|
Nicholas Percoco and Jibran Ilyas - Malware Freak Show - Slides
-
www.defcon.org
-
16 years ago
-
eng
Malware Freak Show Nicholas J. Percoco Vice President of SpiderLabs, Trustwave Jibran Ilyas Senior Forensic Investigator, SpiderLabs, Trustwave We see a lot of compromised environments every year. In 2008 alone, we performed full forensic investigations on over 150 different environments ranging from financial institutions, hotels, restaurants and even some casinos not too far from DEFCON. This presentation will show the inner work....
|
|
Matt Richard and Steven Adair - 0-day gh0stnet and the Inside Story of the Adobe JBIG2 Vulnerability - Slides
-
www.defcon.org
-
16 years ago
-
eng
0-day, gh0stnet and the inside story of the Adobe JBIG2 vulnerability Matt Richard Malicious Code Researcher, Raytheon Steven Adair Researcher, Shadowserver This talk is the story of 0-day PDF attacks, the now famous gh0stnet ring and the disclosure debacle of the Adobe JBIG2 vulnerability in January and February 2009. This is the story of international cyber-espionage using 0-days and the fierce debate over how to defend networks ....
|
|
Joey Calca and Ryan Anguiano - Hadoop Apaches Open Source Implementation of Googles MapReduce Framework- Slides
-
www.defcon.org
-
16 years ago
-
eng
Hadoop: Apache's Open Source Implementation of Google's MapReduce Framework Joey Calca Hacked Existence Team Ryan Anguiano Hacked Existence Team This presentation will begin with a brief overview of Google's Map/Reduce Framework. Map/Reduce is built to analyze extremely large datasets. We will first look at what a Mapper and Reducer are, the inputs they take and the outputs they generate. From there, we will look at the open source....
|
|
Doppelganger: The Web's Evil Twin Edward Zaborowski Senior Security Engineer, Apptis Users and administrators alike surf the web assuming that, for the most part, what they are looking at is what the website served to their browser; however, an attacker can deploy a malicious proxy, altering responses and requests, as well as potentially stealing sensitive data, all without a user being aware. In this presentation I will discuss....
|
|
Danny Quist and Lorie Liebrock - Reverse Engineering by Crayon - Slides
-
www.defcon.org
-
16 years ago
-
eng
Reverse Engineering By Crayon: Game Changing Hypervisor Based Malware Analysis and Visualization Danny Quist CEO, Offensive Computing Lorie M. Liebrock New Mexico Tech Computer Science Department Recent advances in hypervisor based application profilers have changed the game of reverse engineering. These powerful tools have made it orders of magnitude easier to reverse engineer and enabled the next generation of analysis techniques....
|
|
Something about Network Security Dan Kaminsky IOActive Dan Kaminsky is the Director of Penetration Testing for Seattle-based IOActive, where he is greatly enjoying having minions. Formerly of Cisco and Avaya, Dan was most recently one of the "Blue Hat Hackers" tasked with auditing Microsoft's Vista client and Windows Server 2008 operating systems. He specializes in absurdly large scale network sweeps, strange packet tricks, and de..
|
|
Antony Rucci - Protecting Against and Investigating Insider Threats A Methodical Multi-Pronged Approach to Protecting Your Organization - Slides
-
www.defcon.org
-
16 years ago
-
eng
Protecting Against and Investigating Insider Threats (A methodical, multi-pronged approach to protecting your organization) Antonio "Tony" Rucci Program Director, Technical Intelligence and Security Programs, Oak Ridge National Laboratory This presentation will focus on indicators of insider threats and how to detect them. I’ll primarily focus on specific hiring practices to minimize risk to your organization. We’ll take a deep dive ....
|
|
Antione Gademer and Corentin Cheron - Low cost Spying Quadrotor for Global Security Applications - Slides
-
www.defcon.org
-
16 years ago
-
eng
A Low Cost Spying Quadrotor for Global security Applications Using Hacked Commercial Digital Camera Antoine Gademer Corentin Chéron Accessing centimetric georeferenced images is crucial for local military or civil intelligence, reconnaissance and surveillance applications. When classical satellite or aerial imagery is not available the Unmanned Aircraft Systems (UAS) are often a very interesting solution. But having an operational ....
|
|
Failure Adam Savage Co-Host, MythBusters A meditation on how I've screwed things up, lost friends and clients, and learned about myself in the process. Adam Savage has spent his life gathering skills that allow him to take what's in his brain, and make it real. He's built everything from ancient Buddhas to futuristic weapons, from spaceships to dancing vegetables, from fine art sculptures to animated chocolate -- and just about anyt....
|
|
There’s another interesting thread going on in Oracle-L, about understanding logical IOs and drilling down into their reasons. Of course sometimes (or rather usually) the excessive logical IOs come from a bad execution plan (when a nested loop loops over lots of datablocks again and again or a wrong index is used for driving a query etc), but sometimes the excessive LIOs are caused by some internal issues, like space management etc. A c....
|
|
There’s another interesting thread going on in Oracle-L, about understanding logical IOs and drilling down into their reasons. Of course sometimes (or rather usually) the excessive logical IOs come from a bad execution plan (when a nested loop loops over lots of datablocks again and again or a wrong index is used for driving a query etc), but sometimes the excessive LIOs are caused by some internal issues, like space management etc. A c....
|
|
Explain Plan For command may show you the wrong execution plan – Part 1
-
tanelpoder.com
-
16 years ago
-
eng
In Oracle-L mailing list a question was asked about under which conditions can the explain plan report a wrong execution plan (not the one which was actually used when a problem happened). I replied this with the following, but thought to show an example test case of this problem too: The optimizer statistics the EXPLAIN PLAN ends up using are different from the statistics the other session ended up using Explain plan does not..
|
|
Explain Plan For command may show you the wrong execution plan – Part 1
-
tanelpoder.com
-
16 years ago
-
eng
In Oracle-L mailing list a question was asked about under which conditions can the explain plan report a wrong execution plan (not the one which was actually used when a problem happened). I replied this with the following, but thought to show an example test case of this problem too: The optimizer statistics the EXPLAIN PLAN ends up using are different from the statistics the other session ended up using Explain plan does not..
|
This tutorial will provide you with a comprehensive understanding of the mixer interface for FL Studio. We describe every single knob/option on the interface.
|
|
This article will explain the advanced topics of PHP classes, including polymorphism, abstract classes, and interfaces.
|
|
An explanation of Automation Clips in FL Studio, how to create and modify them and assign them to different properties in FL Studio.
|
|
i’m sure that most (if not all) of the technically inclined readers know about this already, but since it’s such a well written article (and detailed in the right places), i felt i should bump up it’s link count. http://en.wikipedia.org/wiki/Binary_prefix as an aside, i really liked Knuth’s suggestion; in the meantime let’s use the stupid kibi’s. You can hire James and his team at m9rx corporation . You can follow James..
|
|
i’m sure that most (if not all) of the technically inclined readers know about this already, but since it’s such a well written article (and detailed in the right places), i felt i should bump up it’s link count. http://en.wikipedia.org/wiki/Binary_prefix as an aside, i really liked Knuth’s suggestion; in the meantime let’s use the stupid kibi’s. You can hire James and his team at m9rx corporation . You can follow James..
|
|
This is an overview of the FL Studio application interface. This describes every window used in FL Studio.
|
|
This month's release will start to show more of the Real-Time Strategy side of Stainless. One new feature that unfortunately will exclude a section of the target audience is speech recognition. I'm using the MS Speech API, which obviously only works on Windows. Sorry Linux and Mac users. :( Still, it's going to be worth it. Right now the level design and AI are not quite advanced enough to benefit from speech commands, but the potential i..
|
|
Lately I’ve been thinking a lot about how easy it is to lose sight of the goal of the project and instead focus on whatever means someone first thought was a good starting point when the project was first conceived of. And I think it all comes down to words. The first years I was working in this business, I didn’t see any distinction between “the user” and “the customer”. Once I started seeing the distinction, I started to understand that t..
|
|
This article will provide an introduction to CSS, which also requires an explanation of HTML (even if you know HTML you may want to read through it as it explains the relationship model). This article won't explain every single CSS attribute, but will explain everything you need to know to fully comprehend the language.
|
|
AJAX is not a language. It is simply giving a name to something that has existed for years. Using the DOM of the web browser you are allowed to pass XML between the server and the client without having to reload the page. You don't necessarily have to pass XML; in this example we will be passing simple text.
|
|
People don’t really understand, but we came within hours, we came within hours of a full nuclear exchange with the Russians,” said Paul Harris, who was in the…
|
|
This is the first article in a serie about the Clesto CMS - my first PHP project (I am still a kind of noob, feedback appreciated). There is a huge difference in building something for yourself and something that you release for a lot of people to download. The Clesto CMS has now been tested [...]
|
|
This is the first article in a serie about the Clesto CMS - my first PHP project (I am still a kind of noob, feedback appreciated). There is a huge difference in building something for yourself and something that you release for a lot of people to download. The Clesto CMS has now been tested [...]
|
|
This is the first article in a serie about the Clesto CMS - my first PHP project (I am still a kind of noob, feedback appreciated). There is a huge difference in building something for yourself and something that you release for a lot of people to download. The Clesto CMS has now been tested [...]
|
|
This is the first article in a serie about the Clesto CMS - my first PHP project (I am still a kind of noob, feedback appreciated). There is a huge difference in building something for yourself and something that you release for a lot of people to download. The Clesto CMS has now been tested [...]
|
|
Before everyone gets too excited about golang, let’s not forget it lacks: Exceptions Assertions Inheritance Generic types Generics are necessary to express concepts like List
|
|
Came across an interesting post today by author R. Scott Bakker, writing on Tor.com about his novel, “Neuropath.” He has some interesting things to say about the sometimes alien and unpalatable conclusions provided by science, an institution which he likens to a “cruel stranger”: So here’s the question: What other bitter pills does science hold in store for us? The cruel stranger isn’t finished, you can bet the family farm on that s....
|
|
Came across an interesting post today by author R. Scott Bakker, writing on Tor.com about his novel, “Neuropath.” He has some interesting things to say about the sometimes alien and unpalatable conclusions provided by science, an institution which he likens to a “cruel stranger”: So here’s the question: What other bitter pills does science hold in store for us? The cruel stranger isn’t finished, you can bet the family farm on that s....
|
|
Came across an interesting post today by author R. Scott Bakker, writing on Tor.com about his novel, “Neuropath.” He has some interesting things to say about the sometimes alien and unpalatable conclusions provided by science, an institution which he likens to a “cruel stranger”: So here’s the question: What other bitter pills does science hold in store for us? The cruel stranger isn’t finished, you can bet the family farm on that s....
|
|
This article explains how to create attractive, high-quality graphs in Inkscape using spreadsheet data from either Calc (OpenOffice.org) or Excel (Microsoft). Introduction Communicating information is an art. For scientists, even the most amazing discoveries can be rendered worthless if we fail to communicate them effectively. Despite being one of the most important aspects of science, it’s often the most neglected. Perhaps the best means t..
|
|
This is a step by step guide on how to make attractive buttons in Photoshop which look just like the Windows Vista buttons.
|
|
At ØreDev I ran into Lasse Koskela. We started talking about estimation techniques, and we both felt that the dominant estimation technique of relative estimation with planning poker has been unchallenged for a very long time. We found ourselves wondering what the next big idea about estimation will be. After throwing a couple of ideas back and forth, we decided to invite to a workshop comparing a few estimation techniques. We decided to ca..
|
|
This is a demonstration of the different image formats used for the web, with an explanation of which situation to use one or the other.
|
|
lvs load balancing always felt like an elusive task. here i will document how to get it working with the excellent shorewall firewall, as an extension to their two interface common use case. this was all necessary for a group of grad students that needed to test out and develop some distributed algorithms. it turns out that once you get going, all this is quite easy and fun! the various components and files used for this setup includ..
|
|
lvs load balancing always felt like an elusive task. here i will document how to get it working with the excellent shorewall firewall, as an extension to their two interface common use case. this was all necessary for a group of grad students that needed to test out and develop some distributed algorithms. it turns out that once you get going, all this is quite easy and fun! the various components and files used for this setup includ..
|
|
I received a question about migrated rows recently. It was about how to detect migrated rows in a 200TB data warehouse, with huge tables – as the ANALYZE TABLE xyz LIST CHAINED ROWS INTO command can not be automatically parallelized at table level (as DBMS_STATS can be, but oh, DBMS_STATS doesn’t gather the migrated/chained row info). Therefore the analyze command would pretty much run forever before returning (and committing) the chained....
|
|
I received a question about migrated rows recently. It was about how to detect migrated rows in a 200TB data warehouse, with huge tables – as the ANALYZE TABLE xyz LIST CHAINED ROWS INTO command can not be automatically parallelized at table level (as DBMS_STATS can be, but oh, DBMS_STATS doesn’t gather the migrated/chained row info). Therefore the analyze command would pretty much run forever before returning (and committing) the chained....
|