Recon 2008 recap

[Tiller Beauchamp] gave a presentation on applied reverse engineering in OS X at this year's REcon, but he also attended many of the other talks and gives his take on the highlights of REcon 2008 in a guest post on the ZDNet blog, Zero Day.One of the highlights for him was Neohapsis's [Chris Smith] discussing virtual machines implementing code obfuscation. The method uses custom instructions and … [Read more...]

Using multiple browsers for security

[Rich] over at Securosis takes us through some of his browser paranoia exercises. He uses different browser profiles for different types of web activities. Based on potential risk, various tasks are separated to protect from CSRF attacks and more. Everyday browsing with low risk passwords is done in one. RSS reading with no passwords is done in another. He runs his personal blog in a browser … [Read more...]