The Curious Engineer

All blogs / Security

Errata Security

blog.erratasec.com

SecuritySociety / politics / economyCrypto / fintechNetworking

’10’15’20’25
Posts
1,224 from 6 Dec 2006 to 14 Feb 2024
Posting
quiet since 2024
Kind
personal blog
Feed
https://blog.erratasec.com/feeds/posts/default

2024 1

  1. C can be memory safe, part 2

2023 2

  1. C can be memory-safe
  2. I'm still bitter about Slammer

2022 3

  1. The RISC Deprogrammer
  2. DS620slim tiny home server
  3. No, a researcher didn't find Olympics app spying on you

2021 21

  1. Journalists: stop selling NFTs that you don't understand
  2. Example: forensicating the Mesa County system image
  3. Debunking: that Jones Alfa-Trump report
  4. Review: Dune (2021)
  5. Fact check: that "forensics" of the Mesa image is crazy
  6. 100 terabyte home NAS
  7. Check: that Republican audit of Maricopa
  8. That Alfa-Trump Sussman indictment
  9. How not to get caught in law-enforcement geofence requests
  10. Of course you can't trust scientists on politics
  11. Risk analysis for DEF CON 2021
  12. Ransomware: Quis custodiet ipsos custodes
  13. Some quick notes on SDR
  14. When we'll get a 128-bit CPU
  15. Anatomy of how you get pwned
  16. Ethics: University of Minnesota's hostile patches
  17. A quick FAQ about NFTs
  18. Deconstructing that $69million NFT
  19. We are living in 1984 (ETERNALBLUE)
  20. Review: Perlroth's book on the cyberarms market
  21. No, 1,000 engineers were not needed for SolarWinds

2020 18

  1. The deal with DMCA 1201 reform
  2. Why Biden: Principle over Party
  3. No, that's not how warrantee expiration works
  4. No, font errors mean nothing in that NYPost article
  5. Yes, we can validate leaked emails
  6. Factcheck: Regeneron's use of embryonic stem cells
  7. Cliché: Security through obscurity (yet again)
  8. How CEOs think
  9. In defense of open debate
  10. Apple ARM Mac rumors
  11. What is Boolean?
  12. Securing work-at-home apps
  13. CISSP is at most equivalent to a 2-year associates degree
  14. About them Zoom vulns...
  15. Huawei backdoors explanation, explained
  16. A requirements spec for voting
  17. There's no evidence the Saudis hacked Jeff Bezos's iPhone
  18. How to decrypt WhatsApp end-to-end media files

2019 21

  1. So that tweet was misunderstood
  2. This is finally the year of the ARM server
  3. CrowdStrike-Ukraine Explained
  4. Thread on the OSI model is a lie
  5. Thread on network input parsers
  6. Hacker Jeopardy, Wrong Answers Only Edition
  7. Securing devices for DEFCON
  8. Why we fight for crypto
  9. Censorship vs. the memes
  10. Some Raspberry Pi compatible computers
  11. Your threat model is wrong
  12. Almost One Million Vulnerable to BlueKeep Vuln (CVE-2019-0708)
  13. A lesson in journalism vs. cybersecurity
  14. Programming languages infosec professionals should learn
  15. Was it a Chinese spy or confused tourist?
  16. Assange indicted for breaking a password
  17. Some notes on the Raspberry Pi
  18. A quick lesson in confirmation bias
  19. A basic question about TCP
  20. How Bezo's dick pics might've been exposed
  21. Passwords in a file

2018 48

  1. Notes on Build Hardening
  2. Notes about hacking with drop tools
  3. Some notes about HTTP/3
  4. Brian Kemp is bad on cybersecurity
  5. Why no cyber 9/11 for 15 years?
  6. Masscan and massive address lists
  7. Systemd is bad parsing and should feel bad
  8. Masscan as a lesson in TCP/IP
  9. Some notes for journalists about cybersecurity
  10. TCP/IP, Sockets, and SIGPIPE
  11. Election interference from Uber and Lyft
  12. Notes on the UK IoT cybersec "Code of Practice"
  13. How to irregular cyber warfare
  14. Notes on the Bloomberg Supermicro supply chain hack story
  15. Mini pwning with GL-iNet AR150
  16. California's bad IoT law
  17. Debunking Trump's claim of Google's SOTU bias
  18. Provisioning a headless Raspberry Pi
  19. DeGrasse Tyson: Make Truth Great Again
  20. That XKCD on voting machine software is wrong
  21. What the Caesars (@DefCon) WiFi situation looks like
  22. Some changes in how libpcap works you should know
  23. Your IoT security concerns are stupid
  24. Lessons from nPetya one year later
  25. SMB version detection in masscan
  26. Notes on "The President is Missing"
  27. The First Lady's bad cyber advice
  28. The devil wears Pravda
  29. C is to low level
  30. masscan, macOS, and firewall
  31. Some notes on eFail
  32. Leaking securely, for White House staffers
  33. No, Ray Ozzie hasn't solved crypto backdoors
  34. OMG The Stupid It Burns
  35. Notes on setting up Raspberry Pi 3 as WiFi hotspot
  36. My letter urging Georgia governor to veto anti-hacking bill
  37. Let's stop talking about password strength
  38. Why the crypto-backdoor side is morally corrupt
  39. WannaCry after one year
  40. What John Oliver gets wrong about Bitcoin
  41. Some notes on memcached DDoS
  42. AskRob: Does Tor let government peek at vuln info?
  43. Blame privacy activists for the Memo??
  44. The problematic Wannacry North Korea attribution
  45. "Skyfall attack" was attention seeking
  46. Some notes on Meltdown/Spectre
  47. Why Meltdown exists
  48. Let's see if I've got Metldown right

2017 72

  1. Bitcoin: In Crypto We Trust
  2. Libertarians are against net neutrality
  3. A Thanksgiving Carol: How Those Smart Engineers at Twitter Screwed Me
  4. Don Jr.: I'll bite
  5. NetNeutrality vs. limiting FaceTime
  6. NetNeutrality vs. Verizon censoring Naral
  7. NetNeutrality vs. AT&T censoring Pearl Jam
  8. The FCC has never defended Net Neutrality
  9. Your Holiday Cybersecurity Guide
  10. Why Linus is right (as usual)
  11. How to read newspapers
  12. Some notes about the Kaspersky affair
  13. Some notes on the KRACK attack
  14. "Responsible encryption" fallacies
  15. Microcell through a mobile hotspot
  16. Browser hacking for 280 character tweets
  17. 5 years with home NAS/RAID
  18. People can't read (Equifax edition)
  19. State of MAC address randomization
  20. ROI is not a cybersecurity concept
  21. On ISO standardization of blockchains
  22. Announcement: IPS code
  23. Why that "file-copy" forensics of DNC hack is wrong
  24. Query name minimization
  25. Top 10 Most Obvious Hacks of All Time (v0.9)
  26. Is DefCon Wifi safe?
  27. Slowloris all the things
  28. Defending anti-netneutrality arguments
  29. Burner laptops for DEF CON
  30. Yet more reasons to disagree with experts on nPetya
  31. NonPetya: no evidence it was a "smokescreen"
  32. A kindly lesson for you non-techies about encryption
  33. Notes on open-sourcing abandoned code
  34. What about other leaked printed documents?
  35. How The Intercept Outed Reality Winner
  36. Some non-lessons from WannaCry
  37. How to track that annoying pop-up
  38. I want to talk for a moment about tolerance
  39. Houston we have a problem!
  40. Some notes on Trump's cybersecurity Executive Order
  41. John Oliver is wrong about Net Neutrality
  42. Hacker dumps, magnet links, and you
  43. Some notes on #MacronLeak
  44. FBI's Comey dangerous definition of "valid" journalism
  45. "Fast and Furious 8: Fate of the Furious"
  46. Mirai, Bitcoin, and numeracy
  47. Pranksters gonna prank
  48. Assert() in the hands of bad coders
  49. Some confusing language in the 0day debate
  50. FBI: what to look for in the Trump/AlfaBank connection
  51. Some notes on the RAND 0day report
  52. A note about "false flag" operations
  53. Only lobbyist and politicians matter, not techies
  54. Some comments on the Wikileaks CIA/#vault7 leak
  55. Journalists: How hacking details matter
  56. Some moon math
  57. Some notes on space heaters (GPU rigs)
  58. A quick note about iconoclasm
  59. Border Digital Safety for Journalists
  60. Skillz: editing a web page
  61. You don't need printer security
  62. 1984 is the new Bible in the age of Trump
  63. Uber was right to disable surge pricing at JFK
  64. Is 'aqenbpuu' a bad password?
  65. The command-line, for cybersec
  66. About that Giuliani website...
  67. NAT is a firewall
  68. No, Yahoo! isn't changing its name
  69. Notes about the FTC action against D-Link
  70. Profs: you should use JavaScript to teach Computer Science
  71. Dear Obama, From Infosec
  72. Your absurd story doesn't make me a Snowden apologist

2016 104

  1. Some notes on IoCs
  2. IoT saves lives but infosec wants to change that
  3. "From Putin with Love" - a novel by the New York Times
  4. That anti-Trump Recode article is terrible
  5. Some notes on a Hamilton election
  6. Orin's flawed argument on IP address privacy
  7. That "Commission on Enhancing Cybersecurity" is absurd
  8. Electoral college should ignore Lessig
  9. No, it’s Matt Novak who is a fucking idiot
  10. The false-false-balance problem
  11. Comments for my biracial niece
  12. How to teach endian
  13. Yes, the FBI can review 650,000 emails in 8 days
  14. In which I have to debunk a second time
  15. Debunking Trump's "secret server"
  16. Configuring Raspberry Pi as a router
  17. Lamers: the problem with bounties
  18. Politifact: Yes we can fact check Kaine's email
  19. Yes, we can validate the Wikileaks emails
  20. Some notes on today's DNS DDoS
  21. Cliché: Security through obscurity (again)
  22. Why cybersecurity certifications suck
  23. Trump on cybersecurity: vacuous and populist
  24. WTF Yahoo/FISA search in kernel?
  25. What the Yahoo NSA might've looked for
  26. The Yahoo-email-search story is garbage
  27. No, Trump's losses doesn't allow tax avoidance
  28. Some technical notes on the PlayPen case
  29. Beware: Attribution & Politics
  30. Why Snowden won't be pardoned
  31. Review: "Snowden" (2016)
  32. What's the testimonial of passwords?
  33. A quick lesson in Political Correctness
  34. Notes on that StJude/MuddyWatters/MedSec thing
  35. Notes on the Apple/NSO Trident 0days
  36. Another lesson in confirmation bias
  37. A lesson in social engineering: president debates
  38. Bugs don't come from the Zero-Day Faerie
  39. EQGRP tools are post-exploitation
  40. Hey lawyers, I'm not your client
  41. National interest is exploitation, not disclosure
  42. I gamergate Meredith Mciver
  43. NYTimes vs. DNCleaks
  44. My Raspeberry Pi cluster
  45. Use the freakin' debugger
  46. Reverse Turing testing tech support
  47. Tesla review: What you need to know about charging
  48. Ethereum/TheDAO hack simplified
  49. Scanning for ClamAV 0day
  50. No, Musky, Feudalism is best for Mars
  51. Instrumenting masscan for AFL network fuzzing
  52. My fellow Republicans: don't support Trump
  53. Drumpf: this is not how German works
  54. From scratch: why these mass scans are important
  55. Doing a 'full scan' of the Internet right now
  56. Hiroshima is a complex memorial
  57. The EFF is Orwellian as fuck
  58. Technology betrays everyone
  59. Freaking out over the DBIR
  60. Vulns are sparse, code is dense
  61. Satoshi: how Craig Wright's deception worked
  62. Satoshi: That's not how any of this works
  63. Touch Wipe: a question for you lawyers
  64. Whos your lawyer
  65. My next scan
  66. Defining "Gray Hat"
  67. No, Internet should be capitalized
  68. Some notes on Ubuntu Bash on Windows 10
  69. tl;dr of LambdaConf drama
  70. Sometimes techy details matter
  71. How to detect TrueCrypt blobs being passed around
  72. Some other comments on the ISIS dead-drop system
  73. Comments on the FBI success in hacking Farook's iPhone
  74. How the media really created Trump
  75. I'm skeptical of NAND mirroring
  76. There's no conspiracy behind the FBI-v-Apple postponement
  77. Why we are upset with the NYTimes Paris terrorist article
  78. No, you backoff on backdoors or else
  79. Can the Apple code be misused? (Partly Retracted)
  80. Code is expressive. Full Stop. (FBIvApple)
  81. Captain America Civil War -- it's us
  82. An open letter to Sec. Ashton Carter
  83. Early Internet services considered harmful
  84. Band-Aids over Basics: Anti-Drone Bill Revisions Compound Earlier Missteps
  85. The disingenuous question (FBIvApple)
  86. About McAfee's claim he could unlock iPhone
  87. Some notes on Apple decryption San Bernadino phone
  88. We've always been at war with Eastasia
  89. Fscking Visual Studio Code JS Hello World
  90. Hackers aren't smart -- people are stupid
  91. Nothing says "establishment" as Vox's attack on Trump
  92. Twitter has to change
  93. Lawfare thinks it can redefine π, and backdoors
  94. They are deadly serious about crypto backdoors
  95. Is packet-sniffing illegal? (OmniCISA update)
  96. Some notes on the Norse collapse
  97. Net ring-buffers are essential to an OS
  98. How not to be a better programmer
  99. Flawed From the Start & Missing the Mark: Georgia's Proposed Anti-Drone Legislation
  100. Some notes C in 2016
  101. The Schelling Game
  102. Powerball lessons for infosec
  103. In defense of Paul Graham's "Inequality"
  104. Mythical vuln-disclosure program

2015 111

  1. Trump is right about "schlong"
  2. Where do bitcoins go when you die? (sci-fi)
  3. Force Awakens review: adequacity
  4. All app developers should learn from WhatsApp-v-Brazil incident and defend against it
  5. No, you can't shut down parts of the Internet
  6. Policy wonks aren't computer experts
  7. Some notes on fast grep
  8. Joking aside: Trump is Unreasonable
  9. Tesla is copying Apple's business model
  10. Why "Force Awakens" will suck
  11. NSA needs more EFF hoodies
  12. First Internet ecommerce was at least 1990
  13. Some notes on the eDellRoot key
  14. We should all follow Linus's example
  15. The Godwin fallacy
  16. Prez: Rick Perry selling his mailing list
  17. Prez: donation numbers
  18. Yes, the CNBC moderation was biased
  19. OMG, the machines are breeding! Mankind is doomed! DOOMED!!!
  20. Dumb, dumber, and cybersecurity
  21. Ethics of killing Hitler
  22. Car hacking is as fake as the moonlanding
  23. Biden vs Risk Analysis
  24. DEF CON drink-off -- for science!
  25. DH-1024 in Bitcoin terms
  26. Infosec is good people
  27. Jeb Bush is a cyber-weenie
  28. Prez: Candidate synchronization
  29. I gave $10 to every presidential candidate
  30. Zerodium's million dollar iOS9 bounty
  31. Some notes on NSA's 0day handling process
  32. There are two sides to every story
  33. Maybe with less hate
  34. How to hack my Tesla
  35. What's that drama?
  36. Some notes on satellite C&C
  37. Helping refugees would enrich ourselves
  38. Review: Rick and Morty
  39. Why licensing wouldn't work
  40. Yes, they just droned a hacker
  41. About the systemd controversy...
  42. No, this isn't good code
  43. On science literacy...
  44. A lesson in BitTorrent
  45. AshMad is prostitution not adultery
  46. Trump is right about the 14th Amendment
  47. Notes on the Ashley-Madison dump
  48. A quick review of the BIND9 code
  49. Infosec's inability to quantify risk
  50. My BIS/Wassenaar comment
  51. Software and the bogeyman
  52. More ProxyHam stuff
  53. How to build your own ProxyHam
  54. ProxyHam conspiracy is nonsense
  55. Some notes when ordering Google's Project Fi
  56. CyberUL is a dumb idea
  57. How would you use Lua scripting in a DNS server?
  58. Because dossiers
  59. Should I panic because Lastpass was hacked?
  60. How to code: lesson 27
  61. How we really know the Sunday Times story is bogus
  62. Intel has 4 processor lines
  63. What's the state of iPhone PIN guessing
  64. Uh, the only reform of domestic surveillance is dismantling it
  65. Understanding TSA Math
  66. Ulbricht's judge punished him for political dissent; you should find this outrageous
  67. Some notes about Wassenaar
  68. EFF and intrusion software regulation
  69. This is how we get ants
  70. Our Lord of the Flies moment
  71. Those expressing moral outrage probably can't do math
  72. Revolutionaries vs. Lawyers
  73. NSA: ad hominem is still a fallacy
  74. Some brief technical notes on Venom
  75. How to fix the CFAA
  76. Ultron didn't save the world
  77. Review: Avengers, Age of Ultron
  78. Some notes on why crypto backdoors are unreasonable
  79. The hollow rhetoric of nation-state threats
  80. Solidarity
  81. Masscanning for MS15-034
  82. Should billionaires have to disclose their political contributions?
  83. Scalability of the Great Cannon
  84. Stop making the NSA the bogeyman of privacy
  85. No, 75% are not vulnerable to Heartbleed
  86. The .onion address
  87. Pin-pointing China's attack against GitHub
  88. War on Hackers: a Clear and Present Danger
  89. Message to Errata employees
  90. x86 is a high-level language
  91. What ever it is, CISA isn't cybersecurity
  92. GitHub won because it's social-media
  93. No, the CIA isn't stealing Apple's secrets
  94. Some notes on DRAM (#rowhammer)
  95. Cliché: Safen Up!
  96. Exploiting the Superfish certificate
  97. Extracting the SuperFish certificate
  98. Technical terms are not ambiguous
  99. Explaining the Game of Sony Attribation
  100. A lesson in the corrupt press
  101. Nobody thought BlackPhone was secure -- just securer
  102. Some notes on GHOST
  103. You shouldn't be using gethostbyname() anyway
  104. Needs more Hitler
  105. Drums of cyberwar: North Korea's cyber-WMDs
  106. Notes on the CIA spying case
  107. Obama's War on Hackers
  108. A Call for Better Vulnerability Response
  109. Platitudes are only skin deep
  110. Anybody can take North Korea offline
  111. The GoP pastebin hoax

2014 135

  1. That Spiegel NSA story is activist nonsense
  2. Dear Leader's Lesson in Confirmation Bias
  3. Ask a nerd
  4. Sony hack was the work of SPECTRE
  5. The FBI's North Korea evidence is nonsense
  6. I just bought a ticket for The Interview
  7. What they miss about Uber/Lyft pay
  8. Notes on the CIA light-torture report
  9. All malware defeats 90% of defenses
  10. FYI: Snowden made things worse
  11. EFF: We've always been at war with EastAsia
  12. The Pando Tor conspiracy troll
  13. That wraps it up for end-to-end
  14. Don't mistake masturbation for insight [NOT SAFE FOR WORK]
  15. This Vox NetNeutrality article is wrong
  16. Voters are jerks
  17. Adding protocols to masscan
  18. Appropriate Halloween costumes
  19. No evidence feds hacked Attkisson
  20. The deal with the FTDI driver scandal
  21. Review: The Peripheral, by William Gibson
  22. FBI's crypto doublethink
  23. Some POODLE notes
  24. Standards are a farce
  25. Don't sign that CFAA petition
  26. Response to Kathy Sierra
  27. Wget off the leash
  28. Six-month anniversary scan for Heartbleed
  29. Who named "shellshock"?
  30. Understanding the HP split
  31. Two Minutes of Hate: Marriot deauthing competing WiFi
  32. Opt-in for upcoming Heartbleed results
  33. Reading the Silk Road configuration
  34. Right-winger explains what's wrong with ComputerCop
  35. The shockingly obsolete code of bash
  36. Do shellshock scans violate CFAA?
  37. Many eyes theory conclusively disproven
  38. Shellshock is 20 years old (get off my lawn)
  39. Bash 'shellshock' bug is wormable
  40. Bash 'shellshock' scan of the Internet
  41. Bash 'shellshock' bug as big as Heartbleed
  42. EFF, Animal Farm version
  43. Hacker "weev" has left the United States
  44. Rebuttal to Volokh's CyberVor post
  45. What they claim about NetNeutrality is a lie
  46. Vuln bounties are now the norm
  47. Masscan does STARTTLS
  48. Grow up, you babies
  49. C10M: The coming DDR4 revolution
  50. That Apache 0day was troll
  51. No, the CIA didn't spy on other computers
  52. Cliché: open-source is secure
  53. Everything can be a bomb
  54. Um, talks are frequently canceled at hacker cons
  55. More fun with #TSA
  56. Omg Hotel Pennsylvania sucks
  57. EFF lies about NetNeutrality
  58. JTRIG weekend projects
  59. Upcoming speaking schedule
  60. NSA: walk a mile in their shoes
  61. More XKeyScore code
  62. Snowden: It's treason then, Master Jedi
  63. Validating XKeyScore code
  64. XKeyScore: regex foo
  65. Jamming XKeyScore
  66. Reading the XKeyScore-rules source
  67. XKeyScore: it's not attacking Tor
  68. The character assassination of Keith Alexander
  69. SCOTUS's new Rummaging Doctrine
  70. Supremes strike down cop dramas
  71. Riley v California: support cloud privacy too?
  72. 0day market conspiracy theories
  73. PR will be first up against the wall when the revolution comes
  74. 300k vulnerable to Heartbleed two months later
  75. Well, that's it for Cards Against Humanity
  76. Products endorsed by cybersec experts
  77. Why it had to be Swift
  78. Telsa hasn't really open-sourced their patents
  79. Can I drop a pacemaker 0day?
  80. No, you can't remotely turn on phones
  81. WordPress: unsafe at any speed
  82. Greenwald's extremism damages the cause
  83. Kinsley vs. Greenwald: it's about principle
  84. FBI will now record interrogations
  85. How to wiretap a country
  86. EFF: some are more equal than others
  87. 300k servers vulnerable to Heartbleed one month later
  88. No, McAfee didn't violate ethics scraping OSVDB
  89. Transparent IPv6 in socket APIs
  90. Fun with IDS funtime #3: heartbleed
  91. Clapper muzzles supporters not critics
  92. No, Glenn Greenwald did not win a Pulitzer
  93. Heartbleed: Pointer-arithmetic considered harmful
  94. xkcd is wrong about "free speech"
  95. Heartbleed: I'm thinking BIGNUM
  96. CloudFlare Challenge writeup
  97. No, the NSA didn't make us less secure (heartbleed)
  98. Weev freed (for now)
  99. No, we weren't scanning for hearbleed before April 7
  100. Why heartbleed doesn't leak the private key [retracted]
  101. 600,000 servers vulnerable to heartbleed
  102. Yes, you might have to change some passwords (#heartbleed)
  103. Using masscan to scan for heartbleed vulnerability
  104. What the heartbleed bug looks like on the wire
  105. New Service Offering from Errata Security: SATAN-as-A-Service
  106. A traditional cybersecurity company
  107. We may have witnessed a NSA "Shotgiant" TAO-like action
  108. Witty Worm: no seed population involved
  109. Witty 10 Years Later
  110. Weev’s lawyers appear in court
  111. MH370 must've been cyber-hacked
  112. Newsweek myth busted: "disk space is cheap"
  113. Airgapping Tor
  114. Newsweek: I'm not Satoshi, either
  115. Game theory: cheating at bitcoin mining
  116. RSAC Keynote: support your local sherif
  117. C programming: you are teaching it wrong
  118. If anything, Bitcoin is inflationary
  119. The thing to know about JavaScript
  120. No, Bitcoin value hasn't dropped to $250
  121. That "trollers are sadists" story is bogus
  122. Bitcoin QT weirdness
  123. You should probably call your senator
  124. FirstLook.org fails at security so far
  125. I tried but could not get my phone hacked (without cheating)
  126. That NBC story 100% fraudulent
  127. DoS is not DDoS
  128. JavaScript: the one true language
  129. Masscan supports SCTP
  130. BTC 0.1 for 'masscan' logo
  131. Masscan: diagnosing slow transmit speeds
  132. Why Snowden belongs in jail
  133. Freaking Infrared: How Does it Work?
  134. Video tells children it's ok for TSA to molest them
  135. Why we have to boycott RSA

2013 130

  1. Masscan: designing my own crypto
  2. Masscan does ARP
  3. Target: just 'cause it's 3DES doesn't mean it's secure
  4. Trolling: what is it?
  5. Snakeoil vs. bounties
  6. What good are lead lined rooms?
  7. How to disable webcam light on Windows
  8. No, you've been correctly using "styrofoam"
  9. Threat level: puce
  10. CCC, 100-gbps, and your own private Shodan
  11. DoD address space: it's not a conspiracy
  12. How we know the 60 Minutes NSA interview was crap
  13. Literally the nicest thing I’ve ever done
  14. Mandela was a great man
  15. Swartz: wiring closets explained
  16. isowall: an isolating firewall
  17. #badBIOS features explained
  18. What to do on Halloween...
  19. Third Circuit Court giggle
  20. "The Fifth Estate": a consensual hallucination
  21. That DLink bug (masscan)
  22. Baconizing: how the NSA collects buddy-lists
  23. We've always known Columbus was a bastard
  24. FAQ: from where can I scan the Internet?
  25. How the high-wizard Mordaine invented NoSQL
  26. What's the max speed on Ethernet?
  27. Fun with IDS funtime, part 2
  28. Silk Road: caught by the NSA?
  29. Fun with IDS funtime
  30. I'm scanning udp/161 (SNMP) right now
  31. I'm scanning udp/53 right now
  32. TouchID defeated: what does it mean?
  33. How Weev's prosecutors are making up the rules
  34. BBC's nonsense tech story
  35. NSA's Fort Belvoir and Star Trek
  36. Masscan: the entire Internet in 3 minutes
  37. We scanned the Internet for port 22
  38. Fingerprints can change
  39. Finger tip prints are not fingerprints
  40. The first rule of NSA club...
  41. No, the NSA can't spy on arbitrary smartphone data
  42. Tor is still DHE 1024 (NSA crackable)
  43. Cyberwarfare is like sniping: "If you don't have DOPE you don't have a shot"*
  44. Microsoft: a different shade of blue
  45. Nasdaq is neither in New York nor on the Internet
  46. A gentle intro to Dubstep
  47. Why Facebook can't pay the bounty -- but should anyway
  48. Legalizing Bitcoin may drive it further underground
  49. Why aren't we demanding Gen. Alexander's resignation?
  50. Swartz was indeed persecuted, not prosecuted
  51. 10 years of Blaster: a retrospective
  52. Witty hubris
  53. The Rob Test: 12 Steps to Safer Code
  54. When did we start trusting bad code?
  55. Anonymity Smackdown: NSA vs. Tor
  56. NSA FOIA fail is fail
  57. DefCon network analysis vs. NSA
  58. There's more to the pressure cooker story
  59. DefCon cabby lessons: insurance
  60. No, the NSA can't track phones when they are "off"
  61. Randomized TSA screening is stupid
  62. NSA denies my FOIA request
  63. How the Glass hack works
  64. Is security a "super" right that trumps all other rights?
  65. The increasing cyberization of the NDAA
  66. Thanks EFF for outlawing code
  67. DEF CON fed uninvite: not everything is political
  68. Scanning the Internet
  69. I'm hacking your website
  70. Unwanted access
  71. SilentCircle and technical debt
  72. NSA hacking Chinese: it's self defense
  73. A Glass FAQ
  74. I survived Google's re-education camp
  75. Even Microsoft has to pay for it
  76. Upcoming revelations speculations
  77. NSA poll: You are reading the numbers wrong
  78. Oaths, conscience, and honor
  79. Libradar: Is Edward Snowden libertarian?
  80. NSA is wrong, not evil
  81. Vote for my short story!
  82. Reconciling PRISM claims
  83. If we can shoot them, we can cyber them
  84. Those who have not read Orwell are doomed to repeat him
  85. Welcome to Echelon 2.0
  86. Manning trial: looking up serial numbers
  87. Manning transcripts: day one
  88. Smart or Dumb: The OSX update saga
  89. Haswell and cybersec: it's about the crypto
  90. BitCoin is a public ledger
  91. Video geeking: Revolution and biometrics
  92. Don't drone me, bro
  93. Myth: buying in bulk
  94. Apple's profits: 70% tax rate
  95. Star Trek 2: warning - you can't unsee it
  96. Nobody reads the ToS -- not even those who write them
  97. @AP hack: the stock market did not "plunge"
  98. A wonkish look at bitcoin economics
  99. How to Dress Like a Cyber Warrior OR Looking Like a Tier-Zero Hero
  100. Let me hadoop that for you
  101. Ubuntu low-mem install for VMs
  102. No really, use the 5th Ammendment
  103. Code, philosophy, integer overflows
  104. Cyberwar: you lack imagination
  105. Assassination of citizens: why we care
  106. The debate over evil code
  107. Context matters: we only appear to be blackhats
  108. Speech codes are evil
  109. Ruby on OSX 10.8 followup
  110. Multi-core scaling: it’s not multi-threaded
  111. Custom stack: it goes to 11
  112. Unlearning College
  113. Scalability: it's the question that drives us
  114. Silent Circle and inexperienced protocol parsing
  115. Ruby 1.9.3 on OSX Mountain Lion with Mac Ports and RVM
  116. 1996 was the year scalability changed
  117. Our children are doomed
  118. Risk analysis v. Downtime
  119. The NYTimes article was content free
  120. NYTimes and more Rainbow Table nonsense
  121. 10 years of Slammer: one retrospective
  122. Mega and Encrypted Cloud Deduplication
  123. Aaron's Law: repeal CFAA rather than amend it
  124. I conceal my identity the same way Aaron was indicted for
  125. Witchcraft is not a crime
  126. Review: The Hobbit, An Unexpected Silmarillion
  127. Cybersec-cliché: process
  128. State sponsored attack: a howto guide
  129. Notes on the TURKTRUST fiasco
  130. Don't mess with the Google

2012 101

  1. Predictions for 2013
  2. Occupy Journalism
  3. A lesson in memes
  4. Microsoft is toast, here's why
  5. You are committing a crime right now
  6. SOPA: let's not let Republicans weasel out of this one
  7. The hacking of a general's mistress
  8. Why voting machines suck
  9. Theory: “impact on the crowds”
  10. Hack the vote
  11. A lesson in math … and risk
  12. Sandy and the tragedy of collectivization
  13. Why Lucas sold Star Wars to Disney
  14. Randomizing port scans, part two
  15. A question for crypto/math peoples
  16. Scalability is a systemic anomaly inherent to the programming of the matrix
  17. Bill and Melinda Gates deserve the Nobel Peace Prize
  18. Awareness monkeys are a pox on humanity
  19. The fog of cyber and government lies
  20. RAID6 or die
  21. There was no Georgia cyber-war
  22. ICYMI: 0-day leaks from IPS
  23. An open letter to Senator Rockefeller
  24. The know-nothings of cybersecurity
  25. Judge correctly rules WiFi sniffing legal
  26. JavaScript is a real programming language
  27. How the FBI might've been owned (12M Apple records)
  28. Hackers on a plane: who has jurisdiction? (legal)
  29. New Java 0day
  30. These guys want to reform the ISC2/CISSP
  31. Common misconceptions of password cracking
  32. Pentesters: Amazon EC2 or GPUs for password cracking?
  33. The deal with passwords
  34. Sexism vs. Journalism 101
  35. Software networks: commodity x86 vs. network processors
  36. Who will fight for me?
  37. A bit of IDS history
  38. An Anti Sexual Harassment Policy
  39. No, "hacker" really does mean "hacker"
  40. Sexual harassment policies: education please, not threats
  41. Review: "Virtually True" by Adam Penenberg
  42. Learn to read Wikipedia! Part 2
  43. Learn to read Wikipedia!
  44. The tl;dr version of Moxie's MSCHAPv2
  45. GPS spoofing
  46. OMG WE NEED THOSE STINKING BADGES
  47. Who invented the Internet: evolution or intelligent design?
  48. Nexus7 Kindle vs. Amazon Kindle Fire
  49. Employee training
  50. Myth: that secret coffee slush fund
  51. NAS buying criteria for the home cloud
  52. SSDs: avoid SandForce controllers
  53. Stupid NAS error (ignore this post)
  54. Marissa Mayer: Why CEOs make so much money
  55. Fukushima: final report
  56. More leap-seconds, not fewer
  57. Microsoft Surface: because the iPad is an existential threat
  58. Falsehoods programmers believe about networks
  59. Norton v Olson: A review of a review
  60. Thunderbolt cables are bidirectional
  61. LinkedIn vs. password cracking
  62. Confirmed: LinkedIn 6mil password dump is real
  63. Chinese/military backdoor: Microsemi and Skorobogatov respond
  64. Tuning Linux: TCP hash entries
  65. HP dm1z $350 perfect for BackTrack 5r2
  66. Bogus story: no Chinese backdoor in military chip
  67. DNS vs. large memory pages (technical)
  68. At scale: gigabyte page sizes? (technical)
  69. We are all Byron Sonne
  70. You travelers in hotels, please send ViewSource/pcaps
  71. The hotel wifi is out to get you!!
  72. Don't let them scare you
  73. The origin of Ethernet "bypass" switches
  74. cgi-php: Well, that just about wraps it up for open-source
  75. There’s nothing evil Google can do with the extra WiFi data
  76. #CISPA: opt-in is not optional
  77. Ferret/3.0 (64-bit)
  78. Code as physical property: interpreting legal descissions
  79. No SOPA or April Fools: Slashdot is officially dead
  80. OS/2 wasn’t all that good
  81. March 31 status: no #Anonymous DNS blackout
  82. That doesn't mean your employer can use your Facebook password
  83. The MAPP zero-day protection scam
  84. I was wrong, wrong, wrong, about McCain
  85. Notes on Sabu arrest
  86. The Ruby/GitHub hack: translated
  87. AT&T provides free user information yet again
  88. IDApro and Microsoft
  89. In the Twitter future, everyone will be famous for 15 seconds
  90. No, #Anonymous can't DDoS the root DNS servers
  91. UN's website still vulnerable after 4 years
  92. Wikileaks to go mobile (Not an app)
  93. My notes on Intel's Transactional Memory (it's like a cmpxchg64b)
  94. Some IDS comments
  95. Why we have jobs in cybersec
  96. January 18: SOPA blackout day
  97. This message will self-destruct in five seconds.
  98. Multithreaded teaches the wrong lessons about multicore
  99. Internet is indeed a human right
  100. Passwords: uniqueness, not complexity
  101. Predictions for 2012

2011 67

  1. Easy instructions for boycotting GoDaddy over SOPA
  2. Freakonomics vs Cybersecurity
  3. Quick review of the Kindle Fire
  4. Cloud Computing is a Commodity, not a Utility
  5. iPhone 4S for Sprint performance below par
  6. DefCon speakers guide to #OccupyWallStreet hand signals
  7. Scanning the Internet
  8. How geeky am I
  9. Independent reporting of #OccupyWallStreet
  10. @Anonymous's war against the New York Stock Exchange
  11. Brookfield Properties responds re: #OccupyWallStreet
  12. October is Cybersecurity Awareness Month -- or is it?
  13. Protesters wanted to get arrested on Brooklyn Bridge
  14. I was just threatened by #OccupyWallStreet protesters
  15. Thinking on the margin (Economics)
  16. CAPTCHA hell
  17. Finally, a Responsible Disclosure policy
  18. What the heck is ISO-TSAP?
  19. Catastrophic failure for certifications of the APD
  20. Validity of most-common-password lists
  21. Comments about the $200,000 BlueHat prize
  22. We already know you are a sellout, we are just negotiating price
  23. White-hats are on the side of law, but not order
  24. dm1z and MacBook Air: a quick pre-review
  25. The ethical problems of the CISSP and (ISC)2
  26. It’s just an analogy, get over it
  27. Those who don't know the state-of-the-art are doomed to repeat it
  28. Undersea Cable Map
  29. Don’t get sucked into conspiracies
  30. Space Shuttle: good riddance
  31. Chronic Threats: SQL injection
  32. Take a bow everybody, the security industry really failed this time
  33. My own Grandpa Simpon moment: The Cloud
  34. What does cyberwar look like?
  35. Password cracking, mining, and GPUs
  36. A Weiner Schnitzel
  37. I got a bitcoin!
  38. Amazon Cloud Music Player
  39. The iPad revolution
  40. Why cybersecurity tests fail
  41. Microsoft's "Coordinated Vulnerability Disclosure"
  42. Email disclaimers are not pointless
  43. So what's wrong with optimism?
  44. No, it really is "groupthink"
  45. Transactive Memory Systems: an answer to "groupthink"
  46. A pre-review of 'breaking_in'
  47. Government Didn’t Create the Internet
  48. How to protect yourself from future "Epsilon" breach
  49. Anatomy of a Twitter worm ("Profile Spy")
  50. Well, that's it for Bit.ly (SCRATCH THAT: MAYBE NOT)
  51. "Cyber" and "hacker": I’m taking them back
  52. Verifying the Comodo Hacker's key
  53. Interview with ComodoHacker
  54. The Comodo hacker releases his manifesto
  55. A brief introduction to web "certificates"
  56. No reason to believe Comodo attack came from Iranian Government
  57. Risk management: what do it mean?
  58. Fukushima: Too soon for hindsight?
  59. Japanese WiFi Stumbling
  60. Thunderbolt: Introducing a new way to hack Macs
  61. What's the deal with deleting data from flash drives?
  62. Why security is so frustrating
  63. What happened to "World Domination 201"?
  64. I'm already hating the IPv6
  65. Kill-switch: Egypt vs. the US
  66. Don't get trolled by the World's #1 Fraud
  67. Comment on "Layer 8: Connecting the risk dots."

2010 50

  1. Random notes on Wikileaks vs. Amazon AWS Web Service
  2. Cablegate: Wikileaks still sucks
  3. Is iPhone identifiable on WiFi network?
  4. TSA: you can't make this stuff up
  5. I was just detained by the TSA
  6. TSA caught lying
  7. Web 2.0 Report Card
  8. A discussion at SecTor on Rogue Secure Development
  9. Re: FireSheep
  10. Security B-Sides Atlanta - October 8th
  11. Free (as in beer) wireless pentesting class
  12. Adobe misses low hanging fruit in Reader
  13. Apple's secret "wispr" request
  14. A False Sense of Security
  15. Third generation Kindle released
  16. DLL exploit not a job for secure coding programs
  17. UN's website still vulnerable after 3 years
  18. Battle of Barbie v. Bratz - Round goes to Bratz (and employees)
  19. Supreme Court Bilski Decision Watch - Coming Monday?
  20. iPad hack vs. OWASP Top 10
  21. Cyberwar is fiction
  22. Microsoft has good security, but it's not enough
  23. "Popular Highlights" on the Amazon Kindle
  24. Technical details of the Street View WiFi payload controversy
  25. More "the air is full of packets"
  26. You may not need an SDL
  27. Exploiting the business cycle
  28. Some Large Website Please Do This Study
  29. "That's not the lesson!!" Lessons unlearned from the Blippy CC number exposure.
  30. Vuln Disclosure is Rude
  31. What kind of company is Apple?
  32. This Week in Boston: SOURCE Boston and Security B-Sides
  33. Buffer overflow attack on YouTube! TGIF!
  34. How did Wikileaks decrypt the video?
  35. "Collateral Murder": why Wikileaks sucks
  36. Legal Alert: Court Slaps Back at FCC "Net Neutrality" in Comcast Case
  37. The First Steps to a Career in Information Security
  38. Errata Security releases the results of the survey on secure coding practices
  39. Latest Intel processor security features
  40. Tech Savvy House Hunting?
  41. POLL - What is your experience with security in the Software Development LifeCycle?
  42. Nehalem vs. IDS
  43. Kindle DX vs. the iPad
  44. More on Twitter.
  45. Twiguard update week 4 and final week.
  46. IE 0day failures
  47. Twiguard update week 3
  48. Its awesome how accurate twiguard is at
  49. Decrypting USB flash drives is easy
  50. Twiguard update week 2

2009 68

  1. TwiGUARD update
  2. Daemon: Don't mess with John Carmack
  3. Xmas: netbook gift
  4. Shodan scares me
  5. Ironic...
  6. Xmas: to Kindle or not to Kindle
  7. Xgiving: Fixing the TV
  8. Climategate hack used open proxies
  9. Hacker exposes global warming researcher (Climategate)
  10. 10 Facebook Don'ts
  11. Law & Tech Geek Alert: Future of Software and Technology Patents in Supreme Court's Hands
  12. How to change iPhone passwd
  13. Brazil outage NOT caused by hackers
  14. Windows 7 includes soft-ap
  15. Call Spoofing: So easy, even famous people do it!
  16. Peter Principle
  17. Hack
  18. Hon Hai = Foxconn
  19. No Downloads Barred: Net Neutrality Fight Steps Into the Ring (Again), FCC Proposals Facing a First Amendment TKO
  20. Red flags at the doctor's office
  21. TwiGUARD tracked the HowToHack incident
  22. Tweet Theft Spam
  23. So use DMCA Counter-Claim!
  24. Intel’s Atom vs. Cybersecurity
  25. The Sins of the FSF
  26. $169 Eee 900 disposable computer
  27. SQL injection not sophisticated
  28. Clear(tm) WiMax
  29. UN's website still vulnerable after 2 years
  30. Astroturfing AV: When the wolves guard the hen house
  31. @30k feet
  32. The Ex Factor: Preview
  33. Heres how we do that voodoo that we do (iPhone Hacking)
  34. The Economist on the Kindle
  35. Asynchronocity and Internet Scale
  36. Why people don't get security
  37. Why deep packet inspection is faster
  38. No killer robots soon
  39. Sidejacking poem
  40. Scan 3rd party websites for safeness
  41. How to measure download speed
  42. Star Trek Sucked
  43. How to stop the swine flu
  44. Cyberspies, #2
  45. Tales of hacker tools Vol 1: View Source
  46. RSA 2009
  47. Why "cyber commands" fail
  48. Ode to 50cent
  49. SSL acceleration
  50. THIS IS SO AWESOME!!!
  51. Has the power grid been penetrated by enemies?
  52. Dallas FBI raid, part 2
  53. Why SSL sucks, #458738
  54. FBI takes down Dallas ISP
  55. GPU cracking for $250
  56. New Firefox 0day in WinDBG
  57. Deep packet inspection is not the same as snooping
  58. SOURCE Boston
  59. Setting up Firefox for Hamster
  60. Hamster 2.0 and Ferret 2.0
  61. Review of Kindle 2
  62. The Importance of Being Canonical
  63. Internet > Hygiene
  64. Coding Heresy: shellcode in software developement
  65. Password cracking vs. CPU throttling
  66. Quick someone explain what branding and
  67. Rats, foiled
  68. Versign's Bad Response to the MD5-SSL Crisis

2008 113

  1. Not all MD5 certs are vulnerable
  2. I am not dead AND guessing redacted documents...
  3. Lori Drew vs. Rule of Law
  4. Naked
  5. Graphics cards are for cracking
  6. WPA2 is not next on the chopping block
  7. Errata Security endorses McCain
  8. WPA is NOT obsolete
  9. Google's "obfuscated TCP"
  10. TCP Selective ACK considered evil
  11. TCP DoS (probably) real
  12. The latest low blow for Apple
  13. How Sarah got her hack on
  14. The Perfect NetBook: Eee 701 2G Surf
  15. LookingGlass Vendor of the week: Google
  16. Spammers like Aarvarks more than Zebras?
  17. Google vs. SideJacking, round 7
  18. Oh the zealots will be on the warpath...
  19. Booting OSWA on Eee PC with SD flash
  20. Reporters "hacking" at BlackHat
  21. The DNS is falling
  22. AxBan Signature List v. 4
  23. Iphone 3g 3g coverage iphone
  24. Why you have to reboot your router
  25. New Firmware
  26. Wireshark "TurboCap"
  27. DI #4
  28. GMail now shows IP address log
  29. Dan Peck
  30. DI #3
  31. DI #2
  32. Oooohh, more cocktail parties at the airport Hilton...
  33. No such thing as bad press
  34. Code auditing: the abstract vs. concrete
  35. The internet just causes problems
  36. New threat to physical security
  37. Errata Security Twitter
  38. More fodder for the arms race...
  39. And now, something new...
  40. Random musings...
  41. Blizzard's Two-Factor Authentication
  42. The continuing saga of McAfee malware
  43. Blizzard
  44. AxBan 1.5
  45. Worm source code...
  46. Aren't PHDs put in cages...err..classrooms...
  47. Httpwww
  48. Tenables new patch diff.
  49. Yes YOU can own a gun
  50. You cannot believe what you see...
  51. Telecommuting spies?
  52. 70's Redux, finding pools
  53. Funny article
  54. Can antivirus be a virus?
  55. Windows Mobile Registry Viewer
  56. Apple malware
  57. Why isn't Satan invited to Oreilly conferences?
  58. Ruby vulns: its been 3 years in the making
  59. Verizon 500 breach report
  60. Yellowcake and SCADA
  61. New AxBan feature...
  62. New AxBan: 1.0.0.4
  63. 0day Flash vuln
  64. Summercon ths weekend
  65. LookingGlass Vendor of the week: Trillian
  66. Apple still not playing nice with researchers...
  67. AxBan 1.0.0.2
  68. Big week
  69. Call for Beta Testers
  70. New Team Member at Errata Security
  71. ActiveX is dangerous...
  72. Thats it...
  73. Start date for IPS
  74. Hrm...GTA4 seems to not like Linux...
  75. George Ou is back...
  76. Thank god i thought i was only person
  77. Racing to Zero
  78. Automatic patch-based exploit generation
  79. Why the "Pentrate and Patch" idea is not only great, but also essential: A response to Ranum and Lindstrom
  80. Ferret on the iphone..
  81. Ole Pete responds...
  82. I have it on good authority below is an actual picture of Pete Lindstrom
  83. Httphexblog
  84. Update on Apple and QuickTime
  85. LookingGlass Vendor of the week:ATT
  86. LookingGlass 1.1
  87. Queens wear brown...
  88. Safari and Apple get Owned...Again...
  89. Welcome to the arms race…
  90. The LookingGlass Vendor of the Week: Adobe
  91. New LookingGlass version: 1.0.1.0
  92. The lookingGlass vendor of the week.
  93. Httpwww
  94. New Looking Glass
  95. A quick chumby post.
  96. Secret APIs not a conspiracy
  97. More information
  98. Unsafe at any speed
  99. omg Microsoft releases protocol specs lol
  100. There is no Cable Cut Conspiracy
  101. Un...umm...traceable...understandable...battery acid...
  102. Hacking Flash Memory
  103. Why the OLPC promotes terrorism
  104. Hex.lore
  105. A break for work...
  106. Intresting
  107. New Apple Quicktime Problem – UPDATE
  108. More SideJacking
  109. New Quicktime Flaw, this is not Deja Vu
  110. SCADA the easiest target...
  111. Anybody that spends anytime with me
  112. Terminator TV Show
  113. Wow

2007 154

  1. Things to do on Christmas break...
  2. MSN messenger built-in AV
  3. Me, the office, a green laser
  4. New Apple Problem
  5. Bellsouth DNS goes belly up...
  6. The thing that makes candy sweet...
  7. IDA Pro 5.2
  8. More RTSP
  9. IDA Pro 5.2
  10. Apple Quicktime RTSP update
  11. Who doesnt need break for 219mph cars
  12. Al Gore's movie website hacked...
  13. New RTSP Quicktime flaw affects both OSX and Windows
  14. A roundup of stuff...
  15. postmortem and ontime...
  16. Httpdocs
  17. USRP goodness
  18. New blog has appeared that should
  19. Firewall that protects all nations
  20. The Video..
  21. Funny Vista Tricks with ASLR
  22. Errata goes to the races...
  23. OK
  24. Evil Rob Graham Fact #3
  25. Evil Rob Graham Fact #2
  26. Password Cracking vs. Core2/Athlon64
  27. Evil Rob Fact #1
  28. Vote which of us gets tazed
  29. If you want to hack something today...
  30. I'm bored today...
  31. What you packing?
  32. The Cost of Security
  33. Google Protection
  34. iPhone Shellcode by Metasploit
  35. An open letter to my CEO
  36. An open letter to computer criminals...
  37. Response to some Bloggers
  38. I am art
  39. Past...Present...Future...
  40. And now...Comedy...
  41. THE CYBERWAR IS COMING, THE CYBERWAR IS COMING
  42. SQL injection is surpisingly easy
  43. SideJacking with Hamster
  44. Sites confirmed safe from SideJacking
  45. Congrats Apple!
  46. Inverse Steganography
  47. Best Error Message ever
  48. I am not LMH...
  49. Corps of Engineers Security
  50. Super Tuesday!!
  51. Our first iPhone bugs
  52. An iPhone post...
  53. And now...something light...
  54. The Purple Pill?
  55. A really good question deserves an answer…
  56. HD's new groove...
  57. Niiiice...
  58. Amero, part 2
  59. How to become a "security guru"
  60. Details matter
  61. This is not cyber-warfare
  62. Life imitating art?
  63. Public wifi vs 3G mobile broadband
  64. Blogging Toorcon/Seattle
  65. Toorcon Beta
  66. Liability of reverse engineering
  67. Apple Update
  68. Wireless NAC != Wireless IPS: AirTight...Leaks...
  69. An alternate explanation of the OSI model
  70. Tom at matasano reporteed this
  71. Net Neutrality has never existed
  72. Storm Worm vs. IDS
  73. After announcement this weekend about
  74. Say it ain't so Steve...
  75. Scary Stories...
  76. News from Microsoft: DNS 0day being exploited in the wild
  77. Why did the ANI patch take so long?
  78. More telnet fun..
  79. ANI 0day vs. intrusion detection providers
  80. Please stop feeding the trolls
  81. New SCADA vulns
  82. Cracking...
  83. Wifi Beacon Seapage
  84. Hit-pieces and ethical journalism
  85. OSX vs Vista...
  86. A round up of things...
  87. PayPal security token…not ready for prime time yet?
  88. Yet more Ferret
  89. Helping reporter in Bay Area
  90. Convenient Half-Truths
  91. Yet more blogging blackhat
  92. Apple info...and thats all folks...
  93. More Blackhat...
  94. Its V-A day....
  95. Blogging Blackhat
  96. The Norwich Witch Trial
  97. Needs more cowbell
  98. Network Coding, Part 2
  99. Snort Remote RPC 0day
  100. Errata loves ebay
  101. High-performance security appliances
  102. A new meaning for Denial-of-Service attack
  103. Update on Solaris telnet issuse.
  104. Steve Jobs and DRM...
  105. SANs sticks head in sand over exploits...
  106. Trivial remote Solaris 0day, disable telnet now.
  107. Lost became lost...
  108. Quantum redux
  109. Blogging RSA
  110. Root DNS attacked, that's sooooo 20th century
  111. Warning...Long post on how OSX does not has ASLR.
  112. Gruber is upset about a Gates quote, not about the lack of security technology in OSX
  113. BitTorrent curiousities
  114. More on the Apple wifi blunder OR i am no longer gagged
  115. More on Apple security Vs. Microsoft Security
  116. Bill Gates fights back against an evil corp?!?!
  117. Tennis balls and car locks...
  118. Blogging on our own blog
  119. Take it from a man that lived in Boston...
  120. George Ou's hack gets a marketing name...
  121. Stop me if you heard this one...So A priest, A rabbi, and Cisco IOS walk into a bar…
  122. 2007: the year someone will mention 0day to you in a club
  123. Words can be dangerous...
  124. Rsa
  125. You can tell its Vista launch day....
  126. Ad-Hoc Virus, part 2
  127. Oakley enters the mobile device security market...kinda...
  128. Its Cisco again….again…
  129. A test of Apple’s security response versus Microsoft
  130. Smart=anti-NetNeutrality, Dumb=pro-NetNeutrality
  131. The Ad-Hoc WiFi Virus
  132. When people refuse to use common sense...
  133. F1 cars go vroom vroom
  134. Oracle HEV
  135. Poisoned by the Venom: Silicon Snake Oil:Vol 1 BigString
  136. The new Uninformed is out
  137. Myspace Hacking and browser technologies
  138. Cisco Stuff...again
  139. Microsoft Patch Release initial analysis
  140. cool new stuff from Apple
  141. Ninja-Hackers
  142. Disclosure ethics apply to BOTH parties
  143. Cisco Security
  144. George Ou scores!
  145. MSRC Advanced Notification & Sales Pitch
  146. The behemoth awakens…and feeds…
  147. NetNeutrality == Evil
  148. re: BitTyrant
  149. Errata Security in the news!!
  150. Bluejacking by the Brits...
  151. All hail your MMS overlords
  152. Blah Blah Blah
  153. Entry Point example
  154. It has begun!!

2006 5

  1. New years time
  2. Applescript vs. VBS
  3. Quick, audit DRM
  4. Old things will be new again
  5. New Blog