hdmoore

4 ms·

31.
by hdmoore 11y ago
Summary: Compatibility and decompression speed is more important than compression ratios for many use cases. Gzip is nearly universal, where lz4, xz, and parallel bzip2 are not. The challenge of sharing internet-wide scan data has unearthed
32.
by hdmoore 11y ago
This affects 2008 and newer, older versions did not support DNAME[1] records. It isn't clear whether an existing DNAME record needs to exist in order for this to be exploitable. Skimming the Sonar FDNS[2] dataset, only 5,581 DNAME reco
33.
Pipman GPS Watch(random-hackery.net)
2 points by hdmoore 11y ago|0 comments
34.
by hdmoore 11y ago
Funny enough, we found a practical application for this during my time at BreakingPoint. The BPS-1000 appliance would mix a huge number of concurrent streams through a device under test; we added a feature to flag the exploit traffic as evi
35.
by hdmoore 11y ago
Roughly 10%, but I forget the exact numbers. It took over a year before those private buyers could sell above cost.
36.
by hdmoore 11y ago
The pre-IPO bids for Facebook at SecondMarket were substantially higher than the original IPO (first-day trading price), less than a week before private trading was halted. Even the private market has no idea what non-public shares are wort
37.
by hdmoore 11y ago
Peter Gutmann's "Engineering Security" book is an excellent treatise on trust and currently free: https://www.cs.auckland.ac.nz/~pgut001/pubs/book.pdf
38.
by hdmoore 11y ago
A beautiful demonstration by people who like macs and don't understand geometry or economics.
39.
by hdmoore 12y ago
Metasploit Framework rolls out new banners: https://github.com/rapid7/metasploit-framework/pull/5047
40.
by hdmoore 12y ago
This is an excellent example of using a parser as a language. Whether it has any legs depends on whether it beats existing tools on some front (sed, perl, ruby, etc). The concurrent angle is interesting, but I have found a multi-process app
41.
GNU Wget FTP Symlink Arbitrary Filesystem Access(community.rapid7.com)
3 points by hdmoore 12y ago|0 comments
42.
by hdmoore 12y ago
Thanks for the suggestions! Great background music.
43.
by hdmoore 12y ago
For the mid-afternoon slump, I dig Dave Snelgrove's bass tracks: https://soundcloud.com/davidsnelgrove
44.
by hdmoore 12y ago
Overwerk, Orbital, and similar electronic/ambient artists are my zen-mode gotos. 9:00am after writing code until 4:00am? It better have screeching electric guitar and heavy bass. Industrial is a great way to wake up.