Clik here to view.
PS3 hypervisor exploit reproduced
There’s a nice series of articles by xorloser on reproducing the recent PS3 hypervisor hack. He used a microcontroller to send the glitch and improved the software exploit to work on multiple firmware...
View ArticleClik here to view.
A new direction for homebrew console hackers?
A recent article on game console hacking focused on the Wii and a group of enthusiasts who hack it in order to run Linux or homebrew games. The article is very interesting and delves into the debate...
View ArticleClik here to view.
Stuxnet is embarrassing, not amazing
As the New York Times posts yet another breathless story about Stuxnet, I’m surprised that no one has pointed out its obvious deficiencies. Everyone seems to be hyperventilating about its purported...
View ArticleClik here to view.
State space explosion in program analysis and crypto
While analyzing some software the other day, I was struck by the duality of cryptanalyzing block ciphers and program analysis techniques. Both present a complex problem and similar tools can be applied...
View ArticleClik here to view.
Improving ASLR with internal randomization
Most security engineers are familiar with address randomization (ASLR). In the classic implementation, the runtime linker or image loader chooses a random base offset for the program, its dynamic...
View ArticleClik here to view.
Cyber-weapon authors catch up on blog reading
One of the more popular posts on this blog was the one pointing out how Stuxnet was unsophisticated. Its use of traditional malware methods and lack of protection for the payload indicated that the...
View Article
