rawdigits

Blog post: Ryan Huber - Distributed Security Alerting
https://medium.com/several-people-are-coding

Video: Zane Lackey - Building a Modern Security Organization    
https://duo.com/blog/duo-tech-talk-building-a-modern-security-engineering-organization

Krebs on Security Blog
https://www.krebsonsecurity.com

Sony Breach

HockeyInJune

04:28 -!- mode/#tutorials [+m] by HockeyInJune
04:28 <~HockeyInJune> Okay, we'll be starting again in a second.
04:29 <~HockeyInJune> Exploitation 1 is next at 19 votes.
04:29 <~HockeyInJune> Let's do that one.
04:29 <~HockeyInJune> You'll need IDA Demo and a Text Editor.
04:29 <~HockeyInJune> https://www.hex-rays.com/products/ida/support/download_demo.shtml
04:29 <~HockeyInJune> http://www.sublimetext.com/
04:31 <~HockeyInJune> Oh, isn't this a great song?
04:31 <~HockeyInJune> Alright, let's get started.
04:31 <~HockeyInJune> The times the are a-changin'

_vdbbin

#compdef vdbbin
#            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
#                    Version 2, December 2004
#
# Copyright (C) 2004 Sam Hocevar <[email protected]>
#
# Everyone is permitted to copy and distribute verbatim or modified
# copies of this license document, and changing it is allowed as long
# as the name is changed.
#

0xabad1dea

Here is a huge list of functions listed in the PHP manual which take an argument 
which contains sensitive data, either directly or as an array element. Use it to 
"audit" for statically embedded passwords in "your" codebase. Some of these are 
very obscure/deprecated/whatever. The ones with "construct" in the name are 
classes called in source like new foo("password");...


http://php.net/manual/en/function.hash-hmac.php

http://www.php.net/manual/en/function.curl-setopt.php