Why I go to BlackHat

June 27, 2008 by tk

Although I am not part of the “Black Hat Bloggers Network” (I wasn’t even aware that there was one) I noticed this post over at www.stillsecureafteralltheseyears.com (which also wins the award for longest security related domain name) titled - Why go to Blackhat?

Read the rest of this entry »

Shared RSS Syndication

June 12, 2008 by tk

I’ve added a new feature here. Sometimes I find things that are interesting, but off topic for the blog. (they fall outside of the technology/hardware/hacking realm or are re-hashes of other people’s work) In order to still share these little gems, but keep the pages here on-topic I’ve added the “My Shared RSS” section on the right-hand sidebar. These are listings of items that I have marked as share-able in my google RSS feed list. Many of them will be quite intriguing little things I’ve found, but have decided (for one reason or another) are better being linked to off site, than me opening a post here on… I hope you will check them out and enjoy…

Bigfoot on Mars?

June 1, 2008 by tk

A funny photo indeed… This latest image from the home page of the NASA Phoenix mission reveals the secret evidence many people have hunted for clues on for so many years. Where is Bigfoot?

Apparently we now know why he has avoided detection for so long. He is obviously an interplanetary travel with a primary residence on Mars and a vacation home here on Earth. This image provides unmistakable evidence of the fact that he (or she, to be fair, since we are pretty sure they do not reproduce asexually) has been on the planet the whole time and has obviously come by to check out the latest lander craft and possibly to help NASA make some repairs here and there. (I mean, come on, do you really think they can fix these landers all the time from the control center, just fiddling on their keyboards)

I can’t wait to see the stories once the *real* conspiracy theorists get ahold of this one…

Schematic Design Software

May 21, 2008 by tk

I was all ready to publish an entry last night on how horrible most of the PCB design tools I’ve used are, when today I stumbled upon the new version of Cadsoft Eagle v5.0 and OH MY! did they ever fix alot of the headaches from before.

The interface has been polished up, non-standard buttons have been changed and functionality is much more intuitive. It still has its quirks from what I have seen, but the new version shows a real leap in their development of the product. I was able to finally put together some designs that had long sat on the shelf due to my inability to figure out certain bugs in either how the software was designed, or how I was trying to use it.

I strongly suggest going and checking it out. I will be publishing another longer article soon on some new things I’ve been working on and what functionality in the new version helped me accomplish those goals. Look for the info as soon as I can get them together…

DEP and ASLR Identification

May 5, 2008 by tk

I’ve learned recently that good security testing is all too often a shadow of a larger skillset - good debugging knowledge. Because of this I’ve been following many more of the blogs of individuals on the Windows debugging and advanced troubleshooting teams and learning more about the tools they use to peer deeply into applications and systems.

Two of the programs which come up often in their troubleshooting are WinDBG and Process Explorer. Having used each extensively over the last few months I noticed a cool new (to me at least) feature in Process Explorer tonight and thought I would share it - this is the DEP and ASLR status tags.

To enable the identification tabs right-click on the column headings in the main window. This brings up a menu which allows you to select the appropriate tags…

Now you can quickly identify running programs having these features enabled. This is very similar to the information from David Maynor’s LookingGlass utility. (whose link seems to come and go in my bookmarks)

I prefer to have less applications that are more universally powerful than having to download a hundred different software utilities, each with specialized tasks, but YMMV.