|
Fuzzing Online Games Elie Bursztein Researcher, Google Patrick Samy Research Engineer, Stanford University Fuzzing online games to find interesting bugs requires a unique set of novel techniques. In a nutshell the lack of direct access to the game server and having to deal with clients that are far too complex to be easily emulated force us to rely on injecting fuzzing data into a legitimate connections rather than use the....
|
|
The Open Cyber Challenge Platform Linda C. Butler Everyone from MIT to the DoD have agreed that teaching cyber security using cyber challenges, where groups of students attack or defend a live network, has proven to be an incredibly effective educational tactic. Unfortunately, current cyber challenge tools also suffer from being very hard to configure, and/or very expensive, and/or limited to certain audiences (e.g. the military), ....
|
|
The Open Cyber Challenge Platform Linda C. Butler Everyone from MIT to the DoD have agreed that teaching cyber security using cyber challenges, where groups of students attack or defend a live network, has proven to be an incredibly effective educational tactic. Unfortunately, current cyber challenge tools also suffer from being very hard to configure, and/or very expensive, and/or limited to certain audiences (e.g. the military), ....
|
|
The Open Cyber Challenge Platform Linda C. Butler Everyone from MIT to the DoD have agreed that teaching cyber security using cyber challenges, where groups of students attack or defend a live network, has proven to be an incredibly effective educational tactic. Unfortunately, current cyber challenge tools also suffer from being very hard to configure, and/or very expensive, and/or limited to certain audiences (e.g. the military), ....
|
|
Sandy Clark and Matt Blaze - SIGINT and Traffic Analysis for the Rest of Us
-
www.defcon.org
-
13 years ago
-
eng
SIGINT and Traffic Analysis for the Rest of Us Sandy Clark University of Pennsylvania Matt Blaze Professor and Lab Director, University of Pennsylvania Last year, we discovered practical protocol weaknesses in P25, a "secure" two-way radio system used by, among others, the federal government to manage surveillance and other sensitive law enforcement and intelligence operations. Although some of the problems are quite serious (ef....
|
|
DC RECOGNIZE Awards Hosts: Jeff Moss Founder, DEF CON and Black Hat Jericho Russ Rogers Contest Guru DEF CON is proud to announce the 2nd annual DEF CON awards ceremony, renamed the DC Recognize Awards. These awards are given to deserving individuals in the community, industry, and media. You voted, so come see who made the cut. The categories we're giving out awards in are: - Worst coverage of security/hacker ..
|
|
Sandy Clark and Matt Blaze - SIGINT and Traffic Analysis for the Rest of Us
-
www.defcon.org
-
13 years ago
-
eng
SIGINT and Traffic Analysis for the Rest of Us Sandy Clark University of Pennsylvania Matt Blaze Professor and Lab Director, University of Pennsylvania Last year, we discovered practical protocol weaknesses in P25, a "secure" two-way radio system used by, among others, the federal government to manage surveillance and other sensitive law enforcement and intelligence operations. Although some of the problems are quite serious (ef....
|
|
DC RECOGNIZE Awards Hosts: Jeff Moss Founder, DEF CON and Black Hat Jericho Russ Rogers Contest Guru DEF CON is proud to announce the 2nd annual DEF CON awards ceremony, renamed the DC Recognize Awards. These awards are given to deserving individuals in the community, industry, and media. You voted, so come see who made the cut. The categories we're giving out awards in are: - Worst coverage of security/hacker ..
|
|
Sandy Clark and Matt Blaze - SIGINT and Traffic Analysis for the Rest of Us
-
www.defcon.org
-
13 years ago
-
eng
SIGINT and Traffic Analysis for the Rest of Us Sandy Clark University of Pennsylvania Matt Blaze Professor and Lab Director, University of Pennsylvania Last year, we discovered practical protocol weaknesses in P25, a "secure" two-way radio system used by, among others, the federal government to manage surveillance and other sensitive law enforcement and intelligence operations. Although some of the problems are quite serious (ef....
|
|
DC RECOGNIZE Awards Hosts: Jeff Moss Founder, DEF CON and Black Hat Jericho Russ Rogers Contest Guru DEF CON is proud to announce the 2nd annual DEF CON awards ceremony, renamed the DC Recognize Awards. These awards are given to deserving individuals in the community, industry, and media. You voted, so come see who made the cut. The categories we're giving out awards in are: - Worst coverage of security/hacker ..
|
|
DivaShark - Monitor your Flow Robert Deaton Analyzing live network traffic is nothing new but the tools still seem limited. Wireshark is great for post capture analysis but when the packets are coming at you live, nothing currently gives your stream or session level visibility. How many times have you clicked 'Follow this stream' just to have that stream update and you have to reprocess the entire PCAP? That's great when it's just ....
|
|
DivaShark - Monitor your Flow Robert Deaton Analyzing live network traffic is nothing new but the tools still seem limited. Wireshark is great for post capture analysis but when the packets are coming at you live, nothing currently gives your stream or session level visibility. How many times have you clicked 'Follow this stream' just to have that stream update and you have to reprocess the entire PCAP? That's great when it's just ....
|
|
DivaShark - Monitor your Flow Robert Deaton Analyzing live network traffic is nothing new but the tools still seem limited. Wireshark is great for post capture analysis but when the packets are coming at you live, nothing currently gives your stream or session level visibility. How many times have you clicked 'Follow this stream' just to have that stream update and you have to reprocess the entire PCAP? That's great when it's just ....
|
|
Last night I had the opportunity to hear Jason Fried, founder of 37signals, voice his thoughts on entrepreneurship.
|
|
Today, the first official Tea Club meeting took place. It was attended by Dave, Phil and Sam. It was held from approximately 3pm until 7pm, and a wide variety of topics were discussed.
|
|
Today, the first official Tea Club meeting took place. It was attended by Dave, Phil and Sam. It was held from approximately 3pm until 7pm, and a wide variety of topics were discussed.
|
|
I am writing a keepalived module for puppet. It will naturally be called: “puppet-keepalived”, and I will be releasing the code in the near future! In any case, if you’re familiar with VRRP , you’ll know that each managed link (eg: resource or VIP ) has a common routerid and password which are shared among all members in the group. It is important that these parameters are unique across the type definitions on a single node.
|
|
I am writing a keepalived module for puppet. It will naturally be called: “puppet-keepalived”, and I will be releasing the code in the near future! In any case, if you’re familiar with VRRP , you’ll know that each managed link (eg: resource or VIP ) has a common routerid and password which are shared among all members in the group. It is important that these parameters are unique across the type definitions on a single node.
|
|
Given the following code Map
|
|
A few weeks back I did a brief feature highlight on Postgres arrays . Since that time I’ve found myself using them with increasing regularity on small side projects. Much of this time I’m using Django and of course not opting to write raw SQL to be able to use arrays. Django actually makes it quite simple to work with Arrays in Postgres with a package by Andrey Antukh . Lets get started by installing two libraries: pip install djorm-ext-....
|
|
A few weeks back I did a brief feature highlight on Postgres arrays . Since that time I’ve found myself using them with increasing regularity on small side projects. Much of this time I’m using Django and of course not opting to write raw SQL to be able to use arrays. Django actually makes it quite simple to work with Arrays in Postgres with a package by Andrey Antukh . Lets get started by installing two libraries: pip install djorm-ext-....
|
|
In a curious turn of events, the Plone team is considering to remove their inline editing feature around the same time when similar features are being added to popular CMSs like TYPO3 and Drupal . While the reason why Ploners are considering to remove the feature is technical, wanting to remove an old library dependency, the discussion thread contains quite a lot of people complaining about inline editing. Some examples: No pro....
|
|
In a curious turn of events, the Plone team is considering to remove their inline editing feature around the same time when similar features are being added to popular CMSs like TYPO3 and Drupal . While the reason why Ploners are considering to remove the feature is technical, wanting to remove an old library dependency, the discussion thread contains quite a lot of people complaining about inline editing. Some examples: No pro....
|
|
In our last primer we looked at a number of interesting examples of metric spaces, that is, spaces in which we can compute distance in a reasonable way. Our goal for this post is to relax this assumption. That is, we want to study the geometric structure of space without the ability to define distance. That is not to say that some notion of distance necessarily exists under the surface somewhere, but rather that we include a whole new class..
|
|
In our last primer we looked at a number of interesting examples of metric spaces, that is, spaces in which we can compute distance in a reasonable way. Our goal for this post is to relax this assumption. That is, we want to study the geometric structure of space without the ability to define distance. That is not to say that some notion of distance necessarily exists under the surface somewhere, but rather that we include a whole new class..
|
|
In our last primer we looked at a number of interesting examples of metric spaces, that is, spaces in which we can compute distance in a reasonable way. Our goal for this post is to relax this assumption. That is, we want to study the geometric structure of space without the ability to define distance. That is not to say that some notion of distance necessarily exists under the surface somewhere, but rather that we include a whole new class..
|
|
Intel® Architecture Instruction Set Extensions Programming Reference (PDF reference). The description of new instructions in the upcoming Haswell processor, including transactional memory support, hardware random number generator, and 256-bit vector integer operations. The transactional memory instructions should be useful for GIL (global interpreter lock) in Python and Ruby. They tried to eliminate it with software TM, but it was too slo..
|
|
I love my keyboard shortcuts, and I sometimes I want to change them. If you’re ever in a gnome application and wanted to change that one right there , you can now live-edit them! In a terminal, first enable this feature: gsettings set org.gnome.desktop.interface can-change-accels true Next, hover over the menu item shortcut that you want to change. Enter the shortcut you want. It should update immediately! I like to disable this ..
|
|
I love my keyboard shortcuts, and I sometimes I want to change them. If you’re ever in a gnome application and wanted to change that one right there , you can now live-edit them! In a terminal, first enable this feature: gsettings set org.gnome.desktop.interface can-change-accels true Next, hover over the menu item shortcut that you want to change. Enter the shortcut you want. It should update immediately! I like to disable this ..
|
|
The relation between Create.js and the TYPO3 team goes back a long way. They were present in the IKS event in February 2011 in Vienna where I presented Create for the first time. My original idea had been to just build a new content editing interface for Midgard , but as they also were interested, we ended up removing the Midgard dependencies and building Create and VIE as a fully CMS-agnostic interface, a key part of decoupled cont....
|
|
The web has come a long way. We have APIs that allow developers to create amazing applications quickly, and browser technologies have…
|
|
The web has come a long way. We have APIs that allow developers to create amazing applications quickly, and browser technologies have…
|
|
Where’d my tail go? - Using Continuous Delivery principles to shorten our release tail This is the story of how the Thoughtworks Studios Mingle team used continuous delivery principles to reduce the testing period at the end of our release cycle from 2-3 weeks to 1 day.
|
|
I am a fan of teams where roles and people are disconnected. A model where all roles are hats and people can wear any hat that they are capable of wearing. Basically, try getting an m:n relation between roles and people. However, one of the key to this model is, like I said, capability.
|
|
Bought a new computer, decided to try out Ubuntu Linux . Here’s my report of things i liked, things that worked, things I disliked, and things that didn’t work. Things that are improvements over Windows and Mac: Single update manager! No more Java, Adobe, Windows etc updates. My experience with Mac (at least 10.4) wasn’t much better. The Debian/Ubuntu update manager is extensible in the sense you can add random internet addresses for....
|
|
A question that came up at an event I was at yesterday: How will the time between the first (commercial) deployment of a telephony service, and a regulated universal service obligation for telephony compare to that of the time between the first (commercial) Internet services being deployed and a USO for IP connectivity (e.g., Broadband)? Based on this, is the cycle time of the telephony regulatory bodies, and mechanisms through which ..
|
|
A question that came up at an event I was at yesterday: How will the time between the first (commercial) deployment of a telephony service, and a regulated universal service obligation for telephony compare to that of the time between the first (commercial) Internet services being deployed and a USO for IP connectivity (e.g., Broadband)? Based on this, is the cycle time of the telephony regulatory bodies, and mechanisms through which ..
|
|
Gwen Shapira has written a nice summary of a problem case where the classic wait interface based troubleshooting method is not always enough for troubleshooting low-level issues. The top SQL + top wait approach should usually be used as the starting point of troubleshooting a session, workload etc, but often the troubleshooting does not stop there. So, when the wait interface and related tools don’t explain the problem well enough, then..
|
|
Gwen Shapira has written a nice summary of a problem case where the classic wait interface based troubleshooting method is not always enough for troubleshooting low-level issues. The top SQL + top wait approach should usually be used as the starting point of troubleshooting a session, workload etc, but often the troubleshooting does not stop there. So, when the wait interface and related tools don’t explain the problem well enough, then..
|
|
In the classic arcade game Galaga (1981), there is a well-known cheat for those who are patient. If you destroy all of the enemies on Stage 1 except for the left two enemies (shown to the right), then dodge their fire for about 10-15 minutes, they stop firing at you. At this point, you can safely kill them and no enemies will fire at you for the remainder of the game (they can still crash into you to kill you though).
|
|
In the classic arcade game Galaga (1981), there is a well-known cheat for those who are patient. If you destroy all of the enemies on Stage 1 except for the left two enemies (shown to the right), then dodge their fire for about 10-15 minutes, they stop firing at you. At this point, you can safely kill them and no enemies will fire at you for the remainder of the game (they can still crash into you to kill you though).
|