POLL: 2008’s Largest Security Upset, So Far

We wanted to get a quick gauge of what our readers feel the most significant threat to the security model of our Internet community has been so far this year. Although we don’t support the idea necessarily of one-upping between researchers, realizing that this shouldn’t be a race/competition, but we do realize that there is an end result in impact across the industry and that momentum abroad can be measured.

Loading ...

August 2008
M	T	W	T	F	S	S
« Jul		Oct »
	1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

August 2008

« Jul

Oct »

Worth Reading

robert hansen [rsnake]
(sectheory)

HTTP Verb Brute Forcing - I read a few interesting posts here and here regarding brute forcing HTTP verbs. The F5 post suggested that it is possible to thwart people who are looking for what options you support by giving a

chris eng, chris wysopal [weldpond] &
christien rioux [dildog]
(veracode)

Tallying Twitter?s Application Security Best Practice Violations - If you were paying attention the last few days, you’ve probably read about the wave of attacks launched against the popular Twitter service. It started over the weekend, with a series of

spacerogue

HNN Archive Posted - I don’t really know who actually owns the Hacker News Network anymore. I own the domain now but the original content was part of the sale of L0pht to @Stake which was then sold to Symantec. At

dan kaminsky
[ioactive, inc.]

No School Like The Old School - I really need to learn to leave DNS alone DNS TXT Record Parsing Bug in LibSPF2 A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and

dino dai zovi

ARM versus x86 - At Hack in the Box in Kuala Lumpur this year, I was interviewed by Sumner Lemon of IDG about various Mac and iPhone-related security topics. One of the topics was the relative security of ARM

amrit williams

“Happiness” my new password for 2009 - Wired reports that the 18 year old hacker (age is not relevant but it always fun for the media to point out that some “hacker” is still in his teens) responsible for breaking into

dave goldsmith, jeremy rauch,
thomas ptacek & chris rohlf
[matasano chargen]

Penetration Testing: Dead But Not Really Dead. - Yah, late commentary. Sorry, been a little busy. Brian Chess kicked the hornet’s nest beautifully by declaring: Penetration Testing: Dead in 2009 with: “Death doesn’t mean

theReformed