Scary Beasts Security

MAY 27, 2011

A while ago, I was playing with grammar-based XPath fuzzing and I found and fixed an interesting libxml bug. The commit, for the curious, is here: [link] The trigger for this bug was the XPath expression: //@*/preceding::node()/ancestor::node()/ancestor::foo['foo'] which for some reason I haven't yet analyzed leads to a pathologically large collection of nodes within libxml.

50

50

Privacy and Cybersecurity Law

MAY 19, 2011

On 26 May 2011, new rules on the use of website cookies will come into force and threatens to drastically […].

Marketing 40

Marketing 40

Scary Beasts Security

MAY 25, 2011

I'm just back from the fun that was HiTB Amsterdam 2011. (Plug: you should check out one of the HiTB series if you haven't yet; Dhillon and crew invariably put a good, intimate conf together). I sat on the day 2 keynote panel on "The economics of vulnerabilities". As usual, talking about this topic was great fun and the audience asked some great questions.

Marketing 50

Marketing Software Government Malware 50