Shmoocon 2008 videos are now online

Sunday, June 1st, 2008

The videos from ShmooCon 2008 have hit the shelves. Go download them at: http://www.shmoocon.org/2008/videos/ EDIT: As of the time of this post, some of the videos are incorrectly named. Here is the 1-> 1: Correctly Named: 21st Century Shellcode for Solaris Advanced Protocol Fuzzing - What We Learned when Bringing Layer2 Logic to SPIKE land Backtrack ...

Secunia PSI - Personal Software Inspector

Saturday, May 24th, 2008

The Secunia PSI is the FREE security tool that is designed with the sole purpose of helping you secure your computer from software vulnerabilities. Software vulnerabilities affect all applications installed on your computer, from the Operating System down to your email client, office application, instant messaging, and so on. A software ...

PHP 5.2.6 plugs security holes

Friday, May 2nd, 2008

The developers of the PHP scripting language have issued Version 5.2.6, which fixes numerous bugs and plugs some security holes. The changes are comprehensive, including bug fixes to modules that link to third-party products. PHP 5.2.6 also rectifies several flaws that could have caused a crash. The developers have eliminated errors ...

The Snare Of Unauthorized Requests

Monday, April 21st, 2008

Almost everyone knows what CSRF or better unauthorized requests are. I never really embraced CSRF as the correct term for unauthorized request issues, because the term is outdated and inadequate to contemporary hacking. For me, an unauthorized request is the layer or automation of a hacking procedure without direct interference ...

PowerShell - More than the command prompt

Monday, April 21st, 2008

Abstract Windows PowerShellâ„¢ is a new Windows command-line shell designed especially for system administrators. The shell includes an interactive prompt and a scripting environment that can be used independently or in combination. Introducing Windows PowerShell Most shells, including Cmd.exe and the SH, KSH, CSH, and BASH Unix shells, operate by executing a command ...

Researchers uncover undetectable chip hack

Wednesday, April 16th, 2008

For years, hackers have focused on finding bugs in computer software that give them unauthorised access to computer systems, but now there's another way to break in: hack the microprocessor. Researchers at the University of Illinois at Urbana-Champaign demonstrated how they altered a computer chip to grant attackers back-door access to ...

Is Outsourcing a Security Risk?

Saturday, April 12th, 2008

The world has a new culprit to blame for the rising tide of software vulnerabilities -- code outsourcing. The trend to outsource the coding of applications is now a major contributor to making business software more vulnerable, a survey-cum-report has claimed. According to analyst group Quocirca, which surveyed 250 IT directors and ...

YouTube Opens its APIs

Wednesday, March 12th, 2008

SAN FRANCISCO (Reuters) - YouTube, Google Inc's popular video-sharing site, is giving away tools that let Web developers tap the underlying database functions of YouTube, in effect allowing users to build their own YouTubes. The Silicon Valley-based video-sharing site said on Wednesday that it is providing wholesale access to YouTube's extensive ...

Code diagrams enable ‘point-and-click’ programming

Saturday, March 8th, 2008

Non-programmers could play a major part in developing complex computer programs, thanks to a new language developed by Sun Microsystems.Ace is based on Sun's successful Java language and provides software development tools that give a graphical representation of computer code. Manipulating the diagram on-screen automatically alters the underlying code. For example, ...