2008 Apr 23, 4:35Something I've had to take into consideration in the past: "Attackers can simply wait for a patch to be released, use these techniques, and with reasonable chance, produce a working exploit within
seconds."
security paper reverse-engineer 2008 Mar 31, 1:08"Why would the bad guys do this? To buy time. ...say you arrived at that site via a search engine and you were clueful and you got owned. You're going to give the URL that tried to exploit you to
your local IT security geek and he's going to paste it i
security web internet spam microsoft blog research 2008 Mar 28, 10:35Scott A Crosby and Dan S Wallach "present a new class of low-bandwidth denial of service attacks that exploit algorithmic deficiencies in many common applications' data structures." DoS via worst
case behavior in hash tables and exponential time RegExp's
scott-crosby dan-wallach dos programming regex research security hash 2007 Sep 14, 12:59Maybe I won't throw out my old XBox...
diy exploit hack lifehacker linux microsoft mod xbox videogames howto 2007 Jul 29, 12:54Mozilla's bug notes on the previously marked FireFox exploit.
firefox bug browser security mozilla windows ie7 microsoft 2007 Jul 29, 12:51Notes on a recent FireFox security exploit.
firefox hack security browser ie7 windows 2007 May 13, 7:30My parents blog on their new motorhome exploits.|Parents
motorhome blog friend family 2007 Apr 17, 11:45Opera (
the fifth most popular web browser) has a new feature named
Speed Dial (video of it in action). Whenever you open a new tab you get your Speed Dial view which consists of nine thumbnails of user-settable
pages. Its like a quick-favorites that appears every time you open a new tab. I think this is a neat idea and was considering how I might do that in IE7. The following is my hack-y and ugly but no
coding required version of Speed Dial for IE7. I like my hack and I'm about to expound upon it in unnecessary detail so skip to the last paragraph if you're afraid of losing interest.
By default in IE7, whenever you open a new tab you navigate to 'about:Tabs'. As noted in wikipedia the result of
navigation to 'about:Tabs' is determined by values in the registry. Specifically, values in the key in
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs". Usually this fact is exploited by
malicious software to hijack
"about:blank" and show you ads but we can hijack it too in order to display our Speed Dial-ish page.
Of course since this is a code-less hack we've got limited options on what to change 'about:Tabs' to display. It should have the following requirements.
- Something local so that our 'about:Tabs' doesn't disappear when we go offline and so that its relatively fast.
- The user should be able to modify its content.
- Show links that the user uses.
- Show thumbnails of those links
- Provide easy to use drag and drop interaction and generally look cool.
Now, I use del.icio.us which allows me to store all of my favorites online and which provides RSS feeds that list my saved links. New in IE7 is an
RSS platform that will, among other things, cache RSS feeds locally. So, by pointing
about:Tabs to my del.icio.us feed 'http://del.icio.us/rss/sequelguy/quickreference' I get (1) from IE7's RSS support, and (2) and (3) from del.icio.us. Of course requirements (4) and (5) are missing
but hey, I said this was ugly.
In summary, if you change the registry value "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs!Tabs" to point to an RSS feed of your favorites you can get a hack-y version of Opera's
Speed Dial. I should note that although its referenced on pages such as wikipedia changing your 'about:Tabs' URI in the manner I describe is not documented and not supported by Microsoft. There could
be all kinds of horrible repercussions from this change of which I'm not aware. Yeah, actually you know what? Forget I said any of this. Pretend I never wrote it...
browser technical hack 2007 Mar 12, 12:46An interactive map showing where Internet attacks are coming from by top level domain.
siteadvisor map malware exploit security visualization 2007 Feb 20, 1:07Abstract: "We present a formal model and a new search algorithm for folksonomies, called FolkRank, that exploits the structure of the folksonomy. The proposed algorithm is also applied to find
communities within the folksonomy and is used to structure se
folksonomy folkrank algorithm article rank sort social tag tagging 2006 Nov 27, 2:15Public bodies are by far the largest producers of information in Europe. This information is recognised as a major, but so far under-exploited asset, which could and should be a fundamental building
block of the ‘new economy’ in the Information Soci
study economics europe public-domain information government read
Some rights reserved