Fix Leopard’s ARDagent Flaw

Now that there is code in the wild that exploits ARDagent to get root access, I figured it was time to whip up a simple script to help close the issue.  To explain, the reason that ARDagent is allowed to run code as root without first authenticating is because of the SUID bit.

[Read more]

Building a Documentation Wiki

The idea here is to build a documentation wiki environment that is structured enough to handle changes to the system from both the bottom-up and top-down. Using templates and a little ingenuity, we can achieve this with mediawiki.
[Read more]

ChicagoCon 2008

ChicagoCon 2008 is starting this week. I have a talk at 3pm Saturday titled: Conquests of a Penetration Tester. More information to come.