hiredhacker.com

The past few months haven’t exactly been slow for me, hence the lack of new content here. There have been allot of interesting stuff to happen over the past 2 months, I will try to point out the ones I found most interesting. In no particular order (well, except for Mark Dowd’s inhuman paper, that needs to go first):

Application-Specific Attacks: Leveraging the ActionScript Virtual Machine, Thomas Ptacek from Matasano has some nice posts about Dowds paper here and here. Come to think of it, just read the Matasano Blog.

Retsaot is Toaster, Reversed: Quick ‘n Dirty Firmware Reversing. Yea, another matasano post. Once you read that your going to want to get this: BlackBag 0.9.1

For those who still doubt the seriousness of bugs like XSS and CSRF, check out: uTorrent Pwn3d. With out rehashing Rob’s post, he used CSRF to gain control of a machine.

The Bluehat talk A Resident in My Domain has sparked quite a few posts about the details of the attack, and it looks very interesting/serious.

There is of course always OpenRCE.org and sla.ckers.org, and if your in the Boston area or are just fans of Dropkick they will be playing at all the Red Sox minor league parks with the Bosstones, more info here.

Over the past few days I have been experiencing some intermediate problems with my hosting provider. They have been short term, random, and not that severe but none the less it pisses me off and annoys the shit out of me. Needless to say I will be switching providers over the weekend, so if there is any real downtime, thats probably me and I apologize in advance.

If anyone has any recommendations I am open to suggestions and feedback, if not for me, I am sure other people will find it helpful.

It’s been a long time coming, but we are finally getting around to upgrading hiredhacker.com. Over the next week or two you will notice some small and not so small changes happening.