2007
i know this has been blogged all over the interwebs..
but Leopards default icon for windows machines has to rank up there with dvwssr.dll (yeah.. thats a BSOD) /mh ok.. who’s old enough? what was the similarity between this and dvwssr.dll ?
Mind Control, Big Cats, Feynman && kiosks…
Aka… A good weekend.. The weekend got off to a slow start, when Amazon claimed it would take a little longer than planned to ship us the “Web Application Hackers Handbook”. Fortunately it picked up after that.. The first ray of light was finding a new strange bug on a huge application that smells a lot like full remote code execution.. Then the office had a power-outage and i felt…
PauldotCom Interview, Part I
OK.. so part one of our pauldotcom interview has hit the interwebs.. it was fun and involved a power failure and a dog that chewed through charl’s microphone cable about 15 minutes before the interview started.. My thoughts on it were best expressed earlier on irc.. -snip- 12:04 <+MH> i sounded (cleverer/less annoying/less nasal) in my head.. 12:04 <+MH> apparently hearing ur own voice through ur teeth explains (3).. (1)…
22:30 to 23:30: the quiet hour
while waiting around for the PSW guys last night, it seemed like a good time to test our mettle on the foosball table. we’ve witnessed rapid development of general foos skills in the office since the introduction of the table a few weeks ago, and the improvement in shot speed has been noticeable. of course, questions always remain as to the difference between actual and perceived velocity of shots, and…
9 days to leopard…
You can almost taste the fanboy excitement.. but im guessing there will also be the mandatory rush for the first big bug announcements.. There are a few things that look cool.. Apple joins the right decade with ASLR and native multi-desktops looks cool.. DTrace on osx seems like a winner too.. Of course, theres also the much touted: “Back to my mac” feature: [watch video of it in action] i…
MSDN Mag – Security Edition is out..
The November edition of MSDN magazine [is available] and is another security issue.. The articles look interesting, and if you look closely you should notice articles by infosec rockstars like mike howard, damien hasse and the occasional member of LSD.. Grab it while its hot…
Wikto Updates
A new version of Wikto is also available, which provides a more reliable web spider and also includes some minor bugfixes. More details regarding Wikto are available at http://www.sensepost.com/research/wikto
Suru Version 2.0
We are pleased to announce the release of Suru version 2.0, our MITM proxy. Suru has now been rewritten to work with the .Net 2 runtime environment and includes all the features of the original 1.x stream, as well as numbers of enhancements and upgrades. Features which have been added since the last 1.1 stable release include the following: Upstream proxy support Response timing for timing-based attacks Highlighting of search…
Piotr Bania Agrees.. Metal Gear Rocks.. (warning.. this post has 0 to do with infosec)
Way back in 2000 i bought my kid sister a Sony PlayStation.. I have never been a big gamer (not since arcade games when i was tiny) but a reliable source at work convinced me to play Metal Gear – Solid. The game was awesome and for the period i played it, it dominated my life.. im not a gamer so probably not qualified to use words like gameplay but…
The proof of the pudding ?
Royal pingdom did a quick check on what was running at some of the more popular sites on the Internet and end up with the following table: Its intersting for a whole bunch of reasons that im currently too sleep y to write about.. (sleepy??? must be old age?)(or the flu pills im taking) The first thing that was interesting to me was the suprising lack of BSD ? i…