Tasty » Adam Sampson's security bookmarks

17 Mistakes Microsoft Made in the Xbox Security System - Xbox-Linux edit / delete

How the (original) Xbox's freedom-denying bootloader was meant to work, and how it was broken. Repeatedly.

to cryptography reverse-engineering security xbox ... on 06 January 2015

Language-theoretic Security edit / delete

"The Language-theoretic approach (LANGSEC) regards the Internet insecurity epidemic as a consequence of ad hoc programming of input handling at all layers of network stacks, and in other kinds of software stacks." Some interesting work, although it's obviously focussing on one class of problem...

to langsec language-design parser proof security verification ... on 03 January 2015

museum.media.org: Internet Talk Radio edit / delete

"Internet Talk Radio started broadcasting in 1993 as the first radio station on the Internet. As part of the museum.media.org effort to rescue some of our past work, we're also maintaining archives of early programs in their original state." Includes the "Hell's Bells" documentary that Joybubbles refers to in one of his recordings, and Cliff Stoll doing a presentation on "The Cuckoo's Egg".

to history phreaking podcasts radio retrotech security stoll ... on 23 November 2014

The Final Key - Hardware password manager with encryption edit / delete

A little USB device that pretends to be a serial port and a keyboard. Select an account using a terminal, push a button, and it types the password for it.

to electronics microcontroller password security usb ... on 24 August 2014

lcamtuf's blog: A bit more about american fuzzy lop edit / delete

Coverage-directed fuzzing tool, from the author of p0f et al. Easy to set up and play with.

to coverage coverage-directed fuzzing security testing ... on 05 August 2014

The SSL Co-operative edit / delete

Attempting to establish a CA on the cooperative model.

to ca certificate coop cryptography security ssl tls ... on 26 July 2014

System Hardening - The Chromium Projects edit / delete

A nice overview of all the application hardening facilities used on ChromiumOS.

to chromium container hardening linux sandbox security ... on 22 July 2014

Rami Rosen edit / delete

Some good presentations on Linux container facilities. (Horrid Javascript-based site, though.)

to container linux programming sandbox security ... on 11 July 2014

Using simple seccomp filters edit / delete

A worked example of setting up seccomp system call filters.

to linux seccomp security ... on 01 July 2014

Notes on Intel Microcode Updates edit / delete

Reverse-engineering Intel's microcode update mechanism.

to cpu intel microcode reverse-engineering security ... on 16 June 2014