Posts

Why I disabled comments

During the recent site cleanup I decided to disable comments and remove (most) previous comments from the site. This post explains my reasoning.

David Cannings
May 29, 2017 2 min read General
Website spring clean

I’ve given this site a long overdue tidy, finally moving away from Wordpress to a static site.
David Cannings
May 22, 2017 1 min read General
The EU Referendum

This post is entirely based on my opinions. If you don’t want to read a post about my opinions there are plenty of excellent videos on YouTube. You have been warned.

David Cannings
Jun 23, 2016 7 min read General
Sakula - an adventure in DLL planting

This is a local mirror of a blog written by me and originally published by NCC Group.

You can also read the related publication: Sakula DLL planting analysis.

David Cannings
Jun 16, 2016 3 min read Computing
sdelete - when secure delete fails
This is a local mirror of a blog written by me and originally published by NCC Group. Note: there are now better ways of wiping modern SSDs, as many will be self encrypting or support ATA commands for secure erase.
David Cannings
Mar 7, 2016 8 min read Computing
Analysis of the Linux backdoor used in freenode IRC network compromise
This is a local mirror of a blog written by me and originally published by NCC Group. This project was a highlight of my time at NCC Group, and I enjoyed collaborating with Pete Beck during analysis.
David Cannings
Oct 17, 2014 8 min read Computing
Extracting the Payload from a CVE-2014-1761 RTF Document
This is a local mirror of a blog written by me and originally published by NCC Group. Background In March Microsoft published security advisory 2953095, detailing a remote code execution vulnerability in multiple versions of Microsoft Office (CVE-2014-1761).
David Cannings
Jun 8, 2014 6 min read Computing
Amex: How to fail at running a survey

Banks and financial institutions are constantly giving out advice about email safety, helping customers to avoid phishing scams. Make sure the email is genuine, don’t click on links, never give your personal information away online. Sensible advice, unless the financial institution doesn’t make it easy to actually verify their emails.

David Cannings
May 22, 2014 3 min read General
SiteWizard are annoying spammers

In short: SiteWizard are dirty annoying spammers who try random email addresses to send their silly SEO spam. They need to stop doing this.
David Cannings
Mar 24, 2014 2 min read General
libnids on 64-bit architecture machines

A quick note for anybody using libnids on a 64-bit machine (AMD64), you will need to compile with -fno-strict-aliasing if you use optimisation at -O2 or above. Without it libnids will silently fail to provide you any data.

David Cannings
Mar 19, 2014 1 min read Computing