The Linux Ninja

Here are some stories from the past week that I found interesting:

• Pcapline.py and the Ann’s Aurora network forensics challenge – Wesley McGrew’s blog post about the tool he wrote for his winning entry into the latest SANS Forensics Challenge
• REMnux: A Linux Distribution for Reverse-Engineering Malware – Lenny Zeltser announced a new linux-based distribution targeted at reverse-engineering malware. It comes preloaded with a great set of tools and is distributed in VMWare’s Virtual Machine format.
• The True Problem with Web Apps and Security – Rafal Los wrote a nice post talking about what he views as the reasons why making web apps secure is so hard.
• Writing Fuzzable Code – Adam Shostack talks about how Microsoft is trying to build security in to their codebase.
• Hi! I’m a security researcher and here’s your invoice – Interesting editorial by Michael Zalewski on the selling/withholding of vulnerabilities
• Special Look: Face Time parts 1, 2, 3 – Great series by Josh Wright examining Apple’s FaceTime video chat protocol
• OSX ROP Exploit – EvoCam Case Study