Sudo make me a sandwich redux: http://t.co/Gw5bk2Pv

TDL-4 #rootkit (TDSS/Alureon): 32-bit/64-bit samples + analysis links - http://t.co/I3gQE5Z (via @snowfl0w @yo9fah)

Very detailed writeup of MITM attack on IPv6 network: http://resources.infosecinstitute.com/slaac-attack/ (via @securityshell)

Great tutorials on exploit dev fundamentals (http://goo.gl/Y6U9T) and SEH exploitation (http://goo.gl/r5xUA).

Assessing the exploitability of MS11-083: http://t.co/xtRJWe7H

Mebromi sample: http://t.co/rbxdNJdi Rootkit that affects Award BIOS (via @snowfl0w)

For those who can't sleep without Gauss samples: http://t.co/FWt1npBh (via @snowfl0w)

Remote kernel exploit via crafted UDP packets to closed port - http://t.co/8r2Mqons (MS11-083)

This is how honest incident report looks like: http://goo.gl/Qj3XC No APT or "extremely sophisticated attackers" involved.

"Adventures in analyzing stuxnet" by @brucedang: http://www.vimeo.com/18225315 (thanks @sifumoraga) #27c3

Executing EXE in data stream via symlink: http://pauldotcom.com/2010/10/windows-7-symbolic-links-and-h.html. Thanks to @markbaggett.

DLL-load hijacking at its best: https://t.co/eOfhr6KH And it's even documented: http://t.co/aNb7MZZG

"A great many of today’s security technologies are “secure” only because no-one has ever bothered attacking them." - Peter Gutmann

Matt Miller (skape) explores the technical details of exploit prevention mechanisms like GS, DEP & ASLR: http://goo.gl/JF2sk (via @shp_box)

I knew that Code Project site with new Win EoP 0-day will be removed. That's why I saved it: http://users.volja.net/database/Bypass_UAC.pdf

Cross browser trick:  http://superuser.com/questions/579216/why-does-this-png-image-display-differently-in-chrome-firefox-than-in-safari-a … <-- apple or pear? (via @andydavies)

Attacking Windows 7/8 ASLR:  http://kingcope.wordpress.com/2013/01/24/attacking-the-windows-78-address-space-randomization/ … (via @kingcope)

Three days since Java 0d is all over the news but still no official response from Oracle. And they call security researchers irresponsible.

Become a programmer, mofo: http://t.co/TZYJMsIX :D (via @tomaszmiklas)

Somebody is really pissed: http://pastebin.com/Q6p4CEbg (IDA 6.1 Leaked NFO)