Tasty » Adam Sampson's security bookmarks

museum.media.org: Internet Talk Radio edit / delete

"Internet Talk Radio started broadcasting in 1993 as the first radio station on the Internet. As part of the museum.media.org effort to rescue some of our past work, we're also maintaining archives of early programs in their original state." Includes the "Hell's Bells" documentary that Joybubbles refers to in one of his recordings, and Cliff Stoll doing a presentation on "The Cuckoo's Egg".

to history phreaking podcasts radio retrotech security stoll ... on 23 November 2014

The Final Key - Hardware password manager with encryption edit / delete

A little USB device that pretends to be a serial port and a keyboard. Select an account using a terminal, push a button, and it types the password for it.

to electronics microcontroller password security usb ... on 24 August 2014

lcamtuf's blog: A bit more about american fuzzy lop edit / delete

Coverage-directed fuzzing tool, from the author of p0f et al. Easy to set up and play with.

to coverage coverage-directed fuzzing security testing ... on 05 August 2014

The SSL Co-operative edit / delete

Attempting to establish a CA on the cooperative model.

to ca certificate coop cryptography security ssl tls ... on 26 July 2014

System Hardening - The Chromium Projects edit / delete

A nice overview of all the application hardening facilities used on ChromiumOS.

to chromium container hardening linux sandbox security ... on 22 July 2014

Rami Rosen edit / delete

Some good presentations on Linux container facilities. (Horrid Javascript-based site, though.)

to container linux programming sandbox security ... on 11 July 2014

Using simple seccomp filters edit / delete

A worked example of setting up seccomp system call filters.

to linux seccomp security ... on 01 July 2014

Notes on Intel Microcode Updates edit / delete

Reverse-engineering Intel's microcode update mechanism.

to cpu intel microcode reverse-engineering security ... on 16 June 2014

How to Prevent the next Heartbleed edit / delete

An interesting review of some of the approaches that didn't prevent the OpenSSL heartbeat bug (either because they weren't effective or because they weren't applied).

to buffer-overflow checking openssl security static-analysis testing ... on 02 May 2014

Welcome — Botan edit / delete

C++ crypto library, with yet another TLS implementation.

to c++ cryptography library security software tls ... on 28 April 2014