Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

MITM All The IPv6 Things SCOTT BEHRENS SENIOR SECURITY CONSULTANT, NEOHAPSIS BRENT BANDELGAR ASSOCIATE SECURITY CONSULTANT, NEOHAPSIS Back in 2011, Alec Waters demonstrated how to overlay a malicious IPv6 network on top of an IPv4-only network, so that an attacker can carry out man-in-the-middle attacks on IPv4 traffic and subvert the assumed end to end security model. This attack is potentially powerful but requires involves a comple....

MITM All The IPv6 Things SCOTT BEHRENS SENIOR SECURITY CONSULTANT, NEOHAPSIS BRENT BANDELGAR ASSOCIATE SECURITY CONSULTANT, NEOHAPSIS Back in 2011, Alec Waters demonstrated how to overlay a malicious IPv6 network on top of an IPv4-only network, so that an attacker can carry out man-in-the-middle attacks on IPv4 traffic and subvert the assumed end to end security model. This attack is potentially powerful but requires involves a comple....

Combatting Mac OSX/iOS Malware with Data Visualization REMY BAUMGARTEN SECURITY ENGINEER, ANRC-SERVICES Apple has successfully pushed both its mobile and desktop platforms into our homes, schools and work environments. With such a dominant push of its products into our everyday lives it comes as no surprise that both of Apple's operating systems, OSX and iOS should fall under attack by malware developers and network intruders. Numerous ....

Combatting Mac OSX/iOS Malware with Data Visualization REMY BAUMGARTEN SECURITY ENGINEER, ANRC-SERVICES Apple has successfully pushed both its mobile and desktop platforms into our homes, schools and work environments. With such a dominant push of its products into our everyday lives it comes as no surprise that both of Apple's operating systems, OSX and iOS should fall under attack by malware developers and network intruders. Numerous ....

Suicide Risk Assessment and Intervention Tactics AMBER BALDET INVESTMENT BANKING TECHNOLOGY Suicide is the 10th leading cause of death in the United States, yet it persists as one of the few remaining taboo topics in modern society. Many characteristics linked to elevated suicide risk are prevalent in the technical community, and the effects of suicide within any community extend far beyond those directly involved. Prevention and interv....

Suicide Risk Assessment and Intervention Tactics AMBER BALDET INVESTMENT BANKING TECHNOLOGY Suicide is the 10th leading cause of death in the United States, yet it persists as one of the few remaining taboo topics in modern society. Many characteristics linked to elevated suicide risk are prevalent in the technical community, and the effects of suicide within any community extend far beyond those directly involved. Prevention and interv....

IFear the Evil FOCA: IPv6 attacks in Internet connections CHEMA ALONSO SECURITY RESEARCHER, INFORMATICA64 Windows boxes are running IPv6 by default so LANs are too. Internet is not yet ready for IPv6 worldwide, but... you can connect internal IPv6 networks to external IPv4 web sites with few packets. In this session you will see how using the new Evil FOCA tool, created to perform IPv6 networks attacks, it is possible to hack Internet I....

IFear the Evil FOCA: IPv6 attacks in Internet connections CHEMA ALONSO SECURITY RESEARCHER, INFORMATICA64 Windows boxes are running IPv6 by default so LANs are too. Internet is not yet ready for IPv6 worldwide, but... you can connect internal IPv6 networks to external IPv4 web sites with few packets. In this session you will see how using the new Evil FOCA tool, created to perform IPv6 networks attacks, it is possible to hack Internet I....

Business logic flaws in mobile operators services BOGDAN ALECU INDEPENDENT SECURITY RESEARCHER GSM has been attacked in many different ways in the past years. But regardless of the protocol issues, there are also flaws in the logic of the mobile operators’ services. One may think that finding an issue which affects only one specific operator in some country couldn't affect other operators. However, this is not the case as most of the op....

Sonderklasse - furbo.org - 12 years ago - eng
Craig Hockenberry making a very apropos comparison between the Mercedes-Benz S-Class line and Apple’s iPhone 5S. Perhaps just as interesting as his thoughts on the iPhone, however, were his thoughts on this particular vehicular product line, however brief. I always find a writer traditionally steeped in technology taking a step in to the world of cars disproportionately fascinating. That meticulous nature, attention to detail, and, most i..


Just before the iPhone event last week, I linked to an excellent piece by Ben Thompson titled Thinking About iPhone Pricing . A day after the event, he posted another article, Two Minutes, Fifty-Six Seconds , this time explaining Apple’s reasoning behind pricing the 5C at $549. I really enjoyed both articles; Ben Thompson’s intelligence, insight, and storytelling ability is only rivaled by a few. Permalink.

In order to smoke test web applications, I like to run-to-end smoke tests that start the web server and drives a web browser to interact with the application. Here is how this may look: public class BookingWebTest { private DataSource dataSource; private Server server; @Before public void createServer() throws Exception { dataSource = DataSources.getTestDataSource(); new EnvEntry("jdbc/applicationDs", dataSource); server = new Server(0); se..

Introducing the first beta release of SingleBugs, the bug tracker aimed at single/solo developers. Are you a solo developer? Do you find setting up Mantis/Fogbugs/Bugs.net/et.al too complex and a waste of your time? Do you want a single solution that easily syncs and backs up between your machines? Try SingleBugs. Guaranteed to save you time and money setting up a bug tracker. Guaranteed to be the fastest bug tracker you have ever used.

Consider the following code String[] s = new String[]{""}; List list = Arrays.asList(s); list.clear(); All looks good, right? When you run it you get: java.lang.UnsupportedOperationException at java.util.AbstractList.remove(AbstractList.java:144) at java.util.AbstractList$Itr.remove(AbstractList.java:360) at java.util.AbstractList.removeRange(AbstractList.java:559) at java.util.AbstractList.clear(AbstractList.java:217) ..

I’m a little late to the party, I admit, but John Gruber’s thoughts and observations concerning the iPhone event last week are just as interesting now as they would have been Tuesday afternoon. The interesting trend, I think, as I work through my Instapaper queue from last week reading various writers’ opinions, is everyone recognizing Apple’s strategy with the 5C as exactly what it is: a marketing gimmick designed to give them cause to m..

In the first in a wonderful series of articles, C is for Cognitive Illusion , Horace discussed the positioning of the iPhone 5C, how it differed from past years’ portrayal of the “n-1” product, and what this means for the iPhone line: Permalink.

700 Million Devices - twitter.com - 12 years ago - eng
Far be it from me to step on Horace Dedeiu or Benedict Evan’s toes in my “analysis”, if you could call it that, of this graph Horace posted yesterday, but I do believe it tells us something interesting about how successful Apple believes the iPhone 5C will be. In previous quarters, as Horace’s trend shows, the iPhone grew at an increasing rate with each successive launch. That is, Apple’s device sales did not increase linearly with each n....



After working in Go for some time now, I learned how to use an unbuffered channel to build a pool of goroutines. I like this implementation better than what is implemented in this post.  That being said, this post still has value in what it describes. https://github.com/goinggo/work On more than one occasion I have been asked why I use the Work Pool pattern. Why not just start as many Go routines as needed at any given ti....

Obrigado Deny! - duncanlock.net - 12 years ago - eng
I’ve recently been corresponding with Denny Dias , from Brazil, who’s converted his blog over to Pelican - and we’ve been helping each other out a bit with building themes and whatnot. He’s written up his conversion & theme building process - and was generous enough to credit me after he borrowed some of my theme’s logic, from this blog’s GitHub repo . As he’s such a nice guy - and as I’ve just borrowed his tagsort jinja filter ..

Since its debut yesterday virtually everyone has lauded Apple for introducing the iPhone 5C. (I refuse to acknowledge Apple’s ridiculous naming convention; 5c? Please. If I wanted to look like a five year old I could forget to proofread my articles on my own. And I’m not the only one miffed at Apple’s new standard: Lex Friedman, in a tweet yesterday: “If Apple is lowercasing the S and C..., I’m going to start capitalizing the ”i“: IPhone 5s..

Goodbye Dropbox - brooksreview.net - 12 years ago - eng
You hold the encryption keys, which means the NSA holds the keys too. I don’t care for that. Thanks for all the great service along the way.” I really enjoy Ben Brooks’ writing —  Tumblr. + Yahoo! == !! is probably one of my favorite articles ever  — but I can’t help but feel he’s gone off the deep end with this one. Permalink.

The Secret Life of SIM Cards KARL KOSCHER GRAD STUDENT, UNIVERSITY OF WASHINGTON ERIC BUTLER SIM cards can do more than just authenticate your phone with your carrier. Small apps can be installed and run directly on the SIM separate from and without knowledge of the phone OS. Although SIM Applications are common in many parts of the world, they are mostly unknown in the U.S. and the closed nature of the ecosystem makes it difficult f....

The Secret Life of SIM Cards KARL KOSCHER GRAD STUDENT, UNIVERSITY OF WASHINGTON ERIC BUTLER SIM cards can do more than just authenticate your phone with your carrier. Small apps can be installed and run directly on the SIM separate from and without knowledge of the phone OS. Although SIM Applications are common in many parts of the world, they are mostly unknown in the U.S. and the closed nature of the ecosystem makes it difficult f....

Legal Aspects of Full Spectrum Computer Network (Active) Defense ROBERT CLARK ATTORNEY Full spectrum computer network (active) defense mean more than simply "hacking back". We've seen a lot of this issue lately. Orin Kerr and Stewart Baker had a lengthy debate about it online. New companies with some high visibility players claim they are providing "active defense" services to their clients. But all-in-all, what does this really mean? A....

Legal Aspects of Full Spectrum Computer Network (Active) Defense ROBERT CLARK ATTORNEY Full spectrum computer network (active) defense mean more than simply "hacking back". We've seen a lot of this issue lately. Orin Kerr and Stewart Baker had a lengthy debate about it online. New companies with some high visibility players claim they are providing "active defense" services to their clients. But all-in-all, what does this really mean? A....

Conducting massive attacks with open source distributed computing ALEJANDRO CACERES OWNER, HYPERION GRAY LLC Distributed computing is sexy. Don't believe us? In this talk we'll show you, on a deep, practical level and with lots of (mostly Python) code, how a highly automated and effective computer network attack could be crafted and enhanced with the help of distributed computing over 'Big Data' technologies. Our goal is to demystify th....

Conducting massive attacks with open source distributed computing ALEJANDRO CACERES OWNER, HYPERION GRAY LLC Distributed computing is sexy. Don't believe us? In this talk we'll show you, on a deep, practical level and with lots of (mostly Python) code, how a highly automated and effective computer network attack could be crafted and enhanced with the help of distributed computing over 'Big Data' technologies. Our goal is to demystify th....

Utilizing Popular Websites for Malicious Purposes Using RDI DANIEL CHECHIK SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS ANAT (FOX) DAVIDI SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS Reflected DOM Injection is a new attack vector that will be unveiled for the first time in our talk! We will explain the technique and show a live demo where we use it to hide malicious code within popular and trusted websites. Daniel Chechik is a veteran sec....

Utilizing Popular Websites for Malicious Purposes Using RDI DANIEL CHECHIK SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS ANAT (FOX) DAVIDI SECURITY RESEARCHER, TRUSTWAVE SPIDERLABS Reflected DOM Injection is a new attack vector that will be unveiled for the first time in our talk! We will explain the technique and show a live demo where we use it to hide malicious code within popular and trusted websites. Daniel Chechik is a veteran sec....

40,000+ programmers use HackerEarth. Everyday, people from all over India and other countries submit code on HackerEarth, solve problems and participate in online coding tests. Our CodeFactory server has processed over 500,000 requests till now. There are different types of challenges running every month. The technology stack consists of multiple servers of different types e.g. search-server, realtime-server, web-server, log-server, ....

Google hangouts is awesome, its my preferred method for most audio/video calls these days. When running a group call I often dial into a separate phone if I have a better phone available for the group. It also got around the annoyance that when you are typing google automatically mutes you. This for most people is pretty subpar. While dialing in to the hangout can still be nice, you don’t have to do so to get rid of the annoying muting whil..

Google hangouts is awesome, its my preferred method for most audio/video calls these days. When running a group call I often dial into a separate phone if I have a better phone available for the group. It also got around the annoyance that when you are typing google automatically mutes you. This for most people is pretty subpar. While dialing in to the hangout can still be nice, you don’t have to do so to get rid of the annoying muting whil..

Here’s a treat for the hard-core Oracle performance geeks out there – I’m releasing a cool, but still experimental script for ASH (or poor-man’s ASH)-based wait event analysis, which should add a whole new dimension into ASH based performance analysis. It doesn’t replace any of the existing ASH analysis techniques, but should bring the relationships between Oracle sessions in complex wait chains out to bright daylight much easier than befor....

Here’s a treat for the hard-core Oracle performance geeks out there – I’m releasing a cool, but still experimental script for ASH (or poor-man’s ASH)-based wait event analysis, which should add a whole new dimension into ASH based performance analysis. It doesn’t replace any of the existing ASH analysis techniques, but should bring the relationships between Oracle sessions in complex wait chains out to bright daylight much easier than befor....

Many people use git pull and merge frequently in an effort to keep a branch up to date while working a feature. However it's actually…

Just as PostgreSQL 9.3 was coming out I had a need to take advantage of the JSON datatype and some of the operators and functions within it. The use case was pretty simple, run a query across a variety of databases, then take the results and store them. We explored doing something more elaborate with the columns/values, but in the end just opted to save the entire result set as JSON then I could use the operators to explore it as desire....

Just as PostgreSQL 9.3 was coming out I had a need to take advantage of the JSON datatype and some of the operators and functions within it. The use case was pretty simple, run a query across a variety of databases, then take the results and store them. We explored doing something more elaborate with the columns/values, but in the end just opted to save the entire result set as JSON then I could use the operators to explore it as desire....

Summary: "DEF CON is the world's largest hacking conference, held in Las Vegas, Nevada. In 2012 it was held for the 20th time. The conference has strict no-filming policies, but for DEF CON 20, a documentary crew was allowed full access to the event. The film follows the four days of the conference, the events and people (attendees and staff), and covers history and philosophy behind DEF CON's success and unique experience." Written by ....

Summary: "DEF CON is the world's largest hacking conference, held in Las Vegas, Nevada. In 2012 it was held for the 20th time. The conference has strict no-filming policies, but for DEF CON 20, a documentary crew was allowed full access to the event. The film follows the four days of the conference, the events and people (attendees and staff), and covers history and philosophy behind DEF CON's success and unique experience." Written by ....

Improving the state of healthcare through innovation requires investing in others to join you on the journey; not just for today, but for the decades to come. Project Lead the Way has established the Computer Science and Software Enginering course that teaches computational thinking to high school students, and it will pilot in 60 schools across the country this fall. Providing exposure to a wide variety of computational and computer scien..

In an excellent article posted to The Verge earlier this afternoon Casey Newton made the point I intended to discuss this evening almost as an aside near the end of his article: “Apple could also let users log in to other apps and services using a fingerprints, providing secure authentication into apps and websites with a couple of taps. If biometric solutions become widely adopted, the tech industry could begin to phase out — or at lea....

27 visitors online