Installing ExFAT on QNAP 2024ish

  2026-11-12

Some updates on my previous “Installing ExFAT on QNAP” posts circa 2017 & 2020 … In 2024ish?, QNAP removed the paid license requirement, so all the hacks I had to perform to get ExFAT to work correctly with broken licensing are no longer needed. Woot. If you can to update to a new version of… Read More

Image Location and Privacy Scanner v1.3

  2026-10-20

Announcing Image Location Scanner and Privacy Scanner version 1.3, a security plug-in for Burp and ZAP penetration testing tools. Privacy leaks from drones are now discovered, including proprietary DJI data; so you can show your CEO that his aerial company blog photos of the secret leadership off-site camping spot aren’t really secret. Version v1.3 also… Read More

Image Location and Privacy Scanner v1.2 released

  2025-06-20

With a plethora of enhancements and bug fixes, I have released the newest the Image Location Scanner and Privacy Scanner (ILS) plug-in for Burp and ZAP penetration testing tools. Now detects privacy leaks from newer Samsung & Sony cameras, HEIF image files are now supported, and processing is faster. Update to v1.2 of the plug-in… Read More

And PHP Upgrade Breaks Things

  2021-04-18

I use PHP+Wordpress for a security blog, yes there is irony here. I mostly do this because I’m too lazy to use other mechanisms and this maintenance also helps me to learn about technologies so that I can help others. And now it’s time to update PHP because, you know, security issues. And of course… Read More

Installing ExFAT on QNAP 2020

  2020-03-28

NOTE: see the update – I’m still going strong with my QNAP TS-653A NAS Drive to hold my photos, TimeMachines, iTunes, and more. But in the three years since I wrote my last set of directions for installing ExFAT on Qnap, things have changed. Qnap’s firmware is at version 4.4.1 and older versions of the… Read More

Version 1.1 of Image Location and Privacy Scanner

  2020-02-25

After a bit of insomnia, I released the Image Location and Privacy Scanner version 1.1, my passive HTTP scanning plug-in for PortSwigger Burp Pro and OWASP ZAP. It contains a few minor updates, speed ups, and new hidden location tag detection compared to the previous version. More importantly, it has better documentation which might lead… Read More

Useful HTTP Security Headers

  2020-02-18

In a previous blog post, I wrote about a whole bunch of HTTP headers which compromise your security and how to disable them all on many different types of servers. This time, I discuss “good” headers and give instructions for enabling. I also delve into “possibly good” headers including when you might need them and… Read More

HTTP Headers: Good, Bad, & Ugly

  2020-02-18

Welcome to the Veggiespam’s Secure HTTP Headers page where I provide my whitepapers showing how to secure the headers on your website. The content here is updated as technology, standards, and best practices change over time.… Read More

Swinging the Compliance Hammer at Obsolete Crypto

  2018-11-12

Abstract Many applications still utilize older cryptographic technologies, even though security professionals warned that these are obsolete and unsafe to use. Some implementations can easily be upgraded to current encryption and contain a graceful fall-back for situations where it’s required, such as when a remote party only supports legacy technologies (e.g., TLS downgraded connections). Other… Read More