Earlier quoted context omitted.
Thank you for doing the crypto challenge by the way. Was a lot of fun, and I'm looking forward to the next set :). Has anyone else finished it in c# yet?
Yes. There is, to my knowledge, no popular language people haven't finished in. We'll have solutions in most of the languages on a public website in a couple weeks. :)
Announcing Project Zero
81–87 of 87 posts
Re: Announcing Project Zero
#82Earlier quoted context omitted.
Thank you for doing the crypto challenge by the way. Was a lot of fun, and I'm looking forward to the next set :). Has anyone else finished it in c# yet?
Yes. There is, to my knowledge, no popular language people haven't finished in. We'll have solutions in most of the languages on a public website in a couple weeks. :)
Re: Announcing Project Zero
#83Earlier quoted context omitted.
Did you ever look at "Violent Python"? Any opinion as an alternative? http://www.amazon.com/Violent-Python-Cookbook-Penetration-En...
I'm not tptacek, but... After lightly reading through both books, I think Gray Hat Python is a great book for more advanced security concepts, especially on the reverse engineering and exploit dev side of things, but isn't a very good book for learning Python or programming. Violent Python on the other hand is a great book for beginners to Python and programming, and it teaches both pretty well, but it only goes into…
Re: Announcing Project Zero
#84> Every bug we discover will be filed in an external database. https://code.google.com/p/google-security-research/issues/li... I am surprised that they didn't use something (other than Google Code) where one could more easily search by vendor or product, or other kinds of tags like "privilege escalation possible", "CVE-2014-0160", or "stack overflow" (as far as I know Google Code Issues doesn't support tags of any ki…
As of now, this database contains some strange entries. Probably they have issues with access permissions? 01 | Invalid | This is a test 49 | Invalid | 50 | Invalid | 51 | Invalid | Random Guy Has Access To File Bugs 52 | Invalid | Google PR doesn't respond to press inquiries 53 | Invalid | The issue is the blog 54 | Invalid | FR 55 | Invalid | 56 | Invalid | hello
Re: Announcing Project Zero
#85Earlier quoted context omitted.
Yes. There is, to my knowledge, no popular language people haven't finished in. We'll have solutions in most of the languages on a public website in a couple weeks. :)
The challenges were published, right? Where are they? Googling for "Matasano Crypto Challenges" shows a bunch of old links.
Re: Announcing Project Zero
#86Earlier quoted context omitted.
The challenges were published, right? Where are they? Googling for "Matasano Crypto Challenges" shows a bunch of old links.
Nope, the challenges have never been published. We've asked everyone who's done them not to share them.
Re: Announcing Project Zero
#87Earlier quoted context omitted.
I'm not tptacek, but... After lightly reading through both books, I think Gray Hat Python is a great book for more advanced security concepts, especially on the reverse engineering and exploit dev side of things, but isn't a very good book for learning Python or programming. Violent Python on the other hand is a great book for beginners to Python and programming, and it teaches both pretty well, but it only goes into…
Blackhat Python is out in November http://www.nostarch.com/blackhatpython 'Automating offensive forensics' should be an interesting chapter