It’s Here, Version 1.0 The Official v1.0 release of the Image Location & Privacy Scanner has arrived! This security tool plugin for Burp or OWASP ZAP security proxy tools will scan images for privacy exposure including GPS locations, camera serial numbers, even facial recognition tags. See my presentation about this software at this link. Version… Read More


Smoke – A unified means of generating, transmitting, encapsulating, and validating multiple hash digests simultaneously to replace existing stand-alone hash digest software. The software generates digests in parallel and is notably faster than using individual algorithms serially on large files. Smoke operates much the same way as existing hash digest tools, like md5sum, and Smoke… Read More


Background & Summary Existing websites and applications implementing an older password hashing algorithm like MD5 or SHA1 must be upgraded to a more secure algorithm. Both of these older algorithms are obsolete & breakable and if an attacker obtains those hashes from a lost backup tape or website vulnerability, the attacker could make quick work… Read More


Note: I originally posted this blog entry on the Aspect Security blog around 2017-03-16. I am mirroring it here with only formatting changes. Introduction During a project working with Hydra, a Network Login Auditor, we discovered and corrected a buffer overrun issue with possible security implications that might include the auditor being attacked by the… Read More


New Version: Image Location & Privacy Scanner v0.4 I have completed another update of the Image Location & Privacy Scanner, a plugin for Burp or OWASP ZAP security proxy tools. More camera types have their serial numbers detected. With some Panasonic camera, it will also give the name and age of the person in the… Read More


Note: I originally posted this blog entry on the Aspect Security blog around 2015-02-13. I am mirroring it here with only formatting changes. Introduction The spat of SSL and TLS issues over the last year have caused concern about the quality of the encrypted tunnel in Internet communications. The various creatively named BEAST, CRIME, &… Read More


I have a QNAP TS-653A NAS Drive that I use for storing most of my files, including terabytes of images, iTunes collection, etc, etc. Basically, lots of data. But, how do load it up quickly from all of these external drives full of jpgs I have still lying around. It is quicker to copy the… Read More


For large set of reasons, I have decided to move my blog site from the confines of WordPress to a different hosting solution; thus, http://veggiespam.wordpress.com becomes http://veggiespam.com. WordPress.com has a great advantage: preexisting userbase and by moving the site to differently-hosted, I am giving that up. Since I get few comments on my public and… Read More


Note: updated 2013-01-07 per suggestions from h0lleyb. Scenario: long trip, ADHD viewing practices, filled iPad to capacity, no wifi/cell.  Whether whiny husband or child, here’s how to add movies to your iPad at 40,000 feet. The trick is to use SD memory cards for offline storage of the movies and transfer them to the iPad… Read More