Mayur's Posterous

Google Chrome Pwned by VUPEN aka Sandbox/ASLR/DEP Bypass

Hi everyone,

We are (un)happy to announce that we have officially Pwnd Google Chrome and its sandbox.

The exploit shown in this video is one of the most sophisticated codes we have seen and created so far as it bypasses all security features including ASLR/DEP/Sandbox, it is silent (no crash after executing the payload), it relies on undisclosed (0day) vulnerabilities discovered by VUPEN and it works on all Windows systems (32-bit and x64).

The video shows the exploit in action with Google Chrome v11.0.696.65 on Microsoft Windows 7 SP1 (x64). The user is tricked into visiting a specially crafted web page hosting the exploit which will execute various payloads to ultimately download the Calculator from a remote location and launch it outside the sandbox at Medium integrity level.

While Chrome has one of the most secure sandboxes and has always survived the Pwn2Own contest during the last three years, we have now uncovered a reliable way to execute arbitrary code on any installation of Chrome despite its sandbox, ASLR and DEP.

This code and the technical details of the underlying vulnerabilities will not be publicly disclosed. They are shared exclusively with our Government customers as part of our vulnerability research services.


 

via Vupen Security

Posted

Android Event 02-02-2011 explaining Honeycomb features using a Xoom

 

Posted

The new Sony Ericsson Xperia™ PLAY. Android is ready to play

Posted

Motorola - Empower the People

Why can't they make an ad based on the merit of their product?

Posted

NoteSlate: the $100, single-color tablet that will replace your legal pad forever

image

Apple and Android tablets are great if you want PC-like functionality in a slim package, but what if you just want an inexpensive device that can take digital notes?  Enter NoteSlate.

The company’s NoteSlate tablet is a simple device that’s designed for a single purpose – taking notes.  The device features a spacious 13” eInk screen that takes notes in only one color.  Users write on the screen with the included stylus, and notes can be easily erased by flipping the stylus around and erasing, just like you would with a pencil.

The NoteSlate has a simple 3 button interface for saving or deleting notes, and navigating through pages.  Notes can be saved to an SD card or accessed through the device’s USB port.

Measuring only 6mm thin, the NoteSlate isn’t much bigger than a legal pad.  The device also only weighs 10 ounces.  The NoteSlate’s eInk screen sips power, and will last up to 180 hours (nearly 3 weeks) on a single charge.

The best part of the NoteSlate is its price tag – the company plans to sell the NoteSlate for only $100.  The NoteSlate can only write in one color, either white (pictured), black, green, blue or red.  A version of the NoteSlate that supports multiple colors is in development.

The basic, black and white versions of the NoteSlate are expected to launch in June 2011.  Red, green and blue versions of the device will be released in December 2011.

We’re enthusiastic about the NoteSlate, especially since handwritten notes are difficult to take on the iPad and Android tablets.  Fully featured tablets are also often overkill when all you want to do is take notes, especially when price is considered.  Sure, the NoteSlate is limited in many ways, but for $100 this is a tradeoff that is worthwhile, particularly in educational or instructional environments.

 

Posted

My Nook Color runs Android 3.0 a.k.a. Honeycomb.

First off, a big thank you to everyone who sent me all those links when this exciting news broke out!

I still can't believe that I'm running a brand new generation of Android (N1 owners still waiting for "official" 2.3 Gingerbread to release). When Honeycomb was first shown at CES, I had read a lot of reports that there will be specific hardware requirements and that you couldn't just brute force run 3.0 on any device, especially not on my $250 e-reader. The UI for 3.0 is very much Tron-esque and ... shiny :D

Although this is an early release of Honeycomb, the graphics run smooth on my device. I've attached a short video showing the ripple effect of the lock screen.

Some more pictures from bootup to a few menu options including Settings and Recently Used (multi-tasking) menus.

Media_httpiimgurcomxa_zeanc

Media_httpiimgurcomee_uatek

Media_httpiimgurcom93_ppjvy

Media_httpiimgurcomr3_hgtun

Media_httpiimgurcomam_teqyk

Media_httpiimgurcomdb_futxd

Media_httpiimgurcomjd_bhxlf

Media_httpiimgurcomar_necco

Media_httpiimgurcomov_mqpzu

Media_httpiimgurcomja_oecbm

Media_httpiimgurcombz_pkhna

I <3 the Android Community.
Posted

Notion Ink's Adam tablet Promo

via Pradeep

Posted

Flip Phone – Smartphone Concept running Android by Kristian Ulrich Larsen » Yanko Design

How many “flips” does it take to make your Smartphone super-sexy. The answer? Three flexible AMOLED touchscreens and a keyboard on the reverse! Here’s what the Flip Phone feels like: a smart triangular piece held together with soft steel mesh hinges, hosting a custom flavor of Android.The boundaries of a PC and phone have smudged-up big time and this is a sample of what that future looks like. I love it!

Sexy concept phone and runs Android - what else do you need?

 

Posted

Introducing: Word Lens (smartphone app for on the fly translation)

WHAT IS THIS WIZARDRY?

Posted

Old school memory.

Floppy_usb

This looks like a doable DIY over the weekend.

1.44 MB on a disk ... ah, nostalgia.



Posted