Collaborate Disseminate
Sometimes after looking at web application security, IoT botnets, and various malware I long for the pre-2000 hacking days. Where, instead of looking for XSS or SQL injection vulnerabilities, you would be hunting for server-side vulnerabilities. This s… Continue reading Exploring Legacy Unix Security Issues
Years ago I was working on a project that had a rather interesting premise. It was a way to send a file between two parties that was stamped as verified by a third party intermediary. Pretty basic stuff but, in the 90s it was rather neat. One of the th… Continue reading War Stories: Just Shut Off Telnet
Apache .htaccess changes led to arbitrary file upload vulnerabilities in jQuery project I attended the Messaging, Malware and Mobile Anti-Abuse Working Group (m3aawg.org) meeting in Brooklyn, NY. I expected better weather to wander around t… Continue reading Having The Security Rug Pulled Out From Under You
What makes security practitioners tick? That’s a simple question with a lot of drivers underneath it. We want to find out; please help us by signing up for our study. The Ask We’re launching a long term study of security practitioners … Continue reading Long Term Security Attitudes and Practices Study
This is a repost of a blog that Joe Marshall (@ImmortanJo3) and I wrote on February 22, 2016 and @da_667 posted to his blog (which is now defunct, but he has given me permission to post here). It’s not that easy.. Ladies and gentlemen, … Continue reading Repost: Hacking the power grid through air conditioners