Bug may enable remote code execution in Google Chrome

Monday, October 24th, 2011

Google Chrome contains a vulnerability that could allow an attacker to silently execute remote code on a victim's machine outside of the browser's built-in sandbox protections, according to researchers at Slovenia-based Acros Security. According to Google, however, the issue is not technically a flaw, but rather a “strange behavior” that would ...

NoScript for Mobile Devices

Monday, October 17th, 2011

This is the first feature-complete mobile version of NoScript. In other words, it provides all the major security features of its desktop counterpart which make sense on a mobile device. http://hackademix.net/2011/10/15/noscript-for-mobile-is-complete/

Derbycon 2011 Videos

Tuesday, October 4th, 2011

I'm mainly archiving this for myself but, if you have an entire weekend to kill and want to learn from some of the best, here are all the videos from DerbyCon this past weekend. http://www.irongeek.com/i.php?page=videos/derbycon1/mainlist  

Researchers uncover first active BIOS rootkit attack

Wednesday, September 14th, 2011

Researchers have discovered what is believed to be the first in-the-wild rootkit that targets BIOS, the built-in software responsible for booting up a computer and managing communication between the machine and its attached devices. The discovery of Mebromi is notable not because any widespread infections are anticipated – the complexity of ...

Fake ‘If I Die’ Facebook app kills your computer

Tuesday, September 13th, 2011

The premise of a new (and fake) Facebook app called "If I Die" is sweet if a little morbid: You record a video message that will be played for your loved ones after your death. As the app advertisement says: "Death can catch you anywhere, anytime. Leave your If I ...