MS10-004 and the Obsolete Conundrum

MS10-004 and the Obsolete Conundrum � No Disassemble!

Why stopping at \xff when you could simply continue with \xzz\xxx\xww ?

LOOOOOOOOOOOOOOOOOOOOOOL

Fuzzing Ninja blog: New fuzzing technic

Everything you need to know about traceroute (AND MORE!)

RAS_Traceroute_N47_Sun.pdf (application/pdf Object)

One of the big problems of static code analysis are function calls with non-static call targets. These function calls can call different target functions depending on the current program state. At first they call one function and in the next moment they might call a completely different function. Popular examples of such dynamic function calls are virtual functions (like in C ) or function pointers to callback functions.

Resolving dynamic function calls with BinNavi � blog.zynamics.com

The open source community uses this argument to assert that open source software is more secure than proprietary software. Advocates of proprietary software attack this argument on a variety of grounds, but here’s a little secret: Raymond was right. One cannot deny the logic. In fact, it is a tautology. If you assume that all individuals have a non-zero probability of finding and fixing a bug, then all you need is “enough” individuals. A million monkeys banging on a million keyboards will eventually produce Twelfth Night. Mathematically, the many-eyeballs argument, and the million-monkeys argument are equivalent.

Thinking About Security : Microsoft’s Many Eyeballs and the Security Development Lifecycle

Soulja boy tell'em!

Accuracy_and_Time_Costs_of_Web_App_Scanners.pdf (application/pdf Object)

lon and Core 2 Duo multiprocessors are socket-compatible with uniprocessor variants, so an expensive dual socket motherboard is no longer needed to implement an entry-level SMP machine. It should also be

Symmetric multiprocessing - Wikipedia, the free encyclopedia

VirtualAlloc + WriteProcessMemory + CreateThread in Excel == Code Execution

Excel with cmd.dll & regedit.dll � Didier Stevens

Really, glibc just added this check recently.....

EM_386: Glibc 2.11 stops the House of Mind

Anti-SEHOP stuff

sehop_en.pdf (application/pdf Object)