Site Security Policy

Sunday, June 8th, 2008

OK gang, this is one of those rare moments where feedback from community will directly influence a security feature that’ll make a real difference. First some background...About 6 months ago Brandon Sterne left a cushy infosec position at eBay for Mozilla to solve an extremely important Web security problem he ...

Crypto Virus Returns

Saturday, June 7th, 2008

The emergence of a variant on a virus that encrypts the victim's data with a strong 1,024-bit algorithm so the victim can't unscramble it without paying a ransom has begun to spread, potentially posing a major threat, according to the antimalware firm which discovered it.Kaspersky Lab says the new variant ...

Malware & MySQL – Believe it!

Tuesday, June 3rd, 2008

Most malware tends to store stolen credentials and information in make-shift text files, which are then forwarded to the author via email or another protocol. However, the use of scalable and robust solutions is becoming more popular in the malware community. In fact, it is becoming increasingly popular for malware ...

Shmoocon 2008 videos are now online

Sunday, June 1st, 2008

The videos from ShmooCon 2008 have hit the shelves. Go download them at:http://www.shmoocon.org/2008/videos/EDIT: As of the time of this post, some of the videos are incorrectly named. Here is the 1-> 1: Correctly Named:21st Century Shellcode for Solaris Advanced Protocol Fuzzing - What We Learned when Bringing Layer2 Logic to SPIKE land Backtrack ...

CSS exploit allows detection of social site use

Thursday, May 29th, 2008

Web developer Aza Raskin knows we visit Digg, Del.icio.us, Reddit and Facebook without even having to ask.No, he isn't employing privacy violating hackery, but he is exploiting a "cute" information leak in CSS that traditionally displays visited links differently than those that have yet to be visited. By loading in ...