«
Expand/Collapse
279 items tagged "paper"
Related tags:
usa [+],
windows [+],
security authors [+],
misc [+],
kernel [+],
asia [+],
david litchfield [+],
intrusion detection [+],
detection [+],
chaos communication congress [+],
vulnerabilities [+],
virtualization [+],
memory [+],
javascript [+],
heap [+],
hacking [+],
forensics [+],
chemistry [+],
cesar cerrudo [+],
buffer overflow [+],
attack [+],
Software [+],
windows kernel [+],
web application [+],
way [+],
vulnerability [+],
voip [+],
vista [+],
terrorism [+],
tea [+],
stack [+],
smashing [+],
shawn moyer [+],
security event [+],
secure design [+],
network [+],
kay hamacher [+],
julian assange [+],
joe grand [+],
intrusion [+],
innocent bystanders [+],
hypervisor [+],
hardware hacking [+],
hacker [+],
exploiting [+],
david weston [+],
cyberterrorism [+],
cop cars [+],
cop car [+],
cop [+],
conspiracy [+],
code execution [+],
car [+],
arduino [+],
application [+],
analysis [+],
alfredo ortega [+],
alexander sotirov [+],
Wireless [+],
Hardware [+],
x event [+],
windows security [+],
warfare [+],
vulnerability assessment [+],
virtual machine [+],
val smith [+],
unix signal [+],
understanding [+],
trash attack [+],
trash [+],
toilet [+],
timing [+],
technology authors [+],
tags [+],
synchronization [+],
symbian [+],
swiss army knife [+],
stuxnet [+],
steve christey [+],
steping stone [+],
stealth [+],
statistical properties [+],
sql [+],
software authors [+],
social networks [+],
social engineering [+],
setiri [+],
server [+],
security implications [+],
securing [+],
secure [+],
scrap [+],
rootkit [+],
robert [+],
reverse engineer [+],
remote [+],
processors [+],
privacy event [+],
privacy [+],
phpids [+],
photo camera [+],
petkov [+],
pc tools [+],
paper software [+],
oren isacson [+],
oren [+],
oracle [+],
old dogs [+],
nicholas j. percoco [+],
new [+],
network security [+],
net [+],
mobile [+],
mining [+],
mark vincent yason [+],
mark vincent [+],
mac os x [+],
mac os [+],
linux [+],
legal [+],
kenneth geers [+],
jose nazario [+],
jose [+],
james d. broesch [+],
installing [+],
injection [+],
incremental research [+],
ian amit tags [+],
i2p [+],
generation [+],
geers [+],
fuzzing [+],
future [+],
forensic [+],
feng shui [+],
exposing [+],
exploitation [+],
engineering [+],
engineer [+],
end result [+],
election systems [+],
dtrace [+],
digital cameras [+],
digital [+],
debugging [+],
david weston tiller [+],
david thiel [+],
cyber [+],
computer [+],
client side [+],
cisco event [+],
chris wysopal [+],
bypassing [+],
browser [+],
billy rios [+],
billy hoffman [+],
barnum [+],
attacking [+],
art [+],
arkin tags [+],
amit [+],
advanced [+],
abu dhabi [+],
BackTrack [+],
authors [+],
zfs [+],
zero [+],
zane lackey [+],
yutaka [+],
yuriy bulygin [+],
xss [+],
xen [+],
wpa [+],
worth [+],
world authors [+],
workstation [+],
workshop [+],
work [+],
wolfgang draxinger [+],
wiring connections [+],
wireless sniffer [+],
wireless access points [+],
winter doldrums [+],
winning the race [+],
william finucane [+],
web worm [+],
web servers [+],
web scanner [+],
web graph [+],
web developers [+],
warfield [+],
walt haroon [+],
volts [+],
voltage dividers [+],
volatools [+],
volatile memory [+],
vlad [+],
virus authors [+],
virus [+],
virtual machines [+],
virtual [+],
viral threats [+],
vipin kumar [+],
video [+],
vidas [+],
victor pereira [+],
variations [+],
variants [+],
van der walt [+],
valentin [+],
vacuum chamber [+],
uri use [+],
uri event [+],
upnp [+],
upgrade [+],
unshredding [+],
unpacking [+],
unforgivable [+],
ulation [+],
type conversion [+],
type [+],
tyler [+],
tsyrklevich [+],
trusted [+],
tricks [+],
travis goodspeed [+],
travis [+],
translation [+],
transfer [+],
tracking tools [+],
trace [+],
toy [+],
touchpad [+],
tor network [+],
tor event [+],
tor [+],
toner transfer paper [+],
toner [+],
token [+],
toilet paper roll [+],
toilet paper [+],
time authors [+],
tim vidas [+],
thomas akin [+],
testing [+],
teredo [+],
technology of the future [+],
technical underpinnings [+],
tactical [+],
system [+],
swiss [+],
sucks [+],
string parameter [+],
string [+],
storage pools [+],
stopping [+],
stiff paper [+],
steve riley tags [+],
steve riley [+],
steve dunker [+],
stephen patton tags [+],
stender [+],
stefano zanero [+],
stefan frei [+],
stealth secrets [+],
static detection [+],
static analysis [+],
static [+],
start ups [+],
standing on the shoulders [+],
stack overflows [+],
squire [+],
spinning top [+],
spider [+],
spectrophotometer [+],
specialist service provider [+],
spam [+],
space shuttle discovery [+],
something [+],
solaris kernel [+],
solar cell fabrication [+],
solar [+],
sohail ahmad [+],
software architects [+],
social [+],
smtp [+],
smoke [+],
sketchtools [+],
sivan toledo [+],
simple solutions [+],
simple [+],
similarity [+],
silver inks [+],
signatures [+],
side channel [+],
shulman [+],
shredder [+],
shredded paper [+],
shoot [+],
shoestring budget [+],
shelf solutions [+],
shatter proofing [+],
shah tags [+],
seth hardy [+],
server database [+],
security vulnerabilities [+],
security tags [+],
security network [+],
security methodology [+],
security audit [+],
securing wireless networks [+],
secret paths [+],
secret handshake [+],
secret [+],
second life [+],
second [+],
sean barnum [+],
sctpscan [+],
scrap materials [+],
scott stender [+],
scissors [+],
scientific instrument [+],
scenes [+],
saumil shah [+],
satellite navigation [+],
satellite event [+],
satellite environment [+],
satellite [+],
satan [+],
sassaman [+],
sap [+],
saito [+],
russia [+],
routers [+],
rootkits [+],
room 101 [+],
room [+],
role [+],
rohit dhamankar [+],
rohit [+],
roel [+],
robert graham tags [+],
robert clark tags [+],
robert a. martin sean barnum [+],
robert a martin [+],
rob king [+],
rob carter tags [+],
rob carter [+],
rob [+],
ristic [+],
ring 0 [+],
richard johnson tags [+],
richard johnson [+],
richard george tags [+],
rf based [+],
revolutionizing [+],
reverse engineering [+],
revenge [+],
remote exploit [+],
receipt printers [+],
receipt printer [+],
receipt [+],
rds tmc [+],
raghav [+],
rafal wojtczuk [+],
race [+],
quynh [+],
quist [+],
pyemu [+],
psychology [+],
pseudorandom [+],
prototyping [+],
protocol [+],
prosecution [+],
project alternatives [+],
program semantics [+],
processor [+],
problems [+],
private entries [+],
private [+],
printing process [+],
printer [+],
printable [+],
previous design [+],
preview [+],
pretty pictures [+],
preparing [+],
premature [+],
practical [+],
poster board [+],
portnoy [+],
pointer [+],
poc [+],
player [+],
platform preview [+],
platform [+],
pisa [+],
pirates [+],
pierce tags [+],
picture [+],
physical security [+],
physical interfaces [+],
phone [+],
philippe langlois [+],
philip hayton [+],
petroni [+],
peter silberman [+],
person [+],
perl hacker [+],
perl [+],
peripherals [+],
penetration tests [+],
pedram amini [+],
peap [+],
pdf [+],
paul vincent sabanal [+],
paul vincent [+],
paul royal [+],
paul knight [+],
patton [+],
patrick miller [+],
patch [+],
parts [+],
papercraft [+],
paper printing [+],
paper medium [+],
paper feeder [+],
paper dolls [+],
paper craft [+],
paper airplane [+],
papathanasiou [+],
overflows [+],
overflow [+],
other [+],
ortega [+],
oracle sql [+],
oracle case [+],
operating [+],
openid [+],
openbsd [+],
ollie whitehouse [+],
ofer shezaf [+],
ofer [+],
number generation [+],
nitin kumar vipin kumar tags [+],
nicolas falliere [+],
nick harbour [+],
nick breese [+],
nguyen anh [+],
next generation [+],
network sniffer [+],
network intrusion detection system [+],
network intrusion detection [+],
network drivers [+],
neil daswani [+],
neal krawetz [+],
nathan mcfeters [+],
nathan hamiel [+],
nac [+],
music event [+],
multi purpose [+],
ms sql server [+],
moser [+],
mora tags [+],
moore tags [+],
monster project [+],
monster [+],
mobitex [+],
mobile phone [+],
miras [+],
minds [+],
mind [+],
mike shaver [+],
mike perry tags [+],
mike perry [+],
mike kershaw [+],
migration [+],
microscope [+],
microcontroller [+],
michael thumann [+],
michael h. warfield [+],
metasploit [+],
metaphish [+],
messenger [+],
memory resident [+],
memory protection [+],
memory analysis [+],
medicine [+],
mccoy [+],
max moser [+],
matthew sager [+],
matthew lewis tags [+],
matthew lewis [+],
matt cottam [+],
mass web [+],
mass [+],
martin mocko [+],
martin herfurt [+],
mark ryan del moral [+],
mark ryan [+],
mark dowd [+],
mario lukas [+],
mariano nunez [+],
mariano graziano [+],
marco slaviero [+],
marco bonetti [+],
marcel holtmann [+],
man [+],
malicious [+],
make [+],
mail [+],
machine [+],
luis miras [+],
lotus domino [+],
lotus [+],
lost in translation [+],
logic [+],
local [+],
little [+],
litmus paper [+],
litmus [+],
list [+],
lindner [+],
life [+],
liam o murchu [+],
lessard [+],
leopard [+],
leonardo nve [+],
len sassaman [+],
legal aspects [+],
ldap [+],
lawyers [+],
laws related [+],
laurent oudot [+],
laurent butti [+],
lasers [+],
laser cutter [+],
laser [+],
lackey [+],
l. patterson [+],
krishna [+],
kostya kortchinsky [+],
kidnapping [+],
kicking [+],
kernel level [+],
kerb [+],
kendall [+],
keith jones rohyt [+],
karmetasploit [+],
justin ferguson tags [+],
justin ferguson [+],
julian grizzard [+],
joseph menn [+],
jonathan squire [+],
jonathan lindsay [+],
jonathan afek [+],
jonathan [+],
jon oberheide [+],
jon mccoy [+],
johnny long [+],
john viega [+],
john terrill tags [+],
john terrill [+],
john heasman [+],
john benson [+],
joel eriksson [+],
joe stewart tags [+],
joe stewart [+],
jim hoagland [+],
jeremiah grossman [+],
jeremiah [+],
jennifer granick [+],
jeff morin [+],
jeff lessard [+],
java virtual machine [+],
java [+],
jared demott [+],
jaco van [+],
ivan ristic [+],
itzhak avraham tags [+],
itzhak [+],
iron chef [+],
iron [+],
iris [+],
ipv [+],
ipsec [+],
iphone [+],
investigation process [+],
invasion [+],
intrusion detection system [+],
introduction [+],
intranet [+],
internet worms [+],
internet via satellite [+],
internet authors [+],
internet [+],
intelligent [+],
intelligence data [+],
insider [+],
insecure [+],
injecting [+],
information attacks [+],
information assurance [+],
information [+],
iis [+],
identification [+],
ida pro [+],
icmp [+],
http [+],
html [+],
how to impress girls [+],
how to [+],
historical [+],
himanshu dwivedi [+],
high school chemistry [+],
hide [+],
heffner [+],
haroon [+],
handheld device [+],
handbook authors [+],
hackproofing [+],
hack [+],
h.d. moore val [+],
h 323 [+],
gyroscope [+],
gunter ollmann [+],
guide [+],
gsm [+],
grossman [+],
greg conti [+],
greetz [+],
green [+],
graziano [+],
graphing calculator [+],
graph paper [+],
graph [+],
graan [+],
google [+],
goodspeed [+],
gif player [+],
gif [+],
german technology [+],
george whitesides [+],
gary c. kessler [+],
gary c kessler [+],
future of internet [+],
fundamentals [+],
fundamental techniques [+],
full disclosure [+],
freak out [+],
frank breedijk [+],
fox in the hen house [+],
fox [+],
foss desktop [+],
foss [+],
forgery [+],
forensic tools [+],
foam core [+],
foam board [+],
foam [+],
firmware [+],
finucane [+],
fingerprinting [+],
fingerpinting [+],
finding [+],
field [+],
feng xue [+],
felix [+],
feinstein [+],
fault tolerance techniques [+],
fatal system error [+],
fabrication practices [+],
ezequiel [+],
extrusion [+],
extortion racket [+],
exploting [+],
exploits [+],
exploitation techniques [+],
exploit [+],
explicit [+],
examination [+],
evolutionary approach [+],
evolution [+],
evasion [+],
eugene [+],
esteban martnez [+],
eric filiol [+],
eric chien [+],
environment [+],
entropy [+],
enemies [+],
enclosure [+],
emulator [+],
ellsworth [+],
electrostatic charge [+],
electronic sensor [+],
electronic discovery [+],
effective [+],
dynamic technique [+],
dynamic routing [+],
dynamic [+],
dunker [+],
dual mode [+],
droid [+],
drew miller [+],
dr. west [+],
dr west [+],
dozen [+],
dondi west [+],
don bailey [+],
domino event [+],
domino [+],
dollar man [+],
dns [+],
ditch [+],
discrete logic [+],
discontents [+],
direction [+],
di croce [+],
denial [+],
defense mechanisms [+],
de barros [+],
day [+],
david weston tags [+],
david kerb [+],
david hulton [+],
david coffey [+],
david byrne tags [+],
david byrne [+],
david blight [+],
databases [+],
database web [+],
database sql [+],
database engines [+],
database [+],
data transmission [+],
data mining [+],
danny quist [+],
daniel peck [+],
dangling pointer [+],
dangling [+],
dangerous waters [+],
dangerous minds [+],
danger [+],
damian saura tags [+],
d. gutesman [+],
d moore [+],
cyberspace [+],
cybercrime [+],
cyber warfare [+],
cyber storm [+],
cyber crime [+],
custom [+],
crossdomain [+],
cross [+],
crime war [+],
crime [+],
craig heffner [+],
craig [+],
craft [+],
crackstation [+],
covert channel [+],
covert [+],
court [+],
course authors [+],
countering [+],
cottam [+],
corrugated cardboard [+],
corn starch [+],
conversion errors [+],
conversion [+],
contests [+],
connection string [+],
connection [+],
computing [+],
computer security [+],
computer network defense [+],
computational theory [+],
compromising [+],
communication protocol [+],
collaborative [+],
colin ames [+],
claw [+],
classification [+],
classic [+],
cisco router [+],
cisco ios [+],
chuck willis tags [+],
chuck willis [+],
christian papathanasiou [+],
christian kendi [+],
christian grothoff [+],
chris eng [+],
chris eagle [+],
chemistry experiments [+],
chef [+],
charlie miller [+],
challenging [+],
chad [+],
cell phone [+],
cell [+],
cash and prizes [+],
call [+],
caffeinemonkey [+],
cabbage [+],
butti [+],
business impact analysis [+],
building [+],
buffer [+],
bsd [+],
bryan sullivan [+],
bruno luiz tags [+],
bruce schneier [+],
brett moore [+],
botnets [+],
botnet [+],
board [+],
bluetooth [+],
blind [+],
bit [+],
biometric [+],
biologger [+],
bing tags [+],
bill blunden [+],
bernard tellenbach [+],
ben feinstein [+],
belani [+],
beginner kits [+],
bed [+],
becoming [+],
barnaby jack tags [+],
bare metal [+],
bare [+],
backbones [+],
automatically [+],
authentication [+],
attack patterns [+],
assessment techniques [+],
assessment data [+],
assessment [+],
aspects [+],
aslr [+],
architecture [+],
application asp [+],
aphrodite [+],
anti virus [+],
anti [+],
anonymous authentication [+],
anonymous [+],
anonymity [+],
anomaly based [+],
android [+],
andrew walenstein [+],
andrew lindell [+],
andrea cugliari [+],
andrea barisani [+],
anatomy [+],
analyzing [+],
amit klein [+],
alternative medicine [+],
alternative [+],
alonso jose palazon [+],
alonso jos [+],
alonso [+],
ajax ulation [+],
ahmad tags [+],
afek [+],
advanced oracle [+],
adequacy [+],
adam laurie marcel holtmann [+],
adam laurie [+],
accelerometers [+],
abuse [+],
abstract time [+],
aaron walters nick petroni [+],
aaron portnoy [+],
aaron newman [+],
NON [+],
ARM [+],
europe [+],
hat europe [+],
hacks [+],
malware [+],
black hat [+],
security [+],
web [+],
webappsec,
weaning,
virtual switchboard,
verified,
txt,
tuples,
tony flick tags,
tin foil,
threats,
technical details,
tcp,
steven j. murdoch ross anderson tags,
sniff,
smart,
slow,
similarity analysis,
session cookies,
sequence prediction,
security threats,
sai emrys tags,
runtime environments,
router,
ross anderson,
roger dingledine,
ricky lawshae,
ricky,
rfis,
pwned,
protecting,
privacy office,
picking,
paper shredder,
paper documents,
nice,
new language,
neutrality,
net neutrality,
mysql,
murdoch,
michael brooks,
mechanical energy,
matrix,
mastercard securecode,
mario ceballos,
logarithm,
lockpicking,
lineberry,
line leakage,
language creation,
language,
keystrokes,
kevin mahaffey,
john hering,
john,
itunes for windows,
input devices,
input,
initial installation,
hash functions,
hash,
hand,
goatee beard,
flick,
file,
email,
electronic locks,
dingledine,
david aslanian,
daniel raygoza,
consumer devices,
conlanging,
code,
chris gates,
ceballos,
bittorrent,
avr microcontroller,
attacker,
aslanian,
anthony lineberry,
Programming,
Pentesting
-
-
13:01
»
Hack a Day
[William Finucane] is making his own litmus paper by harnessing the power of cabbage. The process is much easier than the faux gunpowder he made, as it take just the one ingredient and a few kitchen tools. In case you’ve forgotten your High School chemistry, Litmus is a set of dyes that change color when [...]
-
-
21:41
»
SecDocs
Authors:
Wolfgang Draxinger Tags:
Linux Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Time to take a look back and under the hood of the current state of FOSS based desktops: The Good, The Bad and The Ugly – Bloat, strange APIs, too much complexity. The first decade of the 21st century brought huge progress in the development of FOSS Desktop systems. Users can now choose from a broad range of environments, which all adhere to a coherent set of standards. Not to forget that FOSS did even pioneer some GUI technologies which were later adopted by other (read: non free) systems.
-
-
21:44
»
SecDocs
Authors:
Kay Hamacher Tags:
privacy Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: In his now (in)famous pamphlet "Conspiracy as Governance" Julian Assange (JA) argues about the need for leaking as an efficient way to destroy "unjust" groups as the neo-feudalistic ones - luring the conspiracy theory leaning hacker community into his belief system. Eventually, JA used a biologistic argument on the benefits and drawbacks that uncontrolled leaking might pose for "just" and "unjust" systems, arriving at the conclusion that "unjust" systems are hurt more and thus will be less viable, essentially being destroyed by more "just" systems. While an innovative proposal, the underlying assumptions on complexity, network theory, and especially the evolutionary perspectives were never critically assessed. Some blogs and media raised questions on details and potential threats to innocent bystanders. Still, fundamental problems with the philosophy were never addressed. This paper argues against the general validity of such theories. In particular, we will refute some of the biologistic arguments. Theoretical biology has long ago pointed out the hidden complexity in evolutionary processes and as such the envisioned "leaking revolution" might be a limited artifact: there might even arise situations where the leaking envisioned and encouraged by Wikileaks and the like can actually strengthen some "conspiracies". In this paper I will describe some research questions, that should be answered before given the “leaking philosophy” an unconditioned “thumbs-up”. Empirically, for example, a potential strengthening is illustrated by the rise of a 'neo-feudalistic economy', which is linked closely to the paradigm of "intellectual property" as it is to the security-financial-political complex. The players have effectively created a closed network or a "conspiracy" and might be resilient towards Wikileaks-like attacks. The paper concludes with an alternative to that proposal; in particular, a way to deal with the 'conspiracy' that might be coined the rise of the neo-feudalistic society (which in itself is a self-sustainable, self-amplifying feedback loop, not necessarily a conscious conspiracy).
-
21:44
»
SecDocs
Authors:
Kay Hamacher Tags:
privacy Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: In his now (in)famous pamphlet "Conspiracy as Governance" Julian Assange (JA) argues about the need for leaking as an efficient way to destroy "unjust" groups as the neo-feudalistic ones - luring the conspiracy theory leaning hacker community into his belief system. Eventually, JA used a biologistic argument on the benefits and drawbacks that uncontrolled leaking might pose for "just" and "unjust" systems, arriving at the conclusion that "unjust" systems are hurt more and thus will be less viable, essentially being destroyed by more "just" systems. While an innovative proposal, the underlying assumptions on complexity, network theory, and especially the evolutionary perspectives were never critically assessed. Some blogs and media raised questions on details and potential threats to innocent bystanders. Still, fundamental problems with the philosophy were never addressed. This paper argues against the general validity of such theories. In particular, we will refute some of the biologistic arguments. Theoretical biology has long ago pointed out the hidden complexity in evolutionary processes and as such the envisioned "leaking revolution" might be a limited artifact: there might even arise situations where the leaking envisioned and encouraged by Wikileaks and the like can actually strengthen some "conspiracies". In this paper I will describe some research questions, that should be answered before given the “leaking philosophy” an unconditioned “thumbs-up”. Empirically, for example, a potential strengthening is illustrated by the rise of a 'neo-feudalistic economy', which is linked closely to the paradigm of "intellectual property" as it is to the security-financial-political complex. The players have effectively created a closed network or a "conspiracy" and might be resilient towards Wikileaks-like attacks. The paper concludes with an alternative to that proposal; in particular, a way to deal with the 'conspiracy' that might be coined the rise of the neo-feudalistic society (which in itself is a self-sustainable, self-amplifying feedback loop, not necessarily a conscious conspiracy).
-
15:18
»
SecDocs
Authors:
Kay Hamacher Tags:
privacy Event:
Chaos Communication Congress 28th (28C3) 2011 Abstract: In his now (in)famous pamphlet "Conspiracy as Governance" Julian Assange (JA) argues about the need for leaking as an efficient way to destroy "unjust" groups as the neo-feudalistic ones - luring the conspiracy theory leaning hacker community into his belief system. Eventually, JA used a biologistic argument on the benefits and drawbacks that uncontrolled leaking might pose for "just" and "unjust" systems, arriving at the conclusion that "unjust" systems are hurt more and thus will be less viable, essentially being destroyed by more "just" systems. While an innovative proposal, the underlying assumptions on complexity, network theory, and especially the evolutionary perspectives were never critically assessed. Some blogs and media raised questions on details and potential threats to innocent bystanders. Still, fundamental problems with the philosophy were never addressed. This paper argues against the general validity of such theories. In particular, we will refute some of the biologistic arguments. Theoretical biology has long ago pointed out the hidden complexity in evolutionary processes and as such the envisioned "leaking revolution" might be a limited artifact: there might even arise situations where the leaking envisioned and encouraged by Wikileaks and the like can actually strengthen some "conspiracies". In this paper I will describe some research questions, that should be answered before given the “leaking philosophy” an unconditioned “thumbs-up”. Empirically, for example, a potential strengthening is illustrated by the rise of a 'neo-feudalistic economy', which is linked closely to the paradigm of "intellectual property" as it is to the security-financial-political complex. The players have effectively created a closed network or a "conspiracy" and might be resilient towards Wikileaks-like attacks. The paper concludes with an alternative to that proposal; in particular, a way to deal with the 'conspiracy' that might be coined the rise of the neo-feudalistic society (which in itself is a self-sustainable, self-amplifying feedback loop, not necessarily a conscious conspiracy).
-
-
21:33
»
SecDocs
-
-
21:46
»
SecDocs
-
-
21:40
»
SecDocs
-
21:40
»
SecDocs
-
-
21:49
»
SecDocs
-
-
21:44
»
SecDocs
-
21:44
»
SecDocs
-
-
21:49
»
SecDocs
-
-
21:41
»
SecDocs
-
21:41
»
SecDocs
-
-
21:51
»
SecDocs
-
21:51
»
SecDocs
-
6:41
»
SecDocs
-
-
21:52
»
SecDocs
-
21:52
»
SecDocs
-
21:52
»
SecDocs
-
13:43
»
SecDocs
-
-
21:49
»
SecDocs
-
21:49
»
SecDocs
-
21:49
»
SecDocs
-
13:49
»
SecDocs
-
13:41
»
SecDocs
-
12:56
»
SecDocs
-
-
21:50
»
SecDocs
-
21:50
»
SecDocs
-
21:50
»
SecDocs
-
12:23
»
SecDocs
-
12:20
»
SecDocs
-
12:12
»
SecDocs
-
-
21:45
»
SecDocs
-
-
21:58
»
SecDocs
-
-
21:49
»
SecDocs
-
-
21:31
»
SecDocs
-
-
21:49
»
SecDocs
-
-
15:27
»
Hack a Day
[Roel] had read that people won the DARPA shredder challenge, but that their technology was kept a secret, interested in this concept he also remembered an episode of the X-Files where they had reconstructed shredded paper using a computer system. Unlike most computer based TV show BS this did not seem to be too far [...]
-
8:30
»
Hack a Day
Who needs chemistry when a little bit of physics will do? Instead of brewing up a batch of weak adhesive to make his own post-it notes, [Valentin] built this handheld device to add an electrostatic charge to bits of paper. Just give them a couple of seconds to charge and they’ll stick to the wall [...]
-
10:03
»
Hack a Day
Here’s a photovoltaic cell that can be printed onto paper. The manufacturing technique is almost as simple as using an inkjet printer. The secret is in the ink itself. It takes five layers deposited on the paper in a vacuum chamber. But that’s a heck of a lot easier than current solar cell fabrication practices. [...]
-
-
10:01
»
Hack a Day
Ditch that fancy wide-format LCD monitor and go back to the days when animation was made up of moving frames played back by a specialized device. [Pieterjan Grandry] built this gif player which does just that. The frames of the animation are printed on a paper disk. When spun and viewed through a looking hole [...]
-
5:01
»
Hack a Day
Does a yo-yo work in zero-g? How about a paper airplane? These questions were answered in 1985 on the Space Shuttle Discovery, but reproduction of results is the cornerstone of the scientific method. [Rob] is about to reproduce some of the awesome zero-g pictures by riding on a vomit comet and taking a few pictures of [...]
-
-
8:23
»
Packet Storm Security Recent Files
This short paper describes the trash attack which is effective against the majority of fully- verifiable election systems. The paper then offers a simple but counter-intuitive mitigation which can be incorporated within many such schemes to substantially reduce the effectiveness of the attack. This mitigation also offers additional benefits as it significantly improves the statistical properties of existing verifiable systems.
-
8:23
»
Packet Storm Security Misc. Files
This short paper describes the trash attack which is effective against the majority of fully- verifiable election systems. The paper then offers a simple but counter-intuitive mitigation which can be incorporated within many such schemes to substantially reduce the effectiveness of the attack. This mitigation also offers additional benefits as it significantly improves the statistical properties of existing verifiable systems.
-
-
4:02
»
Hack a Day
Some of our favorite hacks are those made with scrap materials, so we were delighted to see a contest being held by the German technology magazine c’t which focuses on using salvaged components. “Mach flott den Schrott” is the name of the competition, which loosely translates to “Make fast the scrap”. German builder [Mario Lukas’] [...]
-
-
1:31
»
SecDocs
Authors:
Gunter Ollmann Tags:
malware cybercrime Event:
Black Hat USA 2010 Abstract: Starting a life of Internet crime is easy; in fact you’ve probably already doing it as far as the RIAA is concerned. Now that you’ve chosen to embark upon a new career, how are you going to get dirty, filthy, stinking rich? How do you become a millionaire? The tool of choice has got to be botnets. Building them is just the start. How do you monetize the tens or hundreds of thousands of machines under your control? Should you harvest confidential and personal information from the victims, or would it be more prudent to become a specialist service provider to other botnet operators? Which models work best, and how can you become a six-million-dollar man within a year?
-
-
1:53
»
SecDocs
Tags:
Windows hardening secure development Event:
Black Hat USA 2010 Abstract: Microsoft has implemented lots of useful functionality in Windows that they use in their own products. Many of these features can be used to enhance the security of third party applications, but not many developers or software architects know about them. This talk will detail some of the technical underpinnings of Windows features like UAC, IE protected mode and Terminal Serivces and show how they can be used to defend your own software from attack.
-
-
12:01
»
Hack a Day
Here’s another chance to ply your hacking skills for cash and prizes. Dangerous Prototypes has just announced the Open 7400 Logic Competition. First prize is $100 and a bunch of hacking goodies. But even better is that since it was announced, more sponsors have stepped up to increase the kitty, and the number of entries [...]
-
-
11:15
»
Packet Storm Security Recent Files
Using the attacks in this paper allows you to bypass all of PHPIDS's rule sets, which defeats all protection PHPIDS can provide. Furthermore, on a default install of PHPIDS the log file can be used to drop a PHP backdoor. This can use PHPIDS as a vital steping stone in turning an LFI vulnerability into remote code execution. The end result is that use of PHPIDS 0.6.5 can make you less secure. All of these issues have been fixed in version 0.7.
-
11:15
»
Packet Storm Security Misc. Files
Using the attacks in this paper allows you to bypass all of PHPIDS's rule sets, which defeats all protection PHPIDS can provide. Furthermore, on a default install of PHPIDS the log file can be used to drop a PHP backdoor. This can use PHPIDS as a vital steping stone in turning an LFI vulnerability into remote code execution. The end result is that use of PHPIDS 0.6.5 can make you less secure. All of these issues have been fixed in version 0.7.
-
-
16:01
»
Hack a Day
Grab some stiff paper and get to work building your own paper claw. [Dombeef] posted the instructions to recreate the claw above because he was unsatisfied with his previous design which was flimsy and unable to pick up just about anything. This version is a bit larger and it internalizes all of the parts. Being [...]
-
-
14:01
»
Hack a Day
It seems like receipt printers are pretty popular as hacking targets lately. Aside from the wasted paper, they cooler than plain old blinking LEDs and we’d image there’s a ton of them floating around out there as advances in technology have prompted retailers to trade in the bulky dinosaurs for slimmer thermal printers. [Philip Hayton] [...]
-
-
13:01
»
Hack a Day
This circuit illustration adds a scrolling paper feeder to the bed of a laser cutter. In the video after the break you can see that the actual assembly is put on the bed of the laser cutter. After the laser has cut out the specified pattern, the scroll is wound to move an un-cut portion [...]
-
7:15
»
Packet Storm Security Recent Files
This paper offers incremental research in the area of untrusted program input via synchronization handle manipulations. Unlike the Michal Zalewski paper on Delivering Signals for Fun and Profit, this paper focuses on the source of the Unix signal handlers. Tested were personal computers running Windows XP and Vista. The synchronization objects were mutexes and events, and the security software included products from AVG, Avast, Avira, BitDefender, BullGuard, CheckPoint, Eset, F-Prot, F-Secure, Kaspersky, McAfee, Microsoft (Security Essentials), Nor- man, Norton, Panda, PC Tools, Quick Heal, Symantec, and Trend Micro.
-
7:15
»
Packet Storm Security Misc. Files
This paper offers incremental research in the area of untrusted program input via synchronization handle manipulations. Unlike the Michal Zalewski paper on Delivering Signals for Fun and Profit, this paper focuses on the source of the Unix signal handlers. Tested were personal computers running Windows XP and Vista. The synchronization objects were mutexes and events, and the security software included products from AVG, Avast, Avira, BitDefender, BullGuard, CheckPoint, Eset, F-Prot, F-Secure, Kaspersky, McAfee, Microsoft (Security Essentials), Nor- man, Norton, Panda, PC Tools, Quick Heal, Symantec, and Trend Micro.
-
-
5:41
»
SecDocs
Authors:
Laurent Oudot Tags:
web application web server exploiting covert channel Event:
Black Hat Abu Dhabi 2010 Abstract: This technical talk will focus on web attackers and how they try to handle extrusion issues. Indeed, when intruders get an illegal access on a web resource, it might become complex for them to keep a stealth and remote control without being caught. They usually try to create easy channels that allow them to get the very best from their target. But sometimes, they need to improve those concepts, especially against a hardened or monitored network. Based on real technical examples, we will describe how web attackers can anonymously talk to web backdoors, either by playing with HTTP issues or by finding secret paths to bounce out of DMZ (cover channels, etc). For this presentation to be accurate, we will also propose solutions, so that the defenders might detect or contain those attacks on their sensitive networks.
-
2:23
»
SecDocs
Authors:
Lavakumar Kuppan Tags:
web application XSS HTML Event:
Black Hat Abu Dhabi 2010 Abstract: HTML5 is a set of powerful features aimed at moving the web applications closer to existing desktop applications in terms of user experience and features. HTML5 is no more just the technology of the future as many believe, it is available right now in almost all modern browsers. Though the widespread use of HTML5 by websites is still a few years away, the abuse of these features is already possible. Web developers and users assume that just because their site does not implement any HTML5 features they are unaffected. Also a large section of the internet community believes that HTML5 is only about stunning graphics and video streaming. This talk will show how these assumptions are completely contrary to reality. This presentation will show how existing 'HTML4' sites can be attacked using HTML5 features in a number of interesting ways. Then we look at how it is possible to use the browser to perform attacks that were once thought to require code execution outside the sandbox. Finally we look at an attack where the attacker is not interested in the victim's data or a shell on the machine but is instead after something that might perhaps even be legal to steal!
-
-
13:39
»
SecDocs
Authors:
Neil Daswani Tags:
malware Event:
Black Hat DC 2011 Abstract: The Web 2.0 transformation has in part involved many sites using third-party widgets. We present the "widgetized web graph" showing the structure of high traffic web sites from the standpoint of widgets, show how web-based malware and scareware is propagated via such widgets, and provide data on how a mass web-based malware attack can take place against the Quantcast 1000 web sites via widgets.
-
-
21:25
»
SecDocs
-
-
11:00
»
Hack a Day
Although spring keeps trying to break through the winter doldrums you might be looking for just one more weekend activity before the outdoor season begins. Grab the kids and give this paper gyroscope a try. It’s not an electronic sensor made of paper, but the modern equivalent of a spinning top. The frame remains stationary [...]
-
-
6:05
»
Hack a Day
This functioning mechanical irs is made from paper templates, foam core poster board, old credit / gift / etc cards, paper clips and masking tape. First, patterns are designed and multiples are printed and laid out to make the 10 parts needed. Two rings are cut out of foam board and a third ring is [...]
-
-
6:27
»
Hack a Day
Cheap paper accelerometers? Put us down for a dozen to start. They’re not quite ready for mass production yet but it looks like they’re on the way. [George Whitesides] led a team to develop the new technology that uses simple manufacturing methods to produce the sensor seen above. Graphite and silver inks were screen printed [...]
-
-
5:54
»
Hack a Day
[Sivan Toledo] needed a enclosure for a unique sized electronic project, not finding what he needed in off the shelf solutions, he went to the next best thing, … Papier Mâché! Using a mold made out of standard corrugated cardboard, he slowly built up layers made of magazine paper, and ordinary “white glue” diluted with [...]
-
10:35
»
Hack a Day
Remember how fun it was studying chemistry and physics in high school? Well we guess your recollection depends on the person who taught the class. Why not have another go at it by learning the A-to-Z of electronics from one of our favorite teachers, [Jeri Ellsworth]. You know, the person who whips up chemistry experiments [...]
-
-
13:07
»
Hack a Day
Teaching kids to solder using kits is a fun time, but most of these beginner kits are a bit mundane. Not this one, it’s a solar-powered monster project. The components and their wiring connections are printed on a sheet of paper along with a background for that particular monster. The base of the paper is [...]
-
-
11:05
»
Hack a Day
What can you make with a toilet paper roll, duct tape, and a graphing calculator? A stand for your homemade spectrometer. This is neither as pretty nor as accurate as a precision scientific instrument, but that doesn’t mean it’s useless. In fact, it works perfectly well for rudimentary observations. Light is shined through a sample [...]
-
-
12:00
»
SecurityFocus Vulnerabilities
New paper by Amit Klein (Trusteer): "Detecting virtualization over the web with IE9 (platform preview) and Semi-permanent computer fingerprinting and user tracking in IE9 (platform preview)"
-
-
11:00
»
Hack a Day
If you don’t mind getting your fingers a little dirty you can replace your mouse with a piece of paper. [Dr. West] made this touchpad himself, which measures signals at the corners of the paper using four voltage dividers. The paper has been completely covered with graphite from a pencil (which we see in hacks [...]
-
-
9:47
»
Hack a Day
Take a few minutes out of your day, grab your scissors, and learn how a simple processor works. [Saito Yutaka] put together an exercise to teach processor operations with paper. After downloading the PDF you can cut out the Address and Data pointer as well as two-bit data tokens for each. The processor has three [...]
-
-
6:14
»
Hack a Day
Who would have thought that some corn starch could be made into toner transfer paper? We’re not sure of the advantages (perhaps its cheaper?), but if you have a lot of time or just love to get sticky [Matthew Sager] shows the proper method for making the paper, printing, and then etching a PCB. If [...]
-
-
21:04
»
SecDocs
-
-
21:04
»
SecDocs
-
-
3:58
»
SecDocs
-
-
2:59
»
SecDocs
-
-
21:03
»
SecDocs
-
-
5:09
»
SecDocs
-
-
3:30
»
SecDocs
Authors:
Nicholas J. Percoco Tags:
security cybercrime Event:
Black Hat DC 2010 Abstract: From January 1, 2009 to December 31, 2009, we performed approximately 2000* penetration tests (network, application, wireless, and physical) for organizations ranging from the largest companies on the planet to nimble start-ups. In addition, we also performed around 200* security incident and compromise investigations for organizations located in nearly 20 different countries around the world. The data we have gathered from these engagements is substantial and comprehensive. This presentation will be the first viewing of the results of the analysis of the data gathered during 2009. The results will be presented both technical and business impact analysis with an emphasis on technical for the Black Hat audience. This presentation will coincide with the release of the paper with the same title. The paper will be released after the conclusion of the talk.
-
-
21:04
»
SecDocs
Authors:
Leonardo Nve Tags:
satellite Event:
Black Hat DC 2010 Abstract: This presentation is a warning call to those responsible for the companies that use or provide data connection (especially the Internet) via satellite, proving some of the attacks that are possible in this environment.
-
4:16
»
SecDocs
Authors:
Joseph Menn Tags:
cybercrime Event:
Black Hat DC 2010 Abstract: Almost all of the talk from Western law enforcement agencies of signs of cooperation by Russian authorities in the pursuit of master cybercriminals is an expression of hope, not experience. There is one major documented exception: the 2006 prosecution, conviction and imprisonment of three members of a criminal ring that organized and carried out dozens of denial-of-service attacks on business websites worldwide as part of an extensive extortion racket. Why that case succeeded where all others failed--and why its success has never been replicated, has never been explained. Based on years of research including the only interviews with Russian authorities and the British police detective sent to work with the MVD, author and Financial Times correspondent Joseph Menn gives the highlights of the account in his just-published book, FATAL SYSTEM ERROR: The Hunt for the New Crime Lords Who Are Bringing Down the Internet.
-
-
2:07
»
SecDocs
Authors:
Mike Kershaw Tags:
wireless Metasploit WiFi Event:
Black Hat DC 2010 Abstract: We've figured out how to defend wireless access points, but clients remain exposed. A look at new attacks against clients using old methods we'd all forgotten about and new methods leveraging Metasploit. This talk will include pre-owning clients before vpn authentication, new ways of using gifars, crossdomain.xml attacks and more.
-
2:05
»
SecDocs
Authors:
Christian Kendi Tags:
ZFS Event:
Black Hat DC 2010 Abstract: ZFS is a revolutionary Open Source file system with many capabilities. Snapshots and Storage pools open new ways on how to store data. Attacking the most valuable assets of a company, their data. This Talk will focus on how to enhance ZFS and the Solaris Kernel by hijacking ZFS kernel symbols. Furthermore, a demo will be given a new 0day technique will be revealed on how to hide file systems and entire store pools from forensics.
-
-
5:51
»
SecDocs
Authors:
Bill Blunden Tags:
forensic rootkit Event:
Black Hat DC 2010 Abstract: While there are a multitude of battle-tested forensic tools that focus on disk storage, the domain of memory analysis is still emerging. In fact, even the engineers who work at companies that sell memory-related tools have been known to admit that the percentage of investigators who perform an in-depth examination of memory is relatively small. In light of this, staying memory resident is a viable strategy for rootkit deployment. The problem then becomes a matter of remaining inconspicuous and finding novel ways to survive a system restart. In this presentation I’ll look at rootkit technology that tackles both of these issues on the Windows platform.
-
-
21:03
»
SecDocs
-
-
2:17
»
SecDocs