jonaslejon

Memories! I was at the hacking conference HAL2001 and listening to Dug Song and Solar Designer, who were talking about their SSH timing analysis: https://download.openwall.net/pub/advisories/OW-003-ssh-traf...

Time flies

Nice tool! Will check it out. I have used jdam in the past to fuzz JSON: https://gitlab.com/michenriksen/jdam

OpenSSH 9.8p1 was released July 1, 2024 according to https://www.openssh.com/releasenotes.html#9.8p1

This was quite funny:

if name == "boring_wozniak" /* Steve Wozniak is not boring */ { goto begin }

I personally use OSSEC for File Integrity Monitoring. And it has also actually caught an intruder that modified some PHP-code on a webserver. The attacker forgot to use the prefix @ in the PHP-code so a new error message was sent to the logfile and reported by OSSEC.

You need to have a really good relationship with your ISP and get their acknowledge prior to the scanning

I don't really understand the thread. This guy X writes about the harassments and then someone replies and asks about the release versions?

Great move for transparency

Old: https://news.ycombinator.com/item?id=8216853

Since the vulnerability is in pdf.js, is the Tor Browser Bundle vulnerable?

Why is he using Google Analytics for sending the XSS?

I bought a copy. Nice book! The format of the book seems kinda odd thought. This is a screenshot from my iPad Mini with Readmill (eBook reader): https://dl.dropboxusercontent.com/u/947269/IMG_0053.PNG

Good idea. There might be a number of rules that can limit their communication with the routers (and even OOB)

The best way is to start from the beginning, in other words read "Smashing the stack for fun and profit". These technics doesn't work on current operating systems but gives to a great start http://insecure.org/stf/smashstack.html

Bootstrap 2.0 + WordPress = #win ? Anyone knows if there is any theme out there w/ Bootstrap?

Maybe add or use http://listjs.com/ ?