-
Well that about wraps that up.
-
Paul guest-blogs for gnucitizen. Essentially, the crunchy-outer-layer/chewy-center model of security is dead, has been dead for some time, and the sooner you realize it the better.
-
This is as much a note to myself to take a look at this later as it is a recommendation for forensics/recon geeks that read this blog.
-
Polymorphism in PDFs to evade signature detection. Neat!
-
Problems with random number generators. According to the article, it’s mostly a problem with using non-cryptographically secure PRNGs, however I think at it’s core, the main problem is that you shouldn’t be seeding like this.
-
Letting media files run embedded scripts… that makes a lot of sense… NOT
-
New version of WordPress is out, fixes security issues, as usual. Might want to upgrade, fellow bloggers.
-
Some thoughts and links from Halvar Flake on state/intelligence sponsored information ops.
-
Eric Monti reverse engineers a *cough* “toaster” that is apparently running VxWorks
