Security Lab, Forum, and Playground

This is intended as a forum to explore and discuss egregious security shortcomings found in various software packages. It may prove a useful resource for checking to see whether any dirty little secrets have already been surfaced in a product you are considering or are already using.

In an effort to keep a good signal-to-noise ratio, I plan to reserve the right to post new content (in most places) to only those members who have proven themselves valuable citizens, with some minimum "confirmed kill" count. I'm still sorting out the details of how that will work, so feel free to hit me with any ideas and suggestions you may have.

When registering an account, please use some common sense. Assume that I automatically forward all passwords in clear text to numerous online forums and IRC channels, and act accordingly. Specifically, please use a unique password that you wouldn't mind sharing with a few thousand anonymous friends. Also, I highly recommend you choose a moniker that cannot easily be traced back to your true identity - particularly if you think you might piss off some silly vendor with a penchant for lawsuits.

By choosing to enter this site you agree not to be a jerk, not to sue anyone over anything that might be written here, and that any information you disclose (intentionally or otherwise) is mine to use or share as I see fit. You also agree that if any information about criminal activity comes to light, you will cooperate fully with law enforcement to ensure that justice is served, and you understand that I will do the same. You also certify that you are at least 18 years of age.
I AGREE - LET ME IN!

If you are looking for the VM lab, it's down the hall and to the left. If you are looking for that secret thing, you have skipped a very important step (and dammit, you weren't supposed to tell anyone.)