The Shadow File

This is the third part in a multi part tutorial on using the Bowcaster exploit development framework to build a buffer overflow exploit. He...

This is the second in a multi-part tutorial on developing a buffer overflow exploit using Bowcaster.  Here's Part 1 . In part 1, we ha...

This is the first in a multi-part tutorial on developing a buffer overflow exploit using Crossbow  (now called Bowcaster), which I released ...

UPDATE: Crossbow has been renamed to Bowcaster. It turns out "Crossbow" is a popular word.  Who knew?  A company in California has...

I love hacking.  I love vulnerability research.  I love software exploitation.  I love finding creative ways to subvert control of an applic...

With all the excitement regarding UPnP vulnerabilities lately, I though I'd write up this one I found a few weeks back.  I had kind of f...

Update:  I received a personal communication from Mr. Flemming.  He makes the case that what I believed to be a subtextual threat was not in...

[NOTE: This was going to be a post about how to relocate a shared library that is loaded using LD_PRELOAD such that a program's linked l...

I decided to POP out all my Yahoo mail into my Google Apps account so I could stop paying for Yahoo's "premium" service (WTF, ...

Here are some long-form articles I've enjoyed this year. The Hazards of Nerd Supremacy: The Case of Wikileaks (theatlantic.com) The...

I was using up all of my accumulated credits on Audible.com just now, and realized I've listened to several great audiobooks over the la...

[Disclaimer: I don't know crap about javascript, other than what I pieced together from the 'tubes.] I read something somewhere (I ...

Update : My friend, Chad, creator of Pear Note , has an interesting perspective that is much more in-depth than what I have written. While...

We all know there are shady marketing/image promotion firms that do things like post fake reviews on Amazon.com and others. However, I'...

I've want to put down in words a few loosely related thoughts on controversy regarding Apple's policy of not allowing Adobe Flash Pl...

I needed to install Ubuntu Netbook Remix (UNR) in a VMware Virtual Machine so that I could try to reproduce a bug. It was kind of an asspai...

I've been running my iPhone jailbroken for a couple of weeks. At first I felt dirty about having callously cast aside many of the legit...

I hate to admit it, but GEICO commercials have a pretty good track record for featuring good pop music. Whether it's 3 Doors Down , Roy...

I just discovered that Leopard's Spotlight does math. Try it. Bring up spotlight with ⌘ +space . Then start typing something like 7pi*...

Here are a few handy aliases that I keep in my .bashrc in OS X: alias cppwd='eval "echo `pwd` | tr -d \\\\n | pbcopy"' Th...