ADD / XOR / ROL

The security world never ceases to amaze me. A few years ago, a few friends of mine would run around security conferences and drunkenly yell...

I will have an 8-hour layover in Toronto tomorrow -- anyone up for a coffee ?

The article at this link is a bit funny, but if it is true that Materazzi made racial slurs against Zidane, then his headbutt was the ONLY ...

I know that I am going to draw the hate of many people for this post, but I refuse to think less of Zidane for the headbutt against Materazz...

Question for the Blogosphere: Does anyone know of a real-life crypto protocol in which Diffie-Hellmann over a finite field is used, and that...

This Ebay posting for a Yacht that was previously owned by China's Minister of Defense might in fact be a bargain -- I would assume one...

I used to read security blogs via http://www.dayioglu.net/planet/ , which now seems down. It's amusing how quickly I have quit reading ...

On bug disclosure and contact with vendors After reading HDM's blog entry on interaction with MS on one of the recent bugs, I guess I sh...

I really enjoyed reading Ilfak's blog post today :-) -- it always makes me happy to see clever abstractions and the results they produc...

Compression, Statistics and such In the process of doing the usual stuff that I do when I do not struggle with my studies, I ran into the pr...

Some shameless self-promotion: Rolf and me are going to teach a special one-day class on BinDiff 2 at BlackHat Las Vegas this year: http://w...

Extra extra: Google/Sun discover the existence of integer overflows :)

My prediction for the next two years: Apple, Symantec, McAffee, Oracle etc. will get pounded into the ground by lots of bugs being found and...

MSASN1 is hard to read these days -- the code makes heavy use of carry-flag-dependent arithmetic (adc, rlc etc) to check for integer overflo...

The Vodafone virus dropped by today and brought us some mobile viruses to play with - thanks ! :-) So cross-platform diffing can be fun -- R...

Quote from Lock, Stock and Two Smoking Barrels: "I don't care who you use as long as they are not complete muppets". Having MS...

For those that are into malware classification, here's some code that one can include in a piece of malware to skew the Levenshtein dist...

Behavioural classification of malware Today is a good day: I got my math homework done before it has to be handed in, and that leaves me som...

Microsofts built-in firewall has some really annoying things to it. I am running a laptop connected to an untrusted network and an instanc...

Important German saying: "Wer keine Probleme hat macht sich welche" "Those that do not have any problems will create some for...