https://jon.oberheide.org/blog/ 2015-05-15T00:00:00+00:00 https://jon.oberheide.org/blog/2015/05/15/estimating-googles-two-factor-2sv-adoption/ 2015-05-15T00:00:00+00:00 https://jon.oberheide.org/ 2015-05-15T00:00:00+00:00 https://jon.oberheide.org/blog/2013/07/16/rekey-fixing-androids-master-key-vulnerability/ 2013-07-16T00:00:00+00:00 https://jon.oberheide.org/blog/2013/02/25/bypassing-googles-two-factor-authentication/ 2013-02-25T00:00:00+00:00 https://jon.oberheide.org/blog/2012/09/12/early-results-from-x-ray-over-50-of-android-devices-are-vulnerable/ 2012-09-12T00:00:00+00:00 https://jon.oberheide.org/blog/2012/07/25/announcing-xray-for-android/ 2012-07-25T00:00:00+00:00 https://jon.oberheide.org/blog/2012/07/16/exploit-mitigations-in-android-jelly-bean-4-1/ 2012-07-16T00:00:00+00:00 https://jon.oberheide.org/blog/2012/06/21/dissecting-the-android-bouncer/ 2012-06-21T00:00:00+00:00 https://jon.oberheide.org/blog/2012/03/21/announcing-vpn-hunter/ 2012-03-21T00:00:00+00:00 https://jon.oberheide.org/blog/2012/02/27/aslr-in-android-ice-cream-sandwich-4-0/ 2012-02-27T00:00:00+00:00 https://jon.oberheide.org/blog/2011/11/27/csaw-ctf-2011-kernel-exploitation-challenge/ 2011-11-27T00:00:00+00:00 https://jon.oberheide.org/blog/2011/09/08/tool-releases-ksymhunter-and-kstructhunter/ 2011-09-08T00:00:00+00:00 https://jon.oberheide.org/blog/2011/07/06/stackjackin-2-electric-boogaloo/ 2011-07-06T00:00:00+00:00 https://jon.oberheide.org/blog/2011/06/21/rsa-proofing-our-duo-push-two-factor-authentication/ 2011-06-21T00:00:00+00:00 https://jon.oberheide.org/blog/2011/06/08/duo-push-the-next-generation-of-two-factor-authentication/ 2011-06-08T00:00:00+00:00 https://jon.oberheide.org/blog/2011/05/28/when-angry-birds-attack-android-edition/ 2011-05-28T00:00:00+00:00 https://jon.oberheide.org/blog/2011/04/20/stackjacking-your-way-to-grsec-pax-bypass/ 2011-04-20T00:00:00+00:00 https://jon.oberheide.org/blog/2011/03/07/how-i-almost-won-pwn2own-via-xss/ 2011-03-07T00:00:00+00:00 https://jon.oberheide.org/blog/2010/11/29/exploiting-stack-overflows-in-the-linux-kernel/ 2010-11-29T00:00:00+00:00 https://jon.oberheide.org/blog/2010/11/02/csaw-ctf-kernel-exploitation-challenge/ 2010-11-02T00:00:00+00:00 https://jon.oberheide.org/blog/2010/10/23/linux-kernel-pktcdvd-memory-disclosure/ 2010-10-23T00:00:00+00:00 https://jon.oberheide.org/blog/2010/09/10/linux-kernel-can-slub-overflow/ 2010-09-10T00:00:00+00:00 https://jon.oberheide.org/blog/2010/08/10/dexcode-teardown-of-the-android-sms-trojan/ 2010-08-10T00:00:00+00:00 https://jon.oberheide.org/blog/2010/06/28/a-peek-inside-the-gtalkservice-connection/ 2010-06-28T00:00:00+00:00 https://jon.oberheide.org/blog/2010/06/25/remote-kill-and-install-on-google-android/ 2010-06-25T00:00:00+00:00 https://jon.oberheide.org/blog/2010/06/21/summercon-2010-slides/ 2010-06-21T00:00:00+00:00 https://jon.oberheide.org/blog/2010/04/25/source-boston-slides/ 2010-04-25T00:00:00+00:00 https://jon.oberheide.org/blog/2010/04/10/reiserfs-reiserfs_priv-vulnerability/ 2010-04-10T00:00:00+00:00 https://jon.oberheide.org/blog/2009/10/04/linux-kernel-x86-64-register-leak/ 2009-10-04T00:00:00+00:00 https://jon.oberheide.org/blog/2009/09/28/disabling-green-dam-with-dam-burst/ 2009-09-28T00:00:00+00:00 https://jon.oberheide.org/blog/2009/08/29/linux-kernel-getname-stack-memory-disclosures/ 2009-08-29T00:00:00+00:00 https://jon.oberheide.org/blog/2009/08/10/polypack-at-usenix-woot-09/ 2009-08-10T00:00:00+00:00 https://jon.oberheide.org/blog/2009/07/12/hijacking-tinychat-screencasts/ 2009-07-12T00:00:00+00:00 https://jon.oberheide.org/blog/2009/06/30/analysis-of-a-trojaned-ssh-sshd/ 2009-06-30T00:00:00+00:00 https://jon.oberheide.org/blog/2009/04/20/udev-local-privilege-escalation/ 2009-04-20T00:00:00+00:00 https://jon.oberheide.org/blog/2009/04/15/panera-gift-card-security/ 2009-04-15T00:00:00+00:00 https://jon.oberheide.org/blog/2009/03/25/dpkt-tutorial-4-as-paths-from-mrt-bgp/ 2009-03-25T00:00:00+00:00 https://jon.oberheide.org/blog/2009/03/07/arbsec-01-wrap-up/ 2009-03-07T00:00:00+00:00 https://jon.oberheide.org/blog/2009/02/19/arbsec-officially-launched/ 2009-02-19T00:00:00+00:00 https://jon.oberheide.org/blog/2008/12/20/dpkt-tutorial-3-dns-spoofing/ 2008-12-20T00:00:00+00:00 https://jon.oberheide.org/blog/2008/11/20/virustotal-python-submission-script/ 2008-11-20T00:00:00+00:00 https://jon.oberheide.org/blog/2008/10/15/dpkt-tutorial-2-parsing-a-pcap-file/ 2008-10-15T00:00:00+00:00 https://jon.oberheide.org/blog/2008/09/04/bash-brace-expansion-cleverness/ 2008-09-04T00:00:00+00:00 https://jon.oberheide.org/blog/2008/08/25/dpkt-tutorial-1-icmp-echo/ 2008-08-25T00:00:00+00:00 https://jon.oberheide.org/blog/2008/08/10/hardening-dns-with-ip-ttls/ 2008-08-10T00:00:00+00:00 https://jon.oberheide.org/blog/2008/08/02/hotsec-2008-and-usenix-security-2008/ 2008-08-02T00:00:00+00:00 https://jon.oberheide.org/blog/2008/07/28/woot-2008-the-good-the-bad-and-the-ugly/ 2008-07-28T00:00:00+00:00 https://jon.oberheide.org/blog/2008/07/21/pdpt-passive-dns-port-test/ 2008-07-21T00:00:00+00:00 https://jon.oberheide.org/blog/2008/07/21/uofm-specific-phishing-campaign/ 2008-07-21T00:00:00+00:00 https://jon.oberheide.org/blog/2008/04/09/beware-of-google-app-engine-sdk/ 2008-04-09T00:00:00+00:00 https://jon.oberheide.org/blog/2008/02/22/black-hat-dc-2008-briefings/ 2008-02-22T00:00:00+00:00 https://jon.oberheide.org/blog/2008/02/10/exploiting-live-virtual-machine-migration/ 2008-02-10T00:00:00+00:00 https://jon.oberheide.org/blog/2008/01/15/detecting-and-evading-cwsandbox/ 2008-01-15T00:00:00+00:00 https://jon.oberheide.org/blog/2007/11/30/xkcd-malware-visualization/ 2007-11-30T00:00:00+00:00 https://jon.oberheide.org/blog/2007/08/15/facebook-xss/ 2007-08-15T00:00:00+00:00 https://jon.oberheide.org/blog/2007/08/10/usenix-security-hotsec-woot-2007/ 2007-08-10T00:00:00+00:00 https://jon.oberheide.org/blog/2007/07/20/dimva-2007/ 2007-07-20T00:00:00+00:00 https://jon.oberheide.org/blog/2007/05/07/pynids-05a-update-released/ 2007-05-07T00:00:00+00:00 https://jon.oberheide.org/blog/2007/04/12/cosign-sso-vulnerability/ 2007-04-12T00:00:00+00:00 https://jon.oberheide.org/blog/2007/02/12/t-mobile-wifi-hotspots/ 2007-02-12T00:00:00+00:00 https://jon.oberheide.org/blog/2007/01/17/umich-rfid/ 2007-01-17T00:00:00+00:00 https://jon.oberheide.org/blog/2006/11/24/aimject-released/ 2006-11-24T00:00:00+00:00 https://jon.oberheide.org/blog/2006/11/13/google-safe-browsing/ 2006-11-13T00:00:00+00:00 https://jon.oberheide.org/blog/2006/09/22/pybgpdump-released/ 2006-09-22T00:00:00+00:00 https://jon.oberheide.org/blog/2006/09/15/mozilla-autoupdate-vuln/ 2006-09-15T00:00:00+00:00 https://jon.oberheide.org/blog/2006/08/31/mprint-privacy-violations/ 2006-08-31T00:00:00+00:00 https://jon.oberheide.org/blog/2006/02/15/honeyd-remote-fingerprint/ 2006-02-15T00:00:00+00:00 https://jon.oberheide.org/blog/2005/04/06/umich-mcard-vuln/ 2005-04-06T00:00:00+00:00 https://jon.oberheide.org/blog/2004/07/25/wolverine-access-vuln/ 2004-07-25T00:00:00+00:00 https://jon.oberheide.org/0trace/ https://jon.oberheide.org/advisories/ https://jon.oberheide.org/aimject/ https://jon.oberheide.org/damburst/ https://jon.oberheide.org/flowscrub/ https://jon.oberheide.org/gdnet/ https://jon.oberheide.org/ncd/ https://jon.oberheide.org/pdpt/ https://jon.oberheide.org/patents/ https://jon.oberheide.org/projects/ https://jon.oberheide.org/pybgpdump/ https://jon.oberheide.org/pynids/ https://jon.oberheide.org/research/ https://jon.oberheide.org/vnclogger/ https://jon.oberheide.org/winnie/