Archive for the 'Security' Category

CdC Goolag

Cult Of The Dead Cow’s Goolag. Too tired to read it at the moment.

Almost one year ago I blogged Deconstructing Xbox Security, this year there’s Deconstructing Xbox 360 Security (24c3-2279-en-deconstructing_xbox_360_security.mkv) presented at 24C3. Link to 24C3 video recordings.

Top 15 free SQL Injection Scanners
svn-time-lapse-view
Twitter Guide Part #5 - Twitter Tools | Web Applications
JanusVM - Internet Privacy Appliance

Top 10 Reasons Websites Get Hacked (2007) by OWASP via Zone-H/Full Disclosure.

The Register has this article entitled “A Defcon survival guide” which contains a list of measures you should consider taking when using public Wi-Fi.
EDIT: Yes I know this is more than a month and a half old - it has been one of my open tabs in firefox (which works as a sort of to [...]

The Weakest Link

You all know the saying and how Windows is always on top of it. Granted this isn’t nor as it ever been what I’d call a big deal but it’s funny how it’s never fixed. Most people I know actually LIKE to know the type of files they are dealing with and to them, changing [...]

After spending the past 5h30min working for my “Compilers” class project, I’ll have to take some care not to use regular expressions writing this post.
Codeplay makes autoparallelising compiler - I had no doubt this was coming.
Google: Taking steps to further improve our privacy practices - corporations taking steps to protect their customers privacy is always [...]

Note To Self: take a look at firekeeper - project page, project weblog.
Firekeeper is an Intrusion Detection and Prevention System for Firefox. It is able to detect, block and warn the user about malicious sites. Firekeeper uses flexible rules similar to Snort ones to describe browser based attack attempts. Rules can also be used to [...]

I’ve been meaning to make a decent post explaining why you should use the NoScript extension in firefox but I can never get around to it and end up forgetting for months at a time only to forget all about it again so I’m gonna leave here the link, say “It’s a Good Thing” and [...]

This one is almost over… it’s been… interesting. Trying hard to keep up with the news. The only thing interesting I read was the AACS stuff. Who would’ve thought after so much work they wouldn’t even bother encrypting the USB traffic?
Another recent development that I’ve been keeping up to date with is NeACM’s FEUP Blogs. [...]

From one and a half days of Vista use:
The Good:

UAC actually looks pretty good, unfortunately I suspect many users will disable it;
More security stuff (such as ASLR) - only time will tell how effective they will be, but it’s no doubt an improvement;
It feels a lot more responsive;
The WinKey+Tab is badass (though not as good [...]

Trusted Computing

Wow this is the best explanation of why TCPA sucks - also on youtube (found it via Thierry Zoller’s blog that I was checking because of the 22C3 bluetooth stuff). It was actually fun to watch and makes it simple for every one to understand.
Additional Link: Against TCPA

23C3 Videos

Videos from some of the presentations at 23C3 are already available on google video. Enjoy.
PS: Bluetooth Hacking Revisited stuff.

This Google Tech Talk kicked ass. I specially like the A20 hack and visor’s “memory is a sphere” hack.
http://video.google.com/videoplay?docid=-4356347903120410001

I need to get around to booting into windows and try eEye’s free Blink Personal Edition. I’m making this blog post so I don’t forget it. Hopefully I’ll install it later tonight on the laptop and maybe update this post
The free personal version features:
- Personal Firewall (Application and System)
- Identity Theft Protection
- Protocol-Based Intrusion Prevention
- [...]