News for hackers. Stuff that matters.
Re:Hacker Gains Access To WordPress.com Servers by _b8r0 on Wednesday April 13, 2011 @01:54PM (#2443356)
Well this is great. I'm doing a talk tomorrow at OWASP London[1] on Wordpress Security. Interestingly while sorting out google dorks for the presentation I found 27,000 references to PHP Shell backdoors. If you're going, I look forward to seeing you there. Please don't laugh at me every time I mention wordpress and security in the same sentence.

[1] - https://www.owasp.org/index.php/London#Next_Meeting.2FEvent

Re:Hacker Gains Access To WordPress.com Servers by wewyor on Wednesday April 13, 2011 @02:41PM (#2443565)
Is your talk going to be recorded?

If so I would very much like to see it.

Re:Hacker Gains Access To WordPress.com Servers by _b8r0 on Wednesday April 13, 2011 @02:49PM (#2443590)
As far as I know (hope?) it isn't. I can put the slides up afterwards though if that helps.
Re:Hacker Gains Access To WordPress.com Servers by wewyor on Wednesday April 13, 2011 @02:52PM (#2443604)
I wouldn't mind the slides but the talk is usually so much more useful.
Re:Hacker Gains Access To WordPress.com Servers by _b8r0 on Wednesday April 13, 2011 @03:01PM (#2443642)
Are you UK based? If not I could probably redo it next month as a webex if there's enough people interested.
Re:Hacker Gains Access To WordPress.com Servers by wewyor on Wednesday April 13, 2011 @03:14PM (#2443694)
Not UK based or anywhere close, but I don't think you need to go through all the trouble to redo it.

I will take you up on your offer of slides though, I only asked about the recording because I remembered seeing that Samy Kamkar talk online (though it might not have been at OWASP).

Re:Hacker Gains Access To WordPress.com Servers by josegonzalez on Wednesday April 13, 2011 @04:12PM (#2443955)
You hope it isn't recorded? Is there a specific reason for this?
Re:Hacker Gains Access To WordPress.com Servers by _b8r0 on Wednesday April 13, 2011 @04:53PM (#2444132)
I always feel uncomfortable speaking when my talks are being recorded. I have a particular style that's a little unorthodox to speaking. I get all professional when a camera's around, this also means that I feel less comfortable talking freely about issues that may have wider implications.

I guess that's not so important for wordpress, but I'm talking at DC4420[1] next week on evading antimalware defences and that's not something I'd really want to see put up on youtube for obvious reasons.

Re:Hacker Gains Access To WordPress.com Servers by _b8r0 on Wednesday April 13, 2011 @09:18PM (#2445014)
[1] - http://www.dc4420.org/

Damnit, forgot to put the link in!

Re:Hacker Gains Access To WordPress.com Servers by riledhel on Wednesday April 13, 2011 @03:19PM (#2443722)
go with a friend and a camcorder! i'm really interested in the subject.
Re:Hacker Gains Access To WordPress.com Servers by _b8r0 on Wednesday April 13, 2011 @07:30PM (#2444703)
Do that and watch me not talk. At all.

Big trust betrayal - happy to set up an equivalent webex for the HN group. I understand that Wordpress is particularly useful for landing pages though, so I'm happy to do something and actually spend more time on it making it better for the wider HN community.