Computing | edeca.net

Extracting the Payload from a CVE-2014-1761 RTF Document

This is a local mirror of a blog written by me and originally published by NCC Group. Background In March Microsoft published security advisory 2953095, detailing a remote code execution vulnerability in multiple versions of Microsoft Office (CVE-2014-1761).

David Cannings

Jun 8, 2014 6 min read Computing

libnids on 64-bit architecture machines

A quick note for anybody using libnids on a 64-bit machine (AMD64), you will need to compile with -fno-strict-aliasing if you use optimisation at -O2 or above. Without it libnids will silently fail to provide you any data.

David Cannings

Mar 19, 2014 1 min read Computing

Logic Friday

Today I wanted to quickly calculate a truth table for a simple boolean equation. Whilst this can be done very simply on paper it becomes tedious with lots of inputs.

A quick Google search found “Logic Friday”, available at sontrak.com. Boolean operations can be described using logic gates, truth tables or an equation.

David Cannings

Jan 25, 2014 1 min read Computing, Electronics

Goodbye, clamav

Today I removed clamav from my VPS, which was built into the mail service I run. There are a small number of users and a few thousand messages a week - I liked that I was probably offering some small protection to those people. However all have endpoint anti-virus and most are wise enough to know about malicious email attachments.

David Cannings

Dec 23, 2013 2 min read Computing

Forcing SSL browsing in Apache

The Apache vhost configuration snippet below will force any non-SSL requests for a website to be rewritten to an HTTPS site instead. This is useful to ensure that clients cannot accidentally browse an insecure site, but they don’t have to remember or bookmark a particular URL.

David Cannings

Sep 20, 2013 1 min read Computing

Flyspray

Even more bugs that should have died in 2005..! This time it is Gentoo bug 77873. Perhaps there are a glut of bored open source developers who have time to devote to bugs that really aren’t very important 😄.

David Cannings

Feb 15, 2013 1 min read Computing

More dead bugs

Another new year, another bug from the past. The last one was from 2007 but this beats it by over a year. I haven’t used KDE or Konqueror for a few years now, but I hope the resolution of KDE bug 120138 brings happiness to someone.