Live data from Hacker News

Announcing Project Zero

googleonlinesecurity.blogspot.com

81–87 of 87 posts

Re: Announcing Project Zero

#81
post #71
post #67

Earlier quoted context omitted.

Thank you for doing the crypto challenge by the way. Was a lot of fun, and I'm looking forward to the next set :). Has anyone else finished it in c# yet?

Yes. There is, to my knowledge, no popular language people haven't finished in. We'll have solutions in most of the languages on a public website in a couple weeks. :)

The challenges were published, right? Where are they? Googling for "Matasano Crypto Challenges" shows a bunch of old links.

Re: Announcing Project Zero

#82
post #71
post #67

Earlier quoted context omitted.

Thank you for doing the crypto challenge by the way. Was a lot of fun, and I'm looking forward to the next set :). Has anyone else finished it in c# yet?

Yes. There is, to my knowledge, no popular language people haven't finished in. We'll have solutions in most of the languages on a public website in a couple weeks. :)

[deleted]

Re: Announcing Project Zero

#83

Earlier quoted context omitted.

Did you ever look at "Violent Python"? Any opinion as an alternative? http://www.amazon.com/Violent-Python-Cookbook-Penetration-En...

I'm not tptacek, but... After lightly reading through both books, I think Gray Hat Python is a great book for more advanced security concepts, especially on the reverse engineering and exploit dev side of things, but isn't a very good book for learning Python or programming. Violent Python on the other hand is a great book for beginners to Python and programming, and it teaches both pretty well, but it only goes into…

Blackhat Python is out in November http://www.nostarch.com/blackhatpython 'Automating offensive forensics' should be an interesting chapter

Re: Announcing Project Zero

#84
post #79
post #73

> Every bug we discover will be filed in an external database. https://code.google.com/p/google-security-research/issues/li... I am surprised that they didn't use something (other than Google Code) where one could more easily search by vendor or product, or other kinds of tags like "privilege escalation possible", "CVE-2014-0160", or "stack overflow" (as far as I know Google Code Issues doesn't support tags of any ki…

As of now, this database contains some strange entries. Probably they have issues with access permissions? 01 | Invalid | This is a test 49 | Invalid | 50 | Invalid | 51 | Invalid | Random Guy Has Access To File Bugs 52 | Invalid | Google PR doesn't respond to press inquiries 53 | Invalid | The issue is the blog 54 | Invalid | FR 55 | Invalid | 56 | Invalid | hello

Google Project Zero has it's Project #1: secure their bug tracker.

Re: Announcing Project Zero

#85
post #71

Earlier quoted context omitted.

Yes. There is, to my knowledge, no popular language people haven't finished in. We'll have solutions in most of the languages on a public website in a couple weeks. :)

The challenges were published, right? Where are they? Googling for "Matasano Crypto Challenges" shows a bunch of old links.

Nope, the challenges have never been published. We've asked everyone who's done them not to share them.

Re: Announcing Project Zero

#86
post #85

Earlier quoted context omitted.

The challenges were published, right? Where are they? Googling for "Matasano Crypto Challenges" shows a bunch of old links.

Nope, the challenges have never been published. We've asked everyone who's done them not to share them.

slightly off topic but, like your appsec reading list above, are there any crypto resources you value for someone taking the self learning route into real world crypto?

Re: Announcing Project Zero

#87

Earlier quoted context omitted.

I'm not tptacek, but... After lightly reading through both books, I think Gray Hat Python is a great book for more advanced security concepts, especially on the reverse engineering and exploit dev side of things, but isn't a very good book for learning Python or programming. Violent Python on the other hand is a great book for beginners to Python and programming, and it teaches both pretty well, but it only goes into…

Blackhat Python is out in November http://www.nostarch.com/blackhatpython 'Automating offensive forensics' should be an interesting chapter

Looks pretty interesting. I'll probably buy it.
Post reply on HN