|
|
|
|
|
|
|
January 2005 - Security Briefs
-
Michael Howard posts a trick to get good software-generated random numbers without having to load CAPI. If this is all you're using CAPI for, you will find this may reduce your working set!
-
http://pluralsight.com/wiki/default.aspx/Keith.HallOfShame Have at it folks. You no longer have to wait for me to post your most egregious stories of apps that fail to run without admin privileges. Enjoy!
-
Robert Hensing details the procedure he and his team used to track down an attack on WINLOGON.EXE. This is particularly interesting to me given that I'm just now wrapping up a little project that involved writing a custom GINA. Incident response must...
-
I always forget that this function requires special care when passing its main argument (the fifth argument, AuthenticationInformation), which is the logon request data structure. The documentation doesn't tell you that this data structure needs to be...
-
I just ran across a great article by Fredrick Chong, who works on this stuff at Microsoft.
-
Michael Howard recently published a couple of articles ( first , second ) that talk about running selected software with lower permission, such as email readers or browsers. A lot of people who normally run as an admin but feel bad about it got really...
-
Help, readers. #include <windows.h> void main() { LONG_PTR x = 0; SetWindowLongPtr(0, 0, x); } Ok, forget the fact that the above code doesn't do anything useful. But you'd expect it to compile without a warning, right? Well, compile it with the...
-
I spent part of the day today working on some system deployment tools, and I came across a case where I needed to delete a system DLL that's always in use. Since it seems that every year or so I find myself needing to know this, here's a good algorithm...
-
November was pretty crazy getting ready for Campsight (which was a spectacular success ), and I spent most of December either consulting for Microsoft or spending time with the family, who have been neglected way too much during the startup phase of this...
|
|
|
|
|
|