August « 2011 «

I used to think LinkedIn was a decent site for making business connections and networking yourself. Over time, I have come to find that it has offered my no value in any way shape or form. One of the key points I liked about it, was its somewhat decent privacy settings, where only what you want shown, would be visible on your sites profile, while approved contacts could see more information and contact you if they were on your LinkedIn list. The ability to block (Read More…)

Apparently there is a XSS flaw in the latest version of wordpress. I’m not sure its exclusive to the latest, as I’ve not got an older install to test against, but do have some older source files to compare, and doesn’t look like there was any sanitizing in the post process for any of the form fields. At least, not from what I had on file. So, how does one fix this when there is no current patch.

As suggested by other blogs making the rounds, you can turn comments off all together until wordpress puts out a patch. That is, unless you wanted to fix it yourself, temporarily, (Read More…)

The title for the video link was “wake up call for Congress” but much better title is wake up call for Americans. With nations around the world rising up against their leaders, one must wonder, what will it take before Americans up and oust their government as well. What would it take. I’m not talking about some violent coo to overthrow the president or such, but basically just firing the entire congress and the president and call for a new appointment of all in both parties running our government.

I normally don’t post political things, unless somehow directly related to the internet in some manner, but watch this video to understand what I am talking about.

One of the new things Defcon did this year, was throw a CTF for kids. Organized and founded by one of the Defcon kids them self. I had the pleasure of creating the t-shirts for this event as well, and you can see the founder wearing one of these shirts below:

To read more about the event and how she came to organize it, read the article over at the Hacker News.com

We are in the midst of two of the biggest InfoSec conferences of the year. Both Blackhat and Defcon are in full swing this month, and that means work for me. At least, in the past few months it has meant work for me, and now, the work is done, just waiting for it to be seen at the conferences.

At Blackhat this year, Offensive Security will be doing its rounds of training IT Ninjas, as well as giving out stickers and DVDs of its core product, BackTrack. With that, comes a shiny new wallpaper for Blackhat attendees, and an early release of Backtrack 5 R1 (for Blackhat and Defcon conference attendees). It can only be gained if (Read More…)