Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1230 1231 1232 1233 1234 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
Google TV or: How I Learned to Stop Worrying and Exploit Secure Boot AMIR ETEMADIEH RESEARCH SCIENTIST AT ACCUVANT LABS CJ HERES IT CONSULTANT MIKE BAKER CO-FOUNDER OPENWRT HANS NIELSEN SENIOR SECURITY CONSULTANT AT MATASANO Google TV is intended to bring the Android operating system out of the mobile environment and into consumers' living rooms. Unfortunately, content providers began to block streaming access to popular content f....
Google TV or: How I Learned to Stop Worrying and Exploit Secure Boot AMIR ETEMADIEH RESEARCH SCIENTIST AT ACCUVANT LABS CJ HERES IT CONSULTANT MIKE BAKER CO-FOUNDER OPENWRT HANS NIELSEN SENIOR SECURITY CONSULTANT AT MATASANO Google TV is intended to bring the Android operating system out of the mobile environment and into consumers' living rooms. Unfortunately, content providers began to block streaming access to popular content f....
Electromechanical PIN Cracking with Robotic Reconfigurable Button Basher (and C3BO) JUSTIN ENGLER SENIOR SECURITY ENGINEER, ISEC PARTNERS PAUL VINES Password and PIN systems are often encountered on mobile devices. A software approach to cracking these systems is often the simplest, but in some cases there may be no better option than to start pushing buttons. This talk will cover automated PIN cracking techniques using two new tools....
Electromechanical PIN Cracking with Robotic Reconfigurable Button Basher (and C3BO) JUSTIN ENGLER SENIOR SECURITY ENGINEER, ISEC PARTNERS PAUL VINES Password and PIN systems are often encountered on mobile devices. A software approach to cracking these systems is often the simplest, but in some cases there may be no better option than to start pushing buttons. This talk will cover automated PIN cracking techniques using two new tools....
Noise Floor: Exploring the world of unintentional radio emissions MELISSA ELLIOTT APPLICATION SECURITY RESEARCHER, VERACODE If it's electronic, it makes noise. Not necessarily noise that you and I can hear, of course – unless you know how to tune in. The air around us is filled with bloops, bleeps, and bzzts of machines going about their business, betraying their existence through walls or even from across the street. The unintentional ....
Noise Floor: Exploring the world of unintentional radio emissions MELISSA ELLIOTT APPLICATION SECURITY RESEARCHER, VERACODE If it's electronic, it makes noise. Not necessarily noise that you and I can hear, of course – unless you know how to tune in. The air around us is filled with bloops, bleeps, and bzzts of machines going about their business, betraying their existence through walls or even from across the street. The unintentional ....
From Nukes to Cyber – Alternative Approaches for Proactive Defense and Mission Assurance LT. GEN. ROBERT ELDER USAF (RETIRED) In typical military operations, the advantage goes to the offense because the initiator controls the timing and is able to concentrate forces. A good defense is designed to undermine the advantage of the offense. Proactive defense approaches include: masking (obfuscation), maneuvering, and hardening of critica....
From Nukes to Cyber – Alternative Approaches for Proactive Defense and Mission Assurance LT. GEN. ROBERT ELDER USAF (RETIRED) In typical military operations, the advantage goes to the offense because the initiator controls the timing and is able to concentrate forces. A good defense is designed to undermine the advantage of the offense. Proactive defense approaches include: masking (obfuscation), maneuvering, and hardening of critica....
Pwn'ing You(r) Cyber Offenders PIOTR DUSZYNSKI SENIOR SECURITY CONSULTANT, TRUSTWAVE SPIDERLABS It is commonly believed that Offensive Defense is just a theory that is difficult to be used effectively in practice, but that is not entirely true... During my talk along with a new service emulation technique, that will render standard port scanner results nearly useless and leave your attackers with an arduous analysis, I will focus on ....
Pwn'ing You(r) Cyber Offenders PIOTR DUSZYNSKI SENIOR SECURITY CONSULTANT, TRUSTWAVE SPIDERLABS It is commonly believed that Offensive Defense is just a theory that is difficult to be used effectively in practice, but that is not entirely true... During my talk along with a new service emulation technique, that will render standard port scanner results nearly useless and leave your attackers with an arduous analysis, I will focus on ....
Privacy In DSRC Connected Vehicles CHRISTIE DUDLEY PRIVACY LEGAL RESEARCHER To date, remote vehicle communications such as OnStar have provided little in the way of privacy. The planned DSRC system will become the first large-scale nationwide direct public participation network outside of the internet. Much information and misinformation has been spread on what the upcoming DSRC system is and can do, especially in the information securi....
Privacy In DSRC Connected Vehicles CHRISTIE DUDLEY PRIVACY LEGAL RESEARCHER To date, remote vehicle communications such as OnStar have provided little in the way of privacy. The planned DSRC system will become the first large-scale nationwide direct public participation network outside of the internet. Much information and misinformation has been spread on what the upcoming DSRC system is and can do, especially in the information securi....
Proliferation AMBASSADOR JOSEPH R. DETRANI PRESIDENT, INTELLIGENCE AND NATIONAL SECURITY ALLIANCE (INSA) Ambassador Joseph DeTrani was named President of the Intelligence and National Security Alliance (INSA) on February 5, 2013. As President, he will lead INSA as its Chief Executive Officer on a day-to-day basis. Ambassador DeTrani has dedicated his professional career to public service with more than three decades of work for ....
Proliferation AMBASSADOR JOSEPH R. DETRANI PRESIDENT, INTELLIGENCE AND NATIONAL SECURITY ALLIANCE (INSA) Ambassador Joseph DeTrani was named President of the Intelligence and National Security Alliance (INSA) on February 5, 2013. As President, he will lead INSA as its Chief Executive Officer on a day-to-day basis. Ambassador DeTrani has dedicated his professional career to public service with more than three decades of work for ....
Revealing Embedded Fingerprints: Deriving intelligence from USB stack interactions ANDY DAVIS RESEARCH DIRECTOR, NCC GROUP Embedded systems are everywhere, from TVs to aircraft, printers to weapon control systems. As a security researcher when you are faced with one of these 'black boxes' to test, sometime in-situ, it is difficult to know where to start. However, if there is a USB port on the device there is useful information that can ....
Revealing Embedded Fingerprints: Deriving intelligence from USB stack interactions ANDY DAVIS RESEARCH DIRECTOR, NCC GROUP Embedded systems are everywhere, from TVs to aircraft, printers to weapon control systems. As a security researcher when you are faced with one of these 'black boxes' to test, sometime in-situ, it is difficult to know where to start. However, if there is a USB port on the device there is useful information that can ....
Do-It-Yourself Cellular IDS SHERRI DAVIDOFF LMG SECURITY SCOTT FRETHEIM LMG SECURITY DAVID HARRISON LMG SECURITY RANDI PRICE LMG SECURITY For less than $500, you can build your own cellular intrusion detection system to detect malicious activity through your own local femtocell. Our team will show how we leveraged root access on a femtocell, reverse engineered the activation process, and turned it into a proof-of-concept cellular ....
Do-It-Yourself Cellular IDS SHERRI DAVIDOFF LMG SECURITY SCOTT FRETHEIM LMG SECURITY DAVID HARRISON LMG SECURITY RANDI PRICE LMG SECURITY For less than $500, you can build your own cellular intrusion detection system to detect malicious activity through your own local femtocell. Our team will show how we leveraged root access on a femtocell, reverse engineered the activation process, and turned it into a proof-of-concept cellular ....
Stepping P3wns: Adventures in full spectrum embedded exploitation (and defense!) ANG CUI PH.D. CANDIDATE, COLUMBIA UNIVERSITY MICHAEL COSTELLO RESEARCH STAFF, COLUMBIA UNIVERSITY Our presentation focuses on two live demonstrations of exploitation and defense of a wide array of ubiquitous networked embedded devices like printers, phones and routers. The first demonstration will feature a proof-of-concept embedded worm capable of stea....
Stepping P3wns: Adventures in full spectrum embedded exploitation (and defense!) ANG CUI PH.D. CANDIDATE, COLUMBIA UNIVERSITY MICHAEL COSTELLO RESEARCH STAFF, COLUMBIA UNIVERSITY Our presentation focuses on two live demonstrations of exploitation and defense of a wide array of ubiquitous networked embedded devices like printers, phones and routers. The first demonstration will feature a proof-of-concept embedded worm capable of stea....
Home Invasion 2.0 - Attacking Network-Controlled Consumer Devices DANIEL "UNICORNFURNACE" CROWLEY MANAGING CONSULTANT, SPIDERLABS, TRUSTWAVE JENNIFER "SAVAGEJEN" SAVAGE SOFTWARE ENGINEER DAVID "VIDEOMAN" BRYAN A growing trend in electronics is to have them integrate with your home network in order to provide potentially useful features like automatic updates or to extend the usefulness of existing technologies such as door locks you....
Abusing NoSQL Databases Ming Chow Lecturer, Tufts University Department of Computer Science The days of selecting from a few SQL database options for an application are over. There is now a plethora of NoSQL database options to choose from: some are better than others for certain jobs. There are good reasons why developers are choosing them over traditional SQL databases including performance, scalabiltiy, and ease-of-use. Unfortunately....
Abusing NoSQL Databases Ming Chow Lecturer, Tufts University Department of Computer Science The days of selecting from a few SQL database options for an application are over. There is now a plethora of NoSQL database options to choose from: some are better than others for certain jobs. There are good reasons why developers are choosing them over traditional SQL databases including performance, scalabiltiy, and ease-of-use. Unfortunately....
SoundCloud has a service-oriented architecture, which allows us to use different languages for different services. With concurrency and…
Just over a decade ago, the dotcom bubble burst, and for the next 3-4 years, the IT industry (and IT job market) was in a slump. During the last presentation I did for Game On 2.0 on August 29th, one of the audience members asked me what the dotcom bubble actually was. I supplied the standard Web answer of “overspending in the IT market” and “mismanagement of IT resources” (or something like that).
Just over a decade ago, the dotcom bubble burst, and for the next 3-4 years, the IT industry (and IT job market) was in a slump. During the last presentation I did for Game On 2.0 on August 29th, one of the audience members asked me what the dotcom bubble actually was. I supplied the standard Web answer of “overspending in the IT market” and “mismanagement of IT resources” (or something like that).
SoundCloud has a service-oriented architecture, which allows us to use different languages for different services. With concurrency and…
I have been working with some of the above products at work for the past couple of weeks and I just cam
Today is an interesting and perhaps historic day in the domain industry. GoDaddy has acquired Afternic and SmartName from Name Media . Name Media is probably best known for the BuyDomains brand. They own one of the largest portfolios of domain names in the world at nearly 1 million domains . GoDaddy is the largest player on the consumer side of the domain market by a wide margin. However, they aren't the biggest player and/or have....
Today is an interesting and perhaps historic day in the domain industry. GoDaddy has acquired Afternic and SmartName from Name Media . Name Media is probably best known for the BuyDomains brand. They own one of the largest portfolios of domain names in the world at nearly 1 million domains . GoDaddy is the largest player on the consumer side of the domain market by a wide margin. However, they aren't the biggest player and/or have....
Today is an interesting and perhaps historic day in the domain industry. GoDaddy has acquired Afternic and SmartName from Name Media . Name Media is probably best known for the BuyDomains brand. They own one of the largest portfolios of domain names in the world at nearly 1 million domains . GoDaddy is the largest player on the consumer side of the domain market by a wide margin. However, they aren't the biggest player and/or have....
Every so often I like to take a break from the whole technology gamut and read something else. Preferably, something exceptional like Coronado High from The Atavist. Telling the fascinating origin story of what grew from a few California kids running drugs to a multi-million dollar narcotics empire, Coronado High is much more than a fantastically-written, gripping tale of a bygone era. I wouldn’t dream of spoiling it for you though: thi..
Every once in a while, Letters of Note posts something great, a letter I just have to share. This is one such letter. For me , the last one was a speech William Safire wrote for President Nixon in preparation for a disaster during the moon landing; perhaps the best speech I have ever read. Permalink.
Last week I acquired access to the Instapaper beta prior to its launch alongside iOS 7. I chronicled that story in I Finally Understand Bias . Since then, I have put off writing about the beta for a number of reasons: as a beta, the onus would have been on me to explain every single aspect of the new design or include numerous screenshots. Unlike the Federico Viticcis of the world, I did not find that prospect particularly appealing. Mor..
Every once in a while I come across an application that is so comically insecure that I feel the urge to blog about it. The application in question is a .NET application to manage care homes and provide a Medical Administration Record for residents. Staff login to the app using a username and passwo...
Every once in a while I come across an application that is so comically insecure that I feel the urge to blog about it. The application in question is a .NET application to manage care homes and provide a Medical Administration Record for residents. Staff login to the app using a username and passwo...
Offensive Forensics: CSI for the Bad Guy BENJAMIN CAUDILL PRINCIPAL CONSULTANT, RHINO SECURITY LABS As a pentester, when was the last time you 'recovered' deleted files from the MFT of a pwned box? Ever used an index.dat parser for identifying your next target? Do you download browser remnants of your victims to gather their saved form data? Despite the sensitive information uncovered through forensic techniques, the usage of such con....
Offensive Forensics: CSI for the Bad Guy BENJAMIN CAUDILL PRINCIPAL CONSULTANT, RHINO SECURITY LABS As a pentester, when was the last time you 'recovered' deleted files from the MFT of a pwned box? Ever used an index.dat parser for identifying your next target? Do you download browser remnants of your victims to gather their saved form data? Despite the sensitive information uncovered through forensic techniques, the usage of such con....
Last week, amidst the frenzy preluding Apple’s impending iPhone event, I posted an article titled Instapaper 5 . I did not have early access to a beta or any insight as to the direction Betaworks planned on taking the service; instead, I merely wished to put forth a possible launch strategy for the upcoming update and outline a number of improvements I had been considering. I posted the article with minor expectations, thinking it would ..
Yesterday, Apple lifted the press embargo on both iPhone and iOS 7 reviews in conjunction with the operating system’s release to the general public. Like most of the internet, I got little to no work done once the reviews and new apps started rolling out. I did, however, succeed in pulling together this list and brief overview of the best reviews I came across throughout the day, for your reading pleasure. Permalink.
xmlutils.py v1.0.0 - nadh.in - 12 years ago - eng
Repository: @knadh/xmlutils.py GitHub release page: v1.0.0 Full Changelog : https://github.com/knadh/xmlutils.py/compare/v0.94.0...v1.0.0
This post is about the Twitter change from Ruby to Java, some years ago, fact that, sadly, is still being used by some people to say that Ruby sucks and Java is the best language in the world.
After hacking away on Monday and Tuesday and meeting fellow nerds IRL, I’ve landed even more changes to puppet-gluster . My git master branch now sits at 47 commits. $ git clone https://github.com/purpleidea/puppet-gluster.git Cloning into 'puppet-gluster'... remote: Counting objects: 317, done. remote: Compressing objects: 100% (144/144), done. remote: Total 317 (delta 187), reused 275 (delta 148) Receiving o....
After hacking away on Monday and Tuesday and meeting fellow nerds IRL, I’ve landed even more changes to puppet-gluster . My git master branch now sits at 47 commits. $ git clone https://github.com/purpleidea/puppet-gluster.git Cloning into 'puppet-gluster'... remote: Counting objects: 317, done. remote: Compressing objects: 100% (144/144), done. remote: Total 317 (delta 187), reused 275 (delta 148) Receiving o....
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1230 1231 1232 1233 1234 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
3 visitors online