Ollie Whitehouse

I was interested in getting some rough numbers on publicly disclosed vulnerabilities in Symbian and Windows CE/Mobile platforms and applications. I cannot say with any degree of confidence that what I present below is reflective, simply due to the fact that different bugs get categorized under

O.K. - firstly - long time no blog. Secondly, apologies for that - a mixture of vacation, work, and work travel has recently seen me distracted a little from my blogging duties (my plate spinning is improving, however). Anyway, with the apologies out of the way, onto the subject of this blog. R

In my last post on the subject of Vista versus the battle of vulnerable and malicioussigned drivers, I said there was some conjecture about whetherMicrosoft was going to use Windows Update to distribute a patch for avulnerable ATI driver. Elia Florio on our Security Response Operations tea

Yes this could be a 500 page book, but I’m going to try to present the future of security in fewer than 1,200 words. Up to now in this anniversary series, my fellow Symantecites have been discussing what has happened over the past 25 years around security and how Symantec and the indus

Here is a short update to bring this latest chapter in Vista’s security fairytale finally to a close. On Monday the 13th of August, ATI patched their Catalyst drivers to resolve the vulnerability that PurplePill exploited. ATI should be commended with the speed and agility theyre

The other day, I blogged about the latest happenings in the Atsiv saga . Today I’m providing an update, which I couldn’t have made up even if I tried. This can only be described as one of those moments that would makeanyone in Microsoft’s situation start to sob. Alex Ionsecu published anent

So in a world where data is king, peopleare obviously going to look for ways to mine the data in more effectiveways. I saw a talk in May last year by Ian Cook titled, “FindingInformation in the Darkweb,” with a subtitle of “Open SourceIntelligence Gathering on a Shoestring.” This was interestin

On the desktop we have many different executable compactors, compressors and encryptors. These are used to protect and/or obfuscate binary files. These can be employed by software authors and malicious code authors to protect their code from reverse engineering (though, typically in vain). A while

If you Google for either "Windows CE", "Windows Mobile" along with "rootkits" [1] [2] you don’t find anything on the subject. Back in the early part of this year I started a little skunk-works project (which resulted in an internal whitepaper) to understand the tec

Time for the next installment in my enthralling series on ‘Watching Microsoft Patch Windows CE’ and remember kids: There are currently no reported security vulnerabilities for Windows CE In my previous entry on this subject [2] I covered up untilFebruary’s updates for Windows CE 5 (the