Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1231 1232 1233 1234 1235 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
Early yesterday evening I saw co-editors Alexia Tsotsis and Eric Eldon post an apology for an alleged inappropriate presentation made at TechCrunch Disrupt. Dismissing the short article as a response to yet another activist blowing an innocuous joke way out of proportion though, I paid it little attention until coming across Gawker’s coverage of the event later that evening. Like an article taken directly from The Onion’s homepage, I re..
Continuing on from yesterday , I’ve met even more interesting people. I chatted with Dianne Mueller about some interesting ideas for gluster+ openshift . More to come on that front soon. Hung out with Jono Bacon and talked a bit about puppet-gluster on Ubuntu . If there is interest in the community for this, please let me know. Thanks to John Mark Walker and RedHat for sponsoring me and introducing me to many of these folks. Hello to..
Continuing on from yesterday , I’ve met even more interesting people. I chatted with Dianne Mueller about some interesting ideas for gluster+ openshift . More to come on that front soon. Hung out with Jono Bacon and talked a bit about puppet-gluster on Ubuntu . If there is interest in the community for this, please let me know. Thanks to John Mark Walker and RedHat for sponsoring me and introducing me to many of these folks. Hello to..
I’m here in New Orleans at Linux Con, hacking on puppet-gluster and talking to lots of interesting folks. I’ve met gluster hacker Theron Conrey , and my host John Mark Walker , Fedora and Raspberry Pi experts  Spot and Ruth Suehle , and many others too. The hotel is very nice. The bathroom sink has two taps of course, but both of them are hot. The New Orleans heat is probably the cause of this. I’m hacking at full speed to get som..
I’m here in New Orleans at Linux Con, hacking on puppet-gluster and talking to lots of interesting folks. I’ve met gluster hacker Theron Conrey , and my host John Mark Walker , Fedora and Raspberry Pi experts  Spot and Ruth Suehle , and many others too. The hotel is very nice. The bathroom sink has two taps of course, but both of them are hot. The New Orleans heat is probably the cause of this. I’m hacking at full speed to get som..
My introduction to this article, and the piece I personally found more interesting, was the response Casey Liss wrote . As I read both articles, I thought of something Patrick McKenzie said quite some time ago in Don’t Call Yourself a Programmer, and Other Career Advice : “You radically overestimate the average skill of the competition because of the crowd you hang around with.” While Patrick said that in reference to the perception of ..
Staying Afraid - mattgemmell.com - 12 years ago - eng
When Matt Gemmell publishes his novel, I will buy it regardless of the genre. With talent like this, how could I afford to miss it? Permalink.
OTP, It won't save you from free rides! BUGHARDY EAGLE1753 RFID technologies are becoming more and more prevalent in our lives. This motivated us to study them, and in particular to study the MIFARE ULTRALIGHT chips, which are widely used in public/mass transport systems. We focused on multiple-ride tickets, and were surprised that MIFARE ULTRALIGHT chips do not seem to use any type of encryption. We were excited at the idea of simpl....
OTP, It won't save you from free rides! BUGHARDY EAGLE1753 RFID technologies are becoming more and more prevalent in our lives. This motivated us to study them, and in particular to study the MIFARE ULTRALIGHT chips, which are widely used in public/mass transport systems. We focused on multiple-ride tickets, and were surprised that MIFARE ULTRALIGHT chips do not seem to use any type of encryption. We were excited at the idea of simpl....
RFID Hacking: Live Free or RFID Hard FRANCIS BROWN MANAGING PARTNER - BISHOP FOX Have you ever attended an RFID hacking presentation and walked away with more questions than answers? This talk will finally provide practical guidance on how RFID proximity badge systems work. We'll cover what you'll need to build out your own RFID physical penetration toolkit, and how to easily use an Arduino microcontroller to weaponize commercial RFID b....
RFID Hacking: Live Free or RFID Hard FRANCIS BROWN MANAGING PARTNER - BISHOP FOX Have you ever attended an RFID hacking presentation and walked away with more questions than answers? This talk will finally provide practical guidance on how RFID proximity badge systems work. We'll cover what you'll need to build out your own RFID physical penetration toolkit, and how to easily use an Arduino microcontroller to weaponize commercial RFID b....
Evil DoS Attacks and Strong Defenses SAM BOWNE MATTHEW PRINCE On the attack side, this talk will explain and demonstrate attacks which crash Mac OS X, Windows 8, Windows Server 2012, and Web servers; causing a BSOD or complete system freeze. The Mac and Windows systems fall to the new IPv6 Router Advertisement flood in thc-ipv6-2.1, but only after creating a vulnerable state with some "priming" router advertisements. Servers fail f....
Evil DoS Attacks and Strong Defenses SAM BOWNE MATTHEW PRINCE On the attack side, this talk will explain and demonstrate attacks which crash Mac OS X, Windows 8, Windows Server 2012, and Web servers; causing a BSOD or complete system freeze. The Mac and Windows systems fall to the new IPv6 Router Advertisement flood in thc-ipv6-2.1, but only after creating a vulnerable state with some "priming" router advertisements. Servers fail f....
Data Evaporation from SSDs SAM BOWNE INSTRUCTOR, CITY COLLEGE SAN FRANCISCO Files on magnetic hard drives remain on the drive even after they are deleted, so they can be recovered later with forensic tools. Sometimes SSDs work the same way, but under other conditions they erase this latent data in a "garbage collection" process. Understanding when and how this happens is important to forensic investigators and people who handle confiden....
Data Evaporation from SSDs SAM BOWNE INSTRUCTOR, CITY COLLEGE SAN FRANCISCO Files on magnetic hard drives remain on the drive even after they are deleted, so they can be recovered later with forensic tools. Sometimes SSDs work the same way, but under other conditions they erase this latent data in a "garbage collection" process. Understanding when and how this happens is important to forensic investigators and people who handle confiden....
Transcending Cloud Limitations by Obtaining Inner Piece ZAK BLACHER With the abundance of cloud storage providers competing for your data, some have taken to offering services in addition to free storage. This presentation demonstrates the ability to gain unlimited cloud storage by abusing an overlooked feature of some of these services. Zak Blacher is currently pursuing a Masters of Mathematics in Computer Science, and expects to be..
PowerPwning: Post-Exploiting By Overpowering PowerShell JOE BIALEK SECURITY ENGINEER, MICROSOFT PowerShell is a scripting language included with all modern Windows operating systems, which, among other features, provides access to the Win32 API and the capability to run scripts on remote servers without writing to disk. PowerShell scripts bypass application white listing, application-signing requirements, and generally bypass anti-virus....
PowerPwning: Post-Exploiting By Overpowering PowerShell JOE BIALEK SECURITY ENGINEER, MICROSOFT PowerShell is a scripting language included with all modern Windows operating systems, which, among other features, provides access to the Win32 API and the capability to run scripts on remote servers without writing to disk. PowerShell scripts bypass application white listing, application-signing requirements, and generally bypass anti-virus....
MITM All The IPv6 Things SCOTT BEHRENS SENIOR SECURITY CONSULTANT, NEOHAPSIS BRENT BANDELGAR ASSOCIATE SECURITY CONSULTANT, NEOHAPSIS Back in 2011, Alec Waters demonstrated how to overlay a malicious IPv6 network on top of an IPv4-only network, so that an attacker can carry out man-in-the-middle attacks on IPv4 traffic and subvert the assumed end to end security model. This attack is potentially powerful but requires involves a comple....
MITM All The IPv6 Things SCOTT BEHRENS SENIOR SECURITY CONSULTANT, NEOHAPSIS BRENT BANDELGAR ASSOCIATE SECURITY CONSULTANT, NEOHAPSIS Back in 2011, Alec Waters demonstrated how to overlay a malicious IPv6 network on top of an IPv4-only network, so that an attacker can carry out man-in-the-middle attacks on IPv4 traffic and subvert the assumed end to end security model. This attack is potentially powerful but requires involves a comple....
Combatting Mac OSX/iOS Malware with Data Visualization REMY BAUMGARTEN SECURITY ENGINEER, ANRC-SERVICES Apple has successfully pushed both its mobile and desktop platforms into our homes, schools and work environments. With such a dominant push of its products into our everyday lives it comes as no surprise that both of Apple's operating systems, OSX and iOS should fall under attack by malware developers and network intruders. Numerous ....
Combatting Mac OSX/iOS Malware with Data Visualization REMY BAUMGARTEN SECURITY ENGINEER, ANRC-SERVICES Apple has successfully pushed both its mobile and desktop platforms into our homes, schools and work environments. With such a dominant push of its products into our everyday lives it comes as no surprise that both of Apple's operating systems, OSX and iOS should fall under attack by malware developers and network intruders. Numerous ....
Suicide Risk Assessment and Intervention Tactics AMBER BALDET INVESTMENT BANKING TECHNOLOGY Suicide is the 10th leading cause of death in the United States, yet it persists as one of the few remaining taboo topics in modern society. Many characteristics linked to elevated suicide risk are prevalent in the technical community, and the effects of suicide within any community extend far beyond those directly involved. Prevention and interv....
Suicide Risk Assessment and Intervention Tactics AMBER BALDET INVESTMENT BANKING TECHNOLOGY Suicide is the 10th leading cause of death in the United States, yet it persists as one of the few remaining taboo topics in modern society. Many characteristics linked to elevated suicide risk are prevalent in the technical community, and the effects of suicide within any community extend far beyond those directly involved. Prevention and interv....
IFear the Evil FOCA: IPv6 attacks in Internet connections CHEMA ALONSO SECURITY RESEARCHER, INFORMATICA64 Windows boxes are running IPv6 by default so LANs are too. Internet is not yet ready for IPv6 worldwide, but... you can connect internal IPv6 networks to external IPv4 web sites with few packets. In this session you will see how using the new Evil FOCA tool, created to perform IPv6 networks attacks, it is possible to hack Internet I....
IFear the Evil FOCA: IPv6 attacks in Internet connections CHEMA ALONSO SECURITY RESEARCHER, INFORMATICA64 Windows boxes are running IPv6 by default so LANs are too. Internet is not yet ready for IPv6 worldwide, but... you can connect internal IPv6 networks to external IPv4 web sites with few packets. In this session you will see how using the new Evil FOCA tool, created to perform IPv6 networks attacks, it is possible to hack Internet I....
Business logic flaws in mobile operators services BOGDAN ALECU INDEPENDENT SECURITY RESEARCHER GSM has been attacked in many different ways in the past years. But regardless of the protocol issues, there are also flaws in the logic of the mobile operators’ services. One may think that finding an issue which affects only one specific operator in some country couldn't affect other operators. However, this is not the case as most of the op....
Sonderklasse - furbo.org - 12 years ago - eng
Craig Hockenberry making a very apropos comparison between the Mercedes-Benz S-Class line and Apple’s iPhone 5S. Perhaps just as interesting as his thoughts on the iPhone, however, were his thoughts on this particular vehicular product line, however brief. I always find a writer traditionally steeped in technology taking a step in to the world of cars disproportionately fascinating. That meticulous nature, attention to detail, and, most i..
Just before the iPhone event last week, I linked to an excellent piece by Ben Thompson titled Thinking About iPhone Pricing . A day after the event, he posted another article, Two Minutes, Fifty-Six Seconds , this time explaining Apple’s reasoning behind pricing the 5C at $549. I really enjoyed both articles; Ben Thompson’s intelligence, insight, and storytelling ability is only rivaled by a few. Permalink.
In order to smoke test web applications, I like to run-to-end smoke tests that start the web server and drives a web browser to interact with the application. Here is how this may look: public class BookingWebTest { private DataSource dataSource; private Server server; @Before public void createServer() throws Exception { dataSource = DataSources.getTestDataSource(); new EnvEntry("jdbc/applicationDs", dataSource); server = new Server(0); se..
Introducing the first beta release of SingleBugs, the bug tracker aimed at single/solo developers. Are you a solo developer? Do you find setting up Mantis/Fogbugs/Bugs.net/et.al too complex and a waste of your time? Do you want a single solution that easily syncs and backs up between your machines? Try SingleBugs. Guaranteed to save you time and money setting up a bug tracker. Guaranteed to be the fastest bug tracker you have ever used.
Consider the following code String[] s = new String[]{""}; List list = Arrays.asList(s); list.clear(); All looks good, right? When you run it you get: java.lang.UnsupportedOperationException at java.util.AbstractList.remove(AbstractList.java:144) at java.util.AbstractList$Itr.remove(AbstractList.java:360) at java.util.AbstractList.removeRange(AbstractList.java:559) at java.util.AbstractList.clear(AbstractList.java:217) ..
I’m a little late to the party, I admit, but John Gruber’s thoughts and observations concerning the iPhone event last week are just as interesting now as they would have been Tuesday afternoon. The interesting trend, I think, as I work through my Instapaper queue from last week reading various writers’ opinions, is everyone recognizing Apple’s strategy with the 5C as exactly what it is: a marketing gimmick designed to give them cause to m..
In the first in a wonderful series of articles, C is for Cognitive Illusion , Horace discussed the positioning of the iPhone 5C, how it differed from past years’ portrayal of the “n-1” product, and what this means for the iPhone line: Permalink.
700 Million Devices - twitter.com - 12 years ago - eng
Far be it from me to step on Horace Dedeiu or Benedict Evan’s toes in my “analysis”, if you could call it that, of this graph Horace posted yesterday, but I do believe it tells us something interesting about how successful Apple believes the iPhone 5C will be. In previous quarters, as Horace’s trend shows, the iPhone grew at an increasing rate with each successive launch. That is, Apple’s device sales did not increase linearly with each n....
After working in Go for some time now, I learned how to use an unbuffered channel to build a pool of goroutines. I like this implementation better than what is implemented in this post.  That being said, this post still has value in what it describes. https://github.com/goinggo/work On more than one occasion I have been asked why I use the Work Pool pattern. Why not just start as many Go routines as needed at any given ti....
Obrigado Deny! - duncanlock.net - 12 years ago - eng
I’ve recently been corresponding with Denny Dias , from Brazil, who’s converted his blog over to Pelican - and we’ve been helping each other out a bit with building themes and whatnot. He’s written up his conversion & theme building process - and was generous enough to credit me after he borrowed some of my theme’s logic, from this blog’s GitHub repo . As he’s such a nice guy - and as I’ve just borrowed his tagsort jinja filter ..
Since its debut yesterday virtually everyone has lauded Apple for introducing the iPhone 5C. (I refuse to acknowledge Apple’s ridiculous naming convention; 5c? Please. If I wanted to look like a five year old I could forget to proofread my articles on my own. And I’m not the only one miffed at Apple’s new standard: Lex Friedman, in a tweet yesterday: “If Apple is lowercasing the S and C..., I’m going to start capitalizing the ”i“: IPhone 5s..
Goodbye Dropbox - brooksreview.net - 12 years ago - eng
You hold the encryption keys, which means the NSA holds the keys too. I don’t care for that. Thanks for all the great service along the way.” I really enjoy Ben Brooks’ writing —  Tumblr. + Yahoo! == !! is probably one of my favorite articles ever  — but I can’t help but feel he’s gone off the deep end with this one. Permalink.
The Secret Life of SIM Cards KARL KOSCHER GRAD STUDENT, UNIVERSITY OF WASHINGTON ERIC BUTLER SIM cards can do more than just authenticate your phone with your carrier. Small apps can be installed and run directly on the SIM separate from and without knowledge of the phone OS. Although SIM Applications are common in many parts of the world, they are mostly unknown in the U.S. and the closed nature of the ecosystem makes it difficult f....
The Secret Life of SIM Cards KARL KOSCHER GRAD STUDENT, UNIVERSITY OF WASHINGTON ERIC BUTLER SIM cards can do more than just authenticate your phone with your carrier. Small apps can be installed and run directly on the SIM separate from and without knowledge of the phone OS. Although SIM Applications are common in many parts of the world, they are mostly unknown in the U.S. and the closed nature of the ecosystem makes it difficult f....
Legal Aspects of Full Spectrum Computer Network (Active) Defense ROBERT CLARK ATTORNEY Full spectrum computer network (active) defense mean more than simply "hacking back". We've seen a lot of this issue lately. Orin Kerr and Stewart Baker had a lengthy debate about it online. New companies with some high visibility players claim they are providing "active defense" services to their clients. But all-in-all, what does this really mean? A....
1 2 3 5 7 11 16 23 34 50 73 106 154 225 327 456 475 690 769 984 1003 1132 1231 1232 1233 1234 1235 1305 1353 1386 1409 1425 1436 1443 1448 1452 1454 1456 1457 1458 1459 ▲ ▼
3 visitors online