Steve Gibson

Gibson claimed that a thread is created to run the SetAbortProc handler. In fact, no thread is created to run the handler – it is a callback, which is called by the parser, and the parser has to wait until the callback returns, otherwise the whole point of the function (to abort the printing) is lost. By his own admission, Gibson did not read the documentation (in fact, he claimed that he couldn’t find it, although it is freely available on Microsoft’s Web site), and he claimed that the device context is not available to the function handler. Of course the device context is available to the function handler — it is one of the two parameters that is passed to it (see above), and it is required in order to abort the printing. Finally, Gibson claimed that the control flow could not return to Windows. It is simply a matter of the function returning and discarding the parameters that were passed on the stack. If the record is well formed, Windows will continue to parse the file, as before.

In 2013 Gibson proposed SQRL as a way to simplify the process of authentication without the risk of revelation of information about the transaction to a third party.

In 2006 Gibson raised the possibility that the Windows Metafile vulnerability bug was actually a backdoor intentionally engineered into the system. A response by Microsoft and by Mark Russinovich on Microsoft's Technet stated that the bug appeared to be coding error and that Gibson's reasoning was based upon Microsoft's abort procedure documentation being misleading. Furthermore, Peter Ferrie of Symantec Security Response, USA noted that:

In 2005 Gibson launched a weekly podcast called "Security Now" with Leo Laporte on TWiT.tv, with its archives hosted on GRC's website.

In 2001, Gibson predicted that Microsoft's implementation of the SOCK_RAW protocol in the initial release of Windows XP would lead to widespread chaos by making it easier for Windows XP users to create denial of service (DoS) attacks. In that year, his company's website was brought down by a DoS attack; the attacks continued for two weeks. Gibson blogged about the attacks and his (ultimately successful) efforts to track down the hacker. Three years after the Windows XP release, Microsoft limited raw socket support in Service Pack 2.

In 1999, Gibson created one of the first adware removal programs, which he called OptOut.

From 1986 to 1993 Gibson wrote the "Tech Talk" column for InfoWorld magazine.

In 1985 Gibson founded Gibson Research Corporation (GRC) - a computer software development firm.

Gibson founded Gibson Laboratories in Laguna Hills, California in 1981; Gibson Labs developed a light pen for the Apple II, Atari, and other platforms and went out of business in 1983.

Gibson was hired as a programmer for California Pacific Computer Company in 1980, where he worked on copy protection for the company's products.

Steven "Steve Tiberius" Gibson (born 26 March 1955) is an American software engineer, security researcher, and IT security proponent. In the early 1980s, Gibson worked on light pen technology for use with Apple and Atari systems. In 1985, he founded Gibson Research Corporation, best known for its SpinRite software.