Errata Security

Tuesday, April 29, 2008

George Ou is back...

George's new blog: http://www.formortals.com/

By David Maynor

No comments:

Errata Security On Twitter

Robert Graham (@ErrataRob)
David Maynor (@Dave_Maynor)

Popular Posts

You are committing a crime right now

Are you reading this blog? If so, you are committing a crime under 18 USC 1030(a) (better known as the “ Computer Fraud & ...
How The Intercept Outed Reality Winner

Today, The Intercept released documents on election tampering from an NSA leaker. Later, the arrest warrant request for an NSA contractor ...
SideJacking with Hamster

NOTE: you can download the program at http://www.erratasec.com/sidejacking.zip ; make sure to read the instructions. Others have done a be...
Extracting the SuperFish certificate

I extracted the certificate from the SuperFish adware and cracked the password (" komodia ") that encrypted it. I discuss how dow...
That NBC story 100% fraudulent

Yesterday (Feb 5 2014) On February 4th, NBC News ran a story claiming that if you bring your mobile phone or laptop to the Sochi Olympics...
Bash 'shellshock' scan of the Internet

NOTE: malware is now using this as their User-agent. I haven't run a scan now for over two days. I'm running a scan right now ...
Bash 'shellshock' bug is wormable

Early results from my scan: there's about 3000 systems vulnerable just on port 80, just on the root "/" URL, without Host fiel...
Some notes about HTTP/3

HTTP/3 is going to be standardized. As an old protocol guy, I thought I'd write up some comments. Google (pbuh) has both the most popu...
Confirmed: LinkedIn 6mil password dump is real

Today's news is that 6 million LinkedIn password hashes were dumped to the Internet. I can confirm this hack is real: the password I use...
Notes on the Ashley-Madison dump

Ashley-Madison is a massive dating site that claims 40 million users. The site is specifically for those who want to cheat on their spouse. ...

Blog Archive

-

Awesome Inc. theme. Powered by Blogger.