Collaborate Disseminate
So first up, we have BatBadBut, a pun based on the vulnerability being “about batch files and bad, but not the worst.” It’s a weird interaction between how Windows uses …read more Continue reading This Week in Security: BatBadBut, DLink, and Your TV Too
You might think you understand the concept of BadUSB attacks and know how to defend it, because all you’ve seen is opening a terminal window. Turns out there’s still more …read more Continue reading USB HID And Run Exposes Yet Another BadUSB Surface
Modern printers make it all that much more tempting to try and hack them — the hardware generally tends to be decent, but the firmware appears to be designed to …read more Continue reading A Fun Exploit For Canon Printers Brings GDB Gifts
IoT protocols are a relatively unexplored field compared to most PC-exposed protocols – it’s bothersome to need a whole radio setup before you can tinker on something, and often, for …read more Continue reading Crash IoT Devices Through Protocol Fuzzing
A feature of coming to adulthood for any young person in the last quarter of the twentieth century would have been the yearly warnings about the danger of adulterated Halloween …read more Continue reading Flipper Zero Panic Spreads To Oz: Cars Unaffected
A cold boot attack is a way to extract RAM contents from a running system by power cycling it and reading out RAM immediately after loading your own OS. How …read more Continue reading Cold Boot Attack You Can Do With A Pi
A recent security vulnerability — a potential ssh backdoor via the liblzma library in the xz package — is having a lot of analysis done on how the vulnerability was …read more Continue reading Exploit the Stressed-out Package Maintainer, Exploit the Software Package
In breaking news that dropped just after our weekly security column went live, a backdoor has been discovered in the xz package, that could potentially compromise SSH logins on Linux …read more Continue reading Security Alert: Potential SSH Backdoor Via Liblzma
The Linux command wall is a hold-over from the way Unix machines used to be used. It’s an abbreviation of Write to ALL, and it was first included in AT&T …read more Continue reading This Week in Security: Peering Through the Wall, Apple’s GoFetch, and SHA-256
Everyone loves themes. Doesn’t matter if it’s a text editor or a smart display in the kitchen, we want to be able to easily customize its look and feel to …read more Continue reading User Beware: The Fine Line Between Content and Code