Robert Hensing's Blog

Software Security . . . and stuff.

September, 2008

  • SkyFire?!?!?!

    OMG - how is it possible that I JUST today found out about this? http://www.skyfire.com What is it? It's a new FREE (for now) browser for WM phones . . . that doesn't absolutely positively suck. I just installed it on my Q9 smartphone and it rendered...
  • I'm a PC and I fight for the users . . .

    Tron Guy makes a cameo in our "I'm a PC" video wall: http://media.lifewithoutwalls.com/ugc/t/r/o/tronguy/tronguy_336_252.wmv Here's the algorithm for finding direct links to videos based on user name: http://media.lifewithoutwalls.com/ugc/[1st letter...
  • Extreme Ad Makeover - We are now entering "the 2nd phase"?

    You know, I have one simple request. And that is if we are to have an ad campaign with sharks, that we have sharks with frickin’ laser beams attached to their heads! http://www.nytimes.com/2008/09/18/business/media/18adco.html?pagewanted=1&_r=1&ei...
  • Zune 3.0 - Using wifi to download songs right from the ZMP (speed test)

    Today a friend asked me how fast downloading songs / albums from the ZMP was and I had to admit - I wasn't sure. The day the firmware came out I immediately hooked up my Zune to my wifi network at home and then connected to the marketplace and then started...
  • Zune 3.0 - Insanely great creamy goodness from the Zune team

    So I have a Zune 80 (black) and I freaking love it. The Zune software kicks the living crap out of anything Apple has ever released in terms of quality and functionality and ease of use. The software just works, the Zune just works - it's probably the...
  • GOVCERT.NL and German authorities recommend against installing Chrome!?

    It was only a matter of time - the first few days worth of bugs were so bad I gave up covering them / reading them and one *has* to question Google's commitment and ability to write secure code: http://www.computerworld.co.ke/articles/2008/09/09/security...
  • 6 on 6? (Hot IE on WM action)

    Whoa . . . a full fledged browser on my Smartphone! Yes please! http://news.cnet.com/8301-13860_3-10039152-56.html?tag=newsLeadStoriesArea.0 Don't get me wrong - the browser on WM6.1 is nice . . . but it's still not all that great - lots of pages...
  • New Microsoft Ad with Bill and Jerry - it's actually sorta FUNNY!

    And holy crap - it's 4.5 minutes long!!! You can watch the ad in better definition than you can on Youtube by going here (and it looks like down on the timeline we'll have them all up there soon): http://www.microsoft.com/windows/ Okay - I have...
  • Why I'm not running Chrome anymore (back to IE8 beta 2 for me)

    http://www.milw0rm.com/exploits/6367 Long strings leading to stack overruns? Really Google? Srsly? I guess I have the answer to my questions about whether they have an SDL / or the notion of banned APIs / or automated code scanning stuff . . . I mean...
  • It begins . . .

    UPDATE : Go here and watch the video - it's higher resolution and better: http://www.microsoft.com/windows/ Our $300MM ad campaign featuring Seinfeld: http://www.techcrunch.com/2008/09/04/first-bill-gatesjerry-seinfeld-advertisement-wheres-the-microsoft...
  • Breaking out of the Chrome sandbox - 2 interesting vulns in 24 hours? Got IE8? :)

    So it hasn't even been out 24 hours yet but Chrome is, as predicted, getting scrutinized heavily and well . . . it's falling down at a pretty alarming rate (as say compared to say - IE8 beta 2 which has been out longer :)) So yesterday Aviv Raff discovered...
  • On Chromium and Practical Windows Sandboxing

    UPDATE 9/13/2008 : The authors of the Chromium whitepaper linked to below wrote to me the day after I wrote this post thanking me for the links to Dave's blog and they insisted that they had not seen his presentation at Blackhat nor were they aware of...
  • Google Chrome coming today? Launch early and iterate? srsly?

    UPDATE : Reading the Google chrome comic that I received offline - man, I have to admit, this does sound pretty hot. Lots of interesting things - but first and foremost the one that security geeks will care about most - they have in some way ACL'd the...