Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

2007 held numerous watershed events for the security industry. Innovation is needed and the money is there. Come to this session and meet the VCs actively investing in security, web, and mobile applications. Learn how VCs see the future, what they are looking for, and how best to utilize them to further your innovations. This session will conclude with a announcement about the Black Hat/DEFCON Open, a business plan competition focused on in..

2007 held numerous watershed events for the security industry. Innovation is needed and the money is there. Come to this session and meet the VCs actively investing in security, web, and mobile applications. Learn how VCs see the future, what they are looking for, and how best to utilize them to further your innovations. This session will conclude with a announcement about the Black Hat/DEFCON Open, a business plan competition focused on in..

This year we will have so many feds representing their federal agencies that we will have to break it up into two separate panels: IA Panel: Information Assurance, CERTS, first responder's organizations from agencies including DC3, DHS, SOCOM, NSA, OSD, NDU, and GAO. LE Panel: and Law Enforcement, Counterintelligence agencies including DC3, FBI, IRS, NCIS, NASA, NWC3, US Postal IG, FLETC, and RCMP. Each of the agency reps ....

This year we will have so many feds representing their federal agencies that we will have to break it up into two separate panels: IA Panel: Information Assurance, CERTS, first responder's organizations from agencies including DC3, DHS, SOCOM, NSA, OSD, NDU, and GAO. LE Panel: and Law Enforcement, Counterintelligence agencies including DC3, FBI, IRS, NCIS, NASA, NWC3, US Postal IG, FLETC, and RCMP. Each of the agency reps wil....

This year we will have so many feds representing their federal agencies that we will have to break it up into two separate panels: IA Panel: Information Assurance, CERTS, first responder's organizations from agencies including DC3, DHS, SOCOM, NSA, OSD, NDU, and GAO. LE Panel: and Law Enforcement, Counterintelligence agencies including DC3, FBI, IRS, NCIS, NASA, NWC3, US Postal IG, FLETC, and RCMP. Each of the agency reps ....

This year we will have so many feds representing their federal agencies that we will have to break it up into two separate panels: IA Panel: Information Assurance, CERTS, first responder's organizations from agencies including DC3, DHS, SOCOM, NSA, OSD, NDU, and GAO. LE Panel: and Law Enforcement, Counterintelligence agencies including DC3, FBI, IRS, NCIS, NASA, NWC3, US Postal IG, FLETC, and RCMP. Each of the agency reps wil....

The defense techniques employed by large software manufacturers are getting better. This is particularly true of Microsoft who have improved the security of the software they make tremendously since their Trustworthy Computing initiative. Gone are the days of being able to penetrate any Microsoft system by firing off the RPC-DCOM exploit. The consequence of this is that post-exploitation has become increasingly important in order to "squeez....

The defense techniques employed by large software manufacturers are getting better. This is particularly true of Microsoft who have improved the security of the software they make tremendously since their Trustworthy Computing initiative. Gone are the days of being able to penetrate any Microsoft system by firing off the RPC-DCOM exploit. The consequence of this is that post-exploitation has become increasingly important in order to "squeez....

Lukas Grunwald CTO of DN-Systems Enterprise Internet Solutions GmbH This talk will show what happens if security is driven by politics and compromise, also I will cover additional security risks by the new generation of electronic passports. It will show why it could be possible to produce fake biometric fingerprints from the new generation electronic passports, for example by rogue regimes. The new bogus security attempts to se....

Lukas Grunwald CTO of DN-Systems Enterprise Internet Solutions GmbH This talk will show what happens if security is driven by politics and compromise, also I will cover additional security risks by the new generation of electronic passports. It will show why it could be possible to produce fake biometric fingerprints from the new generation electronic passports, for example by rogue regimes. The new bogus security attempts to secu....

Lukas Grunwald CTO of DN-Systems Enterprise Internet Solutions GmbH This talk will show what happens if security is driven by politics and compromise, also I will cover additional security risks by the new generation of electronic passports. It will show why it could be possible to produce fake biometric fingerprints from the new generation electronic passports, for example by rogue regimes. The new bogus security attempts to se....

Lukas Grunwald CTO of DN-Systems Enterprise Internet Solutions GmbH This talk will show what happens if security is driven by politics and compromise, also I will cover additional security risks by the new generation of electronic passports. It will show why it could be possible to produce fake biometric fingerprints from the new generation electronic passports, for example by rogue regimes. The new bogus security attempts to secu....

Not even the simplest things work with computers these days. I have an Excel sheet and I want to copy a value into an MSN conversation. On Windows. Notice the vendor of all these products. I copy the cell and in the middle of the sentence I’m tying into MSN I press Ctrl-V. MSN hangs for about 5 seconds. Then a notification is sent to the other party that I want to transfer a file, something .tmp.gif, i.e. an bitmap image of the value ....

In my last article, I showed you how to get started with your Rails application. The result of the simple commands, rails blogdemo; cd blogdemo; ruby script/generate scaffold article title:string author:string content:text; rake db:migrate; ruby script/server was that you had your own simple blog up and running. The blog support articles each of which have a title, an author, and text content. This initial model was generated for us with no..

Before I left Vienna, the Internet stopped working in my flat. There were some major electrical engineering works going on in the building, so I assumed this was the cause. Now I’ve come back, they’ve stopped, but my Internet hasn’t started working again. The modem, from my ISP Chello, was an “ARRIS type”, and the “online” light (light 2 in the following diagram) was permanently flashing. What was the modem trying to communicate to me? ..

I am planning to write a series of articles on how to get started with Ruby on Rails. One of the remarkable things about Rails is that it lets you get up and running very quickly. Here is what you need to do to get your first application up and running. Before you start, you need to install Ruby on Rails: On Macs, Rails is already available and you can type the following commands in a normal terminal window.


I just tried to start Tomcat and it refused to start because of the following error: log4j:ERROR Error occured while converting date. java.lang.NullPointerException at java.lang.System.arraycopy(Native Method) at java.lang.AbstractStringBuilder.getChars at java.lang.StringBuffer.getChars at org.apache.log4j.helpers.ISO8601DateFormat.format at java.text.DateFormat.format ... at org.apache.log4j.Category.log at org.apache.commons.log..

I was talking to my father over Christmas and he said that in his career, job titles of bosses had been various things, such as “leader of”, “head of”, etc. But he said when he started, they were called administrators . I think that’s a great name for a boss. It emphasises that the job of the boss is to get out of the way of the employees and let them get on with their jobs. It also emphasises the positive aspects of a boss from the pers..

Recently I was working on a website which was developed in PHP without a web framework. A lot of things were programmed manually which would normally be taken care of by a web framework (for example things like: in case of an error, the HTML fields on the form are re-populated on the response page). So I came up with an extensive set of test cases, and made sure I used them all on every field on every page.

Mike, your website was recommended to me by a friend as "a glider pilot with a curious mind." I too am addicted to gliding, and drew some pictures which you might appreciate. http://users.ox.ac.uk/~gliding/visions.htm email me at jasonchen3@gmail.com

I read this post by Laurent Schneider yesterday. In the comment section Tom Kyte already explained what the issue was about, but I’ll expand this explanation a little. The question was why should the apparently invalid statement below work? I mean there is no such column nor number as “1.x”), yet the statement works ok: SQL> select 1.x from dual; X ---------- 1 The column header gives a good hint what happened above. Oracle has tre....

I read this post by Laurent Schneider yesterday. In the comment section Tom Kyte already explained what the issue was about, but I’ll expand this explanation a little. The question was why should the apparently invalid statement below work? I mean there is no such column nor number as “1.x”), yet the statement works ok: SQL> select 1.x from dual; X ---------- 1 The column header gives a good hint what happened above. Oracle has tre....


The following cycle never ceases to amaze me: People learning programming find “real” languages such as C++ or Java filled with too many “complex” constructs. They find or invent languages such as Javascript or PHP or BASIC and think they can get the job done without “unnecessary complexity” As these programmers develop, they develop increasing complex programs, and find that constructs such as classes, inheritance, exceptions, generics/t....

Oracle has evolved over time to much more than just a plain relational database. One option is to use Oracle as an expensive calculator. When researching or demoing Oracle, it’s quite convenient to do number calculations directly on sqlplus prompt, especially if dealing with internals where lots of stuff is about addresses and offsets shown in hex. Here’s the script what I use for such purposes: https://github.com/tanelpoder/tpt-oracl..

Oracle has evolved over time to much more than just a plain relational database. One option is to use Oracle as an expensive calculator. When researching or demoing Oracle, it’s quite convenient to do number calculations directly on sqlplus prompt, especially if dealing with internals where lots of stuff is about addresses and offsets shown in hex. Here’s the script what I use for such purposes: https://github.com/tanelpoder/tpt-oracl..

I shall be blogging here henceforth. I have moved all my old articles over from my previous uboot.com blog. The reason for the move was multiple: It's important to use the software you write, to experience its successes and limitations. I am a contractor for uboot and have been using their blog; however I am also a contractor for easyname and in December we took the hosting features online we'd been developing in 2006. I'm glad to....

I was once asked a question, why does Oracle change its parameter count during session lifetime? The question arose from the following observation that v$parameter shows more parameters after you adjust some hidden parameter value: SQL> SQL> select count(*) from v$parameter; COUNT(*) ---------- 288 SQL> SQL> alter session set "_complex_view_merging"=false; Session altered. SQL> select count(*) from v$parameter; COUNT(*) ---------- ....

I was once asked a question, why does Oracle change its parameter count during session lifetime? The question arose from the following observation that v$parameter shows more parameters after you adjust some hidden parameter value: SQL> SQL> select count(*) from v$parameter; COUNT(*) ---------- 288 SQL> SQL> alter session set "_complex_view_merging"=false; Session altered. SQL> select count(*) from v$parameter; COUNT(*) ---------- ....

How many times have you seen a following case, where a user or developer complains that their Oracle session is stuck or running very slowly and the person who starts investigating the issue does following: Checks the database for locks Checks free disk space Checks alert log Goes back to the client saying “we did a healthcheck and everything looks ok” and closes the case or asks the user/developer to contact application support team or t....

How many times have you seen a following case, where a user or developer complains that their Oracle session is stuck or running very slowly and the person who starts investigating the issue does following: Checks the database for locks Checks free disk space Checks alert log Goes back to the client saying “we did a healthcheck and everything looks ok” and closes the case or asks the user/developer to contact application support team or t....

With this presentation we will demonstrate a new tool called eescan that automates extrusion and exploitability scanning using a client/server approach. Eescan will be released under the GPL and utilizes python to create an extensible framework for testing extrusion and exploit defenses. All network security systems have gaps. Layered security tries to cover the gaps with overlapping protections like firewalls, intrusion prevention, pr....

With this presentation we will demonstrate a new tool called eescan that automates extrusion and exploitability scanning using a client/server approach. Eescan will be released under the GPL and utilizes python to create an extensible framework for testing extrusion and exploit defenses. All network security systems have gaps. Layered security tries to cover the gaps with overlapping protections like firewalls, intrusion prevention, pr....

With this presentation we will demonstrate a new tool called eescan that automates extrusion and exploitability scanning using a client/server approach. Eescan will be released under the GPL and utilizes python to create an extensible framework for testing extrusion and exploit defenses. All network security systems have gaps. Layered security tries to cover the gaps with overlapping protections like firewalls, intrusion prevention, pr....

With this presentation we will demonstrate a new tool called eescan that automates extrusion and exploitability scanning using a client/server approach. Eescan will be released under the GPL and utilizes python to create an extensible framework for testing extrusion and exploit defenses. All network security systems have gaps. Layered security tries to cover the gaps with overlapping protections like firewalls, intrusion prevention, pr....

When I read my Google news today and found out that AOL is no longer going to develop and support Netscape as of February 2008, the first thing that came to mind was: What the heck? I thought Netscape was already dead! I always equated Netscape with older systems such as Windows 9x and SCO Unixware 7.1.2 (the only web browser that ran on its crappy GUI). I haven’t heard anyone who has used the browser in years. Everyone I know uses I..

When I read my Google news today and found out that AOL is no longer going to develop and support Netscape as of February 2008, the first thing that came to mind was: What the heck? I thought Netscape was already dead! I always equated Netscape with older systems such as Windows 9x and SCO Unixware 7.1.2 (the only web browser that ran on its crappy GUI). I haven’t heard anyone who has used the browser in years. Everyone I know uses I..

It is now more than 30 years since the first real game console (the Atari 2600) was released in Canada. Below is a timeline of each major console, the CPU/GPU they used and any other neat stuff. Basically, you will notice two important trends: The console manufacturers love to copy each other - up to the mid-1980s, they mostly had MOS 6502-based CPUs - in the late 1980s and early 1990s, they had Motorola 68000-based CPUs - in the mid-1..

It is now more than 30 years since the first real game console (the Atari 2600) was released in Canada. Below is a timeline of each major console, the CPU/GPU they used and any other neat stuff. Basically, you will notice two important trends: The console manufacturers love to copy each other - up to the mid-1980s, they mostly had MOS 6502-based CPUs - in the late 1980s and early 1990s, they had Motorola 68000-based CPUs - in the mid-1..

This was a fun ride. - rob.sh - 18 years ago - eng

This was a fun ride. - rob.sh - 18 years ago - eng

I’ve had a new iPhone for about a week now, so I figure it’s time to write up some thoughts about it. First, the little things. It is, in typical Apple fashion, an incredibly slick piece of work. Scrolling and zooming images or webpages is simple, easy, and, well, just fun to do and watch. Mobile Safari does a great job of making full webpages usable on the tiny screen.

I’ve had a new iPhone for about a week now, so I figure it’s time to write up some thoughts about it. First, the little things. It is, in typical Apple fashion, an incredibly slick piece of work. Scrolling and zooming images or webpages is simple, easy, and, well, just fun to do and watch. Mobile Safari does a great job of making full webpages usable on the tiny screen.

132 visitors online