Author: hrbrmstr
Everything written by hrbrmstr.
dbClone "hack" for OS X
Moloch built a Windows & Linux impersonation/cloning utility in Python that was/is meant to be used from a USB/external volume. The utility can save the cloned host id to a local file and also has the capability to use a simple HTTP GET…
"Flatten" HTML Content (i.e strip tags) in Cocoa/Objective-C [UPDATED] [BUG-FIX]
One of my most popular blog posts — 24,000 reads — in the old, co-mingled site was a short snippet on how to strip HTML tags from a block of content in Objective-C. It's been used by many-an-iOS developer (which was the original…
Checkboxes Fail To Defend Maine Department of Conservation Against Attacks
I tweeted a quick note about the 2010 Maine Department of Conservation state park pass ordering system breach . The brief AP story indicated that the breach itself was caused by a malware infection on systems at their SasS provider…
"Repairing" Strict Transport Security in Chrome on OS X
One of my subdomains is for mail and I was using an easy DNS hack to point it to my hosted Gmail setup (just create a CNAME pointing to ghs.google.com ). This stopped working for some folks this week and I've had no time to debug exactly…
Crossroad of ERM and the Parallels to IRM
I was reviewing the - er - highlights? - from the ninth ERM Symposium in Chicago over at Riskviews this morning and was intrigued by some of the parallels to the current situation in enterprise security risk management (the ERM symposium…
Remote Assistance/Information Gathering Aid - SupportDetails
I'm putting together a computer & online safety presentation for an upcoming talk at a senior center in Portsmouth (NH) and came across Support Details in my information hunting trek. This site makes it dirt simple to get basic information…
Behind The Mask : Supporting The New CIO Personas
This morning, @joshcorman linked to an article in the Harvard Business Review " The Conversation " blog that put forth the author's view of The Four Personas of the Next-Genereation CIO . The term persona is very Jungian and literally…
Micropwns :: Risk Microprobabilities for Infosec?
I had not heard the term micromort prior to listening to David Spiegelhalter's Do Lecture and the concept of it really stuck in my (albeit thick) head all…
Post-theft/loss Response & Recovery With Evernote
Last night, the kids left the garage open after sledding all afternoon and I failed to perform my usual rounds due to still being horrendously ill. At some point between 23:00 & 05:30, miscreants did a snatch & grab on some electronics and…
Never A Better Time To Baseline
If you're preparing to install Windows 7 or Windows Server 2008 R2 Service Pack 1 , now would be a good time to give Microsoft's Attack Surface Analyzer a spin. ASA takes a baseline snapshot of your system state and then lets you take…