Top all-time · #2128
Adrian Crenshaw
Personal blog · irongeek.comsecurityprogramming
Adrian Crenshaw writes Irongeek.com, a personal blog at irongeek.com about security and programming. Since 2007, 38 different Hacker News readers have linked it 44 times, most often “HD Moore The Wild West Derbycon 2012 [video]”. No feed was found, so read it on the site itself.
Irongeek's Information Security site with tutorials, articles and other information.
Most-linked posts?
- /homoglyph-attack-generator.php3 people · 3 mentions · first linked 2019-07-24
- /i.php?page=security/programmable-hid-usb-keystroke-dongle3 people · 3 mentions · first linked 2011-01-21
- HD Moore The Wild West Derbycon 2012 [video]2 people · 3 mentions · first linked 2013-02-08
What Hacker News says?
They can't sue him, they wouldn't have a leg to stand on. Why not? I've been clicking around various US laws and have yet to see any mention about a login screen or "Go away, private!" messages being required before it counts as unauthorized access: http://www.irongeek.com/i.php?page=computerlaws/state-hackin...
Comment linking /i.php?page=computerlaws/state-hacking-laws
on “0day vulnerability full disclosure: American Express”Submitted What can you find out from an IP? as a story · 3 points
HN discussionPerhaps he was using ettercap: http://www.irongeek.com/i.php?page=security/ettercapfilter
Comment linking /i.php?page=security/ettercapfilter
on “Show HN: FuckFuckAdblock”Submitted Deliberately Insecure Web Applications For Learning Web App Security as a story · 3 points
HN discussionThere are a lot of homoglyph url tricks. It turns out there are even online attack generators for these, so you can see for yourself: https://www.irongeek.com/homoglyph-attack-generator.php https://adlinkurl.com/blog/2-homoglyph-url-spoofer
Comment linking /homoglyph-attack-generator.php
on “Use plaintext email”Submitted Lockade: Locksport Electronic Games as a story · 2 points
HN discussionYes. http://www.irongeek.com/i.php?page=security/programmable-hid... Plug it in, makes the OS think it's a keyboard while the user thinks it's a USB stick.
Comment linking /i.php?page=security/programmable-hid-usb-keystroke-dongle
on “Black ops: how HBGary wrote backdoors for the government”Submitted What can you find out from an IP? as a story · 2 points
HN discussion> ... because back then Unicode was still a pipe dream in the mind of some visionary. Everything used 8 bit encoding, and everyone assumed ASCII or at least something compatible with the 7 bit subset of ASCII. They could still have been case sensitive (C was), so I don't understand how that's relevant to the idea that "case insensitivity is a problem". > Rust, Go, Swift, Python All of these languages impose ASCII fo…
Comment linking /-attack-generator.php
on “Nim 1.6.2”Submitted And the Clouds Break: Continuity in the 21st Century – Wolfgang Goerlich as a story · 1 points
HN discussionI bought MikroTik for the netflow feature, which can reveal active malware via hardware packet counters by endpoint.[0] The next cheapest router with netflow is in the thousands of dollars. MikroTik is $180 at Amazon. [0] http://www.irongeek.com/i.php?page=videos/houseccon2015/t302...
Comment linking /i.php?page=videos/houseccon2015/t302-the-fox-is-in-the-henhouse-detecting-a-breach-before-the-damage-is-done-josh-sokol
on “The Ars guide to building a Linux router from scratch”Submitted New results in password hash reversal as a story · 1 points
HN discussionHD Moore (creator of metasploit) had a talk about doing something like this. He scanned all of IPv4 hitting common TCP and UDP ports, and collected data about the services running. He found a lot of cool stuff. For instance, there are apparently 7 Windows NT 3.5.1 boxes with SNMP open sitting on the internet. And about 300 IIS servers that give out the same session ID cookie when you log on. The visualizations are a…
Comment linking /i.php?page=videos/derbycon2/1-1-2-hd-moore-the-wild-west
on “The result of pinging all the Internet IP addresses”Submitted Derbycon 2015 Videos as a story · 1 points
HN discussionThis doesn’t apply to folks who want contacts for what’s in their profile, but: sometimes you’d like employers to know what relevant adjacent skills you have, without recruiters hitting them as search terms. For that purpose, I masked all of my software terms like “java” from my EE profile with homoglyphs: humans can read them, but they don’t match search terms. I used this site: http://www.irongeek.com/homoglyph-at…
Comment linking /homoglyph-attack-generator.php?decoded=developer&idn_version=2003&encode=Encode+%3E%3E
on “Ask HN: Do you have to use LinkedIn to get hired?”Submitted Competitive Hacking- why you should capture the flag as a story · 1 points
HN discussionSetting I2P up on the RPi then setting ssh up to listen on a I2P hidden service on the RPi would be better than the method shown. That way if the device is discovered it would be impossible to trace back the actual IP address of the person connecting to it and an adversary obtaining your ssh key wont be able to log into any of your servers. Check out this presentation from DerbyCon about using a cheap NAS to do some…
Comment linking /i.php?page=security/raspberry-pi-i2p-svartkast
on “Show HN: I made my Raspberry Pi a secret phone homing server”Submitted Vulnerability & Exploit Trends: A Deep Look Inside The Data as a story · 1 points
HN discussionRon, before you get into the chip-n-pin/smart-card stuff commonly used in Europe and Asia, you should probably check out the modern "Man-In-The-Browser" attacks: http://www.irongeek.com/i.php?page=videos/derbycon2/3-1-1-da... As the above shows, crypto is useful, but it's far from perfect due to its reliance on insecure stuff (i.e. web browsers, operating systems, ...). When the foundation is flawed, it's turtles al…
Comment linking /i.php?page=videos/derbycon2/3-1-1-dave-marcus-2fa-enabled-fraud-dissecting-operation-high-roller
on “A simple solution to credit card fraud, and why you won't see it any time soon”Submitted Fear and loathing at the Riviera: A noobs guide to Defcon as a story · 1 points
HN discussionChristopher Domas gave a nice presentation[0] at DerbyCon 2012 about software that ended up becoming CantorDust[1]. I was pretty jazzed about after the presentation but didn't keep up with where it went. [0] https://www.irongeek.com/i.php?page=videos/derbycon2/4-2-1-c... [1] https://github.com/Battelle/cantordust
Comment linking /i.php?page=videos/derbycon2/4-2-1-christopher-domas-the-future-of-re-dynamic-binary-visulization
on “Visualizing Binary Files”Submitted HD Moore The Wild West Derbycon 2012 [video] as a story · 1 points
HN discussionmaybe there's a way to include those words like "bl0ckchain" and "crypt0" or even similar looking cyrillic letters eg: сrʏpto ʙloϲkchain from https://www.irongeek.com/homoglyph-attack-generator.php
Comment linking /homoglyph-attack-generator.php
on “Where are the low level system engineers?”Submitted Derbycon 2011 Videos as a story · 1 points
HN discussionThere was a good presentation from the Chief Security Architect at Bromium from DerbyCon last year: http://www.irongeek.com/i.php?page=videos/derbycon3/4303-san... He absolutely tears apart application sandboxes like "Sandboxie".
Comment linking /i.php?page=videos/derbycon3/4303-sandboxes-from-a-pen-tester-s-view-rahul-kashyap
on “Qubes – Secure Desktop OS Using Security by Compartmentalization”Submitted Crude, Inconsistent Threat: Understanding Anonymous as a story · 1 points
HN discussionI remember that iron geek has a few talks about this, and specifically about different ways to leak information in a darknet, usually protocols that dont respect what the browser is trying to accomplish, and depending how your tor traffic is setup (browser plugin), may lead someone directly to you. Anyway, here's his fairly simple php script: http://www.irongeek.com/i.php?page=security/detect-tor-exit-...
Comment linking /i.php?page=security/detect-tor-exit-node-in-php
on “Japan's National Police Agency to urge Internet providers to block users of Tor”Submitted Apps/Scripts as a story · 1 points
HN discussionThere's a reason why I've not included my email address in my HN profile. I'll keep the discussion here. :) So, if you check the truecrypt manpage [0] (or the code in that GH repo that you linked to) you'll see the presence of the --mount-options option. This allows you to pass along any and all options to mount(8) that you wish to pass along... including nosuid. The problem you're describing isn't in TrueCrypt the…
Comment linking /i.php?page=backtrack-3-man/truecrypt
on “ECryptfs Security Audit”Persistence inside the WMI database is fun. There was a good talk about this at DerbyCon[0] years ago. I think it has gotten more press since several APT groups were using it but it still isn't a well-known persistence mechanism. [0] https://www.irongeek.com/i.php?page=videos/derbycon5/break-m...
on “Proof of concept WMI virus (zero-day)”
