The Curious Engineer

All blogs / Security

Robert Hensing's Blog

learn.microsoft.com/en-us/archive/blogs/robert_hensing

Software Security . . . and stuff.

SecurityTech news / industryMicrosoft blogsMSDN archive

’05’10’15’20’25
Posts
209 from 23 Aug 2004 to 2 Nov 2008
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/robert_hensing/feed.xml

2008 91

  1. This week's Fail Open Goat Award goes to - Credit Card Processing
  2. Microsoft SideSight?
  3. SmoothHD
  4. Mass SQL Injection : The Chinese Way
  5. Out of band security update planned for today (MS08-067)
  6. Flash 10 & IE8b2 Per Site ActiveX
  7. Flash 10 is out - install it like . . . yesterday.
  8. MAPP + Exploitability Index == Protected Customers, Better Security Update Prioritization
  9. Shostack on "Threat Modeling"
  10. iPhone running WM 6.1?
  11. I'm a PC and I fight for the users . . .
  12. Extreme Ad Makeover - We are now entering "the 2nd phase"?
  13. Zune 3.0 - Using wifi to download songs right from the ZMP (speed test)
  14. GOVCERT.NL and German authorities recommend against installing Chrome!?
  15. Why I'm not running Chrome anymore (back to IE8 beta 2 for me)
  16. It begins . . .
  17. On Chromium and Practical Windows Sandboxing
  18. Google Chrome coming today? Launch early and iterate? srsly?
  19. The truth about the Dowd / Sotirov Vista memory protection bypass stuff
  20. Happy Patch Tuesday - Random thoughts
  21. VMWare Fail Closed Goat Award
  22. OpenID Fail Open Goat Award
  23. Today's Fail Open Goat Award goes to: Insecure 3rd party software updaters
  24. 2% of a big number, is a big number
  25. Microsoft Mojave
  26. Antivirus fail . . .
  27. DNS Fail Open Goat Award
  28. Pwnie Awards - Vista nominated for . . .
  29. Dan's DNS checker - We need a new ship!
  30. Chris Rohlf joins Matasano
  31. Memory dumpers for Windows
  32. Adobe Acrobat 9 - Creamy Security Goodness (on Vista / WS2008)
  33. Dino secretly wants Apple to release 64bit Vista
  34. Today's FOGA goes to Google for (implicitly) admitting they have a problem (via stopbadware.org)
  35. SQL injection is teh suck . . .
  36. Security 'silly season' has officially begun . . .
  37. Microsoft Blogs and Web Resources about Security
  38. More FireFox 3.0 entertainment (Fail Open Goat Award)
  39. USA Today writes an article about FF 3.0 - hilarity ensues . . .
  40. Our comically un-creative product naming continues . . .
  41. Freeware un-delete software pwns fancy schmancy 1024 bit encrypting malware?
  42. Security Bonuses for Vista programmers
  43. Mama always had a way of explainin' things so I could understand . . .
  44. Client side cross domain security whitepaper
  45. ISV best practices, Corrupted Heap Termination, the pursuit of (security) happiness . . .
  46. IE vs. Firephox? Don't count out Opera . . .
  47. A new way to get your favorite tools
  48. Windows Desktop Search: Now with less suck!
  49. Adobe PDF exploit generator and targeted attack info
  50. Static analysis paper
  51. Adobe (non)0-day
  52. Dear China, I can haz power now plz? okthxbai
  53. SensePost blog on arbitrary file downloads in a Juniper AX
  54. Safari "carpet bombing" Fail Open Goat Award
  55. Live.com video search!
  56. Gmail - Fail Open Goat Award
  57. Security news feed
  58. Mah Bluehat blogz - let me show you them!
  59. PayPal throws down . . .
  60. Flash NULL pointer + offset code execution . . .
  61. Hyper-V
  62. Espionage using Office documents in the news
  63. IE8 - DEP enabled by default?
  64. I feel dirty . . .
  65. Get Kraken!
  66. Apple opting into /GS, DEP and ASLR?
  67. Yet another product with 360 in the name . . .
  68. On Vista, OSX and security researchers
  69. CanSecWest Day 3 - PWN2OWN update - Vista pwnd
  70. And the Mac falls within 10 minutes on day 2.
  71. CanSecWest - Day 2 Part 1
  72. Well done Apple - Safari 0wns!
  73. Apple offering free attack surface increase to Windows users.
  74. The web is broken . . .
  75. Mass SQL injection coming to an IIS + ASP server near you . . .
  76. I'm closing out CanSecWest 2008?
  77. Walmart drops Linux PCs from stores
  78. From China with love . . .
  79. Jonathan Morrison's kernel blog & LOST
  80. Hypervisor based rootkit detection?
  81. The fragility of the Internets - as demonstrated by Pakistan / Youtube
  82. Practical application of the concept behind photon sails / laser elevators
  83. Cold boot attacks on encryption keys
  84. SWI Defense in the news
  85. Asus / Apple / Wii pwnage & The press starts to wonder if maybe it's time to consider 3rd party apps dangerous?
  86. SecureWorks / Team Cymru solve the mystery of the Mega-D Trojan
  87. New measure of code quality
  88. The Stig
  89. Massive Linux / Apache hacks spewing forth browser based malware
  90. GMER discovers a new MBR based rootkit in the wild . . .
  91. Bill's last day . . .

2007 96

  1. OSX vs. Vista security
  2. Notable changes in Vista SP1
  3. Pwning Second Life users via QuickTime
  4. Fly with the Blue Angels?
  5. CNet 3 part series on Securing Microsoft (complete list of articles)
  6. Patches . . .
  7. How your CxO will get owned next year . . .
  8. The Firefox security myth . . . busted.
  9. CNet 3-part series on securing Microsoft.
  10. How your mom will get owned next year . . .
  11. Geekonomics?
  12. Is your Mac laughing at you?
  13. Cisco Telepresence Magic
  14. The second coming of Zune . . .
  15. Overclocking the new 45nm Intel chips to 4Ghz?
  16. Hushmail - not so quiet after all!
  17. Click-through cloaking (coming to a hacked site near you).
  18. Apple patches 7 more QuickTime vulns . . .
  19. Happy Birthday Vista!!!
  20. US-CERT weekly vulnerability summary, Vista, the meaning of life . . .
  21. Taiwan vs. China (he said / she said?)
  22. I make it me?
  23. Microsoft and double standards
  24. Wherever you go - there you are! (If you own a Mac with Leopard)
  25. LOLCODE.NET
  26. It begins . . . (PDF spam run)
  27. Microsoft Security Intelligence Report v3
  28. Elcomsoft password cracking - now 25x faster?
  29. Getting Microsoft Updates offline . . .
  30. Redhat fixes their 1,000th CVE
  31. Microsoft now has two open source licenses!
  32. Apple to release Vista soon
  33. Unbreakable - good Lord . . .
  34. Russian Business Network
  35. Yes Virginia, they really are out to get you . . . (Spear phishing for fun and profit)
  36. Vista updates
  37. Bluehat - favorite quote && H.D., Metasploit and the iPhone
  38. Another one bites the dust . . .
  39. Darth Apple and the iPhone?
  40. Halo - the future of gaming?
  41. MIT gets their Halo3 fan-boy groove on!
  42. Targeted Attacks continue . . .
  43. MMPC on Storm Worm
  44. Bill Gates
  45. Adobe 0-day . . .
  46. The State of the Intertubes (according to Arbor)
  47. Uninformed.org
  48. Indeed we do . . .
  49. Office 2003 SP3 RTW's!!!!
  50. Cool shirt - I want one. :)
  51. Blue Monster - Change the world or go home!
  52. Sweep the leg Johnny!
  53. Hacked by Chinese? (again)
  54. I can feel it coming . . .
  55. NSA@Home
  56. Mr. Bean - 733t h4x0r!!??
  57. Google blogger attacks?
  58. Synthing the Space Shuttle
  59. Hybrid sleep in Vista and S0 - S5 explained
  60. NBC sends a reporter to DefCon - hilarity ensues
  61. Our response to Atsiv . . .
  62. eWeek article on Atsiv / x64 driver signing
  63. Haute Secure
  64. New Kernel mode threats
  65. Flash and true irony
  66. Microsoft.com seem faster to you lately? :)
  67. Hacking Vista - eEye style
  68. TechReady 5 drama . . .
  69. PC World reads me?
  70. JRE pwnage
  71. Iowned
  72. Glass houses . . .
  73. Strange DLLHost crashes on Vista
  74. Sytem (Code) Integrity audit logging
  75. ARP spoofing for fun and profit
  76. I'm in ur security conference stealin' all your bandwidths . . .
  77. DON'T install the Safari for Windows beta (unless you LIKE getting 0wn3d)
  78. Linux car finishes dead last at Indy 500
  79. Google - Evil - OpenDNS
  80. Microsoft Update suckage
  81. Random articles - 3rd party apps and Google advertising social experiments
  82. "Free Public WiFi" worm?
  83. 2007 FIRST conferrence featured at the FIA GT race at Silverstone 5/6/2007
  84. 2007 FIRST conference
  85. VBootkit vs. Bitlocker in TPM mode
  86. ANI vuln - Please enable DEP on IE7 on Vista yesterday.
  87. Vista @ 90 days . . .
  88. Vista security portal
  89. Wanted: Security Czar
  90. The great UAC debacle
  91. JimAll on Vista
  92. Vista test drive!!
  93. Precognition in Vista
  94. Exposure exposed!
  95. Apple's up . . .
  96. Hak5 produces 120GB LM hash rainbow table - complete charset!!!

2006 8

  1. DoD Battles Spear Phishing
  2. Secunia Software Inspector
  3. Microsoft's New Identity - Secure OS Vendor?
  4. Random Vista Security Factoid Du Jur
  5. Ever found malware hiding in the "Default User" profile on Windows? Ever wonder how it got there or why it was there?
  6. OSX Deepsight Security Report
  7. Web Attacker Toolkit - From Russia with Love
  8. I'm back (again(again))

2005 13

  1. New security features in VC2005
  2. So what is it – ya do here? Allow myself to introduce . . . myself (again).
  3. Robert Hensing’s Incident Response Blog – Reloaded
  4. New Rootkit Revealer available!
  5. New weapon in the war - F-Secure reveals Blacklight - an anti-rootkit tool - try it today (remember to rename it <G>)
  6. Rootkit Revealer vs. Hacker Defender - How the miscreants are defeating Rootkit Revealer and how to fight back
  7. Rootkits - revealed!
  8. Microsoft does 733t speak . . . it's like an SNL skit - only funnier.
  9. The MSRC @ RSA - the webspace
  10. Windows Server 2003 spanks Red Hat's monkey?
  11. Introducing Tim 'The tool man' Rains - PSS Security Techlead, fellow blogger, maintainer of WOLFv2
  12. Anatomy of a WINS server hack (MS04-045) . . .
  13. Miscreant hiding techniques: Would the real explorer.exe please stand up? And the relevance of 1979 when doing searches . . .

2004 1

  1. The future of passwords?