Michael

Author


Technology Railroading: Speeding Tickets and Source Code

Everyone wants to know how to beat a speeding ticket, red light camera, or breathalyzer test but how many actually believe they are innocent? Regardless your motive, the common denominator is that you have a legal right under the United States Constitution to provide a valid defense for the alleged violation. I am sure some [...]

Firefox 3.6 FileAPI Exif Injection

W3C File API gives web applications the functionality to work with objects and their data elements through drag and drop.  Firefox 3.6 now supports File API. Given its potential, I decided to test the waters using Exif meta data. Most web applications read Exif meta data from JPEG images as a normal strings so in [...]

Spoofed URL’s w/ Obfuscation and Preference Hijacking

URL obfuscation has been around for awhile. In a nutshell, it’s simply concatenating IP octets into hex and then turning it into a decimal number. The result is a URL similar to: http://1249717651/ As you see, there is no real way to know whether your on the Official Google web page or if the site [...]

Malware Analysis: Herder Disclosure and Botnet Dissection

After monitoring MalwareDomainList.com, I noticed an interesting piece of malware showing up on the Recent Updates. It was hosted on OAST.com which is a pretty high-traffic site. I decided to grab a copy of the binary and load it into my VM. To my surprise, it was the first .NET dropper I have came across [...]

PF Visual Voicemail make voice-mails too visual

It seems the leader in visual voice-mail applications, Phone Fusion, has accidentally left users voice-mails a little too “visual”. Phone Fusion provides an app for its Visual Voicemail Plus on all major smartphones and carriers (See list). I have only evaluated the version provided for the Android, but based on the method of communication it [...]

Password Storage Applications: Just how secure are they?

Recently I started playing with password security applications in the Android market that claimed ‘reliable’ from the authors. I decided to focus on the applications that had 4 or more stars and a lot of downloads. Since these types of applications store sensitive data, I wanted to see how hard it was to obtain this [...]

Mobile Developer Insecurity

Now a days, mobile phones are the gateway to banking, communication, and the internet. Some companies provide applications to control access to homes (like Schlage) while others provide an entrance into bank accounts (like Bank of America). With the sudden rise in developers and the ease of pushing apps into the public market place, users [...]

Login