ForAllSecure

OCTOBER 13, 2020

Primarily, where we do security audit and analysis for software vendors. And along with that we’ve also learned a lot about browser security. No matter how strong we build our browsers, that does not prevent hackers from trying to break new things. But once I added that, I could then surf the web -- all 500 websites of it.

Open Source 52

Open Source Google Software Software 52

Vox

NOVEMBER 28, 2022

AI gets smarter, more capable, and more world-transforming every day. Here’s why that might not be a good thing. In 2018 at the World Economic Forum in Davos, Google CEO Sundar Pichai had something to say : “AI is probably the most important thing humanity has ever worked on. I think of it as something more profound than electricity or fire.”

System 122

System Research Training Artificial Intelligence 122

ForAllSecure

MARCH 24, 2020

For ForAllSecure, I’ve been focusing on finding bugs in OpenWRT using their Mayhem software. To install or update software on an OpenWRT system, a utility called opgk is used. I found this vulnerability initially by chance when I was preparing a Mayhem task for opkg. from which Mayhem is serving. from which Mayhem is serving.

Network 59

Network System Data Software 59

ForAllSecure

MAY 26, 2020

Deserialization of untrusted input is a common attack vector, making both the MITRE top-25 most dangerous software errors. They were both reported in March 2020 to the cereal developers as part of our responsible disclosure. Introduction. Cereal is a light-weight, highly used, general-purpose serialization library written in C++.

Data 52

Data Examples Applications Development 52

ForAllSecure

MAY 26, 2020

Deserialization of untrusted input is a common attack vector, making both the MITRE top-25 most dangerous software errors. They were both reported in March 2020 to the cereal developers as part of our responsible disclosure. Introduction. Cereal is a light-weight, highly used, general-purpose serialization library written in C++.

Data 52

Data Examples Applications Development 52

ForAllSecure

MARCH 24, 2020

For ForAllSecure, I’ve been focusing on finding bugs in OpenWRT using their Mayhem software. To install or update software on an OpenWRT system, a utility called opgk is used. I found this vulnerability initially by chance when I was preparing a Mayhem task for opkg. from which Mayhem is serving. from which Mayhem is serving.

Network 52

Network System Data Software 52

Cloud Musings

DECEMBER 20, 2012

Custom software will hit the cloud. Jackson , NJVC vice president and general manager, cloud services, and Landis, non-commodity custom software is beginning to move to the cloud in a. software developers will turn to PaaS for integrating disparate Web. software developers will turn to PaaS for integrating disparate Web.

Cloud 162

Cloud Data Center Virtualization Government 162

mrc's Cup of Joe Blog

SEPTEMBER 19, 2019

In this article, we explore the principles that modern web developers must follow when building successful applications. photo credit: geralt via pixabay cc What makes a “productive developer?”. The answer isn’t as obvious as it might seem. Generally speaking, productivity correlates directly with speed. With developers, however, it’s different.

Applications 66

Applications Development Architecture Web Developers 66

ForAllSecure

MAY 26, 2020

Deserialization of untrusted input is a common attack vector, making both the MITRE top-25 most dangerous software errors. They were both reported in March 2020 to the cereal developers as part of our responsible disclosure. Introduction. Cereal is a light-weight, highly used, general-purpose serialization library written in C++.

Data 52

Data Examples Applications Development 52

ForAllSecure

MARCH 25, 2020

For ForAllSecure, I’ve been focusing on finding bugs in OpenWRT using their Mayhem software. To install or update software on an OpenWRT system such as an OpenWRT web server, a utility called opgk is used. I found this vulnerability initially by chance when I was preparing a Mayhem task for opkg. from which Mayhem is serving.

Network 52

Network System Data Software 52

Future of CIO

NOVEMBER 3, 2013

From strategic planning to resource allocation and funding, to program management, to rewards and recognitions, the comprehensive innovation management with platform support, and on-site program management can help an organization build a strong innovation program from the ground-up. Good ideas nearly never emerge spontaneously.

Tools 64

Tools Program Management Government Programming 64

ForAllSecure

MARCH 24, 2021

How could open source software be vulnerable for so long? Years ago, I was the lead security software reviewer at ZDNet and then at CNET. That meant I tested the release candidates -- not the final product you’d buy in the stores - for consumer-grade antivirus programs, desktop firewalls, and desktop Intrusion detection systems.

Open Source 52

Open Source Operating Systems Software Software 52

ForAllSecure

MARCH 24, 2021

How could open source software be vulnerable for so long? Years ago, I was the lead security software reviewer at ZDNet and then at CNET. That meant I tested the release candidates -- not the final product you’d buy in the stores - for consumer-grade antivirus programs, desktop firewalls, and desktop Intrusion detection systems.

Open Source 52

Open Source Operating Systems Software Software 52

ForAllSecure

APRIL 22, 2021

In a YouTube video he shares the night he lost his entire apartment in the darkness, and is surprised that it stayed dark until he killed the program. Vamosi: I once lived near a large urban park. And as a consequence I inherited a family of raccoons living into my cottage. Funny thing.

Internet 52

Internet Research Security Tools 52

ForAllSecure

APRIL 22, 2021

In a YouTube video he shares the night he lost his entire apartment in the darkness, and is surprised that it stayed dark until he killed the program. Vamosi: I once lived near a large urban park. And as a consequence I inherited a family of raccoons living into my cottage. Funny thing.

Internet 52

Internet Research Security Tools 52

ForAllSecure

AUGUST 22, 2020

Vamosi: That's Mike Walker, former program manager for DARPA Cyber Grand challenge in 2015 at DEF CON 23 no less Walker announced the first Cyber Grand Challenge would be held the following year in that same ballroom at the Paris Hotel and Casino in Las Vegas, Nevada. This time it would be played autonomously, entirely by machines.

System 52

System Research Security Operating Systems 52

ForAllSecure

AUGUST 21, 2020

Vamosi: That's Mike Walker, former program manager for DARPA Cyber Grand challenge in 2015 at DEF CON 23 no less Walker announced the first Cyber Grand Challenge would be held the following year in that same ballroom at the Paris Hotel and Casino in Las Vegas, Nevada. This time it would be played autonomously, entirely by machines.

System 52

System Research Security Operating Systems 52

ForAllSecure

AUGUST 21, 2020

Vamosi: That's Mike Walker, former program manager for DARPA Cyber Grand challenge in 2015 at DEF CON 23 no less Walker announced the first Cyber Grand Challenge would be held the following year in that same ballroom at the Paris Hotel and Casino in Las Vegas, Nevada. This time it would be played autonomously, entirely by machines.

System 52

System Research Security Operating Systems 52

The Verge

JANUARY 26, 2022

For someone in the business of deception, she stood out: she was unusually tall, wide-hipped, with a mane of light blonde hair and a wardrobe of jackets embroidered with band logos, spoils from an adolescence spent as an infamous rock groupie. Susan found her way into the hacker underground through the phone network. Susan followed suit.

System 97

System Social Engineering Conference 97

ForAllSecure

AUGUST 26, 2021

It's the software that emulates a physical computer virtually to run programs operating systems stored data connected networks and do other typical computing functions. Except, everything is done in software. And if you're like me, you already know that software can have vulnerabilities in it. So it's a race.

Research 52

Research Virtualization Microsoft Cloud 52

ForAllSecure

JUNE 21, 2022

Kyle Hanslovan CEO of Huntress Labs joins The Hacker Mind to discuss recent LoL attacks, specifically the Microsoft Follina attack and the Kaseya ransomware attack, and how important it is for small and medium sized businesses to start using enterprise grade security, given the evolving nature of these attacks. Think of it as a Trojan horse.

Operating Systems 52

Operating Systems System Microsoft Examples 52