document.createElement("HTML").outerHTML

More details here: http://code.google.com/p/skylined/issues/detail?id=16

• Memory corruption in CANVAS (thanks to lcamtuf)
• Pop-up blocker bypass.

Update: these bugs have had access their restrictions lifted and details can be found there.

My New Year’s resolution for 2010 is to finish and/or clean up all these things I have created over the years to get them to release worthy status and actually release them.

So, if I don’t break my resolution, you can expect the release of at least the following tools and techniques in 2010:
- BETA3 – Multi-format shellcode encoding tool.
- ALPHA3 – Alphanumeric shellcode encoder.
- Testival – Windows shellcode/ret-into-libc testing tool
- Various shellcodes
- Various heap spray improvements, tips and tricks, including ways to bypass mitigations

The following tests were performed 50 times with PHP 5.2.6.

First I tested the following pieces of code for parse time, $iConcats was set to 5000:

for($i=0; $i<$iConcats; ++$i)
{
$o .= ‘aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa’;
}

This parsed on avarage in 0.0065 seconds.
Next up was the array equivalent:

for($i=0; $i<$iConcats; ++$i)
{
$a[] = ‘aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa’;
}
$a = join(”, $a);

This parsed on average in about 0.0187 seconds. That’s almost 3 times slower!
I deliberately added the join statement as it completes the comparison. And dor the more visually oriented amongst us, google provides nice graphs:

During the measurements I also tracked the memory usage, which had the same outcome, concatenation wins again.

For string concatenation memory usage was ~56Mb. The array version used up ~155Mb. Again the three times! And again, let’s look at some graphs:

And in pie:

So in conclusion (at least for PHP 5.2.6) string concatenation is faster than array joins!

Strings vs Arrays: 2-0.

If you have some test resutls you want to share, please respond below or send me an email, you can reach me at: korneelwever. I’m with the Google mail service .

Stay tuned for more.

Their concept, Guardian of Eden, targets children form 5-14 years of age, trying to make them aware of the small things you can do for a better environment, after all, a better environment start with you (old dutch advertisement) and children are still the future. Children can collect butterflies, flowers, etc. in the game and compete in small games (like collecting the most garbage or separating paper from plastics) online, create their own gardens and show these to their friends. But maybe even more important is the communication with their parents, who receive information about the gameand it’s goal, to talk about with their children. Talk about influencing each other…

Please visit their site, watch the video and watch their screenshots, or if you are able, come to support them in Paris!

PS. Whoohoooohooow!!!! Whoo!!! YEAHWHOOHOOW!!!!