• Faster than the bear & dodging the moose

    I was talking to mike lloyd tonight, a truly wonderful human being and one of the most viciously smart folks I know (he’s currently the CTO of Red Seal Networks); the kind who, if in the days of the musketeers, would put a blade through your chest and apologize profusely for inadvertently wounding you. We…

  • DARPA CFT

    I was just awarded a small DARPA contract through the Cyber Fast Track program which Mudge has been evangelizing for awhile now.  I’m still not sure how much I can say about it, but I will say more as time goes on… it was a remarkably painless process, I’ll say that – hard to believe that our big…

  • looking for a good man(1)

    I like documentation.   Programs should have it.  But on the heels of the man path thing I did some more looking on my  Snow Leopard System. Finding all the SUID files outside the traditional /sbin areas shows a few more (e.g. “find -x / -type f -perm -04000 -ls”.)   Looks like 15 files, 8 of…

  • walk like a /usr/bin/man

    Sometime, probably in the paleozoic era, I wrote a little perl script I just came across again.  At the time  I was frustrated by commands in /bin or /usr/bin not having documentation, even on a cleanly installed system… I guess I would think if something is important enough to install on a system you might…

  • getting password hash on OS-X

    I keep having to look this up… so here’s a perl script (click to DL below). Also prints out some other stuff I keep forgetting how to get. Also does it for the user logged in, so you can sudo and have it work. Will die if you can’t read the hash file. Sample run:…

  • Security in Bullet Time

    I’ve been thinking of virtual systems and probing and prodding the same. Virtualizing is sort of sticking something in amber, but instead of being a dead or frozen system it’s a place you can run anything you want for as long as you want, it’s alive; and it can be exactly like a target you…