Sponsored White Papers, Webcasts, and Downloads
TechRepublic Resources
- Apple Wi-Fi exploit published
- Almost a year after it was patched by Apple; David Maynor has released a complete paper on his exploitation of Apple's Wi-Fi drivers to enable full remote code execution. The paper covers the accidental discovery of the vulnerability, details on the debugging and driver analysis, and finally, code execution....
- Tags: Vulnerability, Apple Inc., Maynor, Wireless LANs, Wi-Fi, Wireless, Security, Justin Fielding
- Blog posts 2007-09-22
Additional Resources
- Vicious orchestrated assault on MacBook wireless researchers
- There has been a vicious orchestrated assault on researcher David Maynor and the company SecureWorks claiming that the Maynor and SecureWorks falsified their research presented at Black Hat 2006. In a video demonstration, Maynor completely took over an Apple MacBook using a vulnerability in a third party wireless driver....
- Tags: Wi-Fi, Apple MacBook, wireless, David Maynor, SecureWorks Inc., Apple Computer Inc.
- Blog posts 2006-08-20
- Breaking Wi-Fi News that will impact your organization
- Several Wi-Fi articles worthy of mentioning have surfaced recently. More Nortel Networks executives get charged: Nortel Networks legal woes just keep getting worse. The blog post "News from Nortel Networks" mentioned that several high level Nortel executives -- CEO, CFO and Controller -- were under investigation by the...
- Tags: Nortel Networks Corp., Mobility, Cisco Systems Inc., Cognio, Wi-Fi, Wireless, Michael Kassner
- Blog posts 2007-09-24
- Can your wireless network be sidejacked?
- Well-known security experts Robert Graham and David Maynor, founders of Errata Security, wrote an interesting paper for the Black Hat 2007 security conference being held this week. Their claim is that many Web applications may be vulnerable after the initial logon takes place. Gmail and Facebook are two examples mentioned...
- Tags: Network, Web Application, Wireless Network, Wireless, Michael Kassner
- Blog posts 2007-08-03
- How Apple orchestrated web attack on researchers
- What do you think of Apple's behavior in all of this?A mega corporation put its full weight on two security researchers and tried to destroy their reputation.WeasellyI use the term weaselly because that’s what our fellow poster and Apple enthusiast tic swayback said that Apple would be if they had...
- Tags: SECURITY, Notebooks, george_ou@..., Web, Apple Computer Inc.
- Discussion threads 2007-03-20
- Apple patches Wi-Fi but refuses to give researchers credit
- [UPDATE 9/25/2006: The word "due" was dropped from the title because it is now disputed by Apple. Apple has issued a strong denial that anything useful was given to them and responded to this blog in detail.]After all the controversy, it turns out that there really are critical vulnerabilities...
- Tags: Wireless LANs, Notebooks, Patches, Wi-Fi, David Maynor, Brian Krebs, Apple Computer Inc., SecureWorks Inc., Black Hat, Apple MacBook
- Blog posts 2006-09-23
- REG file to protect against zero-day RPC flaw in Microsoft DNS
- According to David Maynor of Erratasec, a zero-day exploit against Microsoft DNS server is being seen in the wild. This affects the most up-to-date Windows Server 2000, 2003, and 2003 R2 for all service packs. George Ou discusses the details of the exploit and recommended firewalling strategy in this blog...
- Tags: Registry, DNS, Blog, Microsoft Corp., Flaw, George Ou, Domain Names, RPC, Blogging, Networking, Servers, Internet, Hardware
- Download resources 2007-04-13
- Will BitTyrant poison the well for BitTorrent users?
- David Maynor has pointed to an interesting development on the BitTorrent scene in a new "selfish" BitTorrent client called BitTyrant. Speaking of poisoning the well, BitTyrant requires Java 1.5 to run which means you have to tolerate Java version conflict hell and massively bloated and inefficient software which is...
- Tags: bandwidth, BitTorrent, BitTyrant, David Maynor, Desktop, Fun Stuff, Infrastructure, Internet, Networking, Technology policy, VoIP
- Blog posts 2007-01-05
- How Apple orchestrated web attack on researchers
- Last summer when I wrote "Vicious orchestrated assault on MacBook wireless researchers", it set off a long chain of heated debated and blogs. I had hoped to release the information on who orchestrated the vicious assault but threats of lawsuits and a spineless company that refused to defend itself...
- Tags: Apple, Defcon2006, Mobile/Wireless, News, Security, ~Events~
- Blog posts 2007-03-20
- Surge of killer device drivers leave no OS safe
- News came yesterday that Linux users who used NVIDIAs drivers were in danger of being remotely exploited because a zero-day exploit code was released last week. Just the mere act of visiting a malicious website could trigger a buffer overflow that can lead to arbitrary...
- Tags: flaw, Linux, operating system, device driver, wireless
- Blog posts 2006-10-18
- Johnny Cache speaks out at ToorCon 8
- David Maynor was blocked at the last minute to appear at Toorcon 8 in San Diego and Jon "Johnny Cache" Ellch was stuck with no speaking partner or presentation. A lot of stories have been quoting this talk and some bloggers have been characterizing it negative in various ways even...
- Tags: Johnny Cache, Security, ToorCon 8
- Blog posts 2006-10-02
- Zero-day RPC flaw in Microsoft DNS
- According to David Maynor of Erratasec, a zero-day exploit against Microsoft DNS server is being seen in the wild. This affects the most up-to-date Windows Server 2000, 2003, and 2003 R2 for all service packs. This is somewhat unusual for Microsofts DNS service because its been rock solid...
- Tags: Servers, Security, News, Networking, Microsoft, Malware alert, Infrastructure
- Blog posts 2007-04-13
- How secure are your wireless device drivers?
- Even with the emphasis on securing wireless devices and how they communicate with operating systems, flaws have still surfaced, and attackers have exploited them. One often overlooked source for security flaws is the wireless device driver. Mike Mullins takes a closer look in this edition of Security Solutions. Wireless...
- Tags: Wi-Fi, Michael Mullins CCNA, MCP, wireless, wireless device, security, flaw, IEEE 802.11, Security Solutions Newsletter, Mike Mullins, Michael \"Mullins CCNA, MCP\"
- Technical articles 2007-01-25
- What the UAC 'hole' is really about
- Fellow blogger Ryan Naraine had a blog "Hacker, Microsoft duke it out over Vista design flaw" where he reported on a disagreement between elite researcher Joanna Rutkowska (Singapore-based Coseinc) and elite programmer Mark Russinovich formerly Sysinternals and acquired by Microsoft. Ive spoken with both of these people and...
- Tags: Desktop, Joanna Rutkowska, Microsoft Windows Vista, Security, UAC, Vista, Vista UAC
- Blog posts 2007-02-14
- << Previous
- page 1 of 1
- Next >>
