ZDNet Resources
- Microsoft Blue Hat v7
- Microsoft Blue Hat v7 - Nate McFeters's pics from Microsoft Blue Hat v7 in May '08. by Nate McFeters
- Tags: Microsoft Corp., Nate McFeters, tech action, Microsoft, Blue Hat, v7, nate, mcfeters
- Image galleries 2008-05-06
- Interview with the Vista Pwn2Own contest winners
- Interview with the Vista Pwn2Own contest winnersSo NO, we did not duplicate it on any other platform.What Nate states is this is a compiler issue with a polymorphism/name mangling bug. Therefore, it is not a Adobe coding issue. So my questions still remain:1) Have you duplicated this on...
- Tags: Microsoft Windows Vista (Longhorn), data execution prevention, Vista Pwn2Own, Nate, flaw, Microsoft Windows Vista
- Discussion threads 2008-04-02
- Interview with the Vista Pwn2Own contest winners
- Update 04/03/2008: I've updated the article as apparently the link to k2's blog was broken. Also, it's important to note that Derek Callaway was a part of this research and exploitation as well, and I neglected to mention that. So obviously our coverage of the Pwn2Own contest has...
- Tags: Adobe Systems Inc., Vulnerability, JavaScript, Microsoft Windows Vista, Exploit, Data Execution Prevention, Flaw, Nate, Programming Languages, Java, Security, Software Development, Software/Web Development, Nathan McFeters
- Blog posts 2008-04-02
- Rejoice!!! Scanless PCI is here!
- Rejoice!!! Scanless PCI is here!Why is no one talking about Hannaford?I have been surprised that no one at ZDNet has been covering the data theft at Hannaford...Maybe 4 million credit card numbers is'nt that unusual these days. And Hannaford was supposedly Certified PCI Compliant!!!!!http://bangornews.com/news/t/news.aspx?articleid=162267&zoneid=500RE: Rejoice!!! Scanless PCI...
- Tags: REJOICE!!, Scanless PCI, Hannaford
- Discussion threads 2008-04-01
- More details on the Pwn2Own Flash flaw that won the Vista machine
- More details on the Pwn2Own Flash flaw that won the Vista machineOr should we blame MicrosoftFor their inability to push DEP sooner and get more of a response out developers sooner and breaking applications that have been coded wrongly for years.That would be the ABMer's excuse anyway.NBMer would say that...
- Tags: Microsoft Windows Vista (Longhorn), Programming languages, Operating systems, UNIX, SECURITY, Pwn2Own Flash, Pwn2Own Flash flaw, Microsoft Windows Vista, data execution prevention, Vista Machine, Java, flaw, Nate, Adobe Systems Inc., Microsoft Corp., Linux
- Discussion threads 2008-03-31
- Black Hat Europe, Day 2 (Revisited): An interview with an invisible hacker
- If you haven't seen Day 1 or Day2/Day3 of my series on Black Hat Europe, feel free to have a look. As I mentioned in my Day 2/Day 3 posting, I didn't get a chance to meet up to interview Adam Laurie until late in the day on Thursday; therefore,...
- Tags: Black Hat, Training, Satellite, Hacker, Nate, Workforce Management, Network Technology, Human Resources, Networking, Nathan McFeters
- Blog posts 2008-03-31
- Blackhat Europe, Day 1: The Waag, the Bulldog, and web application hacking
- Blackhat Europe, Day 1: The Waag, the Bulldog, and web application hackingCool and usefulCool story! The fact that manual checking finds more flaws than does automated checking is unsurprising, but valuable, as I was unaware of the limited usefulness of the programs. I look forward to revisiting this...
- Tags: SECURITY, Waag, web application hacking, BlackHat Europe, Bulldog, Day 1, hacking, Web application
- Discussion threads 2008-03-26
- Blackhat Europe, Day 1: The Waag, the Bulldog, and web application hacking
- Considering my previous posts on my experiences at Black Hat Federal received pretty good reviews, I thought it would make sense to again highlight a Black Hat trip. This time it was all the way out to Amsterdam, where Rob Carter and I will be speaking about URI Use...
- Tags: Black Hat, Web Application, SQL, Training, SQL Injection, Tool, Nate, Productivity, Hacking, Workforce Management, Security, Human Resources, Nathan McFeters
- Blog posts 2008-03-25
- Got room in your heart for a hacker?
- Got room in your heart for a hacker?Potential for long-distance murder?Don't think that it'd be a far stretch to suggest that people could be murdered through the technology that's supposed to save them. We can only hope that we are not one of those people.Castro would have been easierAll you...
- Tags: Hacking, Wi-Fi, Castro, Nate
- Discussion threads 2008-03-13
- Sun releases patch to address a number of serious vulnerabilities
- Sun releases patch to address a number of serious vulnerabilitiesCross-platform drive-by downloads......brought to you by Sun!Link?!?A link would be nice so I could be sure I have the patches. The Java control panel update functionality did update when I asked it to but it says Version 6 Update 5...
- Tags: Java, Operating systems, vulnerability, Nate, Sun Microsystems Inc., JRE-6 Update 5, Update 5
- Discussion threads 2008-03-07
- eBay Red Team Event - Creating Awareness and Sharing Strategies
- I recently attended the eBay Red Team event at the eBay campus in San Jose, CA. and got a chance to sit in on several presentations, meetings, and discussions aimed at creating security awareness and knowledge sharing opportunities for several major decision makers in the information security space. Numerous companies...
- Tags: Team, Event, Knowledge, Industry, eBay Inc., Nate, Team Management, Strategy, Security, Management, Nathan McFeters
- Blog posts 2008-03-03
Additional Resources
- Google offers enterprise web security
- Postini, a company acquired by Google, is now offering enterprise web security. All traffic is routed through Google, and they take care of making sure traffic meets your corporate policies. The interesting part of all this though is how it secures computers, even when they aren't in the...
- Tags: Google Inc., Postini Corp., Web, Web Security, Productivity, VPNs, Blogging, Spyware, Adware & Malware, Network Security, Networking, Security, Telecommunications, Internet, Garett Rogers
- Blog posts 2008-05-08
- Can I interest you in a glass of Berry Blue Kool-Aid?: A recap of Microsoft Blue Hat v7
- Can I interest you in a glass of Berry Blue Kool-Aid?: A recap of Microsoft Blue Hat v7How does Caballero's ghost work?Nate, can you or someone else give more technical details about Manuel Caballero's talk?Did he explain how his "ghost" works, or was it just a blackbox demo?Well...Unfortunately, I can't...
- Tags: Microsoft Corp., Manuel Caballero, Berry Blue Kool-Aid?, Microsoft Blue Hat v7, Microsoft Blue Hat
- Discussion threads 2008-05-07
- Hot off the wire: Windows XP SP3 available from Windows Update
- Hot off the wire: Windows XP SP3 available from Windows UpdateI will compare it to XP SP2I will test it on a Virtual machine today along with different software and then compare with the same virtual machine with only XP SP2.More secret updates?Maybe "forced" secret updates?I'd be surprised if it...
- Tags: Microsoft Windows XP Service Pack 2, Microsoft Windows XP, Windows XP SP3, Microsoft Windows, Microsoft Windows Update
- Discussion threads 2008-05-07
- News to know: Vista troubleshooting, RIM, XP SP3, Apple, SAP
- Notable headlines: XP SP3: Now on Windows Update Ed Bott: Fixing Windows Vista, Part 3: Top Troubleshooting Tools [See Gallery] David Morgenstern: Is Mac OS X Leopard, Safari 3.x too dark? Larry Dignan: Cisco third...
- Tags: Research In Motion Ltd., Microsoft Windows Update, Oracle Corp., Microsoft Zune, Microsoft Windows Vista, SAP AG, Apple Inc., Microsoft Corp., Microsoft Windows, Operating Systems, Microsoft Windows XP, Software, Larry Dignan
- Blog posts 2008-05-07
- Can I interest you in a glass of Berry Blue Kool-Aid?: A recap of Microsoft Blue Hat v7
- Hey all, I was fortunate enough to be invited to attend Microsoft Blue Hat v 7 as I had some research that Microsoft was interested in bringing me in to talk about. Microsoft got to have co-worker and fellow researcher Rob Carter and I in to talk...
- Tags: Microsoft Corp., Blogging, Team Management, Internet, Management, Nathan McFeters
- Blog posts 2008-05-06
- Hot off the wire: Windows XP SP3 available from Windows Update
- From Paul Miller at Engadget: "At last the moment you've been waiting for. Microsoft wants to hit your version of Windows with an update, and this time you don't have to go rummaging around the internet to find it: just fire up Windows Update and let Microsoft do all...
- Tags: Security, Microsoft Windows Update, Microsoft Windows Vista, Microsoft Corp., Microsoft Windows, Microsoft Windows Vista (Longhorn), Microsoft Windows XP, Operating Systems, Software, Nathan McFeters
- Blog posts 2008-05-06
- News to know: SAP; Hacking NASA; Apple; OpenSolaris
- Notable headlines: Nate McFeters: Hacking NASA: One small step for man, one giant leap for hackers? Common misconceptions about database security Sapphire 2008: Dennis Howlett: The changing SAP culture Larry Dignan: SAP's Apotheker: Business ByDesign costs led...
- Tags: Apple iPhone, Google Inc., OpenSolaris, Hacking, Yahoo! Inc., T-Mobile, SAP AG, Apple Inc., Security, Larry Dignan
- Blog posts 2008-05-06
- Hacking NASA: One small step for man, one giant leap for hackers?
- Hacking NASA: One small step for man, one giant leap for hackers?This is scriptAll digital is exe.An exe is constructed and recorded into a ROM chip.And when you press START,the exe starts and the Microwave oven cooks your food."Deb can cook---hard wieners--Dr.Debbie Smith's program for the Microwave---part two--episode three".duhhhh"great work...
- Tags: SECURITY, Hacking NASA, hacking
- Discussion threads 2008-05-05
- Hacking NASA: One small step for man, one giant leap for hackers?
- The CORE Security Team released an advisory to the Full-Disclosure mailing list today that documented a stack overflow in NASA's Common Data Format libs. Looking at this bug, the tech details aren't overwhelming, I think I'm mostly excited about it due to the high profile of hacking NASA libs. One...
- Tags: NASA, Vulnerability, Hacker, Exploitation, Common Data Format 3.2.1, Security, Patches, Hacking, Nathan McFeters
- Blog posts 2008-05-05
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts