argp's blog

This page lists some of my blog posts that are worth pulling out as stand-alone articles.

advisories

• FreeBSD kernel NFS client local vulnerabilities
• Monkey HTTPd improper input validation vulnerability
• CoreHTTP web server off-by-one buffer overflow vulnerability
• Linux kernel SUNRPC off-by-two buffer overflow

exploitation

• FreeBSD kernel exploitation mitigations
• CVE-2008-3531: FreeBSD kernel stack overflow exploit development

freebsd

• FreeBSD kernel debugging

research

• huskarl
• google as a “trust authority”
• the cost of authentication
• why I don’t like network-layer security systems