[Tom] wrote in to tell us about his JavaScript project for motion detection. It ties together two ideas we've talked about recently. The first is doing image processing in-browser using Canvas(), which we've seen employed in captcha breaking. The second is offloading heavy processing to browsers, which we saw recently in the MapReduce implementation. [Tom] is using JavaScript to compare … [Read more...]
Distributed computing in JavaScript

We've heard about the idea of using browsers as distributed computing nodes for a couple years now. It's only recently, with the race towards faster JavaScript engines in browsers like Chrome that this idea seems useful. [Antimatter15] did a proof of concept JavaScript implementation for reversing hashes. Plura Processing uses a Java applet to do distributed processing. Today, [Ilya Grigorik] … [Read more...]
sslstrip, hijacking SSL in network
Last week at Black Hat DC, [Moxie Marlinspike] presented a novel way to hijack SSL. You can read about it in this Forbes article, but we highly recommend you watch the video. sslstrip can rewrite all https links as http, but it goes far beyond that. Using unicode characters that look similar to / and ? it can construct URLs with a valid certificate and then redirect the user to the original site … [Read more...]
Google Chrome roundup

Google Chrome made a huge splash in the past week, but will it really change the way you browse, and convince you to switch from your current browser? For those who want to play with it but don't want Google to completely take over their lives, Chromium is the open source project behind Google Chrome. Linux and OS X users can also run Chrome using WINE, although success is not guaranteed. To make … [Read more...]
Google Chrome webcast starts now
The webcast for Google's new Chrome browser starts at 11PDT. The browser is supposed to feature better memory management. Right now they're opening with Led Zeppelin and Queen, so I guess it's supposed to be rockin' as well. Download it for Windows here. Chromium source available here. … [Read more...]
IBM sees influx in zero-day exploits
IBM's X-Force security team has released a mid-year report(PDF) stating that the number of zero-day exploits is growing at an alarming rate. For those of you unfamiliar with the term, a zero-day exploit is a program that is created and implemented within 24 hours of the disclosure of a security flaw. These exploits usually affect users before they even know the vulnerability exists and long before … [Read more...]
Javascript Vi
Few would dispute that Vi was a great text editor in its day, but no one has done anything to bring it back until now. A company called Internet Connection has developed JSVI, a clone of Vi that was written in javascript and runs inside editable text areas on virtually any browser with javascript support. It functions identically to Vi, offering ed/ex command support, vi-keys, unicode awareness, … [Read more...]
Subscribe for weekly videos

Recent comments