Sponsored White Papers, Webcasts, and Downloads
ZDNet Resources
- Welcome (back) Ryan Naraine; Zero Day's line-up revamped
- You may have noticed a familiar byline over at our Zero Day security blog--Ryan Naraine. His addition completes a revamped line-up for our security blog. Ryan is now an evangelist for Kaspersky Lab, a security vendor. He joins Nate McFeters and Dancho Danchev, two real-world security researchers...
- Tags: Security Blog, Ryan, Nate McFeters, Dancho Danchev, Dancho, Nathan, Security, Larry Dignan
- Blog posts 2008-05-19
- Microsoft Blue Hat v7
- Microsoft Blue Hat v7 - Nate McFeters's pics from Microsoft Blue Hat v7 in May '08. by Nate McFeters
- Tags: Microsoft Corp., Nate McFeters, tech action, Microsoft, Blue Hat, v7, nate, mcfeters
- Image galleries 2008-05-06
- Black Hat Europe 2008
- Nate McFeters' pictures of Black Hat Europe 2008 in Amsterdam. by Nate McFeters
- Tags: Black Hat, Nate McFeters, news, Black Hat Europe 2008, Amsterdam, tech action, hackers, Dafydd, Marcus, Rob Carter, Billy Rios, Nitesh
- Image galleries 2008-03-26
- Black Hat, Day 2: DTrace, (un)Smashing the Stack, Cisco IOS Forensics
- Day 2 is done and Black Hat is wrapped up. The second day of talks was power-packed with some really great presentations. Despite a wicked night of celebration after my successful talk, I still managed to turn up on time for the "DTRACE: The Reverse Engineer's...
- Tags: Black Hat, Cisco IOS, Researcher, Speaker, Cisco Systems Inc., DTrace, Day 2, FX, Nate McFeters
- Blog posts 2008-02-21
- Black Hat, Day 1: Cracking GSM and skimming ATMs
- Day 1 at Black Hat brought some outstanding talks. The day started off with David Hulton (aka h1kari, also the producer of ToorCon) and Steve from THC, who presented on "Cracking GSM". It was quite interesting due to the tie-in that David has with Pico...
- Tags: Black Hat, FPGA, GSM, Phishing, ATM, Cyberthreats, Network Technology, Spam, Networking, Security, Spam And Phishing, Nate McFeters
- Blog posts 2008-02-20
Additional Resources
- Happy 4th of July
- For all of my blasting of the TSA and the US Government for our strange, inappropriate, inadequate, and sometimes unacceptable security practices, I am damn proud to be an American. There's many countries I've visited in this world, and I love many of them, but none like the good...
- Tags: Blog, Blogging, Internet, Nathan McFeters
- Blog posts 2008-07-04
- Say it ain't so AVG, say it ain't so: AVG LinkScanner = Badware?
- The Register covered a very interesting story about AVG. Apparently AVG is spamming the Internet with traffic that looks to be coming from Internet Explorer. AVG software pre-crawls search results to try to protect users, but uses a user agent that makes the software appear to be Internet Explorer. This pre-crawling is flooding websites with...
- Tags: Webmaster, Traffic, Malware, Register, Spyware, Adware & Malware, Cyberthreats, Security, Scanners, Internet, Viruses And Worms, Hardware, Peripherals, Nathan McFeters
- Blog posts 2008-07-03
- Opera patches serious code exection flaw
- Opera patches serious code exection flawURI/Protocol Handler AbuseI can confirm that Rios has been working on a protocol handler flaw on Opera. I'm not sure if this is what was patched... we've both been so busy lately we haven't been researching together as much as we did in the...
- Tags: Opera Software, flaw, Opera patch, patch management
- Discussion threads 2008-07-03
- Apple caught neglecting iPhone security
- Apple caught neglecting iPhone securityApple doesn't really care.I believe that Apple puts security of its products at the bottom of the list, with cool design at the top. All this stuff just proves me right, that sure they have a neat casing and a touch screen, but underneath it...
- Tags: Apple Inc., Apple iPhone, security, iPhone security
- Discussion threads 2008-07-03
- Opera patches serious code exection flaw
- Opera Software has joined the list of browser vendors shipping fixes for serious remote code execution vulnerabilities. The company's new Opera 9.5.1 patches at least four security issues, the most serious being a flaw reported by Microsoft's Billy Rios that could be used to execute arbitrary code....
- Tags: Opera Software, Patch Management, Flaw, Security Statu, Security, Ryan Naraine
- Blog posts 2008-07-03
- Airport security part 4: Attack of the body scanners!
- Airport security part 4: Attack of the body scanners!Airport SecurityI'm fairly sure if anyone was to see me naked... their eyeballs would no longer function anyway. I say go ahead, it's more a punishment for them than me. But I can certainly understand why many people would find...
- Tags: airport security, body scanners!, scannerS!, Nate
- Discussion threads 2008-07-03
- Airport security part 4: Attack of the body scanners!
- If you read my blog postings semi-often, you know that I'm very, very critical of problems with airport security. Nicole Wong of the Boston Globe reported that Boston's Logan International Airport will become the next airport to implement full-body scanners (thanks for the link from the LiquidMatrix guys!) that can see...
- Tags: Imaging, Airport Security, Privacy, Transportation Security Administration, Image, Attack, Madness, Scanners, Document Management, Security, Hardware, Peripherals, Enterprise Software, Software, Finance, Managerial Accounting, Nathan McFeters
- Blog posts 2008-07-03
- NoScript vs. Internet Explorer 8 Filters
- NoScript vs. Internet Explorer 8 FiltersThink About End UsersI've tried, a couple of times, to use NoScript in my normal surfing, and it became unbearable quickly. Too many sites were disfunctional. MLB.com is a good example.It's one thing to make an add-in for technical users that they can tweak on...
- Tags: Web browsers, PRODUCTIVITY, Channel management, Microsoft Internet Explorer, NoScript, IE8, MLB
- Discussion threads 2008-07-03
- NoScript vs. Internet Explorer 8 Filters
- NoScript plugin writer Giorgio Maone posted a commentary on IE 8's new filters, drawing comparisons to his own widely popular NoScript Firefox plugin. Maone writes: I'm happy to learn that IE8 is going to implement a less ambitious version of a feature which NoScript users have enjoyed for more than one...
- Tags: Mozilla Firefox, XSS, Microsoft Internet Explorer, Attack, Maone, Nathan McFeters
- Blog posts 2008-07-03
- Multiple Facebook vulnerabilities reported on Full-Disclosure
- Multiple Facebook vulnerabilities reported on Full-DisclosureMy poll answer[i]No, I don't use them, but not because I'm concerned about their security.[/i]I have no space in MySpace, my Face is in no Book, and I'm not LinkedIn.HahahaNice.You sure you don't want to add me to your friends list???-Nate
- Tags: Multiple Facebook, Full-Disclosure
- Discussion threads 2008-07-03
- News to know: Searching Silverlight; IE 8; Dell; Google vs. YouTube
- Notable headlines: Mary Jo Foley: Microsoft: Silverlight content searchable, too Ryan Stewart: Brian Goldfarb talks about Silverlight 2 and Deep Zoom with Michael Cot LineRider releases a Silverlight 2 version Microsoft steps up self-policing of its OSI-approved source licenses ...
- Tags: Apple iPhone, Security, Google Inc., Dell Computer Corp., Microsoft Silverlight, Mobile, YouTube Inc., Microsoft Internet Explorer, Microsoft Corp., Linux, UNIX, Keyboards, Operating Systems, Advertising & Promotion, Open Source, Software, Hardware, Peripherals, Marketing, Larry Dignan
- Blog posts 2008-07-03
- Multiple Facebook vulnerabilities reported on Full-Disclosure
- Jouko Pynnonen posted a message to the Full-Disclosure mailing list today, citing multiple "script injection" vulnerabilities within Facebook. I'm not sure if this is a surprise to anybody out there, it's certainly not to me, as numerous web applications have major problems with Cross-site Scripting vulnerabilities, but I think this...
- Tags: Facebook, Vulnerability, XSS, JavaScript, Microsoft Internet Explorer, Web Browser, Sandbox, JS, Canvas Page, Web Browsers, Internet, Nathan McFeters
- Blog posts 2008-07-02
- Tiller Beauchamp on the Recon 2008 conference
- Guest Editorial by Tiller Beauchamp Earlier this month I had the opportunity to present RE:Trace at the Recon conference, a reverse engineering conference held every other year in Montreal, Canada. The conference consisted of three days of training and three days of talks in a single track. Topics...
- Tags: Reverse Engineering, Kernel, Conference, Novell NetWare, LDAP, Operating Systems, Servers, Directory Services, Enterprise Software, Software, Hardware, Nathan McFeters
- Blog posts 2008-07-02
- PCI-DSS 1.1 points to outdated OWASP Top 10
- OK, I'm not going to freak out about this too bad... I've already pointed out enough problems with PCI, but I did find it morbidly entertaining. My good friend Jeremiah Grossman pictured at right blogged today about the PCI-DSS 1.1 section 6.5, which covers "prevention of common coding vulnerabilities in...
- Tags: XSS, PCI, Security, Storage, Hardware, Nathan McFeters
- Blog posts 2008-07-02
- McAfee S.P.A.M. experiment and more ridiculous HackerSafe failures
- McAfee S.P.A.M. experiment and more ridiculous HackerSafe failuresI get slammed for pronouncing the name wrong, but McAfee is the bestMcAfee is the only true voice on security. I have never once seen a computer with their AV software installed that has be overrun with viruses. If this is...
- Tags: SECURITY, McAfee Inc., HackerSafe
- Discussion threads 2008-07-02
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts