels too steep at intermediate level, here is what to read first. Lighter books in the same topics that build the prerequisites this one assumes.
01 · 2021
This Is How They Tell Me the World Ends
Nicole Perlroth's reporting on the global zero-day market: how exploits get bought, by whom, and how the gray-then-black market shapes which vulnerabilities get fixed and which get hoarded.
Beginner4/5Nicole Perlroth02 · 2021
How to Hack Like a Ghost
A narrated, real-time breach of a fictional data-driven political consulting firm's AWS and Kubernetes environment, written by a working penetration tester who presents at Black Hat and DEF CON.
Intermediate4/5Sparc Flow03 · 2017
American Kingpin
A propulsive account of how Ross Ulbricht built the Silk Road dark-web drug empire as Dread Pirate Roberts, and how a handful of investigators across rival agencies finally unmasked him.
Beginner5/5Nick Bilton04 · 2011
Kingpin
Kevin Poulsen's reconstruction of Max Butler's career — from white-hat consultant to running CardersMarket, the carding forum that consolidated the early-2000s underground — and the FBI investigation that finally took him down.
Beginner5/5Kevin Poulsen05 · 2019
Sandworm
Long-form journalism on the GRU's hacking operations, the best non-technical book on what state-level cyber actually looks like.
Beginner5/5Andy Greenberg06 · 1999
The Code Book
A narrative history of cryptography from Caesar ciphers to public-key, told through the people and the wars that turned on broken codes. Still the best on-ramp to why crypto matters.
Beginner5/5Simon Singh07 · 1989
The Cuckoo's Egg
Clifford Stoll's first-person account of investigating a 75-cent accounting discrepancy at LBNL that turned into a year-long pursuit of a KGB-paid intruder across early-internet networks.
Beginner5/5Clifford Stoll08 · 2020
The Hacker and the State
Ben Buchanan's argument that state-on-state cyber operations are not deterrence-shaped (like nuclear) but signaling-shaped: countries use cyber to shape the environment, not to threaten escalation. Builds the case from declassified incidents.
Beginner5/5Ben Buchanan