Archive for January, 2010


Video:When Web 2.0 Attacks - Rafal Los
Recorded at: Louisville OWASP Chapter - Fourth Meeting, Friday January 29th, 2010
Speaker: Rafal Los will be discussing Flash and Web 2.0 security

I used the same rig I hope to use for recording the Fireside talks at Shmoocon.


Palm Pixi Plus

Palm Pixi PlusIntroduction If we had one disappointment with the Palm Pixi it was that it didn’t support WiFi. Not only does the Palm Pixi Plus support WiFi it also lets you turn the cell phone into a Mobile HotSpot so that you can share your data connection with up to 5 WiFi-enabled devices. A pretty neat trick, but it will cost an additional $40 a month. It also runs Palm’s latest webOS, has an 8GB internal hard drive, and the ability to have contact information from multiple accounts appear almost seamlessy in one contact window. All and all if you’re looking for a pocket friendly smartphone that’s easy to use, the Pixi Plus is worth consideration. Design & Features Look and feel: The first thing you’ll notice about the Palm Pixi Plus is its diminutive size. Combine that with its rounded edges, black rubberized back, and plastic keys and you might mistake it for a toy. While it’s fun to use, it’s definitely not a toy and it feels a lot sturdier when... - read full review


Motorola Barrage

Motorola BarrageOverview What's Good: Durable design makes it perfect for construction workers and people that are hard on phones; fantastic reception; nice external display. What's Bad: The Barrage is slightly bulky. Introduction The push-to-talk market seems to be an "on again, off again" thing (or so it seems) for most of the nationwide carriers. One day, you see a huge push, with television advertisements of how the service is drastically better than Nextel's Direct Connect option. Then the next day, they're gone, replaced by advertisements for a robot phone that eats your cattle, scares small children, and blows craters in your yard (insert creepy DROID noise here). Though the Motorola Barrage is clearly intended for a crowd that's harder on their wireless devices than most, the device is most certainly worth a second look. Design & Features The Motorola Barrage offers an industrial design, with a rubberized coating and a strong metal hinge.  The left side of the device contains a... - read full review


Press Advisories announce media events, briefings, publications and other opportunities.
Infosec Daily Podcast Episode 56
We are recording tonight, so it should be up by the morning. This time the tech segment will be on the recent bar code hacking project, which at Mick's suggestion now has XSS/SQL Injection for QR 2d bar codes.


Link:XSS, SQL Injection and Fuzzing Barcode Cheat Sheet
I was listening to an episode of Pauldotcom, and Mick mentioned something about attacks on systems via barcode. Because of the nature of barcodes, developers may not be expecting attacks from that vector and thus don’t sanitize their inputs properly. I had previously written "XSS, Command and SQL Injection vectors: Beyond the Form" so this was right up my alley. I constructed this page that lets you make barcodes in Code 93, Code 39, Code 39ext and Code 128A, B and C.


Samsung Mythic SGH-A897

Samsung Mythic SGH-A897Overview What's Good: TouchWiz 2.0 offers improvements over previous versions. What's Bad: Battery life not great, and coverage is spotty at times. Introduction Despite the smartphone push by carriers, featurephones remain an important element in the wireless industry. To that end, the Samsung Mythic is a great addition to the field, offering improvements in the TouchWiz user interface and an improved design that is similar to the Samsung Omnia II (without the added costs, I might add). Will the device deliver and provide a good user experience? Design & Features The Samsung Mythic ships with an AC adapter, a USB cable, an 8GB microSD card, and instruction manuals. Offering a 3.3-inch LCD display with 360 x 640 pixels, the device comes in at 4.49 inches tall by 2.06 inches wide by 0.5 inch thick. Weighing 3.8 ounces, the Mythic is thin and light enough to keep in the pocket without issue. The Mythic sports a clean design that is somewhat reminiscent of the Omnia II. The left... - read full review


Now through March 8th, get unlimited talk & text for jsut $25/month from Cricket Wireless!
Powered by WordPress. Theme: Motion by 85ideas.