Security and social engineering 2012-04-19T21:50:41-04:00 http://throwingfire.com/ Patrick Mylund Nielsen throwingfirehttp://feedburner.google.com 2012-04-19T00:00:00-04:00 http://throwingfire.com/whats-old-is-new-again A new security vulnerability in OpenSSL turns out to have been included in a book about finding security vulnerabilities, 6 years ago!<img src="http://feeds.feedburner.com/~r/throwingfire/~4/a45OWkVWMYc" height="1" width="1"/> http://throwingfire.com/whats-old-is-new-again/ 2011-05-22T00:00:00-04:00 http://throwingfire.com/security-through-obscurity Why I think the increasingly popular 'That's not security. That's obscurity.' attitude is unhelpful.<img src="http://feeds.feedburner.com/~r/throwingfire/~4/Eqp68aLPn9Q" height="1" width="1"/> http://throwingfire.com/security-through-obscurity/ 2011-05-08T00:00:00-04:00 http://throwingfire.com/lastpass-disclosure-shows-why-we-cant-have-nice-things Response to the media's hysteria surrounding LastPass' responsible security warning.<img src="http://feeds.feedburner.com/~r/throwingfire/~4/cYKVWa13NjU" height="1" width="1"/> http://throwingfire.com/lastpass-disclosure-shows-why-we-cant-have-nice-things/ 2011-05-07T00:00:00-04:00 http://throwingfire.com/exploring-a-web-server-botnet A look into the workings of a malicious PHP script used to take control of poorly configured web servers including Apache, IIS and Xitami.<img src="http://feeds.feedburner.com/~r/throwingfire/~4/5UCPjqWNO0A" height="1" width="1"/> http://throwingfire.com/exploring-a-web-server-botnet/