Monthly Archives: April 2010

Analyzing Malicious PDF Documents

So you want to get your feet wet? Grab Didier Stevens tools here: http://blog.didierstevens.com/programs/pdf-tools/ Grab malicious PDF samples here: http://www.malwaredomainlist.com/mdl.php?search=pdf+exploit&colsearch=All&quantity=50 *Be careful, these are live samples! Video Tutorial: Didier on analyzing a PDF Document: http://www.youtube.com/v/tHVi2wKCkTc You’re going to run into … Continue reading

Posted in forensics, malware, news, security | Tagged , , , , | Leave a comment

Podcast about ICANN, root dns servers, Chinese domination and more!

I try to catch the weekly NPR Technology podcast.  This week there’s an interesting segment about ICANN, VeriSign and their root nameservers, as well as China’s desire to wrestle control of the internet.  You can get the podcast here: http://podcastdownload.npr.org/anon.npr-podcasts/podcast/1019/126006147/npr_126006147.mp3 … Continue reading

Posted in networking, news | Tagged , | Leave a comment

Google & Privacy

Bruce Schneier recently posted an article about the erosion of privacy.  Specifically how the social networking sites are accelerating this “privacy decay.”  Along with attacked social networking sites he through in Google.  I just came across an interesting Forbes article … Continue reading

Posted in google, news, privacy | Leave a comment

More must have Firefox add-ons

Add-on recommendation #1: Conspiracy There’s been a lot of discussion recently about the Certificate Authority (CA) paper, “Detecting and Defeating Government Interception Attacks Against SSL” that was published.  It turns out governments could compel CA’s to issue the them(or any … Continue reading

Posted in security | 2 Comments

One more vulnerable web project….

Back in November I posted a list of intentionally vulnerable web applications for educational purposes.   You can find that list here: http://www.system7.org/2009/11/05/test-your-web-pentest-skillz/ A new one to add to the list is OWASP’s Broken Web Application Project.  There was a great … Continue reading

Posted in pentest, security | Leave a comment