stacksmash.org

Best. Proof of concept. Ever.

Brad — Thu, 02 Sep 2010 00:25:59 +0000

For the sake of lulz, please narrate this to yourself in the voice of the Old Spice Guy [...] Security Advisory for NetWare 6.5 OpenSSH (“On Exploitability”)

Richard Clarke sucks [updated]

Brad — Sat, 24 Apr 2010 02:57:27 +0000

Today I read a review on Threat Level tearing apart Richard Clarke’s new pile of hardbound bullshit. I really hate Richard Clarke. At least when it comes to cyber-anything, he’s full of shit and I don’t know why anyone considers him any kind of expert. Rather than my usual obscene rant, I’m just going to [...]

Sguil database schema

Brad — Wed, 07 Apr 2010 14:23:51 +0000

I can’t find this anywhere else, so I’m just going to quickly throw it up here. These are the tables and columns of a Sguil database. I think there are some extra tables (nessus, etc.) because this is from running a SecurityOnion live CD which uses NSMNow to do the Sguil setup. Also Sguil seems [...]

No really, Verified By Visa blows

Brad — Wed, 27 Jan 2010 05:44:15 +0000

But don’t take my word for it — take Ross Anderson’s.

Fuck Securom (Error 5003)

Brad — Sun, 03 Jan 2010 00:52:16 +0000

I bought Crysis so I could play a Mechwarrior mod with it. When I tried to start it, a window popped up saying: A required security module cannot be activated. This program cannot be executed (5003). One of my friends located the explanation. Indeed, I had IDA Pro running in the background. Good job, guys. [...]

Verified By Stupid Bullshit

Brad — Tue, 29 Dec 2009 05:01:56 +0000

I’ve ranted about Verified By Visa before. Since then, I’ve had the good fortune of having no dealings at all with the idiotic system – until tonight. Since I’m using a different Visa card for a purchase, it’s harassing me to create myself a new Verified By Visa account which includes my Social Security number [...]

Dumb code – dumb idea

Brad — Mon, 23 Nov 2009 09:23:36 +0000

I saw an article about this new technology that’s supposed to “stop computer viruses in their tracks.“ The idea is interesting, but overall I think it would be useful in only a very limited, focused application. Things would get far too complicated, far too quickly, for it to be both successful and at all versatile. [...]

Packet visualization with Python

Brad — Sun, 13 Sep 2009 06:27:06 +0000

A long-time pet project of mine is decoding the network protocol of Valve Software’s “Source” game engine, used in Half-Life 2, Counter-Strike: Source, Team Fortress 2, and Left 4 Dead. I’ve never made it very far, but it has led me down some interesting paths in reverse engineering, debugging, and visualization. One example of the [...]

Yeigh.

Brad — Tue, 25 Aug 2009 18:52:58 +0000

I passed the CISSP exam. Now I can stop making fun of it for a while.

My database backup cron job

Brad — Wed, 12 Aug 2009 17:56:16 +0000

Once upon a time, I wasn’t satisfied with WordPress’s backup feature for some reason. I can’t remember why. This was way back in 1.2 or something, and I’m sure it’s fixed now. Nevertheless, I set up a system for database backups which I think works pretty well. It runs as a cron job on my [...]