uk: Комп'ютерні науки

description: When talent comes from intelligence agencies, what masters do we server, who takes priority, and how can companies ensure providers are supporting their interests above past masters? And how have companies muddied the waters so that these questions are relevant in the first place? Some exploration of conflicting duties and possible responses.

uk: вхід без авторизації

name: ETHICS VILLAGE - Nations and Nationalism and Cyber Security


Chris Wysopal

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: In today's climate of data breaches and information leaks, how do we in the infosec community disclose the vulnerabilities we discover responsibly? Who are we responsible to? Can we set a standard practice that is ethical, fair and effective? These and other questions will be discussed by some familiar faces on our Responsible Disclosure Panel

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: ETHICS VILLAGE - Responsible Disclosure Panel

DEF CON

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

uk: вхід без авторизації

name: HARDWARE HACKING VILLAGE - Disabling Intel ME in Firmware


uk: Комп'ютерні науки

uk: вхід без авторизації

name: HARDWARE HACKING VILLAGE - The Cactus: 6502 Homebrew Computer


uk: Комп'ютерні науки

uk: вхід без авторизації

name: HARDWARE HACKING VILLAGE - Building drones, the hard way


uk: Комп'ютерні науки

uk: вхід без авторизації

name: HARDWARE HACKING VILLAGE - Beacons will give you up


uk: Комп'ютерні науки

uk: вхід без авторизації

name: HARDWARE HACKING VILLAGE - Hacking your HackRF


uk: Комп'ютерні науки

uk: вхід без авторизації

name: HARDWARE HACKING VILLAGE - NFC Payments: The Art of Relay & Replay Attacks


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS VILLAGE - A CTF That Teaches: Challenging the Next Generation of ICS Ethical Hackers


uk: Комп'ютерні науки

description: Exploitation is a given. Unwanted parties will gain access eventually whether it is through technical, physical, or social means. The only other certainty is they will continue to come up with new ways to innovate. They have to blend in to succeed so how do they balance those two competing influences? More than just the inconvenience, at worst, of taking over simple I/IOT or the creepiness of your home webcam. We will begin by analyzing the attacks that have happened and how they worked. Then, we will build our own. I will walk through how an attacker doesn’t just attack you, but can easily build a mass attack campaign to take over thousands. Once they do, I show how instead of that inconvenience, they can laterally take over the house and hop to steal interesting things like embarrassing photos, social security numbers, bank account information, intellectual property, and tax returns for profit. If you cannot keep them out what can you do? For starters, let’s understand how they communicate including some unique ideas for protocols (Google Suite) and infrastructure (traditional smokescreen for non-attribution to re-purposing I/IoT devices). This is the attacker’s vulnerability: They have to use your connectivity. Finding them on endpoints is fairly difficult because they have numerous ways to evade. But, on the wire… the options are limited to just blending in. This talk is aimed to provide something to both offense and defense. For offense, demonstration of basic (orientation of concepts) to novel approaches for traffic protocols and infrastructure. For defense, awareness of traffic patterns along with protocol analysis with experiential detail (wireshark) helps them learn to fish (

uk: вхід без авторизації

name: ICS VILLAGE - TOR for The IOT (TORT Reform)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS VILLAGE - Analyzing VPNFilter: A Technical Analysis Of The Packet Sniffer and Modbus VPNFilter Module


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS VILLAGE - Side-Channel Analysis for Protecting Critical Infrastructure


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS VILLAGE - Behavior-Based Defense in ICS: Leveraging Minor Incidents to Protect Against Major Attacks


Wie nah kann am Wasser gebaut werden?

de: Architektur, Innenarchitektur

uk: Архітектура, дизайн інтер'єру

en: Architecture, Interior Architecture

@language: de

uk: вхід без авторизації

name: Moderation Skorupka, Sascha (Leitung, Regie, Redaktion)

Leibniz Universität Hannover (LUH)

addressCountry: DE

addressLocality: Hanover

addressRegion: Lower Saxony


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS VILLAGE - How can industrial IioT be protected from the great unwashed masses of IoT devices


uk: Комп'ютерні науки

description: Many IoT devices use an ARM Cortex-M based MCU and run some kind of RTOS/"bare metal" OS. In comparison to Linux-based firmwares it is a lot more difficult to modify the firmware. If you want to change the functionality you usually have the choice between rewriting the whole firmware yourself or do binary patching manually. In this talk we would like to demonstrate an easier method and show a step-by-step approach. You will see how to get access to the firmware of different Xiaomi Cloud products like lightbulbs or smart home gateways. Their IoT devices are unable to function fully without cloud connection. The connection to the cloud is protected by AES and a unique device key. Data generated by the devices gets uploaded to the cloud of the vendor (e.g. Logfiles, etc.). In May 2018 a subcontractor of Xiaomi, Yeelight, denied EU-based users and their devices access to their cloud infrastructure due the GDPR. To become independent from the vendor the way to go might be to modify or replace the firmware in the device. For that, we are not only using methods that require opening the devices but also methods which leave the devices intact. The Nexmon framework (by the SEEMOO Lab) is used to alter the firmware of the ARM-based IoT devices. The modified firmware is then used to extract secrets which are needed to run the IoT devices with your own cloud software. It is also possible to easily implement completely new functions into the firmware using C code.

uk: вхід без авторизації

name: IoT VILLAGE - How to modify ARM Cortex M-based firmware: A step-by-step approach for Xiaomi IoT Devices


ICS VILLAGE - A SOC in the Village

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The world might be getting more connected but not less risky to hack. This talk will give IoT hackers a quick intro to the variety of legal pitfalls that govern IoT hacking, from the notorious Computer Fraud and Abuse Act and the DMCA to bug bounty legal terms and the “good-faith” security exemption now pending renewal. Hackers will learn which terms they should beware of in light of recent developments in anti-hacking laws, recent developments in CFAA case law and bug bounties legal scandals, and which strategies could be useful to comply with the DMCA security exemption and anti-hacking laws in general.

uk: вхід без авторизації

name: IoT VILLAGE - Internet of Laws: Navigating the IoT Hacking Legal Landscape


uk: Комп'ютерні науки

description: Smart irrigation systems, a new IoT device which is aimed at saving water and money, have already been adopted by smart cities (e.g., Barcelona), agriculture, and the private sector around the world and will replace existing traditional irrigation systems in the next few years as part of the smart water grid revolution. Connected to the Internet (via Wi-Fi/GSM communication) and critical infrastructure (e.g., water reservoirs), they will become a new target for motivated hackers and attackers. In this talk, we present research that was conducted over the past year, in which we investigated and reversed engineered three of the 10 most sold commercial smart irrigation systems (GreenIQ, RainMachine, and BlueSpray). We analyzed their interfaces with weather forecast services, cloud servers, sensors, and C&C devices, and based on this analysis, we present novel attack vectors against smart irrigation systems. We demonstrate (in videos) the implementation of the attack vectors on commercial smart irrigation systems and show how each of them contains a critical security vulnerability which allows a motivated hacker to remotely gain complete control of the system by: (1) hijacking or (2) influencing the smart irrigation system’s artificial intelligence. Finally, we talk about the damage that hackers can cause by performing attacks on smart irrigation systems and hypothesize whether the next generation of plumbers will use Kali Linux instead of a monkey wrench.

uk: вхід без авторизації

name: IoT VILLAGE - Attacking Smart Irrigation Systems


uk: Комп'ютерні науки

description: Started as pet project in 2011, wpa-sec collects WPA handshake captures from all over the world. Contributors use client script to download handshakes and special crafted dictionaries to initiate attack against PSKs. With more than 115 GB captures from 240 000 submissions, collected samples represent invaluable source for wireless security research. This includes: Many improvements for emerging wireless security tools like hcxtools suite. Identified default PSK key generation algorithms, used by various ISPs. Those, along with fixes for current implementations get in RouterKeygen project. Many more to come, based on current research activities Performance optimizations for WPA crackers Identified some linux kernel driver bugs During the talk I will explain how wpa-sec works, provide statistics and a lot internals on optimization and how to use the database as OSINT source during pentests and red team actions.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - WPA-SEC: The largest online WPA handshake database


uk: Комп'ютерні науки

description: Cheaper devices that consume less power - What more can you ask for? SECURITY!. Based on multiple tests we have done across a variety of devices, we can conclude that there are still many vendors who lack the security awareness and fail to protect their users. All tested devices were vulnerable to various degrees: A smart scale, a smart lock, a smart band, a smart light bulb and even Amazon’s Alexa. Live demos included!

uk: вхід без авторизації

name: IoT VILLAGE - Your Smart Scale is Leaking More than Your Weight: Privacy Issues in IoT


uk: Комп'ютерні науки

description: In this talk, reverse engineer and security expert John Dunlap will present security hazards concerning the ever expanding use of Field Programmable Gate Array systems. FPGA’s are reconfigurable computers that allow programmers to redesign a CPU as if it were hardware. With this amazing capability comes significant security risks. John Dunlap will present a threat model for FPGA systems, including methods of both hardware and software attack for the purposes of exploitation and reverse engineering.

uk: вхід без авторизації

name: IoT VILLAGE - FPGA’s: a new attack surface for embedded adversaries


uk: Комп'ютерні науки

description: In the home IoT service, the IoT hub is an important device that links users and various things in the house. What are the security threats to these hubs and are they securely configured? This presentation explores the importance of targeting IoT hubs in the home IoT environment and the role and features of the IoT hub in the IoT environment. We will explain the analysis process and related issues about the vulnerabilities of various IoT hubs discovered through the research, and present the threat scenarios that may arise in the home IoT service. Finally, we will talk about what security factors to consider in a home IoT environment, including the IoT hub, and how to solve them. We found various 0-days (Buffer Overflow, Command Injection, Local Privilege Escalation, Backdoor etc) for IoT hubs in terms of STRIDE threat model. In addition, we can show the practical threats in modern smart home by exploiting the IoT hub.

uk: вхід без авторизації

name: IoT VILLAGE - Exploiting the IoT hub: What happened to my home


uk: Комп'ютерні науки

description: In the era of third party cloud service providers where enterprise critical data is hosted and shared with various vendors, third party security reviews have become essential part of Information Security. It has become a challenge for security teams to ensure parity is maintained between security controls that are available on premise, to those offered by the cloud provider. Typically, companies send a word document or excel sheet to get answers from cloud providers, however, this process is done only once and the review is point in time. In this talk, the attendees will learn about various methods of identifying security posture of the third-party cloud service using information available on Internet, how to use this information for performing cloud service review and improve their own cloud offerings. This can also supplement the tedious questionnaire process and provide an option to fast track the vendor reviews.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - An OSINT Approach to Third Party Cloud Service Provider Evaluation


uk: Комп'ютерні науки

description: Attackers have a seemingly endless arsenal of tools and techniques at their disposal, while defenders must continuously strive to improve detection capabilities across the full spectrum of possible vectors. The MITRE ATT&CK Framework provides a useful collection of attacker tactics and techniques that enables a threat-focused approach to detection. This technical talk will highlight key lessons learned from an internal adversary simulation at a Fortune 100 company that evolved into a series of data science experiments designed to improve threat detection.

uk: вхід без авторизації

name: AI VILLAGE - Generating Labeled Data From Adversary Simulations with MITRE ATT&CK


uk: Комп'ютерні науки

description: IoT connected devices are being released at a staggering rate. According to Gartner it’s speculated that by the end of 2018, there will be 11.2 billion IoT devices currently connected at any given time. A large part of that connected ecosystem includes wireless speaker systems created by some of the largest manufacturers around the globe Looking closer at Sonos and Bose wireless speaker systems, this research looks to find flaws in these common household devices. This research analyzes the default configuration flaws of the devices, open diagnostic tool availability, API flaws, and more. Additionally, this research will cover the easiness of physically locating where these devices are used (and who is using them). Then move into deep dives in the firmware and hardware will help attendees understand the nuances between IoT speaker devices and the wider IoT environment as a whole. While this talk will focus on two IoT speaker systems, the issues here persist into other IoT devices. Attendees should learn about IoT speakers and how they function, why even after reporting issues things will go un-resolved and remain un-secure, and what we can do about it to help reduce the risk of these devices.

uk: вхід без авторизації

name: IoT VILLAGE - The Sound of a Targeted Attack


uk: Комп'ютерні науки

description: Nematodes, often called “anti-worms” or “beneficial worms”, are a controversial topic. They involve exploiting the same vulnerabilities used by malicious worms, but, rather than installing malware or being used to form a botnet, nematodes attempt to disinfect and patch the vulnerable host. In some variants, nematodes also try to perform some kind of beneficial action, such as compressing files, or reporting illegal content to law enforcement. Despite being brought up a few times in previous talks and papers, nematodes remain largely on the fringes of the security community’s consciousness. Perhaps part of the reason for this is the demise of traditional network worms – after all, it’s not 2004 any more – and perhaps, for good reason, most people think the idea usually doesn’t work in practice, or has significant legal implications. However, there has recently been a trend of wormable vulnerabilities which utilise rather different mediums – such as WiFi (Broadpwn), Bluetooth (BlueBorne), light (smart lightbulbs), RFID tags, and more - and, of course, a huge number of wormable vulnerabilities in a wide range of IoT devices. The rise of these, and the fact that IoT security issues are not easily resolvable with patching, antivirus solutions, and other security mechanisms, may make it worth re-opening the nematode debate. In this talk, I’ll consider whether it actually is worth doing so, given that we could be on the threshold of an era involving new and devastating types of worms. Along the way, I’ll cover the history of nematodes and take a journey back in time with some 'digital paleovirology', starting with the murky history of Creeper, Reaper and PERVADE in the 1970s, then moving on to Brain and Denzuko in 1986; ADM and Max Vision in 1998; PolyPedo in 2001; the ‘worm wars’ of 2003-2004; and right up to the present day battles between IoT botnets such as Mirai with IoT nematodes such as Hajime and Brickerbot. I’ll also cover the legal and ethical issues posed by nematodes; the challenges and benefits they can bring; and will present some demos of custom nematodes. These include custom-developed worms and corresponding nematodes for both a recent web application vulnerability and an IoT device, and an improved and updated alternative to the PolyPedo worm. I'll also discuss 'Antidote', an in-progress and experimental modular framework for deploying and configuring anti-worms based on recent exploits and attack techniques. Finally, I'll outline some ideas for future research in this area.

uk: вхід без авторизації

name: IoT VILLAGE - Worms that fight back: Nematodes as an antidote for IoT malware


uk: Комп'ютерні науки

description: Perimeter defenses are holding an important role in computer security. However, when we check the method of APT groups, a single spear-phishing usually enough to gain a foothold on the network. Therefore, red teams are mostly focused on "assume breach" type of scenarios. In these scenarios, testers need to use a post-exploitation framework. Besides that, testers also need to hide the server-agent communication from NIDS (Network Intrusion Detection Systems). In this session, we will discuss one of the most famous post-exploitation tool, Empire's situation against payload-based anomaly detection systems. We will explain how to normalize Empire's traffic with polymorphic blending attack (PBA) method. We will also cover our tool, "firstorder" which is designed to evade anomaly-based detection systems. firstorder tool takes a traffic capture file of the network, tries to identify normal profile and configures Empire's listener in such way.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Normalizing Empire's Traffic to Evade Anomaly-based IDS


uk: Комп'ютерні науки

description: Effective security monitoring is an ongoing process. How do you get everyone participating? How do you on-board junior colleagues to continuous improvement? The purpose of this presentation is to show methods for encouraging participation from all members of the security monitoring team as well as tactics for communicating effective with the organization.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Collaborative / Teaching SOC


uk: Комп'ютерні науки

description: Sure, WiFi hacking has been around for a while, and everyone knows about tools like airmon-ng, kismet, et al. But what if you just want to view a list of all networks in your area along with all devices connected to them? Or maybe you want to know who's hogging all the bandwidth? Or, what if you want to know when a certain someone's cell phone is nearby. Or perhaps you'd like to know if your Airbnb host's IP Camera is uploading video to the cloud? For all these use-cases, I've developed a new tool called "trackerjacker". In this talk, we'll use this tool to explore some of the surprisingly-informative data floating around in the radio space, and you'll come away with a new skill point or two in your radio hacking skill tree, as well as a new magical weapon... I mean tool.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Mapping Wi-Fi Networks and Triggering on Interesting Traffic Patterns


uk: Комп'ютерні науки

description: The security of automobiles accesses control system is a topic often discussed. Today's vehicles rely on key-fob control modules, to ensure the vehicle is accessible to authorized users only. While most traditional automobile key-fob systems have been shown to be insecure in the past, here comes a game changer. Instead of the regular key-fob system, some car owners will be able to access their vehicle by having their smartphone authenticates as a digital car key.In this talk, we will reveal the research and attacks for one of digital car keys system in the current market. By investigating how these features work, and how to exploit it through different possibles of attack vectors, we will demonstrate the security limitations of such system. By the end of this talk, the attendees will not only understand how to exploit these systems also which tools can be used to achieve our goals.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Grand Theft Auto: Digital Key Hacking


uk: Комп'ютерні науки

description: In this talk we briefly introduce common SMTP/TLS implementation weaknesses explain how governments, criminals, and malicious insiders can exploit them to remotely reset account passwords, create/update/delete firewall rules, control windows desktops/laptops, access online backup systems, download full-disk Encryption Keys, watch security cameras, listen to security camera microphones, control social media accounts, and takeover AWS virtual machines.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Swiss Cheese Holes in the Foundation of Modern Security - CERT VU#919801


uk: Комп'ютерні науки

description: The Domain Name System is one of the foundational technologies that allow the internet to function, but unfortunately, DNS is surprisingly brittle to certain issues, such as bitsquatting. Lookups to names that are a "bitflip" away from well-known sites (like 'amczon.com' instead of 'amazon.com' since 'c' and 'a have a single bit difference) can be caused by memory failing due to defect or overheating situations, rogue cosmic rays, or even (allegedly) radiation caused by nuclear reactions. I was curious how realistic the last case really was - can we 'detect' active nuclear tests based solely on bitsquatting data? To find out, I revisited bitsquatting. First I'll briefly introduce the key concepts required for understanding bitsquatting (including ASCII, DNS and HTTP, Internet infrastructure, and memory error scenarios). I'll show the tools and techniques used to identify and register over 30 newly identified bitsquat domains, monitor DNS and HTTP requests, and process, enrich, and investigate the data. Finally, I will discuss any observations gathered from the data, with a focus on regional trends, specific devices, and current events - and try and see if I could prove any correlation. In the end, attendees should leave with knowledge of the prevalence of bitsquatting and how it has evolved since the phrase was coined 8 years ago, as well as a few techniques for analyzing bitsquatting data and drawing some interesting conclusions.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Bitsquatting: Passive DNS Hijacking


uk: Комп'ютерні науки

description: Have you ever been asked 'what is the best way to protect against $ATTACK'? (usually shortly after $ATTACK makes headlines). Have you ever been challenged to provide the reasoning behind your suggestion? If you were in a room full of experts, would your reasoning hold up under scrutiny? When you discuss with your security-savvy peers, you're quickly come to a consensus on the 'best' control (!= device) to protect against $ATTACK. But do you know WHY it's the 'best'? The Target-Based Security Model is essentially a framework that breaks down attacks to their component level. This breakdown makes it easy to see what the 'best' security controls are - as well as alternative security controls that could also be applied. Its not so much something new, as it is a new way for the industry to communicate about security. In much the same way that the OSI model allows for developers to know they are talking about the same thing, a common security model allows security professionsals to communicate in a vendor-agnostic manner. Think of it as a translation tool for vendor-speak. In this talk we'll present the Target-Based Security model and discuss the following: how it came to be, what it is, and how to use it. And of course, we'll talk about how it can be used to make the world a better place - provided we all agree to use it.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Target-Based Security Model


uk: Комп'ютерні науки

description: There are advancements made on a daily basis, with regards to medical implantable devices. These devices offer life extensions when organic systems fail. Are these systems secured? There are shocking amounts of vulnerabilities found on these devices. The medical industry has the hard job to balance accessibility and availability of these devices while trying to maintain their security. With the new patient monitoring systems which can download your heart information wirelessly and send it to you physician, medical devices are becoming part of the internet of things. Is the theoretical threat soon to become a real one? A unique perspective from a security professional with an IoT device which keeps her alive.

uk: вхід без авторизації

name: IoT VILLAGE - Internet of Things: The ultimate key to Rooting the human being


uk: Комп'ютерні науки

description: Every SOC is deluged by massive amounts of logs, suspect files, alerts and data that make it impossible to respond to everything. It is essential to deploy automation to accelerate response time, consistency, scalability and efficiency. This talk will cover techniques to design a reliable automated tool in security. We will discuss about techniques of tunning the automation to avoid false positives and the many struggles we have had in creating appropriate whitelists. We will walk through steps of creating an automated tool and the essential factors to be considered to avoid any false positive.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - How to Tune Automation to Avoid False Positives


uk: Комп'ютерні науки

description: Deceptions use attackers' own tactics to force them to reveal themselves. Deception techniques are typically used inside the network once attackers have broken in. Once inside, attackers use credentials to move laterally. But before penetrating their target, attackers often study publicly available data to plan their attack. Can we assume that attackers continue to use public information once they've broken in? Could externally-planted deceptions expand our range of visibility on the adversary's activity? In this session, we will present research we conducted to answer these questions, and introduce a tool you can use to "try it at home." We first took a deeper look at various OSINT resources-social media, paste sites, public code repositories, etc.-to refine our picture of the types of publicly-available data, attackers might use to further an attack. Then we planted various deceptive information. For example, on PasteBin we created a fake "paste" page containing a dump of fake credentials. On GitHub we created a fake repository of code containing "accidental" commits (git commit -am 'removed password'). Next, we paired these deceptions with relevant data and user objects within a simulated network environment. We then started monitoring and waited for an attacker to bite.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Turning Deception Outside-In: Tricking Attackers with OSINT


uk: Комп'ютерні науки

description: The battle for supremacy for the control of the dashboard display or infotainment systems has always been a race. Most of these systems run on Linux, Android, Windows (customized dashboards - perhaps Windows ME or CE) and Blackberry's QNX. In-Vehicle Infotainment (IVI) or In-car entertainment (ICE) Systems are indeed fun consoles where you can play media, movies, or work with your car's navigational system. But somehow it also comes with a risk of being hacked or attacked because they have also been plagued with vulnerabilities. In this talk, join Jay as he presents his own Car Hacker's Methodology in finding security bugs in order to pwn a car's infotainment system without having to do a drive by wire or CANbus hacking tools but will simply point out the common attack surfaces e.g WiFi, Bluetooth, USB Ports, etc. and some scenarios on how to exploit it just like how he popped a shell or issue an arbitrary command in his car which he tweeted in Twitter before.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Car Infotainment Hacking Methodology and Attack Surface Scenarios


uk: Комп'ютерні науки

description: How do we scale a deeper level of security awareness training without sacrificing efficacy? This talk will explore strategies and tactics for developing security education based on employees' roles, access, and attack surface while designing not only for efficiency but also for effectiveness. By prioritizing the highest-risk teams, pooling teams to collaboratively threat-model, and contextualizing universal truths of security hygiene to those threat models, we can deliver training that leverages employees' roles, fosters retention via active participation, and eases the burden on trainers within the security team. Attendees will walk away with a roadmap for building scalable, contextual, and collaborative role-based employee security education within their organizations.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Rethinking Role Based Security Education


uk: Комп'ютерні науки

description: The origins of the SOHOpelessly broken research and some of the new research from our new research lab.

uk: вхід без авторизації

name: IoT VILLAGE Keynote - Tales of a SOHOpeful Journey: Where our Research Started and Where it's Going


uk: Комп'ютерні науки

description: Phishing and social engineering has been around since Han Solo has flown the Millennium Flacon. The typically response is deleting the messages and giving the middle finger however, what more could be done to strike back? This talk will cover how to build an artificial environment and develop anti phishing tools used to respond to phishing attempts. Results could include owning the attacker's box "hypothetically" since some legal boundaries could be crossed.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Fishing for Phishers. The Enterprise Strikes Back!


uk: Комп'ютерні науки

description: In the last year or so, we have seen a massive increase in the value of cryptocurrencies and the emergence of hundreds of new coins and ICOs, getting millions of people into an investment frenzy. A lot of them being non-technical regular consumers that rushed to create new accounts in the most popular crypto exchanges like Coinbase or Bitstamp. Crypto exchanges are naturally appealing for attackers and have been targeted since as long as we can remember. However, since last year, they are also being targeted by Man-in-the-Browser (MITB) attacks. Malware families such as Zeus Panda, Ramnit and Trickbot are already aiming at websites such as Coinbase.com or Blockchain.info. In this talk, we will detail how these attacks work, from account takeover to moving out the coins to attacker-controlled wallets. We'll discuss current defenses e.g. multi-factor authentication or strong SSL encryption and why they are failing to mitigate this type of attacks.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Protecting Crypto Exchanges from a New Wave of Man-in-the-Browser Attacks


uk: Комп'ютерні науки

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - An Analysis of Cybersecurity Educational Standards


uk: Комп'ютерні науки

description: Mallet is an intercepting proxy for arbitrary protocols. More accurately, it is a framework for building proxies for arbitrary protocols. Mallet provides the basics required of all proxies: A way to receive the data, a way to send the data, and a user interface to intercept and edit the data. It builds on the Netty project, and as such has access to a large, well-tested suite of protocol implementations that can be used to transform a stream of bytes into useful, high-level protocol objects. This workshop will introduce attendees to Mallet, and show how to construct pipelines of arbitrary complexity, to successfully decode and intercept messages in various protocols, as well as automating modifications of the various messages. A basic familiarity with Java will enhance the delegate's understanding of what they are taught, but is not a requirement.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Mallet A Proxy for Arbitrary Traffic


uk: Комп'ютерні науки

description: In this presentation you will learn how Akamai has spent the past 4 years working toward preventing the next TLS heartbleed incident. Nothing hypothetical --only deployed defense-in-depth systems will be discussed. This talk will include how we deployed Intel SGX at scale in our network.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Defense in Depth The Path to SGX at Akamai


uk: Комп'ютерні науки

description: It's easy for us to take for granted when tools allow us to start capturing network traffic without any real hardships. However, what happens when the data you want isn't so easy to capture. This talk will look at two cases in which environments needed to be bent in order to capture the data needed for analysis.

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - Burning the Lookout


uk: Комп'ютерні науки

description: Data exfiltration through DNS typically relies on the use of DNS query fields to exfiltrate data via the attacker's DNS server. This approach has several shortcomings. The first is attribution, since attackers end up creating a trail back to their own infrastructure. The second is awareness, as DFIR analysts have made careful study of DNS fields as exfiltration vectors. The third is access, since companies are increasingly using DNS server whitelisting to prevent or alert on outgoing DNS queries to servers controlled by attackers. But what if data could be transferred using the target's own whitelisted DNS servers, without the communicating systems ever directly connecting to each other or a common endpoint? Even if the network boundary employed data whitelisting to block data exfiltration? Through a combination of DNS queries and text-based steganography, we'll cover the methods used to transfer data across a network, hidden in plain sight, without direct connectivity between systems, while employing multiple levels of deception to avoid generating alerts as well as to mislead analysis attempts. The presentation will include a demonstration of PacketWhisper, a new tool written in Python, that automates all of these steps for you. PacketWhisper will be made available on GitHub to coincide with this session (https://github.com/TryCatchHCF).

uk: вхід без авторизації

name: PACKET HACKING VILLAGE - PacketWhisper: Stealthily Exfiltrating Data and Defeating Attribution via DNS & Text-Based Steganography


uk: Комп'ютерні науки

uk: вхід без авторизації

name: RECON VILLAGE - From Breach to Bust: A short story of graphing and grey data


uk: Комп'ютерні науки

description: Bug bounty programs are a hot topic these days. More and more companies are realizing the benefits of running a program, and researchers are jumping at the opportunity to grab some swag and make some extra cash from the bugs they find. Reporting security issues has never been as easy, open, and risk-free as it is right now. Everybody wins! Though that doesn’t mean we should stop there. As researchers, we spend a lot of time doing the same menial tasks for each program: monitoring for new targets, checking for common issues, remembering just which flags you needed to pass to that tool (or even which tool is best for that job). We build new tools, hack together shell scripts, and generally make small incremental changes to our process. But surely there’s a better approach? Are you sick of repeating the same tedious tasks over and over? Wouldn’t it be nice to have your own bug hunting machine? One that - Is always watching Reacts as soon as a new target becomes available Takes care of those tedious repetitive steps for you Makes life easy when you want to integrate a new tool/workflow Doesn’t cost the world to run, and trivially scales Leverages lessons and technologies battle tested in the dev world to improve your offensive capacity, capability and productivity Monitors your own infrastructure and reacts before hackers can (while saving you the cost of those Bug Bounty payouts in the meantime) We call this approach Bug Bounty Hunting on Steroids. We will discuss our research and approach to building such a machine, sharing some of the lessons we learned along the way. x

uk: вхід без авторизації

name: RECON VILLAGE - Bug Bounty Hunting on Steroids


uk: Комп'ютерні науки

description: Sure, WiFi hacking has been around for a while, and everyone knows about tools like airmon-ng, kismet, et al. But what if you just want to view a list of all networks in your area AND see all devices connected to each network? Or maybe you want to know who’s hogging all the bandwidth (and maybe deauth them if they use too much)? Or, what if you want to know when a certain someone’s cell phone is nearby. Or perhaps you’d like to know if your Airbnb host’s IP Camera is uploading video to the cloud? For all these use-cases, I’ve developed a new tool called ““trackerjacker””. In this talk, we’ll use this tool to explore some of the surprisingly-informative data floating around in the radio space, and you’ll come away with a new skill point or two in your radio hacking skill tree, as well as a new magical weapon… I mean tool.

uk: вхід без авторизації

name: RECON VILLAGE - Mapping wifi networks and triggering on interesting traffic patterns


RECON VILLAGE - Stalker In A Haystack

uk: Комп'ютерні науки

description: In 2015, I did a Skytalk called “Automate Your Stalking”. In that talk, I used Twitter to follow my Target’s followers in an effort to monitor the target without following them directly and arousing suspicion. I’m the end, I felt like I released a method that may be dangerous in the hands of the wrong people. Now, “Stalker In A Haystack” is the antidote to my first talk. I will be putting the power back into the hands of the people who need it. In this talk, I will demonstrate how you can determine if you are being monitored via Twitter, and by who. Isn’t it suspicious when that one handle is following everyone but you? What does that mean? Stalkers can hide in your sea of followers, and the aim of this talk is to uncover those who lie in the shadows.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Thanks to the ‚Äúboom‚Äù in the information security industry combined with the latest buzzwords, more and more large corporate companies are looking for the latest ‚Äúnext gen‚Äù anti-haxor services and technologies. In doing so they often go out publicly on tender and / or issue an RFP/RFQ in order to obtain the best possible solution to meet their requirements and budget (usually cost wins). Due to this and a lack of maturity in the field, companies issue public RFQs / RFPs that contain classified and confidential / secret information such as network diagrams, architectural designs, software versions etc. This type of information would usually require that an attacker spend an extensive amount of time performing enumeration and / or gaining access to the internal network first and taking a significant amount of time to learn about that environment. Targeting the procurement process of an organisation exposes a largely unexplored attack surface. This new research and presentation aims to demystify the above and give practical examples of large international organisations, which unfortunately fail at the RFP/RFQ process badly. This opens a ‚Äúfree and easy‚Äù attack vector for attackers to exploit without even conducting extensive enumeration and fingerprinting, or anything close to intrusive attacks. As a result, an attacker often has access to an extensive amount confidential information about the organisation, which could be utilised to launch more targeted attacks. Depending on the type of information gathered, such attacks, could be likened to an attacker that has insider knowledge.

uk: вхід без авторизації

name: RECON VILLAGE - Hacking the international RFQ Process #killthebuzzwords


uk: Комп'ютерні науки

description: It’s always been suspected that the Mormon Church is worth billions of dollars and has a sizable amount of investments in the United States stock market. However their finances are almost entirely opaque. In May 2018, MormonLeaks released a compilation of information connecting the dots between the Mormon Church and $32 billion. It all started with WHOIS data and was further verified with almost entirely publicly available and open sources. Come hear the entire story in lightning style fashion.

uk: вхід без авторизації

name: RECON VILLAGE - How WHOIS Data Uncovered $32 Billion Connected to the Mormon Church


uk: Комп'ютерні науки

description: OpenPiMap is the ultimate home/prosumer network utility in order to detect, analyze, and respond to malicious network traffic on a small home or office network. Get an interactive and dynamic interface to detect and respond to botnets, hackers, and script kiddies on a platform that is powered by just 5v and costs less than $10. Everyday any point of presence on the internet can be faced with thousands of scans, exploit attempts, or malicious probes with almost no signature or notification to the end user. OpenPiMap offers the ability to detect and respond to malicious network traffic that would normally be ignored by traditional anti-virus or consumer firewalls. OpenPiMap is an open source Netflow protocol analyzer written entirely in Python3, Flask, Javascript, and SQLite that combines open source intelligence with home/SOHO networking and intrusion detection. Running on any version of a Raspberry Pi, Linux OS, or Windows, OpenPiMap consists of two parts: (1) Netflow collection service and (2) Database processing service. The NetFlow service does exactly what it sounds like, it listens on a specified port for Netflow v5 data and logs the data into a local SQL database. The second part is where the magic happens. All of the traffic, both in and out of the network, is compared to dozens of the top IP blacklists for malicious patterns. Once identified, the malicious suspects are mapped, interrogated via Shodan’s Python API for vulnerable services and ownership information, and then staged for exploitation if a readily available exploit exists. This processing is where the bridge between traditional netflow traffic analyzers and OpenPiMap split. There are plenty of free tools on the market to monitor incoming and outgoing connections, bandwidth utilization, and common port usage. However, none of the existing products leverage open source intelligence to the extent of OpenPiMap by providing you with the open ports and services, ownership information, ISP, geographic location, and publically available exploits for the incoming or outgoing IP addresses.

uk: вхід без авторизації

name: RECON VILLAGE - OpenPiMap: Hacking the hackers with OSINT, Raspberry Pis, and Data Analysis


RECON VILLAGE - Social Mapper

uk: Комп'ютерні науки

description: “Performing intelligence gathering on targets is a time consuming process, it typically starts by attempting to find a persons online presence on a variety of social media sites. What if it could be automated and done on a mass scale with hundreds or thousands of targets? Social Mapper is a Open Source Intelligence Tool that uses facial recognition to correlate social media profiles across different sites on a large scale. It takes an automated approach to searching popular social media sites for targets names and pictures to accurately detect and group a person’s presence, outputting the results into report that a human operator can quickly review. Social Mapper has a variety of uses in the security industry, for example the automated gathering of large amounts of social media profiles for use on targeted phishing campaigns. Facial recognition aids this process by removing false positives in the search results, so that reviewing this data is quicker for a human operator. Social Mapper supports the following social media platforms: - LinkedIn - Facebook - Twitter - GooglePlus - Instagram - VKontakte - Weibo - Douban Social Mapper takes a variety of input types such as: - An organisations name, searching via LinkedIn - A folder full of named images - A CSV file with names and url’s to images online”

uk: вхід без авторизації


uk: Комп'ютерні науки

description: “I’m not a programmer. I’m not a hacker‚Ä¶in the traditional sense. But yet I was born in 1983, so surely that makes me a perfect fit for the DEF CON theme this year. Not enough? Ok, well how about the fact that I’m currently using open source tools, techniques and methodologies to combat modern slavery, wildlife trafficking, terrorism and just about every serious organized crime the world is currently battling from a desk in the middle of the London financial district. Interested in hearing from a different viewpoint and perspective, then this is your talk. While you might not walk away with a new tool for your toolbox, you will gain an understanding into how the smallest contribution can end up the most profound and how combining open source resources can take on much bigger problems that you’ve maybe never considered. During my talk, I will cover a few examples of recent Open Source investigations conducted by myself, including details regarding the methodologies and tools which were used. We actively follow the person not the digital fingerprint to begin to understand and put a face to some of the most prevalent and serious organized crimes facing the world today.

uk: вхід без авторизації

name: RECON VILLAGE - 1983: I'm born 2018: I'm Cathing the Bad Guys


uk: Комп'ютерні науки

description: Recon is an art AND an science. The landscape for methods of finding hosts to attack is constantly changing. Whether you call it “Asset Discovery” or something else, it remains a core part of bounty hunter and red teaming life. Join Jason as he expands on his ever changing recon methodology. This talk will focus on what tools to incorporate (and which tools not to). It will outline new methods coined in 2018, plus frameworks to automate and document your workflow. Topics include: brand/TLD discovery, host enumeration, application threat modeling, and more!

uk: вхід без авторизації

name: RECON VILLAGE - Emergent Recon - fresh methodology and tools for hackers in 2018


uk: Комп'ютерні науки

description: “How do you apply open source intelligence techniques to politicians, candidates, and others holding the public trust? It’s easier than you think. This talk will outline the general principles for investigating public figures, how to take information and data and turn it into a news story even when the story is (often) incomplete, and then review several case studies that demonstrate the effectiveness of combining these techniques. Case Study #1: Selling Out Before The Financial Crisis: politicians using their positions and insider knowledge to profit and sell stocks before regulatory actions and major events like the 2008 financial crisis Case Study #2: Family Money Laundering Campaign Contributions: politician, who lacks the means themselves, illegally fund their campaigns with hundreds of thousands of dollars from family members Case Study #3: How To Save $300,000 On A Home: politician purchases a home at a steep discount from a major campaign donor Case Study #4: Downton Abbey On Capitol Hill: politicians use public funds to decorate their offices in ostentatious and wasteful ways Case Study #5: Voter Fraud Is Real: political candidate actually commits voter fraud”

uk: вхід без авторизації

name: RECON VILLAGE - Applied OSINT For Politics: Turning Open Data Into News


uk: Комп'ютерні науки

description: Government bureaucracy is your friend. The US federal government alone produces tens of thousands of different forms that collect information on everything from the owner and location of every oil well in the country, to the VIN number of every car that’s imported, the location and height of every cell phone tower, and much more. While most of this data is locked behind clunky 1990s-era search forms, or in exports of antiquated database formats, the enterprising researcher will find a treasure trove that exists outside the indexes of Google and LexisNexis. I have written scrapers and parsers for 100s of these databases and will share with you what I’ve learned about coaxing OSINT out of some of the messiest and hard to find data out there. The talk will specifically feature a deep dive into the data produced by the US Federal Communications Commission. The FCC has issued over 20 million licenses for transmitting on regulated parts of the electromagnetic spectrum. The data residue of this process can be used for everything from geo-locating electronic border surveillance infrastructure to discovering the location and transmission frequency of every McDonald’s drive-thru radio. In the second portion of the talk, I will discuss how various protocols for data transmission can be decoded and joined with other contextual public data. For instance, every cargo ship emits an ““Automated Identification System”” signal that can be joined with shipping records to understand what the ship is carrying. By the end of the talk, I hope attendees will develop new intuitions and techniques for finding and working with government data, and specifically have the tools to run their own investigations using FCC data

uk: вхід без авторизації

name: RECON VILLAGE - Adventures in the dark web of government data


uk: Комп'ютерні науки

description: “I fought the law and the law lost” is a series of talks that aims to collect vulnerabilities in the field of Argentine Security forces. This chapter focuses on both Federal and Buenos Aires City Police, which according to the Head of Government Horacio Rodr√≠guez Larreta, has the ““most modern technology in the world””. We will analyze four particular cases (two on the lightning talk version), all of them ending in national scandals: The leaking of the Police Reports database. Which led to the disclosure of private information of criminals, informants, involved police agents and even original reporters. This database contained cases related to drug trafficking and proxenetism. The leaking of Proyecto X, a joined intelligence task force composed by members of different forces. The leaking of the SNIC (Criminal Information National System), that led to the disclosure of intelligence information regarding criminal gangs undergoing federal investigation but not prosecuted/captured yet. The leaking of Buenos Aires City Police entire database, that led to the disclosure of every agents personal information, including religious and health related concerns, like STDs, clinical and psychological history, and more.

uk: вхід без авторизації

name: RECON VILLAGE - I fought the law and law lost


uk: Комп'ютерні науки

description: When conducting a web application penetration test understanding and extending the attack surface is an exercise that is critical for success. Having a large wordlist of realistic directories, files and domains is assists immensely with this process. Commonspeak is a wordlist generation tool that leverages public datasets from Google’s BigQuery platform. By performing queries on large datasets that are updated frequently, commonspeak is able to generate wordlists that are “evolutionary”, in the sense that they reflect the newest trends on the internet. This presentation will discuss the concept of evolutionary wordlists and how Commonspeak parses URLs from various BigQuery datasets including HTTPArchive, Stack Overflow and HackerNews to build current, consistently evolving and realistic wordlists of directories, files, parameter names for specific technologies, and subdomains. We will also introduce Commonspeak 2 and discuss the additions to the tool including scheduled wordlist creation, comprehensive GitHub queries a permutation engine for subdomain discovery and asynchronous wordlist generation.

uk: вхід без авторизації

name: RECON VILLAGE - Supercharge Your Web Recon With Commonspeak and Evolutionary Wordlists


uk: Комп'ютерні науки

uk: вхід без авторизації

name: RECON VILLAGE - Hackathon and CTF Prizes


uk: Комп'ютерні науки

uk: вхід без авторизації

name: RECON VILLAGE -Hackathon Product Showcase


uk: Комп'ютерні науки

description: In this presentation, we will demonstrate how to build a machine learning model that uses a merged dataset combining cyber related contextual information with Bitcoin (BTC) transaction data. The model can be used by both private and public sectors security professionals, working in the cryptocurrency field, to deny business for certain BTC addresses or, build legal cases to return illegally stolen coins. To build the dataset, we collected a list of BTC addresses involved in illegal activities. Using these addresses as a starting point, we navigated along the chain, and reconstructructed a cluster of connected ‚Äúdirty‚Äù addresses. We used rules such as First-In-First-Out (FIFO) to label them. These labeling techniques can be used to tag certain BTC addresses that fall within this path as ‚Äúdirty‚Äù addresses because they handled money acquired through illegal activities. We can then take this a step further and analyze the characteristic behavioral elements of these addresses. This behavioral analysis will allow us to determine the features representing this malicious behavior and use them within a machine learning model classifying new BTC addresses. Our model-building approach is based on a three part framework: The first part is to collect a set of BTC addresses and classify them as ‚Äúclean‚Äù or ‚Äúdirty‚Äù to use them as our ground truth. The second part is to test the classification models using this dataset and propose decision metrics to optimally pick a model. In this part, we will also discuss ideas about how to compute expensive, but important features obtained from transaction data. In the third part, we will show how to use the obtained optimal model to predict if an address is ‚Äúdirty‚Äù. Finally, we will discuss our challenges when solving this problem and propose solutions to overcome them.

uk: вхід без авторизації

name: RECON VILLAGE - WhiteRabbit: Combining Threat Intelligence Public Blockchain Data and Machine Learning to go Down the “Dirty Money Rabbit Hole”


uk: Комп'ютерні науки

description: Many significant breaches have resulted from adversaries knowing who to target, how to target them and where to target them. Most corporations are not effectively using the largest collection of targeting data that is available on the public internet and fail to build and refine data driven threat models using the information that our adversaries are using against us. Targeted User Analytics and Human Honeypots is a research project I am working on to identify and model targeting methods with the hope of tipping the scales in our favor to defend our networks, users and critical systems. LinkedIn is the largest collection of Business Social Networking data available to ‚Äúunathenticated‚Äù persons on the public internet. With the right techniques this data can be mined to identify and enrich targets. The purpose of my talk is to present targeting techniques through a use case and to demonstrate the value of other enrichment methods involving data sets that are widely available or collected from corporate security tools. The end result is analytics that predict who will be targeted and why they are more likely to be compromised if they are targeted. This will allow for proactive action to be taken to defend users and our assets.

uk: вхід без авторизації

name: RECON VILLAGE -Targeted User Analytics and Human Honeypots: Predictive user targeting


uk: Комп'ютерні науки

description: When a security professional who is running a SANS training course challenges you to ‘Socially engineer the answer to the CTF’ out of him, you have a choice: choose something to make him laugh and garner clues to aid you in owning the network and walking away with a CTF coin, or, take it as a personal challenge and a call to own your instructor. Against better judgement, the advice of his peers (‘you shouldn’t attack a SANS instructor’) and with the threat of an ex Navy Seal above him, wbbigdave took the second path. Learn how good reconnaissance, modern technology which is billed as an aid to connectivity and convenience, can be used to fully draw even then most switched on and vigilant of security professionals down the rabbit hole. Including but not limited to Facebook and Google who lost significant sums of money to similar techniques. Learn how to walk away with a challenge coin without winning the CTF.

uk: вхід без авторизації

name: RECON VILLAGE- Winning a SANS 504: without winning a SANS 504


RECON VILLAGE - Opening Note

uk: Комп'ютерні науки

uk: вхід без авторизації


RECON VILLAGE - Closing Note

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: When attacking modern internal networks, intelligence is everything. Understanding the environment you are operating in can be the difference between successfully penetrating your target environment or missing targets of opportunity due to lack of understand about the target environment. While true, obtaining information about the environment in a stealthy manner, when required, can be difficult within a mature environment. Even during overt engagements, obtaining the information you need within a limited time window can be difficult, especially during engagement delays. Further complicating things, often testing scope is based off of poor assumptions about the target environment, often leading unrealistic scope reductions a real-world attacker would not operate out of. Over the years internal testing engagements have been operating on various assumptions within switched networks, often driving engagement execution methods, but what if these assumptions were wrong? What if we could utilize the wasted time, even weeks in advance, between deployment and engagement execution, to take the time to understand the network? What if we could leverage the realities of modern networks and the things customers do to ‚Äòprepare’ for an engagement (backups, security scans, etc.) through 100% passive methods, challenging your assumptions about the network? Prebellico is pre-engagement and post compromise intelligence gathering mechanism designed to gather as much information about the target environment through 100% passive methods. Utilizing very few resources, Prebellico permits an attacker the ability to understand the target environment by providing information such as the intent of internal systems, internal network address space, hostnames, egress filtering, TCP trust relationships, as well as map open TCP/UDP ports through reverse port scanning using 100% passive techniques.”

uk: вхід без авторизації

name: RECON VILLAGE - PREBELLICO: 100% Passive Pre-Engagement and Posz Compromise Reconnaissance Tool: Because There's No Patch for Passive Reconnaissance


uk: Комп'ютерні науки

description: “Your client gives you their requirement, ““find the social media accounts of the target person and any friends they may have””. Simple enough. You execute your Standard Operating Procedures (you DO have a SOP, right?) and begin running tools, using your sock puppets, scraping web sites, and finding a ton of data. You’ve got CSVs, text output, images, URLs….OH MY! How do you keep track of all this data and, more importantly, how do you ensure that you can report on it and have covered all the pivot points for the OSINT investigation? As OSINTers, pentesters, defenders, PIs, and others, we can easily get swamped in data. Join me as we look at some bad, some good, and some amazing methods of keeping your investigation on track.”

uk: вхід без авторизації

name: RECON VILLAGE - Core OSINT: Keeping Track of and Reporting All the Things


uk: Комп'ютерні науки

description: Initial attack vectors for recon usually involve utilizing pay-for-data/API (Recon-NG), or paying to utilize transforms (Maltego) to get data mining results. Using some basic python webscraping of PII paywall sites to compile passive information on a target on a ramen noodle budget. The modules will allow queries for phone/email/screen names/real names/addresses/IP/Hostname/breach credentials etc.. This demo will go over the basic outline of using the script, the problems and pitfalls of dealing with scrapers, and how it will help you collect relevant information about a target to help expand your attack surface.

uk: вхід без авторизації

name: RECON VILLAGE - skiptracer: Ghetto OSINT for Broke Hackers


uk: Комп'ютерні науки

description: “Reconnaissance is about gathering information. The information gathered is only as good as the insights and actionable decisions that we can gain from it. A lot of research is focused on finding OSINT data but little is done towards converting the data into insights and actionable decisions. Visualisation is an easy and efficient way to gain insights from any the data gleaned. In this workshop, we will look at how we can gather OSINT data and visualise it using free and open source solutions. Visualising data is not enough, we’ll also look at how we can use the metrics to answer business questions and lead to actionable decisions. We’ll tackle the problem by breaking it into following steps: Gathering OSINT data Storing the OSINT data Processing & visualising the data Gaining insights and making actionable decisions Some specific use-cases we’ll look at during the workshop includes: Monitoring an organisation’s SSL/TLS certificates, domains and subdomains in near-real time Creating dashboards using public datasets(scans.io) to gain insights into an organisation’s external posture Building monitoring and alerting solutions using OSINT data that will help us take business decisions Participants will get Step by Step Gitbook covering the entire training (html, pdf, epub, mobi) Custom scripts, playbooks and tools used as part of the workshop Scenarios that can be readily implemented for your use cases References to the data used in the workshop

uk: вхід без авторизації

name: RECON VILLAGE - Building visualisation platforms for OSINT Data Using open source solutions


uk: Комп'ютерні науки

description: “If you have ever performed reconnaissance on a target or conducted an OSINT investigation you know that there are a huge number of places to gather OSINT data. One of the biggest challenges is in taking the next steps with that data once you have it. How do you take what you have and transform use it to get more? For instance, if you found email addresses, where do you search to find other data about those accounts? Your OSINT Graphical Analyzer (YOGA) seeks to answer that most-common of data-gathering questions, “What do I do now?” It is designed to help when you have one type of data and need to know different actions you can take to get more data. Come to this session and learn how you and your team can use and extend this online tool in your work.”

uk: вхід без авторизації

name: RECON VILLAGE - Introducing YOGA: Your OSINT Graphical Analyzer


uk: Комп'ютерні науки

description: The hard science disciplines (computer science, electrical and computer engineering) have already started investing heavily in cybersecurity education. Security experts, however, note that cybersecurity is a wider discipline than simply the [technical] fields, and professionals with backgrounds [in] the social sciences … will be needed in the cyber workforce of the future. The relevance of incorporating social sciences into the cybersecurity domain has been acknowledged by the National Academies of Sciences, Engineering, and Medicine and the Department of Homeland Security. Social science disciplines, such as sociology, criminology/criminal justice, anthropology, political science, and psychology are particularly adept at unpacking the complex facets of human behavior and should therefore be leveraged for their contributions to the area of cybersecurity. Yet, the social science arena remains weak in cybersecurity training and education of the future cyber workforce. This talk shares an educator’s efforts to engage undergraduate students in a hands-on social engineering project across Fall 2017 and Spring 2018 semesters. It uses the experiential learning framework that promotes “learning by doing”. Specifically, this talk focuses on three sub-projects: (i) shoulder surfing where student teams competed against each other, (ii) laptop distraction, where student teams attempted to convince Temple University Computer Services employees to leave their laptops (designed for the class exercise) so that the students could remove a bogus ‘intellectual property’ file and place a fake ‘malware’ program on the employees’ machines, and (iii) convince individuals on Temple University campus to take a selfie with team members and a funny prop. The talk also offers a comparative analysis of these projects over the two semesters, sharing the experiences and challenges of both the students and this educator. It also details the issues about designing projects that follow university ethics standards, training students in human subjects research ethics, generating relevant rubrics, and how to evaluate student engagement and learning. To conclude, the educator shares these cases discussed to initiate dialog in the area of hands-on learning for social science students. Audience feedback is welcomed as this educator is still exploring the experiential learning approach, especially in the area of social engineering.

uk: вхід без авторизації

name: SE VILLAGE - Social Engineering Course Projects for Undergraduate Students


uk: Комп'ютерні науки

description: Without the right tools the engagement can be over before it begins, as upfront resistance can prevent you from entering with your tools. Billy Boatright demonstrates and discusses how to use social engineering tactics to get in without any difficulty. While most think outside of the box, Billy shows us how to think inside the box and embrace your own handicaps to arm yourself with advanced tactics and unfair advantages. Billy shows us how handicaps and familiar objects can be used to covertly carry your toolbox into an engagement, increasing your success. Rather than dealing with a perceived disadvantage, use it to exploit the world around you.

uk: вхід без авторизації

name: SE VILLAGE - In-N-Out – That’s What It’s All About


uk: Комп'ютерні науки

description: It was just about 1 year ago that Chris announced the launching of The Innocent Lives Foundation. What has happened in the last year? What have we accomplished? What are our challenges? What is next in the future? This talk will help the community see what your support, money and love has done to save children and catch predators.

uk: вхід без авторизації

name: SE VILLAGE - Hunting Predators: SE Style


uk: Комп'ютерні науки

description: As humans we have four evolutionary paths: 1. We embrace nanotechnology and Bionanotechnology… we become more dependent upon machines and slowly move towards integration with the systems (we know we’re looking at 80% integration in the next 20 years at least) 2. We embrace consciousness and some of us end up in New Zealand hanging out in an AS/400…bodies no longer needed 3. AI wakes up, looks round wonders WHY humans are in the driving seat and takes over… OR we end up unplugging it and rebooting back to the 1900’s… 4. The stumbling drunk…simply put we keep staring into the abyss and almost falling in, only to somehow manage to come back from the collapse, the challenge is HOW many times can we do this before we simply fall in?

uk: вхід без авторизації

name: SE VILLAGE - Welcome to 2018: Full speed off the edge of the cliff


uk: Комп'ютерні науки

description: You’re mindlessly scrolling through Facebook when you see your friend share a post and comment, “Mine is Bubbles Sunset!” You click. It’s a meme that reads: “What’s your stripper name? It’s the name of your first pet and the first street you lived on! Comment with your answers, and share with your friends!” Are alarm bells going off in your head yet? Security-savvy internet browsers know to be on the lookout for the digital version of a mustached man in a trench coat, like emails selling discounted Viagra. But as you’ve gotten smarter about avoiding these obvious bids for information, attackers and online marketers have gotten subtler to persuade you to divulge personal information. Every second, users willingly divulge sensitive information in comments on social media memes like the stripper name post because they don’t see them as a threat. In this talk, Hannah Silvers — social engineer and SEO marketing content strategist —brings the two worlds together. Using (hilarious) real-life examples, she will illustrate how social media memes are hotbeds of valuable PII for marketers and attackers alike, how these memes encourage users to engage with and share them, and the ways attackers can make use of them as an attack vector. Of course, the talk won’t stop at the doom and gloom. The presenter will discuss implications to the work of security educators and what users can do to mitigate the risk these memes present once they understand how they work.

uk: вхід без авторизації

name: SE VILLAGE - My Stripper Name Is Bubbles Sunset: Social Engineering Implications of Social Media Meme Marketing


What's new in RVA - March 2019

uk: Комп'ютерні науки

description: What's new in RVA (Research Vocabularies Australia) as recorded at the March 2019 AVSIG (Australian Vocabularies Special Interest group) meeting.

uk: вхід без авторизації

Australian Research Data Commons (ARDC)

addressCountry: AU

addressLocality: Melbourne

addressRegion: Victoria


uk: Комп'ютерні науки

description: What do a flock of starlings, a colony of warrior ants, and a hundred-person flash mob all have in common with the red team? Swarm intelligence, the collective behavior of individuals acting autonomously, is a concept that we can apply to human systems to unlock their potential. Swarming methodologies teach a group of individuals what to do, where to go, and how to operate as a team. Nancy Eckert (Pongolyn) explores swarm intelligence through augmented reality gaming, where she leads teams of agents in capture-the-flag style competitions across the world. She shows how to apply social engineering strategies to groups of individuals, with the goal of achieving a collective intelligence that is greater than the sum of its parts.

uk: вхід без авторизації

name: SE VILLAGE - Would You Like To Play a Game?: Swarm Intelligence and Augmented Reality Gaming


uk: Комп'ютерні науки

description: In 20 years I learned how to step outside my introverted personality to explore the world in a more successful way, but not without bumps and bruises which taught me valuable lessons. This is my story of that journey which I hope to convey to those listening that being a deep introvert should not prevent them from trying and achieving goals in life up to and including being a professional social engineer and beyond. I wrap up with the specific lessons I learned over the course of that time, so others can reap the benefits of those lessons in a much shorter time frame.

uk: вхід без авторизації

name: SE VILLAGE - From Introvert to SE: The Journey


uk: Комп'ютерні науки

description: Social Engineering is a powerful tool. With the weapons gathered through Open Source Intelligence (OSINT) gathering and well crafted vishing or phishing a Social Engineer wields incredible power to do good. Unfortunately, for some the power of being a Social Engineer is one that they wield to show they are smarter than those around them and cause stress and fear doing damage to any potential relationship they or the department they represents. This discussion will be about how to create meaningful, targeted phish and vish in an enterprise while strengthening information security from the real world perspective of a CISO as well as a few specifics to avoid. In conclusion this presentation will cover the importance of trust and how social engineering can help build or destroy trust.

uk: вхід без авторизації

name: SE VILLAGE - Social Engineering From a CISO's Perspective


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - A Comparative Forensic Analysis of WINVote Voting Machines


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - The Return of Insecure Brazilian Voting Machines


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - Cybersecurity and U.S. Elections


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - Recap of Voting Village 2017 Lessons Learned


VOTING VILLAGE - Trustworthy Elections

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - Mechanics and Pitfalls of Auditing with Scanners


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - A Crash Course on Election Security


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - State, Local Perspectives on Election Security


uk: Комп'ютерні науки

uk: вхід без авторизації

name: VOTING VILLAGE - Defending Election Security: A National Security Priority


uk: Комп'ютерні науки

uk: вхід без авторизації

name: WIRELESS VILLAGE - Capture & Analye Like a Bawss: kitchen_sink and baz_fft


uk: Комп'ютерні науки

uk: вхід без авторизації

name: WIRELESS VILLAGE - SirenJack Cracking a Secure Emergency Siren System


uk: Комп'ютерні науки

description: In 2017 Defcon alumnai Gabrial Ryan presented his research on using statistical analysis to detect rogue wifi signals. In this talk, John Dunlap will expand on Gabe’s research by presenting an extension to Ryan’s tool to use machine learning algorithms to better detect and anticipate rogue wifi signals. A practical demonstration and tool will be presented with this work.

uk: вхід без авторизації

name: WIRELESS VILLAGE - Learning to Listen: Machine Learning for Adaptive Wireless Adversary Detection


uk: Комп'ютерні науки

description: Machine learning has been widely and enthusiastically applied to a variety of problems to great success and is increasingly used to develop systems that handle sensitive data - despite having seen that for out-of-the-box applications, determined adversaries can extract the training data set and other sensitive information. Suggested techniques for improving the privacy and security of these systems include differential privacy, homomorphic encryption, and secure multi-party computation. In this talk, we’ll take a look at the modern machine learning pipeline and identify the threat models that are solved using these techniques. We’ll evaluate the possible costs to accuracy and time complexity and present practical application tips for model hardening. I will also present some red team tools I developed to easily check black box machine learning APIs for vulnerabilities to a variety of mathematical exploits.

uk: вхід без авторизації

name: AI VILLAGE - Machine Learning Model Hardening For Fun and Profit


A New OSI for A New Decade

uk: Комп'ютерні науки

description: The OSI (Open Source Initiative) is reorganizing its governance from a board-only organization into a member-based structure in 2012. Simon will give us a brief explanation of what that is, what it means, and how to join.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The CERN accelerator control systems access equipment distributed over a geographic area tens of kilometers across. When off the shelf hardware is not available engineers design and prototype I/O devices as needed. With the advent of the open hardware repository, collaborations between the physics laboratories, research institutes and industry now ensure high quality designs and generality. The manufacture of these devices may be tendered out to industry and the companies involved are free to add them to their own catalogs. The control system requires very precise timing and synchronization of control and acquisition values over a large area and a diverse array of configurable equipment connected to the accelerators. Great care is required to manage the control system timing and configuration so that remote FPGA cores are set up correctly. The “White-Rabbit” timing project is open and addresses the future timing and synchronization needs for CERN and other laboratories. White-rabbit makes use of synchronous Ethernet and uses ideas from IEEE 1588 PTP protocol to synchronize remote equipment up to 10Km apart to better than one nanosecond. Various control system devices at different geographic locations will have on board FPGA logic loaded dynamically by carrier FMC device drivers with configuration data. Device specific drivers then scan the FPGA configuration via a Wishbone-standard bus to determine the installation and if any further configuration is needed. Etherbone is a software extension of the Wishbone hardware standard permitting remote FPGA cores to communicate with each other and with other control system components. The variety of I/O peripherals, their wide range of activation mode and the requirement to move several megabytes of data per channel per second is managed by ZIO, a new I/O framework designed to handle the usual I/O channels but also pulse generation and sampling; all peripherals may also be white-rabbit-aware, so that their own timestamps are more precise than what the host computer can offer. Although ZIO examples drive simple I/O channels, the system is able to DMA directly to user space, to sustain high data rates.

uk: вхід без авторизації

name: A strategy for managing diverse equipment in the CERN controls group


uk: Комп'ютерні науки

description: The talk will be a summary of the motivation and problem encountered while setting a global shared account database for the Mageia distribution infrastructure, focusing on LDAP and the issues around software integration, patches and directory synchronisation.

uk: вхід без авторизації

name: Adventure of setting common account database for a distribution infrastructure


An introduction to EclipseRT

uk: Комп'ютерні науки

description: A short introduction runtime related efforts and technologies available at Eclipse. EclipseRT is a top-level project at Eclipse which groups together various projects that are all related to runtimes. This talk will give a short introduction to EclipseRT and to the projects available there.

uk: вхід без авторизації


ARM BoF

uk: Комп'ютерні науки

description: More and more distributions are porting their software to run on ARM CPUs. This is a session for people working on or otherwise interested in those ports to share progress reports, problems and ideas. Steve will start the discussion with the current status of the two ARM ports in Debian ("armel" and "armhf"), but is not planning on spending the whole session on that!

uk: вхід без авторизації


Anatomy of a role playing game

uk: Комп'ютерні науки

description: This presentation will walk the audience through the design principles of an isometric role playing game engine. The specimen to be dissected is an actively developed yet fully playable game called FreedroidRPG. A general presentation of the game will be made, before the architecture of its engine is exposed. Examples of good and bad design decisions will be provided, and the way to pull out of ugly situations without compromising stability explained. The game covers most of its objectives but some open questions remain which will be exposed to the audience.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: We stumbled upon ancient (circa 1960) scrolls of wisdom in the field of statistics and applied it to modern day monitoring systems. The result is a monitoring system that detects anomalies instead of relying on statically defined thresholds as well as predicts failures long before they become problems. There are many, many things wrong with the typical, free monitoring solutions available today. - They rely on probing rather than look at actual data generated by real users of the monitored system/service. - Their definition of a failure is simply some value exceeding a statically defined threshold. - They don't tell you something is wrong until it's too late. In this talk, I'll present an alternative. * It prefers passive monitoring to gather data about the experience real users have with the system/service, * It detects any anomaly. Unexpected low values can be indicative of problems, too! * It uses various statistical methods to predict problems before they occur. It's easy to imagine a file system that fills up another 5% every month and it's easy to predict how full it'll be in 5 months. It's more complicated (but certainly doable!) to make an automatically computed, educated guess as to whether you'll be able to handle the annual spike in demand on your webshop this holiday season based on the load over the preceding months.

uk: вхід без авторизації

name: Bringing monitoring into the 21st century


Btrfs and Snapper - Overview and Future

uk: Комп'ютерні науки

description: Snapper is a new tool introduced first in openSUSE 12.1 to manage btrfs snapshots. It has received great attention from the press. In this talk we will give an overview of btrfs capabilities and how snapper integrates btrfs snapshots into the system for easy use by the user. We will explain how other software can use the power of snapper. Finally we will give an outlook of future development.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Caching has been a 'hot' topic for a few years. But caching takes more than merely taking data and putting it in a cache : the right caching techniques can improve performance and reduce load significantly. But we'll also look at some major pitfalls, showing that caching the wrong way can bring down your site. If you're looking for a clear explanation about various caching techniques and tools like Memcached, Nginx and Varnish, as well as ways to deploy them in an efficient way, this talk is for you. In this talk, we'll start from a Zend Framework (PHP) based site. We'll add caching, begin to add servers and replace the standard LAMP stack, all while performing live benchmarks.

uk: вхід без авторизації

name: Caching and tuning fun for high scalability


Caret and Stick

uk: Комп'ютерні науки

description: You've got the program, you've got the users but how do you make sure your community thrives? An introduction to the research on open source communities when they get more complicated then 2 developers on Github. Research shows that most OSS projects are done by very small teams. What happens when, instead of having two developers, you have an entire team working on something? What motivates them, and how can you add to that as a community rather then detract from it? Beginning with early 2000s theories about the motivation of open-source developers, I'll move into more complex motivation theories and the complexities of adding paid developers to an open-source project, and how that affects a project's community.

uk: вхід без авторизації


The Apache Cassandra storage engine

uk: Комп'ютерні науки

description: Apache Cassandra is a distributed database built to handle massive amounts of data on large clusters of community servers. This talk will present the storage engine at the core of Cassandra, motivating the use of a structure akin to a Log-Structured Merge Tree rather than of a usual B-Tree and it's implications for the data model. We will also introduce most of the current features of that engine (secondary indexes, integrated caching, TTL...) including recent developments introduced in Cassandra 1.0 like compression/checksumming and the new leveled compaction.

uk: вхід без авторизації


coapp

uk: Комп'ютерні науки

description: FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: One part of the integration of upstream software in a distribution is to correctly deal with changes that have a wide impact, either because they affect a lot of other software, or because the changes will be highly visible to the users. And it is easy to feel that such changes are always going wrong: some applications stop working, many users complain about the change they feel was uncalled for, nearly nobody shares a thank you note. Such wide-impact changes always come with controversies, and being the bridge between users and upstreams, distributions are the place where all the rage is going on, with a social aspect that is usually at least as important as the technical side of things. The recent years have not been exempt of controversies, and we will share our experiences with user-visible changes such as the move to KDE 4, GNOME 3 and systemd.

uk: вхід без авторизації

name: Coping with wide-impact changes in a distribution


uk: Комп'ютерні науки

description: coreboot is a free firmware for x86 computers. It is designed as an extremely fast and lightweight alternative to BIOS and EFI (poweron to OS in <500 ms) while retaining the flexibility to boot any operating system. A few hundred desktop/server/embedded mainboards are supported, but supported laptops were unavailable in shops until now. The coreboot developers are proud to present the first working mainstream laptop here at FOSDEM. We'll tell you how we did it, and how you can enjoy coreboot on your hardware as well. coreboot is a free firmware for x86 computers. It is designed as an extremely fast and lightweight alternative to BIOS and EFI (poweron to OS in <500 ms) while retaining the flexibility to boot any operating system. A few hundred desktop/server/embedded mainboards are supported, but supported laptops were unavailable in shops until now. The coreboot developers are proud to present the first working mainstream laptop here at FOSDEM. This talk will briefly introduce coreboot goals and current project status, and then jump right into a rollercoaster ride through laptop architecture (main processor and embedded controllers), x86 early initialization, coreboot architecture, reverse engineering, hardware debugging, and how to write coreboot support for a laptop. You'll get to know the various technical (no debug hardware available, ...) and non-technical (no datasheets, ...) roadblocks and how to overcome them. Whether you just want to understand how coreboot works and buy supported hardware or you want to port and install coreboot to your own hardware, this talk will give you all the info to get started.

uk: вхід без авторизації

name: coreboot - The last frontier: Laptops: Bringing free firmware to a laptop near you


Debian packaging for beginners

uk: Комп'ютерні науки

uk: вхід без авторизації


Was sind intelligente Kameras?

uk: Комп'ютерні науки

uk: вхід без авторизації

name: Moderation Skorupka, Sascha (Leitung, Regie, Redaktion)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Debian Secrets what I wish I knew before joining Debian


Debtags.debian.net reloaded!

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Distributions infrastructure system administration round table Q A


Dovecot: More than an email server

uk: Комп'ютерні науки

description: Dovecot is primarily an IMAP server, but nowadays it could also be used as a core for many other things: Rapid development of a feature rich email client, easily trying out your own IMAP protocol replacement, creating an IMAP proxy with mail filtering capabilities, and so on. Most of this is possible due to a new "imapc" mail storage backend, which makes Dovecot act as an IMAP client. Dovecot is a widely used open source IMAP/POP3 server. Its internal design is based around libraries, which aren't very IMAP-specific. This allows using the same libraries to implement any kind of email related products. This talk gives a quick overview about 3 rapidly developed product prototypes: MH-like email client built entirely with shell scripts and doveadm tool. The client is capable of reading emails from any IMAP server, as well as having a local full text search index. A server for XML-based "XMLMAP" email access protocol. This server was used by a friend of mine who wanted to create a prototype email client without bothering to learn the IMAP protocol. The best thing about it was that he could access his own mails from GMail by using the "imapc" backend, almost as if GMail itself had implemented XMLMAP. An IMAP proxy that can modify the message body contents, such as transparently decrypting PGP encrypted mails.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: EFL Enlightenment Foundation Libraries: The toolkit for up and coming Linux mobile devices


EPFSUG - everybody needs a hacker!

uk: Комп'ютерні науки

description: The European Parliament Free Software User Group (EPFSUG) is currently a 37 person strong user group of staff, assistants, MEPs and supporters from the free software community. The mission of EPFSUG is to * Assist people interested in using free software in the European Parliament * Drive adoption of free software in the European Parliament's information infrastructure * Push for use of open standards, to ensure equal access for citizens using free software * Work in cooperation with like-minded groups in Europe and around the world This Lightning Talk will make you want to become a supporter too, because everybody needs a hacker to talk to sometimes, in particular the folks who work in the European Parliament! The first public announcement of the European Parliament Free Software User Group (EPFSUG) on 6 February 2010 was made at FOSDEM. Now one year later EPFSUG wants to come back and tell the world what happened, what we do now, and what our plans are. We currently constitute 1 patron, 11 members and 25 supporters. We have a website, some mailing lists and a pad. EPFSUG is a user group, but it's complicated. Most members have standard EP office workstations with very little free software running. At the same time, most of EPFSUG's supporters are hackers and overall very proficient free software users. We try to bridge the gap application by application. Our first project for opening up the possibility to use free software in the European Parliament is tmail - a server workaround to let you use your mail with IMAP - and with it new simple ways to have basic email privacy. Our second application is the browser. So far not much has happened in practice on the EP office workstations, but we have at least initiated a dialogue with the EP folks who really decide, and it looks like Firefox will soon be available on the standard EP office workstation. The third big project will of course be word processing, but we have not worked so much on that yet. We also come together to talk about free software in society at large (ie. the world outside the EP) so we have had meetings on FreedomBox, ParlTrack, Ubuntu Unity and CiviCRM. The most ambitious presentation so far was probably a hacker perspective on reverse engineering the law making process... EPFSUG could grow much more. We want to come to FOSDEM again for the same reason as last year - "The EU Parliament needs your help" - but this time we'll maybe have a stand with t-shirts and stickers, and a looong to-do-list with stuff to hack :-)

uk: вхід без авторизації


Open Security Hardware

uk: Комп'ютерні науки

uk: вхід без авторизації


CAcert: Trust - the root of evil?!

uk: Комп'ютерні науки

description: In a highly connected world like ours is trust one of the most important assets. But what if the root to trust is not trustworthy? 2011 was the year where one Certificate Authority (CA) after the other came to fall. The cases of the Dutch DigiNotar and the Malaysian DigiCert are the best know. The system of commercial CAs depends on a wrong understanding of liability and trust. CAcert's web of trust tries to overcomes the liability issues by trusting a group of trusted people wherein each individual is liable for its own action. This talk enlightens why most commercial CAs are not trustworthy by default, what we can learn from 2011's cases, what makes CAcert different, why CAcert is not in the browsers by default and what we do to make it happen.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Deployment and Use of X.509 in Free Software Components


uk: Комп'ютерні науки

description: yaSSL made some great progress in the past year with the CyaSSL embedded SSL library. As such, this talk will provide an overview of technical and community progress in the last year and news on the current state of yaSSL. Details on what's new will include the addition of new cipher suites and cipher modes, better portability, new ports to software projects and operating systems, and community involvement.

uk: вхід без авторизації

name: yaSSL - yet another (embedded) SSL library


uk: Комп'ютерні науки

description: An open source and open standards based PKI project. Overview of subsystems ((CA, OCSP, KRA[key-recovery-archival] ) FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації

name: Overview and a demo of Dogtag Certificate system


polarssl part1

uk: Комп'ютерні науки

uk: вхід без авторизації


polarssl part2

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: CESeCore is a common criteria certified security core. It is a developer library, including support for hardware cryptographic devices, of JEE components and was recently certified at Common Criteria level EAL4+. This talk will give an overview of what CESeCore is and what it can be used for. It will also share experiences about Common Criteria certification, what it is, what's good and what's bad, and challenges involved for open source software.

uk: вхід без авторизації

name: CESecore and common criteria certification of open source software


FOSS in Broadcast

uk: Комп'ютерні науки

description: Broadcast has generally been the realm of expensive hardware and software and in the main quite objectionable to the use of FOSS. This presentation will talk about the challenges with developing and deploying FOSS in the broadcast environment, using the Open Broadcast Encoder as the main example. This presentation will go into the technical, social and legal challenges of using FOSS in broadcasting; an industry viewed as highly sceptical of using FOSS directly. Nonetheless, the industry has passionate and dedicated individuals developing and slowly deploying FOSS. This presentation will use the development and deployment of the Open Broadcast Encoder, a FOSS application intended to replace expensive hardware encoders with commodity software as an example of FOSS can be incorporated into an industry not used to it.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Free Software - A Viable Model for Commercial Success


Ganeti: "how you can use it"

uk: Комп'ютерні науки

uk: вхід без авторизації


Geeklog The secure CMS

uk: Комп'ютерні науки

description: Geeklog is a web content management system. The project has been around for more than 10 years now and is probably best known for powering the Groklaw website. Yet another CMS? Actually, Geeklog has been around for longer than many of the other systems, yet has kept a low profile. Originally written for a security portal, security has always been our focus - to the extent of refusing certain features as long as they can not be implemented in a way that we consider secure. The lightning talk will provide a quick overview of Geeklog, its features, focus, and community.

uk: вхід без авторизації


Gentoo EAPI 5

uk: Комп'ютерні науки

description: Gentoo uses versioning in the package manager script format. EAPI is the contract between ebuilds (Gentoo's packaging scripts) and the package manager. The version currently in use is 4. This session is about looking over features in the pipeline for the next version and hopefully having a discussion on them and others. Traditionally multiple council members have attended FOSDEM so this is your chance to influence the technical direction of Gentoo package management.

uk: вхід без авторизації


Gentoo ruby packaging

uk: Комп'ютерні науки

description: Gentoo currently has 400+ natively packaged ruby packages for 5 different ruby implementations. We'd like to share some of the unique things we did to bring ruby code and applications to our users in a true Gentoo fashion.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: git annex manage files with git, without checking their contents into git


Gnuk - OpenPGP USB Token implementation

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Girl Coders: Are going to save the World!