Reading EXIF data with Javascript

Sunday, May 11th, 2008

Inspired by a comment on Ajaxian, I killed another afternoon or two making a small library capable of reading EXIF data from JPEG images, figuring I would at least learn a bit about EXIF and the JPEG (and TIFF) image formats. Before we start, a small disclaimer. I'm somewhat of a ...

QuickTime 0day for Vista and XP

Friday, April 25th, 2008

A remote vulnerability exists in the QuickTime player for Windows XP and Vista (latest service packs). Other versions are believed to be affected as well. For now, no details will be released regarding the method of exploitation. Because we are an information security think tank and because we encounter some very ...

Opera boosts its anti-phishing defenses

Friday, April 25th, 2008

Opera 9.5 Beta 2 has stepped up its security game. The browser has added fraud protection and support for EV SSL (Extended Validation Secure Sockets Layer) certificates to help prevent identity theft. Opera’s move to join the EV SSL crowd leaves Safari as the only browser without anti-phishing protection. As you ...

Details of privilege escalation hole in Windows

Monday, April 21st, 2008

In a security alert last week, Microsoft reported a vulnerability which allows local users and users signed on with access to an Internet Information Server (IIS) or MS SQL server to escalate their privileges. Server operators such as hosting providers who allow user code to be executed, for example on ...

Solutions Superguide: 529 Tips for Better Computing

Monday, April 21st, 2008

There's a ton of information in your computer's user manual, but it's also hundreds of pages long. To become a real power user, you could read through the entire thing, memorizing the details on each page. Or you could turn to PC Magazine. For this very special feature, we'll boil down ...