TRAFFICCAM – Watching the world…
Note: The following is all hypothetical and in no way is a representation of what is currently in use, was in use in the past, or will be in use in the future. Imagine you have a video…
Research
Windows 10 Privacy Advocate – Released on GitHub
Windows 10 Privacy Advocate has been released as an open-source project on GitHub. The project aims to allow Windows 10 users to take back some of their privacy. With the release of Windows 10, many new forms of…
Hacking Chili’s ZIOSKs (Not just Chili’s)
Background: In 2013 Chili’s and Applebee’s started installing ZIOSK tablets at all of their restaurants. These tablets allow patrons to order, request drink re-fills, view the menu, view websites, and pay the bill. These little tablets are a good…
Five Things I Want to See in 2015
Well, we spun around the sun once again and are back where we started. It is now 2015. I am excited to see what this year will bring. There are many changes in information security coming and many…
How Not To Use CloudFlare
For those that don’t know what CloudFlare is, please review their home page. The basic idea behind CloudFlare is a reverse proxy that allows CloudFlare to protect websites from Denial of Service attacks, cross-site scripting, and a variety…
Regarding the Sony Hack…
Okay, I have to be careful how I write this and how much to say. I don’t mean to make that sound exaggeratedly clandestine, but by the very nature of information security, it makes sense not to disclose…
Blind SQL Injections
This PDF is a paper I wrote in 2012 demonstrating different blind SQL injection methods on different database platforms. The information for Oracle is theoretical, due to my limitations at the time of platforms available for testing. If…