[ Android ]  Introduction to Lobotomy | Part Two - http://rotlogix.com/2016/01/09/introduction-to-lobotomy-part-two/ #android #mobile #security

[ Android ]  Some malicious apps use compromised devices to download and positively review other malicious apps by same authors https://blog.lookout.com/blog/2016/01/06/brain-test-re-emerges/

[ Browser ]  Nvidia GPUs can break Chrome's incognito mode https://charliehorse55.wordpress.com/2016/01/09/how-nvidia-breaks-chrome-incognito/

[ Crypto ]  KCI-based MitM Attacks against TLS : https://github.com/maldevel/BSides_Vienna_2015/blob/master/kci_based_man_in_the_middle_attacks_against_tls.pdf

[ Fuzzing ]  boofuzz - A fork and successor of the Sulley Fuzzing Framework. http://ow.ly/WPAyY

[ Network ]  Joy package for capturing and analyzing for network research, forensics & security monitoring http://seclist.us/joy-a-package-for-capturing-and-analyzing-for-network-research-forensics-security-monitoring.html

[ Obfuscation ]  Javascript Deobfuscator Updated: http://www.kahusecurity.com/?p=13482

[ Others ]  BetterCap and the first REAL DoubleDirect ICMP Redirect Attack http://www.evilsocket.net/2016/01/10/bettercap-and-the-first-real-icmp-redirect-attack/

[ Others ]  T. Eisenbarth: Cache Attacks on the Cloud. https://drive.google.com/file/d/0Bzm_4XrWnl5zVy0wSEFsOXdJU2s/view?usp=sharing #realworldcrypto

[ Others ]  TorTrojan is a simple trojan-horse written in C# using tor to communicate https://github.com/x1125/tor-trojan #infosec #security

[ Others ]  Threat intelligence has to be embedded in your #security program. See what traps to avoid: http://symc.ly/1PLluvN

[ Others ]  New, rewritten #OpenBSD #PF FAQ example "Building an OpenBSD Router" http://www.openbsd.org/faq/pf/example1.html highlights a number of useful #OpenBSD features

[ Others ]  Shielding applications from an untrusted cloud with Haven https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-baumann.pdf [PDF] https://t.co/GiTKuQnfOV

[ Others ]  Confidentiality Issues on a GPU in a Virtualized Environment : http://s3.eurecom.fr/docs/fc14_maurice.pdf (pdf) cc: @ BloodyTangerine

[ ReverseEngineering ]  The ultimate collection of "How to Reverse Malware" -> Add your input https://www.peerlyst.com/blog-post/resource-learning-how-to-reverse-malware-a-guide?utm_source=Peerlyst%20Post%20Promo&utm_medium=social&utm_content=PeerlystPost&utm_campaign=Peerlyst%20Twitter1

[ Web Security ]  Formal sec analysis of OAuth 2.0 http://arxiv.org/pdf/1601.01229v2.pdf [Dolev-Yao model of web infrast.; 2 unknown attacks found] https://t.co/ruNUs1NVdi

[ Web Security ]  Malicious Use of the HTML5 Vibrate API https://shkspr.mobi/blog/2014/01/malicious-use-of-the-html5-vibrate-api/