-
“Wat Behaviour” in Programming Languages – Security Impact /ht @jimfinnis #EPIC #MUSTWATCH #SHORT #WAT
Via Jim I discovered this four minutes of delight: …and the mid-section about Javascript behaviour is relevant to WAF bypass (previously, previously) – regarding which there are many presentations and blog posts on the web, but I still delight in this sort of thing so here are a couple of extracts: From http://www.slideshare.net/nethemba/bypassing-web-application-firewalls From http://security.bleurgh.net/javascript-without-letters-or-numbers…
-
BBC – dot.Rory: Cyberwar or cybermirage? # some sanity from @BBCRoryCJ #cyber
One to add to the Decyber page – extract from: BBC – dot.Rory: Cyberwar or cybermirage? My emphasis: But hold on a minute – are we now in danger of overhyping all of this? Recently I spent a day at a conference listening to some very clever people discuss these issues in grave terms. I can’t name them because…
-
#THIS: @JeffJarvis angrily *eviscerates* the BBC *on-air* for whipping up “Crap, BS” hacking story #MUSTWATCH
Firstly, disclosure: from April I will have an interest in Facebook’s wellbeing* but I don’t think that skews my perspective on this matter; I have a long and documented history of laying into politicians and journalists who are swept up in the mythology of cyberspace and the fearmongering around it. But never before have I…
-
Imperial Model B Typewriter, circa 1915..1919
Inherited from my maternal grandfather, eventually… Mac keyboard for comparison.
-
“If your education is to be used to shut up, placate, downplay, sweet talk, then you are better off being a carpenter”
http://www.spectator.co.uk/features/8842941/i-may-be-killed-if-i-write-this/ ‘I may be killed if I write this’ Lars Hedegaard, founder of Denmark’s Free Press Society, speaks from a secret location after an attempt on his life […] But what of those who say, ‘Well, he ought to have known. This is what happens if you upset or provoke people’? ‘I don’t want to brag…
-
Police Raided a Guy’s House Because He Posted a Picture of a Toy Mortar on Facebook
It’s prettymuch a miracle he wasn’t shot. The British police officers that raided Ian Driscoll’s Tewkesbury home found the mortar they were looking for. They just didn’t expect it to be plastic. Or a model. “The Action Man looked a bit like me, so I decided to put it as my Facebook picture,” Driscoll, who…
-
Are you in Law Enforcement? Do you have problems correcting erroneous CCTV timestamps? There’s an App for that!
My friend Dario has written one: https://itunes.apple.com/gb/app/clock-check/id586663057 Clock Check — By Dario Persechino Description Clock Check is an application designed to aid CCTV engineers and Law Enforcement personnel when calculating the time discrepancies on CCTV systems. The app calculates the difference between a ‘real time’ and a CCTV ‘system time’. This difference can then be…
-
1995, USENIX Security: Marcus Ranum pulls out a Hasselblad, a ringflash and asks me to sit for a portrait
Pose is as the photographer wanted. Do what the man wants, he has the camera. My print arrived in the post a few weeks later. Subsequently he did a whole pile of other security geek portraits; where they are I don’t know, but the one of Bob Morris Sr is epic, and spattered around the…
-
Doris Lessing on Beauty, Entitlement …
…and, perhaps, Hedonism. From the essay A Beauty, by Robert Boyers: Useful, perhaps, to recall something from Doris Lessing which may have some bearing on the question of beauty. Lessing noted what she called “a basic female ruthlessness” in herself, and went on to disdain the notion that gender is, in its essence, “socially constructed.”…
-
Burp Suite Professional now supports interception and analysis of #Tor websites & hidden services via SOCKS /ht @runasand @torproject @portswigger
I predict a rapid and significant uptick in Government purchases of Burp Suite licenses: http://releases.portswigger.net/2013/02/v1505.html Burp Suite Professional – Release Notes Friday, February 15, 2013 v1.5.05 This release contains a number of feature enhancements and bugfixes, including: * The SOCKS proxy support now has an option to perform DNS lookups remotely via the proxy. This…
-
1) MakerGeek 2) Pretty LEDs 3) Arduino 4) Multiuser Sex Toy 5) Intellectual Property & Patent Argument
All wrapped up in one colourful package: http://www.toymakerproject.com/hammer/ I’d mark the page NSFW except that I don’t see an obvious reason for it to be designated that way. Don’t forget to click through to the YouTube demo.