canaries, black hats and other magic tricks

Haven't updated my blog for some time now. Hmm, maybe it needs a new look.

I've been spending most of my free time on census research projects and PhD stuff. Hopefully I'll be finishing the darn thing this year.

Anyway, I recently did a quick writeup on how canary gets randomised nowadays in Linux apps. You can find it over here.

In other news, my workmate argp will be presenting both stack and heap smashing techniques for FreeBSD kernel exploitation at this year's BlackHat Europe (woohoo!). This will be a thorough examination for both attack vectors along with notes on safe kernel continuation. You don't wanna miss this!

That's all for now.

The Netflix prize

For those of you that participated in the Data Mining session of the recent ellak workshop, there are some new developments regarding the Netflix data mining contest.

According to Slashdot and the Netflix Prize Leaderboard, there may be a winning team.. :-)

Concert Audio in Lossless formats

etree.org hosts an amazing list of concert recordings in lossless formats. There's also a mailing list and RSS to keep you updated on new .torrent files.

Nice!