<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>WintercoreLabs</title>
	<link>http://blog.wintercore.com</link>
	<description>Thinking code</description>
	<lastBuildDate>Wed, 24 Nov 2010 20:23:42 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress/3.0.1" -->

	<item>
		<title>M-ETH: Man in the middle &#8211; Ethernet</title>
		<description><![CDATA[Over a year ago I presented at LaCon'09 a custom PCI NIC which allows to perform Man in the middle of the whole network traffic flowing through the device. The idea behind this PCI Card is once it is plugged into a computer the whole traffic can be inspected, analyzed and, of course, modified when required in [...]]]></description>
		<link>http://blog.wintercore.com/2010/11/24/m-eth-man-in-the-middle-ethernet/</link>
			</item>
	<item>
		<title>Vulnerability Engineering</title>
		<description><![CDATA[In this article we are going to use some metrics from Software Engineering and apply them to the Vulnerability Research World. We are going to define a new term which will allow us get a probabilty showing how likely is an application to have a vulnerability during its lifetime and also will give an idea [...]]]></description>
		<link>http://blog.wintercore.com/2009/11/11/vulnerability-engineering/</link>
			</item>
	<item>
		<title>See Artica Demo Client and IceSphere in action</title>
		<description><![CDATA[Download Video (24 mb) Do not hesitate to contact us if you need further information]]></description>
		<link>http://blog.wintercore.com/2009/02/10/see-artica-demo-client-icesphere-in-action/</link>
			</item>
	<item>
		<title>Happy pack#1. I know what you installed last summer</title>
		<description><![CDATA[It's really frustrating not to know what applications, patches, hotfixes (virtually any file)...are installed on the system where you are performing a penetration test, isn't it? I have decided to put for sell, to trusted sources only, a novel technique that takes advantage of a weakness in Microsoft technology that allows remote attackers to gain [...]]]></description>
		<link>http://blog.wintercore.com/2008/10/06/happy-pack1-i-know-what-you-installed-last-summer/</link>
			</item>
	<item>
		<title>Motorola Timbuktu&#8217;s Internet Locator Service real-time data exposed to public</title>
		<description><![CDATA[We just want to make a public warning to those users of Motorola/Netopia Timbuktu Remote Control Software who are using the Internet Locator service. This service allows to locate any Timbuktu's user just by knowing the email. More than five months ago we notified Netopia's customer support (http://blog.wintercore.com/2008/04/26/things-that-shouldnt-be-there/), after discovering a hardcoded user/password pair within [...]]]></description>
		<link>http://blog.wintercore.com/2008/10/06/motorola-timbuktus-internet-locator-service-real-time-data-exposed-to-public/</link>
			</item>
	<item>
		<title>Toward a new generation of audio captchas</title>
		<description><![CDATA[It seems the post "Breaking Gmail's audio Captcha" has been slashdotted so many interesting discussions have emerged as a result. It's worth noting that there is nothing specially exciting in the approach used to break the google audio captcha, merely a bunch of signal analysis and pattern recognition principles applied. Almost any Voice Recognition / [...]]]></description>
		<link>http://blog.wintercore.com/2008/05/04/toward-a-new-generation-of-audio-captchas/</link>
			</item>
	<item>
		<title>Things that shouldn&#8217;t be there</title>
		<description><![CDATA[Some days ago we released a security advisory for Realtek-curious note: according to secunia, it is the first advisory for that vendor- where a piece of code that was originally intented to be used by the engineers only, ends up being compiled in the release driver. Obviously, there is no reason to think about this [...]]]></description>
		<link>http://blog.wintercore.com/2008/04/26/things-that-shouldnt-be-there/</link>
			</item>
	<item>
		<title>Breaking Gmail&#8217;s Audio Captcha</title>
		<description><![CDATA[A week ago I came across this interesting post at the Websense blog, anyway I guess everybody is already aware that a bot was spotted breaking Gmail's image captcha. According to the post, the success rate is about 20%, which from spammers point of view is really profitable and sure more than enough for its [...]]]></description>
		<link>http://blog.wintercore.com/2008/03/05/breaking-gmails-audio-captcha/</link>
			</item>
</channel>
</rss>

