Monthly Archives: May 2011

True Cost/Benefit Analysis of Online Privacy

I came across an interesting article regarding online privacy.  It presents surprising research arguing the advantages of online advertising may actually outweigh the costs including identity theft. Do you think privacy advocates arguments are flawed?  Find out for yourself…. Applications … Continue reading

Posted in news | Tagged | Leave a comment

Recent WordPress vulns and the Open Source Vuln DB

There’s been too many WordPress vulnerabilities for my liking.  Fortunately they seem to be quick to patch but software updates are always a pain. How long before everyone starts to adopt Chrome’s auto update feature? Luckily, I’m a fan of … Continue reading

Posted in news, security | Tagged , | Leave a comment

LastPass & DropBox breach thoughts

LastPass, the online cloud based password manager, and Dropbox, the cloud based storage service, both reported possible security concerns.  A dropbox vulnerability(?) was discovered where an attacker with physical access to a PC can steal a certain config file and … Continue reading

Posted in news, security | Leave a comment

OWASP Appsec Tutorial Series

I don’t remember where I found these links —- researching White Hat security I believe after reading an entry in Grossman’s blog, don’t quote me though… Anyways I thought the videos below are valuable if you’re into appsec for a … Continue reading

Posted in news, security | Leave a comment

Microsoft Office vs. OpenOffice: Vulnerabilities compared

There’s an interesting article in the H online discussing vulnerability trends between the two largest office productivity suites, Microsoft and Oracle’s OpenOffice.  This allows for an interesting security comparison between similar commercial and open source software. What may be more … Continue reading

Posted in news | Leave a comment

Hacking to pwn a cop car

My boy Kevin Finisterre recently made headlines while doing a penetration test on a city’s infrastructure. (Kevin and I knew each other from past lives) It turns out Kevin discovered a way to access video dumps from a police dash … Continue reading

Posted in news, pentest, security | Leave a comment