Friday, March 21, 2014

Together, we can make a difference

›
A couple of weeks back, I released a popular spreadsheet which lists many of the Adobe Flash Player 0-days used to harm people in the wild ...
1 comment:
Thursday, February 20, 2014

Internet Bug Bounty issues its first $10,000 reward

›
One of my side projects is as an adviser and panelist for the non-profit Internet Bug Bounty  (IBB). We recently added Adobe Flash Player a...
2 comments:
Sunday, December 29, 2013

vtable protections: fast and thorough?

›
Recently, there's been a reasonable amount of activity in the vtable protection space. Most of it is compiler-based. For example, there...
Sunday, February 3, 2013

Exploiting 64-bit Linux like a boss

›
Back in November 2012, a Chrome Releases blog post mysteriously stated: "Congratulations to Pinkie Pie for completing challenge: 64-bi...
12 comments:
Monday, September 24, 2012

The joys and hazards of multi-process browser security

›
Web browsers with some form of multi-process model are becoming increasingly common. Depending on the exact setup, there can be significant ...
2 comments:
Wednesday, July 4, 2012

Chrome 20 on Linux and Flash sandboxing

›
[Very behind on blog posts so time to crank some out] A week or so ago, Chrome 20 was released to the stable channel . There was little fan...
5 comments:
Monday, April 9, 2012

vsftpd-3.0.0 and seccomp filter sandboxing is here!

›
vsftpd-3.0.0 is released . Aside from the usual few fixes, I'm excited about built-in support for Will Drewry's seccomp filter, whic...
4 comments: