Blog

The blog is currently being ported from WordPress to over 12 years of static pages of content. If there's an article missing that you're hoping to see, please contact me and let me know and I'll prioritize getting it online.

If you're running TendMicro's antivirus solution on Windows, update it asap!!

If you’re running TendMicro’s antivirus solution on Windows, update it asap!! A major information security flaw was detected in the software: it runs a localhost web service that is very vulnerable to attacks. From the security post: It took about 30 seconds to spot one that permits arbitrary command execution, openUrlInDefaultBrowser, which eventually maps to ShellExecute(). This means any website can launch arbitrary commands, like this: x = new XMLHttpRequest() x.

Continue Reading

Review: Dell Precision m3800 laptop

I purchased a Dell Precision m3800 laptop in late 2015 and haven’t been this happy about a laptop since my XPS13 Sputnik The initial build I purchased was the non-Thunderbolt edition, which I immediately exchanged (and paid the extra $150) for the Thunderbolt-compatible edition. It was a Windows-installed edition, which I quickly dual-booted to include Ubuntu. Dell, at the time, sold the laptop directly with Ubuntu pre-installed, but stubbornly refuse to make public the ISO to install Ubuntu on similar hardware.

Continue Reading

Review: Paribus.co

In the afternoon of December 2nd 2015, I signed up for an account at Paribus and started buying some Christmas gifts on Amazon. The following morning I got an Email from Paribus that they found a $12 price drop on what I just ordered the previous day. They get a small piece of that refund (25%) and that refund percentage lowers as you refer people to the site. Pretty sweet.

Continue Reading

Company uses a Raspberry Pi to create a man-in-the-middle attack

A company used a Raspberry Pi to create a “man in the middle attack”, on purpose, to warn users that they’re not on SSL-enabled web sites. So … exploiting a vulnerable vector to warn about a vulnerable vector. /facepalm It’s shockingly easy to build these kinds of devices, especially in public spaces such as cafes and libraries. You should always utilize some sort of VPN software on your device to protect your in-transit data.

Continue Reading

Don't memorize passwords, Memorize an algorithm

The 1995 Turing Award winner, Manuel Blum, has come up with a clever way to remove the necessity to memorize cryptic passwords. The gist of his approach is that you no longer have to memorize cryptic passwords, you just need a matrix of letters/numbers, and then an algorithm for creating a password based on the name of the web site. All you need to memorize is your personal algorithm of navigating through the 6x6 square of letters and numbers.

Continue Reading

Windows 10 spies on you by default

Windows 10 has a ton of tracking built-in. Here’s how to opt-out. Five things to do as soon as you install Windows 10: http://bgr.com/2015/07/30/windows-10-upgrade-installation-settings/ Open your Settings panel and click on Privacy where you’ll find 13 different screens to go through. Disable anything that you feel you won’t want tracked. Most of the important settings can be found on the General tab, but be sure to go though other tabs as well.

Continue Reading

Android has major security vector with SMS/MMS prefetch

A security vector was found, called StageFright, sent through a malicious video, and gives the attacker access to your device, including storage rights, microphone access, and copying data such as passwords. Because the default action of Hangouts and Android’s stock SMS app was to pre-fetch the videos (thereby processing them ahead of time for you), you could be vulnerable without even knowing it. It was blogged about several times, here are just a few:

Continue Reading

No wonder English is so hard to learn. Look how hard it is to rhyme.

None of these rhyme: bough cough rough through though But these do: pony bologna … English is weird. Originally posted on Google+ and copied to my own site for posterity.

Continue Reading

Cook a Turkey in Only One Hour

I’d be curious to know if Alton Brown has any opinions on this “cook a 14lb turkey in only one hour” method? Anyone brave enough to try this? http://larueblog.com/cook-perfect-holiday-turkey-one-hour/ This is not a joke, nor an exaggeration. Indeed, it is a promise. A gift to you, from the bottom of my heart. Because you CAN cook the perfect turkey in one hour, and transform your Thanksgiving experience forever. Believe me, you and your guests deserve it.

Continue Reading