Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1435 1436 1437 1438 1439 1508 1562 1599 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
Stepping P3wns: Adventures in full spectrum embedded exploitation (and defense!) ANG CUI PH.D. CANDIDATE, COLUMBIA UNIVERSITY MICHAEL COSTELLO RESEARCH STAFF, COLUMBIA UNIVERSITY Our presentation focuses on two live demonstrations of exploitation and defense of a wide array of ubiquitous networked embedded devices like printers, phones and routers. The first demonstration will feature a proof-of-concept embedded worm capable of stea....
Stepping P3wns: Adventures in full spectrum embedded exploitation (and defense!) ANG CUI PH.D. CANDIDATE, COLUMBIA UNIVERSITY MICHAEL COSTELLO RESEARCH STAFF, COLUMBIA UNIVERSITY Our presentation focuses on two live demonstrations of exploitation and defense of a wide array of ubiquitous networked embedded devices like printers, phones and routers. The first demonstration will feature a proof-of-concept embedded worm capable of stea....
Home Invasion 2.0 - Attacking Network-Controlled Consumer Devices DANIEL "UNICORNFURNACE" CROWLEY MANAGING CONSULTANT, SPIDERLABS, TRUSTWAVE JENNIFER "SAVAGEJEN" SAVAGE SOFTWARE ENGINEER DAVID "VIDEOMAN" BRYAN A growing trend in electronics is to have them integrate with your home network in order to provide potentially useful features like automatic updates or to extend the usefulness of existing technologies such as door locks you....
Abusing NoSQL Databases Ming Chow Lecturer, Tufts University Department of Computer Science The days of selecting from a few SQL database options for an application are over. There is now a plethora of NoSQL database options to choose from: some are better than others for certain jobs. There are good reasons why developers are choosing them over traditional SQL databases including performance, scalabiltiy, and ease-of-use. Unfortunately....
Abusing NoSQL Databases Ming Chow Lecturer, Tufts University Department of Computer Science The days of selecting from a few SQL database options for an application are over. There is now a plethora of NoSQL database options to choose from: some are better than others for certain jobs. There are good reasons why developers are choosing them over traditional SQL databases including performance, scalabiltiy, and ease-of-use. Unfortunately....
SoundCloud has a service-oriented architecture, which allows us to use different languages for different services. With concurrency and…
Just over a decade ago, the dotcom bubble burst, and for the next 3-4 years, the IT industry (and IT job market) was in a slump. During the last presentation I did for Game On 2.0 on August 29th, one of the audience members asked me what the dotcom bubble actually was. I supplied the standard Web answer of “overspending in the IT market” and “mismanagement of IT resources” (or something like that).
Just over a decade ago, the dotcom bubble burst, and for the next 3-4 years, the IT industry (and IT job market) was in a slump. During the last presentation I did for Game On 2.0 on August 29th, one of the audience members asked me what the dotcom bubble actually was. I supplied the standard Web answer of “overspending in the IT market” and “mismanagement of IT resources” (or something like that).
SoundCloud has a service-oriented architecture, which allows us to use different languages for different services. With concurrency and…
I have been working with some of the above products at work for the past couple of weeks and I just cam
Today is an interesting and perhaps historic day in the domain industry. GoDaddy has acquired Afternic and SmartName from Name Media . Name Media is probably best known for the BuyDomains brand. They own one of the largest portfolios of domain names in the world at nearly 1 million domains . GoDaddy is the largest player on the consumer side of the domain market by a wide margin. However, they aren't the biggest player and/or have....
Today is an interesting and perhaps historic day in the domain industry. GoDaddy has acquired Afternic and SmartName from Name Media . Name Media is probably best known for the BuyDomains brand. They own one of the largest portfolios of domain names in the world at nearly 1 million domains . GoDaddy is the largest player on the consumer side of the domain market by a wide margin. However, they aren't the biggest player and/or have....
Today is an interesting and perhaps historic day in the domain industry. GoDaddy has acquired Afternic and SmartName from Name Media . Name Media is probably best known for the BuyDomains brand. They own one of the largest portfolios of domain names in the world at nearly 1 million domains . GoDaddy is the largest player on the consumer side of the domain market by a wide margin. However, they aren't the biggest player and/or have....
Every so often I like to take a break from the whole technology gamut and read something else. Preferably, something exceptional like Coronado High from The Atavist. Telling the fascinating origin story of what grew from a few California kids running drugs to a multi-million dollar narcotics empire, Coronado High is much more than a fantastically-written, gripping tale of a bygone era. I wouldn’t dream of spoiling it for you though: thi..
Every once in a while, Letters of Note posts something great, a letter I just have to share. This is one such letter. For me , the last one was a speech William Safire wrote for President Nixon in preparation for a disaster during the moon landing; perhaps the best speech I have ever read. Permalink.
Last week I acquired access to the Instapaper beta prior to its launch alongside iOS 7. I chronicled that story in I Finally Understand Bias . Since then, I have put off writing about the beta for a number of reasons: as a beta, the onus would have been on me to explain every single aspect of the new design or include numerous screenshots. Unlike the Federico Viticcis of the world, I did not find that prospect particularly appealing. Mor..
Every once in a while I come across an application that is so comically insecure that I feel the urge to blog about it. The application in question is a .NET application to manage care homes and provide a Medical Administration Record for residents. Staff login to the app using a username and passwo...
Every once in a while I come across an application that is so comically insecure that I feel the urge to blog about it. The application in question is a .NET application to manage care homes and provide a Medical Administration Record for residents. Staff login to the app using a username and passwo...
Offensive Forensics: CSI for the Bad Guy BENJAMIN CAUDILL PRINCIPAL CONSULTANT, RHINO SECURITY LABS As a pentester, when was the last time you 'recovered' deleted files from the MFT of a pwned box? Ever used an index.dat parser for identifying your next target? Do you download browser remnants of your victims to gather their saved form data? Despite the sensitive information uncovered through forensic techniques, the usage of such con....
Offensive Forensics: CSI for the Bad Guy BENJAMIN CAUDILL PRINCIPAL CONSULTANT, RHINO SECURITY LABS As a pentester, when was the last time you 'recovered' deleted files from the MFT of a pwned box? Ever used an index.dat parser for identifying your next target? Do you download browser remnants of your victims to gather their saved form data? Despite the sensitive information uncovered through forensic techniques, the usage of such con....
Last week, amidst the frenzy preluding Apple’s impending iPhone event, I posted an article titled Instapaper 5 . I did not have early access to a beta or any insight as to the direction Betaworks planned on taking the service; instead, I merely wished to put forth a possible launch strategy for the upcoming update and outline a number of improvements I had been considering. I posted the article with minor expectations, thinking it would ..
Yesterday, Apple lifted the press embargo on both iPhone and iOS 7 reviews in conjunction with the operating system’s release to the general public. Like most of the internet, I got little to no work done once the reviews and new apps started rolling out. I did, however, succeed in pulling together this list and brief overview of the best reviews I came across throughout the day, for your reading pleasure. Permalink.
xmlutils.py v1.0.0 - nadh.in - 12 years ago - eng
Repository: @knadh/xmlutils.py GitHub release page: v1.0.0 Full Changelog : https://github.com/knadh/xmlutils.py/compare/v0.94.0...v1.0.0
This post is about the Twitter change from Ruby to Java, some years ago, fact that, sadly, is still being used by some people to say that Ruby sucks and Java is the best language in the world.
After hacking away on Monday and Tuesday and meeting fellow nerds IRL, I’ve landed even more changes to puppet-gluster . My git master branch now sits at 47 commits. $ git clone https://github.com/purpleidea/puppet-gluster.git Cloning into 'puppet-gluster'... remote: Counting objects: 317, done. remote: Compressing objects: 100% (144/144), done. remote: Total 317 (delta 187), reused 275 (delta 148) Receiving o....
After hacking away on Monday and Tuesday and meeting fellow nerds IRL, I’ve landed even more changes to puppet-gluster . My git master branch now sits at 47 commits. $ git clone https://github.com/purpleidea/puppet-gluster.git Cloning into 'puppet-gluster'... remote: Counting objects: 317, done. remote: Compressing objects: 100% (144/144), done. remote: Total 317 (delta 187), reused 275 (delta 148) Receiving o....
Early yesterday evening I saw co-editors Alexia Tsotsis and Eric Eldon post an apology for an alleged inappropriate presentation made at TechCrunch Disrupt. Dismissing the short article as a response to yet another activist blowing an innocuous joke way out of proportion though, I paid it little attention until coming across Gawker’s coverage of the event later that evening. Like an article taken directly from The Onion’s homepage, I re..
Continuing on from yesterday , I’ve met even more interesting people. I chatted with Dianne Mueller about some interesting ideas for gluster+ openshift . More to come on that front soon. Hung out with Jono Bacon and talked a bit about puppet-gluster on Ubuntu . If there is interest in the community for this, please let me know. Thanks to John Mark Walker and RedHat for sponsoring me and introducing me to many of these folks. Hello to..
Continuing on from yesterday , I’ve met even more interesting people. I chatted with Dianne Mueller about some interesting ideas for gluster+ openshift . More to come on that front soon. Hung out with Jono Bacon and talked a bit about puppet-gluster on Ubuntu . If there is interest in the community for this, please let me know. Thanks to John Mark Walker and RedHat for sponsoring me and introducing me to many of these folks. Hello to..
I’m here in New Orleans at Linux Con, hacking on puppet-gluster and talking to lots of interesting folks. I’ve met gluster hacker Theron Conrey , and my host John Mark Walker , Fedora and Raspberry Pi experts  Spot and Ruth Suehle , and many others too. The hotel is very nice. The bathroom sink has two taps of course, but both of them are hot. The New Orleans heat is probably the cause of this. I’m hacking at full speed to get som..
I’m here in New Orleans at Linux Con, hacking on puppet-gluster and talking to lots of interesting folks. I’ve met gluster hacker Theron Conrey , and my host John Mark Walker , Fedora and Raspberry Pi experts  Spot and Ruth Suehle , and many others too. The hotel is very nice. The bathroom sink has two taps of course, but both of them are hot. The New Orleans heat is probably the cause of this. I’m hacking at full speed to get som..
My introduction to this article, and the piece I personally found more interesting, was the response Casey Liss wrote . As I read both articles, I thought of something Patrick McKenzie said quite some time ago in Don’t Call Yourself a Programmer, and Other Career Advice : “You radically overestimate the average skill of the competition because of the crowd you hang around with.” While Patrick said that in reference to the perception of ..
Staying Afraid - mattgemmell.com - 12 years ago - eng
When Matt Gemmell publishes his novel, I will buy it regardless of the genre. With talent like this, how could I afford to miss it? Permalink.
OTP, It won't save you from free rides! BUGHARDY EAGLE1753 RFID technologies are becoming more and more prevalent in our lives. This motivated us to study them, and in particular to study the MIFARE ULTRALIGHT chips, which are widely used in public/mass transport systems. We focused on multiple-ride tickets, and were surprised that MIFARE ULTRALIGHT chips do not seem to use any type of encryption. We were excited at the idea of simpl....
OTP, It won't save you from free rides! BUGHARDY EAGLE1753 RFID technologies are becoming more and more prevalent in our lives. This motivated us to study them, and in particular to study the MIFARE ULTRALIGHT chips, which are widely used in public/mass transport systems. We focused on multiple-ride tickets, and were surprised that MIFARE ULTRALIGHT chips do not seem to use any type of encryption. We were excited at the idea of simpl....
RFID Hacking: Live Free or RFID Hard FRANCIS BROWN MANAGING PARTNER - BISHOP FOX Have you ever attended an RFID hacking presentation and walked away with more questions than answers? This talk will finally provide practical guidance on how RFID proximity badge systems work. We'll cover what you'll need to build out your own RFID physical penetration toolkit, and how to easily use an Arduino microcontroller to weaponize commercial RFID b....
RFID Hacking: Live Free or RFID Hard FRANCIS BROWN MANAGING PARTNER - BISHOP FOX Have you ever attended an RFID hacking presentation and walked away with more questions than answers? This talk will finally provide practical guidance on how RFID proximity badge systems work. We'll cover what you'll need to build out your own RFID physical penetration toolkit, and how to easily use an Arduino microcontroller to weaponize commercial RFID b....
Evil DoS Attacks and Strong Defenses SAM BOWNE MATTHEW PRINCE On the attack side, this talk will explain and demonstrate attacks which crash Mac OS X, Windows 8, Windows Server 2012, and Web servers; causing a BSOD or complete system freeze. The Mac and Windows systems fall to the new IPv6 Router Advertisement flood in thc-ipv6-2.1, but only after creating a vulnerable state with some "priming" router advertisements. Servers fail f....
Evil DoS Attacks and Strong Defenses SAM BOWNE MATTHEW PRINCE On the attack side, this talk will explain and demonstrate attacks which crash Mac OS X, Windows 8, Windows Server 2012, and Web servers; causing a BSOD or complete system freeze. The Mac and Windows systems fall to the new IPv6 Router Advertisement flood in thc-ipv6-2.1, but only after creating a vulnerable state with some "priming" router advertisements. Servers fail f....
Data Evaporation from SSDs SAM BOWNE INSTRUCTOR, CITY COLLEGE SAN FRANCISCO Files on magnetic hard drives remain on the drive even after they are deleted, so they can be recovered later with forensic tools. Sometimes SSDs work the same way, but under other conditions they erase this latent data in a "garbage collection" process. Understanding when and how this happens is important to forensic investigators and people who handle confiden....
Data Evaporation from SSDs SAM BOWNE INSTRUCTOR, CITY COLLEGE SAN FRANCISCO Files on magnetic hard drives remain on the drive even after they are deleted, so they can be recovered later with forensic tools. Sometimes SSDs work the same way, but under other conditions they erase this latent data in a "garbage collection" process. Understanding when and how this happens is important to forensic investigators and people who handle confiden....
Transcending Cloud Limitations by Obtaining Inner Piece ZAK BLACHER With the abundance of cloud storage providers competing for your data, some have taken to offering services in addition to free storage. This presentation demonstrates the ability to gain unlimited cloud storage by abusing an overlooked feature of some of these services. Zak Blacher is currently pursuing a Masters of Mathematics in Computer Science, and expects to be..
PowerPwning: Post-Exploiting By Overpowering PowerShell JOE BIALEK SECURITY ENGINEER, MICROSOFT PowerShell is a scripting language included with all modern Windows operating systems, which, among other features, provides access to the Win32 API and the capability to run scripts on remote servers without writing to disk. PowerShell scripts bypass application white listing, application-signing requirements, and generally bypass anti-virus....
PowerPwning: Post-Exploiting By Overpowering PowerShell JOE BIALEK SECURITY ENGINEER, MICROSOFT PowerShell is a scripting language included with all modern Windows operating systems, which, among other features, provides access to the Win32 API and the capability to run scripts on remote servers without writing to disk. PowerShell scripts bypass application white listing, application-signing requirements, and generally bypass anti-virus....
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1435 1436 1437 1438 1439 1508 1562 1599 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
3 visitors online