My Security Planet » Vodun.org » April 2007

Feeds

13620 items (0 unread) in 75 feeds

• Jeremy Zawodny's blog
• Mozilla Webdev
• Transcendental Technical Travails
• Ian Bicking: a blog
• Hackosis

WebSecurity

• Watchfire Application Security Insider
• BlogSecurity
• sirdarckcat
• Google Online Security Blog
• CGISecurity.com: Your Web Site and Application Security Resource
• Switch/Twitch
• mybeNi websecurity
• cat slave diary
• SecuriTeam Blogs
• Curiouser and Curiouser
• Alex's Corner
• Billy (BK) Rios
• Chris Shiflett
• christian's weblog
• funkatron.com
• GNUCITIZEN
• The Spanner
• hackademix.net
• Ruby on Rails Security Project
• It's a shampoo world anyway
• Web Security Blog
• ha.ckers.org web application security lab
• Yet Another Infosec Blog
• PHP Security Blog
• Security Thoughts
• Sunnet Beskerming Security Advisories
• Disenchant's Blog
• Sylvan von Stuppe
• Larholm.com
• The Turkey Curse
• Jeremiah Grossman
• Anurag Agarwal - Application Security Evangelist
• Ivan Ristic
• deep inside | security & tools
• omg.wtf.bbq.
• BlueHat Security Briefings
• Tactical Web Application Security
• .:Computer Defense:.

Security

• tssci security
• Plynt Penetration Testing Blog
• Michael Howard's Web Log
• Security Retentive
• BindShell.Net
• Dominic White's .tHE pRODUCT
• SecurityFocus News
• Justice League
• Schneier on Security
• Rational Survivability
• terminal23
• 1 Raindrop
• hiredhacker.com
• Matasano Chargen
• Security Vulnerability Research & Defense
• Michael on Security - Musings on Information Security
• Fortify blog
• The Art of Software Security Assessment
• GDS Security Blog
• Vodun.org
• Robert Penz Blog
• Mark Curphey - SecurityBuddha.com
• Liminal states
• Security Ripcord
• ModSecurity Blog
• IBM Internet Security Systems Frequency X Blog
• Suspekt...
• extern blog SensePost;
• Zero in a bit

SEO

• SEO BlackHat: Black Hat SEO Blog
• busin3ss.name

Tools

• Opensourcetesting.org News

Vodun.org

• 

  Forgetting Things

  Posted: April 27th, 2007, 5:56pm CDT

  Tags:    [edit]

  Knowledge is of no value unless you put it into practice. -- Anton Chekhov

  Recently it's come to my attention that I've not done very much C in the past two years. So much so that I've forgotten a good bit of it. To restore my rusty knowledge I'm planning on putting my notes from K & R and Programming Linux By Example: The Fundamentals by Arnold Robbins on this blog as a series of articles. I'm on call this weekend so I can't really go out so the first few chapters of K & R will probably end up on here soon.

• 

  This is Great

  Posted: April 24th, 2007, 11:18pm CDT

  Tags:    [edit]

  Over at Matasano's Blog they have an article on how to identify potentially exploitable conditions on OS X using CrashReporter.app and Malloc. This is a great introduction and I didn't realize how easy it was to make CrashReporter.app more verbose. I've been looking through the log files all this time.

• 

  The Network As An Indicator

  Posted: April 19th, 2007, 1:46am CDT

  Tags:    [edit]

  The Idea

  A year ago this was posted about the Iraqi IP space. I found myself revisiting the page today and it got me to thinking -- how does the state of the network correllate to the conflict in Iraq? The network obviously requires power. So I should be able to get an estimate of the state of the power grid by simply checking across all IP blocks that were listed in the previously mentioned link.

  How to Determine if This is True?

  1. Acquire a list of IPs in Iraq.

     You can use the list in the article or pull it down from [www.ipdeny.com]

  2. Geolocate those IPs as best as you can

     You can pull this data from a number of sources.

  3. Group IPs into known regions / cities of interest
  4. Ping sweep the IPs in groups of cities marking hosts up / hosts down
  5. Repeat ping sweeps and delete / add new IP blocks if necessary and repeat for n weeks.
  6. Correlate data with estimates of outages from sources like the UN

  As an added benefit you can try to correlate dates of your sweeps with various news articles and military actions.

• 

  OS X Hardening Guides

  Posted: April 16th, 2007, 4:01pm CDT

  Tags:    [edit]

  OS X has always been an interesting to me. It's almost unix but not quite and unique enough under the hood that it bears looking into. For years I've been meaning to get off the user only side of OS X and start getting into the internals of the beast. As a first step I'm looking at hardening guides.

  So far I've found

  • Cosaire's 10.4 Hardening Guide
  • NSA Hardening Guide for OS X 10.4

  Update:Found another OS X hardening guide here cannot remember the original link but I think I got it through SANS.

  If you have another guide let me know.

• 

  Unified Output File API in python

  Posted: April 10th, 2007, 2:42am CDT

  Tags:    [edit]

  So after reading this post. I thought, "Hell I'd like something like that in Python". So I ported the Unified file API from Ruby to Python. Feel free to send any comments my way.

  Note: it's not tested yet but hey this is open source so release early and release often.

  unified.py