foxpa.ws

Check and mate. Subdomain Takeover (SDTO) attacks are popular for their ease of exploitation and inherent severity. Essentially they take advantage of forgotten, uncommitted or mismanaged CNAME records that point from a victim domain or subdomain to another domain or subdomain which has expired…

This post serves as a living list of free, online banking service options that are available to Canadians (lacking permanent residency, a green card or mailbox, permanent or forwarding address in the United States). This includes banks that provide chequing/savings accounts,…

...or to be hysterical: Brainstorming Methods to Defeat the Spying Rootkit Backdoor Intel Hid in Your Chipset. Then again, is that hysterical or is it accurate? Maybe if it hadn't been locally exploited... then remote exploited... again and again... even on machines that Intel doesn't commercially support…

This page serves as a living list of major, far-reaching vulnerabilities found in numerous/generic systems that I feel it is wise to test a new system or environment for so that steps toward mitigation can be taken and the system provision/build/setup/initial configuration…

A living list of things I intend to (and subsequently have) made with my 3D printer so I can keep track of ideas before they fall out of my ears and bounce away before they can make it to the printer. Or while I wait for a design to become available. Or while I wait for…

While Qubes will be moving to an architecture that allows you to run your AppVMs on remote machines, allowing you to employ an almost thin-client to mainframe-like architecture, when I first moved to Qubes from Gentoo as my daily driving workstation operating system the number of cores and amount of…