Grumpy Security Guy

Ok I didn’t see this one coming but when I think about it, it makes some sense. On one side you have Scam ScanAlert, which has a pretty widespread reputation as being a low quality security tool with a high quality marketing plugin attached. The on the other side you have McAfee where all [...]

[Read more →]

Scott Berinato continues to report on new botnet services being uncovered by botnet researches. The new site, loads.cc, allows people to order a number of machines to be infected (for $.20 each) and let’s them customize the order by specifying things like country the infected machine is in, IP addresses and other information.
I start to [...]

[Read more →]

Finding the config file
This one took me a while but I figured out the apache config now lives in /etc/apache2/httpd.conf. To enable PHP 5 you need to crack open that file as root to edit it. Using vi:
sudo vi /etc/apache2/httpd.conf
Or using Textmate
sudo mate /etc/apache2/httpd.conf 
Enabling PHP
Find the line which loads the PHP 5 module, which looks [...]

[Read more →]

This is awesome! Browsing networks with Windows machines on them show the Windows boxes as old CRT monitors that are all blue screened. Hilarious!

If you enjoyed this post, make sure you subscribe to my RSS feed!

[Read more →]

Make sure you run check permissions via Disk Utility, I had one little permission off and it caused my volume to not mount when I was trying to install. The choose a volume to install screen was blank. This was concerning of course. Luckily you can run Disk Utility from the installer. I ran Fix [...]

[Read more →]

Holly crap!! This is something straight out of a William S. Burroughs book.

the worst part is that it appears to be real!
If you enjoyed this post, make sure you subscribe to my RSS feed!

[Read more →]

When I first saw the title of this book I groaned. “Not another lame hacker book. I really should write my own.” Then I saw who was writing it and thought it might not be that bad. I saw the table of contents and got excited. Finally someone is writing a Web Application Security book [...]

[Read more →]

Microsoft just released a free Visual Source Safe plugin to help identify XSS (Cross Site Scripting) flaws in web applications while they are being coded. You can get it here.
Kudos to MS, I still think your OS is garbage but I no longer question your commitment to Web Application Security.
If you enjoyed this post, [...]

[Read more →]

I chuckled when I saw this Change the message on HP printers cause I thought it was pretty funny. Then I recalled that FX from Pheonlite did this ages ago and spoke about it at BlackHat 2002 his presentation is here As I recall he did the “Insert Coin” trick but he also exploited to [...]

[Read more →]

Vonage has been pushing it’s Visual Voicemail pretty hard lately. It works fairly well most of the time but I got a real winner in my email today.

“I. Thought it was nice 1 with some kind of stuff on it so we did your mom. several years back. I was just looking at the parameters [...]

[Read more →]