Random
GDBOP website malfunctioning … again
I just found out, with no surprise, that the website of GDBOP (Bulgarian government cybersecurity team) hosted on http://www.cybercrime.bg does not function properly … again. The reason is that the the front-end app cannot connect the back-end MySQL server. Of course the error is not handled securely :). I wonder how long it will take…
Teach your students to cheat
In one of his latest posts Bruce Schneier refers to an interesting article authored by two Marylend University professors. They carried out interesting examination for their information security course. The idea was to provoke their students creative and out of the box thinking to break the american education system stereotypes. In order to pass the…
Udacity – nice online computer science courses
A post outside the security field … A friend of mine sent me a link to the http://www.udacity.com/ (Thanks, Momcho!) and after I took a look and spent some time with the platform decided that it is a good idea to blog about it. Udacity is yet another site with online computer science courses and yet different…
Microsoft amendments in their “immutable” security laws
Version one of the Microsoft “immputable” security laws can be found here: http://technet.microsoft.com/en-us/library/cc722487.aspx. Currently Microsoft made some amendments and published version 2 of their immutable lows. And the new version can be found on http://technet.microsoft.com/en-us/library/hh278941.aspx. So those laws apparently were not so immutable. I started wondering what else from the Microsoft category “immutable” is susceptible…
Imaginary Marching Band – freaky!
One of the things I really enjoy are DIY things and admire ppl, coming with great ideas and making our life more colorful. Here is an example – http://www.imaginarymarchingband.com/. Those guys are making small prototypes of instruments so you can play you’re favorite marching band instrument only by pantomiming with your hands. I really enjoyed…
First look at the Zeus source code – leak 2
So the first thing I did was to search the source code to see which banks had been targeted and for my surprize – one of the Bulgarian banks was targeted – ProCredit. The link to the e-banking login page thou is invalid, but the name of the password field is correct 🙂 Stay tuned…
Back to life
It was some time since I was not able to blog, but now online again – welcoming myself back …duh
- Wikirebels – wikileaks documentary Новото документално филмче за Wikileaks
I accidentally found a new Wikileaks documentary called Wikirebels and since it was nice made i decided to blog it. The movie itself doesn’t say anything new but is really good induction for people that didn’t followed the whole story (if any) or are missing the big picture. Enjoy! http://topdocumentaryfilms.com/wikirebels/
Plug computer 🙂
While I was reading the shallow description of the plugbot (http://theplugbot.com/about) I was wandering if those guys are making the hardware itself. A bit of googleing answer my question – pretty sure they don’t. There is a separate project called Plugcomputer (plugcomputer.org) that gives an answer to most of my questions regarding the device. The…
Mozilla launches bug hunting program
Bug hunting programs seem to gain more and more popularity those days. The new kid on the block is the Mozilla one, which official guidelines can be find on https://www.mozilla.org/security/bug-bounty.html So for all of you hunters I would like to wish you good luck and happy hunting 😉 Enjoy!
Recent Posts
Tags
bruteforce bug bounty bug hunting Burp Suite d3 data leak data recovery dictionary entropy pool fix fuzzing hackaday image processing Journalistic tools log analysis malware mindmap online courses Practical Reverse Engineering randomness sandbox skype SQL injection SSL technical visualisaiton visualisation Vulnerability Management Wanda the fish Zeus