Scott Piper

1.4K Followers
80 Following
123 Posts
Cloud security historian.
Developed http://flaws.cloud, CloudMapper, and Parliament.
Founding team for @fwdcloudsec.
Admin for Cloud Security Forum Slack.
Threat researcher at https://www.wiz.io/
https://twitter.com/0xdabbad00
Lots of interesting charts from cloud data by Pat Myron. https://github.com/patmyron/cloud/
GitHub - PatMyron/cloud: cloud region / instance type data

cloud region / instance type data. Contribute to PatMyron/cloud development by creating an account on GitHub.

GitHub

One decade ago tomorrow I released SlopFinder, my first project that ended up getting some public attention. http://www.h-online.com/security/news/item/Many-popular-Windows-programs-have-insufficient-protection-1764311.html

I've since stopped paying for the domain it was hosted on, but it let you drag and drop Windows executables to check if they had DEP & ASLR.

What's funny is this was a quick hack on a much more elaborate project called IceBuddha, which was an in-browser hex viewer that would parse and display the entire binary structure of files, and use a library to dynamically cross compile Python->Javascript all in the browser!

It could parse PE files, mach-o, gif, and even a certain unique file structure used by a malware strain. That got no attention, and neither did SlopFinder, until weeks later I released a blog post showing how I used SlopFinder to get some interesting results.

It took 3 blog posts about SlopFinder before it got attention. Once it finally did, icebuddha retroactively got a bit of attention and I started getting some followers on the bird site that I had joined a few months prior to that.

Anyway, it's fun looking back on where life has taken me since then, and a good lesson in perseverance.

Many popular Windows programs have insufficient protection - The H Security: News and Features

DEP and ASLR are basic security characteristics of modern operating systems; however, many Windows programs are still being deployed without these protective mechanisms