uk: Комп'ютерні науки

description: We use Go, containers, and integration testing to reimplement Tailscale’s (https://tailscale.com/) control server, the closed source SaaS product that coordinates their Open Source WireGuard-based client. This talk tells the story of how we managed to build a stable version of the control server that is now starred by almost 10k on Github and has users all over the world through extensive focus on integration tests. Tailscale is a modern mesh VPN built on top of Wireguard (https://wireguard.com/). It works like an overlay network between the computers of your networks - using NAT traversal. The Tailscale’s core client, Android client, and supporting libraries and software are Open Source. The SaaS control server and client UIs to proprietary OS (macOS, iOS and Windows) areis closed source. Headscale implements this control server and allows self-hosters and open source aficionados to use Tailscale’s clients without having to use a closed source product. In this talk we will tell the story of how we started reimplementing the control server based on the code from Tailscale’s official client. We went through stages of “man this works surprisingly well” to “how does this even work” after we started to use aggressive integration testing to improve the “correctness” of our implementation. For every test we added, we found tons of issues to fix, and eventually, we got to a stage where we could improve headscale with great confidence. Today, integration testing is potentially the most vital part of our development cycle and we both use it to fix “old and broken”, and add “new and shiny”. We have managed to take what started out as a learning project to understand how Tailscale worked and built it into a healthy open source project and community.

uk: вхід без авторизації

name: Headscale: How we are using integration testing to reimplement Tailscale


Ronna Steinberg

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: If you are a Gopher, the mention of the term Object-Oriented Programming is likely triggering for you because Object Oriented represents everything that Gophers love to hate, from over-complicated design to unpredictable execution. But could Go be in fact OO? Experienced or new to Go, this talk is aimed to help you understand where Go fits within the realm of programming languages. Ronna will take you on a journey through the history of OO and the choices that were made when designing Go so that you can decide for yourself if Go is or isn't OO.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Is Go Object-Oriented? A Case of Public Opinion

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: At the end of the day we will have lightning talks of 8 minutes in the Go Devroom! Each talk will be 8 minutes long, the CfP for these is open till a few hours before the talks start to give everyone the chance to submit a proposal.

uk: вхід без авторизації

name: FOSDEM 2023 - Go Lightning talks: Come speak!


Optimizing string usage in Go programs

uk: Комп'ютерні науки

description: Strings can seem like one of the most innocuous data structures in Go. Yet, they still play a significant role in most ubiquitous types of programs, such as text processors, in-memory key-value stores, DNS resolvers, or codecs. Their burden on the performance of such programs becomes especially pronounced in distributed systems and cloud-native environments, where the number of strings within an instance of the software can reach an order of millions or more. This gives rise to performance issues and bottlenecks, especially with regard to memory consumption. To provide answers to these problems, the talk will discuss several string-optimization techniques. To be more accessible for both beginner and intermediate levels, the talk will first state the problem and briefly introduce strings as a data structure, and will explain how strings look internally in Go. The core of the presentation will be dedicated to discussing operations with strings and how these can be optimized based on various techniques, such as string interning and string concatenation. The author will also share his experience and practical examples of open-source programs, where these techniques are being applied.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In this talk, we will take a deep dive into reconciliation, which is the fundamental principle behind the working of Kubernetes, and see how we leverage Golang constructs to achieve these patterns. We will explore how to extend these patterns to create what are known as operators in Kubernetes, to enhance its functionalities taking Cluster API as our use-case. The reconciliation pattern is a design pattern that is commonly used in Kubernetes to ensure that the desired state of a system is consistently maintained. It involves continuously monitoring the state of the system and making adjustments as needed to ensure that it remains in compliance with the desired state. Reconciliation is one of the key patterns that emerge from control theory, which is a branch of engineering that deals with the design and analysis of systems that control the behavior of dynamic processes. Reconcilers are the heart of Kubernetes and Cluster API. The use of reconcilers in Kubernetes enables users to define the desired state of their clusters declaratively, and let Kubernetes handle the details of implementing and maintaining that state. The reconciliation pattern in Go is implemented by using the Kubernetes API to track the state of the cluster, and Go's concurrency features to ensure that the reconciler runs continuously and can make adjustments in real time. We will take a look into the implementation of these patterns in their nascent form and then their extension in Cluster API by the use of controllers.

uk: вхід без авторизації

name: Reconciliation Pattern, Control Theory and Cluster API: The Holy Trinity


uk: Комп'ютерні науки

description: Being the maintainer of a fairly active oss project (MetalLB) over the past year, I reviewed a substantial amount of contributions. During this process, I identified a set of recurring idioms and patterns that less experienced contributors keep missing, making the codebase harder to read and to maintain. In this talk I will describe what cognitive load is and why it matters, and provide a way to reduce it via a set of quick and easy recipes. Using this set of actionable recipes the audience will be able to drastically improve the quality of their Go code with relatively low effort.

uk: вхід без авторизації

name: Recipes for reducing cognitive load: yet another idiomatic Go talk


keywords:
Na-ion batteries
Electrochemistry
Energy storage
Batteries
Sodium

de: Chemie

fi: kemia

uk: Хімія

en: Chemistry

fr: Chimie

da: Kemi

es: Química

nl: Scheikunde

de: Mathematik, Naturwissenschaften

uk: Математика, природничі науки

en: Mathematics, Natural Sciences

description: Li-ion batteries (LIBs) are essential for the operation of a wide range of devices and systems, from portable electronics to electric vehicles as well as grid storage applications. At the same time, the rapid growth in battery demand, combined with resource issues and supply risks, raises questions about whether alternative batteries should be developed. At the moment, Na-ion batteries (SIBs) are considered to be one of the most promising alternative technologies. The main goal for SIBs is to develop batteries based on abundant, non-critical elements that reach, at the same time, similar energy densities. SIBs have the potential to be more cost effective than LIBs while reaching similar cycle life. As a major advantage compared to other alternative cell chemistries, SIBs can be produced on the same manufacturing lines like LIBs therefore taking advantage of existing manufacturing technology. Recent announcements by Chinese cell and car manufacturers are further raising the interest in this technology. In fact, the first Na-ion Gigafactory has opened in November 2022 in China which shows that the technology is now reaching commercialization. On the other hand, there are clear opportunities for further improvements in electrode materials and electrolytes to further advance the technology. This talk gives an overview on Na-ion batteries and recent developments. The state-of-the art will be summarized followed by a discussion on what materials can be used (and not used) compared to Li-ion batteries.

uk: вхід без авторизації

name: Sodium-ion batteries: Energy storage based on abundant elements

name: Beilstein-Institut zur Förderung der Chemischen Wissenschaften

addressCountry: DE

addressLocality: Frankfurt am Main

addressRegion: Hesse


keywords:
data
sensor data
data model
Sensor Things API

uk: Комп'ютерні науки

description: Dr. Joan Masó (m) is a Principal investigator of CREAF leading specialized group on geospatial interoperability, GIS, remote sensing. In this presentation, Joan showed that in order to make sense of sensor data, a data model that semantically tags the data is needed. Sensor Things API helps to map “data columns” to concepts (time, observed property, location, etc.), making the data machine-readable, and as a bonus, this structured API has rich query capabilities.

uk: вхід без авторизації

name: Tired of data tables full of data that I have no idea what it means? Use Sensor Things API


Interview with Peter Strobl

keywords:
CEOS
ARD
OGC
SWG
analysis
satellite data
Earth Observation
sensing methods
analysis

uk: Комп'ютерні науки

description: Peter A. Strobl is a Senior Scientist at European Commission’s Joint Research Centre in Ispra, Italy. Following his presentation, he was asked a few questions by OEMC’s Working Package 8 OpenGeoHub’s communication experts.

uk: вхід без авторизації


Analysis-Ready Data

keywords:
Earth Observation
satellite data
analysis
sensing methods
CEOS
ARD
OGC
SWG

uk: Комп'ютерні науки

description: Peter A. Strobl is a Senior Scientist at European Commission’s Joint Research Centre in Ispra, Italy. In this presentation, he gave an overview of the development of CEOS-ARD, its current status, and provided an outlook on the next steps in CEOS-ARD and the OGC SWG. The concept of “Analysis Ready Data” (ARD) was initially developed within the Committee on Earth Observation Satellite (CEOS). CEOS defines ARD as “satellite data that have been processed to a minimum set of requirements and organized into a form that allows immediate analysis with a minimum of additional user effort and interoperability both through time and with other datasets”. Over the course of the past few years CEOS has developed a number of so-called ‘Product Family Specifications’ (PFS) which cover a variety of different sensing methods and observed parameters. Institutional and commercial satellite data providers have accepted these specifications and by now a broad variety of satellite image products are available as “CEOS-ARD certified”. The growing popularity and demand of ARD by the user communities have led to calls for a more formal endorsement of respective standards. Over the past six months, the Open Geospatial Consortium (OGC) has therefore formed a Standards Working Group (SWG) which will pursue this task.

uk: вхід без авторизації


keywords: Film Video Suche Wissenschft Naturwissenschaft Technik Recherche Physik Chemie Informatik Bibiothek

uk: Математика, природничі науки

description: Thermodynamik-Video zur Vorlesung Thermodynamik im Basisstudium Chemie

@language: de

uk: вхід без авторизації

name: Thermodynamik Teil 21 - Joule-Thomson-Effekt

name: Carl von Ossietzky Universität Oldenburg

addressLocality: Oldenburg

addressRegion: Lower Saxony


keywords: Film Video Suche Wissenschaft Naturwissenschaft Technik Recherche Physik Chemie Informatik Bibliothek

uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 22 - Zustandsdiagramme - Teil I


uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 23 - Zustandsdiagramme - Teil II: Clapeyron'sche Gleichung


uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 24 - Spezielle Phasengleichgewichte


uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 25 - Mischungen - Teil I: Einführung


uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 26 - Mischungen - Teil II: Nicht flüchtige Verbindungen


uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 27 - Mischungen - Teil III: Dampfdruckkurven reale Systeme


keywords: Fillm Video Suche Wissenschaft Naturwissenschaft Technik Recherche Physik Chemie Informatik Bibliothek

uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 18 - Das chemische Potenzial


keywords: Film Video Suche Wissenschaft Naturwissenschaft Technik Recherche Physik Chemie Informatik Bibiothek

uk: Математика, природничі науки

uk: вхід без авторизації

name: Thermodynamik Teil 19 - Das chemische Gleichgewicht


Thermodynamik Teil 20 - Reale Gase

keywords: Film video Suche Wissenschaft Naturwissenschaft Technik Recherche Physik Chemie Informatik Bibliothek

uk: Математика, природничі науки

uk: вхід без авторизації


Building Forms Mobile Users Will Love

uk: Комп'ютерні науки

description: Users on mobile devices benefit the most from appropriate system keyboard suggestions and help, but they're also the same users who often suffer the most when form fields are deployed built poorly. In this talk, we'll learn how to build mobile-friendly forms, to improve accessibility and to reduce user frustration and bounce rate. We'll cover basics, like input type, as well as a number of more advanced HTML attributes to control iOS/Android features for user convenience. You'll leave this talk equipped to build form fields that are tailored for mobile accessibility.

uk: вхід без авторизації


Continuous Accessibility

uk: Комп'ютерні науки

description: Continuous Accessibility by Melanie Sumner How do you balance the challenge of continuously delivering features and products that are inclusive and accessible? In this talk, we will examine the idea of continuous accessibility- my vision for the future of accessibility in engineering practice. We will discuss a three-part strategy for how our community can make this idea happen, starting this crucial conversation for more inclusive products and elevated artisanship.

uk: вхід без авторизації


Cross-File Codemodding

uk: Комп'ютерні науки

description: As engineers, we are constantly faced with decisions for how to build our apps. Should I adopt this pattern? Should I use that addon? We’re all doing the best we can to plan for the future, but what happens when we find ourselves coded into a corner? In this talk, I will share how to use codemod-cli to create a series of codemods to move logic from javascript into your template files, and how this technique helped my team replace some of our past implementation decisions with a fresh path forward.

uk: вхід без авторизації


Ending the Plague of Memory Leaks

uk: Комп'ютерні науки

description: Ending the Plague of Memory Leaks by Steve Szczecina Memory leaks are a silent plague on users of single page apps. But memory leaks rarely get attention from developers until they start causing havoc in productions applications. They are easy to introduce into code based but often hard to detect, reproduce, diagnose, and fix. Until now, that is! ember-cli-memory-leak-detector is brand new addon that is changing how the ember community deals with memory leaks.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Ember Octane has clearly introduced a paradigm shift in the Ember community and has contributed towards boosting the user experience. But what is next? Can we improve the user experience even further? Yes indeed! Featuring Fastboot + Embroider :)) This talk will demonstrate the possibilities that Server Side Rendering and Code Splitting together unlocks for improving the user experience. In the end, you will have a good grasp on the concepts as well as the tools and techniques required to build Fastboot + Embroider powered Ember apps.

uk: вхід без авторизації

name: Fast-Track Ember with Fastboot + Embroider


Fun Fast Tools for Serious Work

uk: Комп'ютерні науки

description: Fun Fast Tools for Serious Work by Ed Faulkner

uk: вхід без авторизації


Handling Images on the Web

uk: Комп'ютерні науки

description: Handling Images on the Web by Marco Otte-Witte Handling images on the web seems simple – add an img tag, set its src and you're done. But then there's also SVGs that can be embedded directly in the DOM. Or you could inline any image with Base64. There's also images in CSS, images that are part of your app and images uploaded by users, various techniques for (pre-) loading images to maximize efficiency and much more. In this talk, I'll give an overview over everything to know and consider when using imagery on the web and some recommendations for common scenarios.

uk: вхід без авторизації


HTML-First Apps are the Future

uk: Комп'ютерні науки

description: HTML-First Apps are the Future by Jen Weber Whether you are writing Ember templates, Rails erb, or React JSX, all roads lead to HTML. However, the markup produced by popular web frameworks has not always been correct, and some ergonomics left devs with bad habits. But where there have been mistakes, there is also opportunity. In demos using Ember Octane, you will learn how powerful it is to put HTML first. We will compare with older apps so that you can see Ember’s evolution for yourself. Finally, we will analyze the choices that other frameworks have made, and how the ways that people build apps are changing.

uk: вхід без авторизації


Introducing Template Imports

uk: Комп'ютерні науки

description: Introducing Template Imports by Chris Garrett Have you ever found it hard to figure out where an Ember component is coming from? Which addon was it defined in again? Or have you ever wanted to structure your components folder a bit differently, so that related components are kept together? Have you possibly even wanted to define a few components, helpers, and modifiers in the same file, because they were so related to each other? Template imports are a brand new feature in Ember that allow you to do just that! In this talk, we'll explore these new patterns and capabilities, and see how you can use them in your app today!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Keep It Local by Chris Krycho What do Steve McConnell’s variable scoping guidelines in Code Complete 2, pure functional programming, the data ownership system in Rust, classical object-oriented programming, the actor model in Erlang, and autotracking in Glimmer all have in common? Every one of them is aiming at the same key ingredient of robust, reliable software: the ability to “reason about your code.” But what does that actually mean?

uk: вхід без авторизації

name: Keep It Local: Or: (part of) what "reasoning  about your code" really means


Keynote Part 1

uk: Комп'ютерні науки

description: Keynote Part 1 by Yehuda Katz

uk: вхід без авторизації


Keynote Part 2

uk: Комп'ютерні науки

description: Keynote Part 2 by Godfrey Chan

uk: вхід без авторизації


Launching at Scale During a Pandemic

uk: Комп'ютерні науки

description: Pour 1oz of scalability, 1oz of agility, and 1oz of solid tech foundations into the requirements shaker. Add 5 UI engineers. Top with LinkedIn data. Shake well. Strain into hundreds of chilled virtual glasses. Garnish with beautiful charts and serve to thousands of customers.

uk: вхід без авторизації


Learning Ember in 2021

uk: Комп'ютерні науки

description: Learning Ember in 2021 by Lenora Porter

uk: вхід без авторизації


Lint ALL the Things

uk: Комп'ютерні науки

description: Lint ALL the Things by Bryan Mishkin Ember applications come with linting built-in and you’ve probably encountered linting in action when it reminded you about unused variables in your code or that you were using deprecated Ember constructs like mixins or observers. But there’s a whole world to linting beyond the default setup, and when used properly, it can become a superpower for modernizing your application and maximizing your team’s productivity. We’ll look at the state of linting with Ember, the different kinds of linters available and actual bugs caught with them, and even how you can write your own lint rules.

uk: вхід без авторизації


Modernizing a Massive Monolith

uk: Комп'ютерні науки

description: We started our SproutCore dashboard for Square Merchants in 2012. Since then, the company and the codebase have grown significantly, but the dashboard has been too big to "throw away and start again." Come listen to how we have since upgraded it through Ember versions, migrated to new packages, started breaking it down into addons and engines, and even have it running concurrently with React for certain pieces.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: How do you implement and test loading states? How do you deal with network errors? How do you prevent Sentry from filling up with uncaught promise errors? If you’ve asked yourself such questions before or if you’ve never even thought about these thing then this talk is for you. We will go over a few patterns that will make the implementation of loading states and good error handling much easier for you.

uk: вхід без авторизації

name: Please wait… Oh, It Didn't Work!: Loading States and Error Handling


Technical Interviews Don't Have to Suck

uk: Комп'ютерні науки

description: Technical interviews for engineering jobs are notoriously dreadful-- but they don't have to be. In this talk, you'll learn practical strategies for conducting technical interviews that are more welcoming, more useful and more fun for everyone involved.

uk: вхід без авторизації


The Framework I Love

uk: Комп'ютерні науки

description: As the demand grows for Web Applications or Progressive Web Apps (PWA) many new JavaScript frameworks have emerged. Ember.js is one of the most mature frameworks, and has a very solid base. In fact, many frameworks adopted different concepts from Ember, such as ember-cli. Furthermore its worth mentioning built in router and ember-data which makes Ember a solid choice.

uk: вхід без авторизації


Typed Ember extends Confidence

uk: Комп'ютерні науки

description: Typed Ember extends Confidence by Krystan Huffmenne As a developer with a non-traditional background, I struggled with imposter syndrome as I climbed the ranks to senior developer. This is the story of how converting our 7-year-old legacy Ember app to TypeScript in the throes of a pandemic helped me build confidence and write code that JustWorks™. With Octane and native classes, using TypeScript with Ember is more straightforward than ever. Learn why you too should consider moving to TypeScript and tips for a painless transition. Not interested in switching? We'll talk about how to harness some of TypeScript's benefits even without TypeScript.

uk: вхід без авторизації


Birds-Eye Vue of Ember

uk: Комп'ютерні науки

description: Ember.js is known for having a tight-knit community that keeps the framework moving forward. But to keep that community thriving and growing, it is important to be inclusive of new members and keep a low barrier to entry. If you come from a Vue.js background, it takes some time to map the concepts of one to the practices of another. What if we could decrease that hurdle by drawing parallels between them? In this session, we will show how good Vue code translates into great Ember code and highlight their differences so we can help Vue newcomers feel productive from the get-go.

uk: вхід без авторизації


Building a Pinterest Clone

uk: Комп'ютерні науки

description: One of the holy grails of responsive web layouts is the “Masonry” grid commonly used on Pinterest and many other sites. With the advent of native features like Flexbox and CSS Grid, many layout woes are a thing of the past. However, this design pinnacle still stands strong as a challenge to frontend engineers, often requiring a mess of complex JavaScript to manipulate the DOM successfully. Now, there’s a light at the end of the tunnel! Let’s explore how we can build a MasonryGrid component with nothing more than CSS Grid and Ember’s modifier pattern, making this problem a thing of the past.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Ember Data is a powerful data layer, but it has its limitations and pain points, especially as applications grow in scale. Ember M3 builds on Ember Data's core, but replaces the default model class with an alternative that is more flexible and lightweight. In this talk, we'll explore M3's capabilities, and then test them out by building an app with M3 and Firestore, a realtime NoSQL database-as-a-service. As we'll see, M3 and Firestore make a perfect pair, enabling rapid prototyping and flexibility, while setting you up for success as your application grows.

uk: вхід без авторизації

name: Building a Realtime App with Firebase and Ember M3


Element Modifiers: Under the Hood

uk: Комп'ютерні науки

description: Modifiers are a basic primitive for interacting with the DOM in Ember. But, how would you describe how element modifiers work to someone new to Ember? Would you be able to? By the end of this talk, you’ll understand how modifiers work under the hood and be able to teach this to your teammates.

uk: вхід без авторизації


Fireside Chat

uk: Комп'ютерні науки

uk: вхід без авторизації


Keynote Part 1

uk: Комп'ютерні науки

uk: вхід без авторизації


Keynote Part 2

uk: Комп'ютерні науки

uk: вхід без авторизації


Lint Your Code Into the Future

uk: Комп'ютерні науки

description: In Ember, we have a long history of nudging people to do the right thing with deprecations and common linting rules that get updated over time. Anyone with a modestly sized app that needs to be kept up to date knows the difficulties of having to change hundreds of files that have multiple linting errors all at once. With a little bit of process and some handy tools in your CI pipeline, this pain can be greatly reduced and you can happily lint your large apps all the way to modern Ember at your own pace.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: After suffering a humiliating defeat at Wordle for the first time, an engineer ventures on a quest to build an app that will make sure they never feel the sting of losing a Wordle by a single guess, ever again. By leveraging the power of Ember, they were able bring their dream from a simple idea to a fully featured web application, ready to assist hundreds of people at Wordle, all over the world. Join them as they recount their odyssey to build something fun, this talk will take the audience on the personal journey of a software engineer with something to prove (to themself).

uk: вхід без авторизації

name: Loses at Wordle Once... Builds Ember App


Responsive Components: Present & Future

uk: Комп'ютерні науки

description: Over a decade has passed since Responsive Web Design arrived in 2010, and now we're asking for more: for our components to adapt to their own dimensions (not just screen size)! In this talk, we'll explore current methods for building responsive components: CSS layout techniques and JS ResizeObserver. We'll also dig into container queries: the future of responsive components!

uk: вхід без авторизації


Show & Tell with Ember Services

uk: Комп'ютерні науки

description: A service in Ember can be the creative heart of an app, the way to connect to powerful third-party APIs, the cornerstone for managing data flow, and much more. If we try to describe in words what a service does, where could we even begin? Let's instead explore some examples and connect the dots. You will get introduced to three different kinds of services: interactive, asynchronous, and data-driven. Learn what all services have in common, the pros and cons of using singletons, and some tips for maintainability.

uk: вхід без авторизації


Space Jamming Accessibility

uk: Комп'ютерні науки

description: We hear a lot more about accessibility nowadays. But do companies also care more? Let’s find out by comparing two versions of Space Jam’s icon website. The original one from 1996 has been lauded for its accessibility and ease of use. Can the new website hold up? Learn about the basics of accessibility and how they impact people.

uk: вхід без авторизації


Template-first Data Visualizations

uk: Комп'ютерні науки

description: Ember's template-first philosophy helps developers center markup in their work. This has benefits in semantic markup, accessibility, and generally using the web platform. Meanwhile, d3.js (the state of the art data visualization library for 10 years) is distinctly JavaScript first. It uses selections and joins to produce and manipulate markup. We can use Ember and D3 in a harmonious way that retains a template-first approach while leveraging all of the utility of D3 to create uncompromising visualizations that are interactive, animated, and accessible.

uk: вхід без авторизації


The Dark Side of the Web

uk: Комп'ютерні науки

description: Building a web-app that is accessible and respect your users preferences might be daunting. In this talk you will learn how to respect your users color scheme preferences in an accessible way.

uk: вхід без авторизації


The Road to TypeScript

uk: Комп'ютерні науки

description: What does the road to official TypeScript support for Ember look like? What does it include, and what does it exclude, and why? Why has it taken this long? What does the future hold? What have we done which is distinctive from other frameworks? What are some of the possibilities for collaboration across the front-end ecosystem in this space going forward?

uk: вхід без авторизації


Thinking in Stories: Component-First

uk: Комп'ютерні науки

description: In these thirty minutes I will live-code a newly generated component with a CSF story that powers its own automation testing and accessibility checks. We’ll leverage Tailwind UI to demonstrate how quickly a beautiful and accessible component can be adapted into Stories powered by Ember. We will build precisely one component for this talk; but in doing so we will deeply explore the mindset behind every intentional step that can re-imagine how components are built by teams to power the next generation of ambitious web applications with solid footing.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Async data is hard, especially when it needs to be derived async data. I'll walk through many gotchas in data loading and provide some of the up and coming patterns and packages (ember-resources, ember-concurrency) that could help you be successful with that next fetch in your component or service.

uk: вхід без авторизації

name: What's the hardest thing TIMING! about async?


A Guide to Perfecting Pull Requests

uk: Комп'ютерні науки

description: Writing clean and readable code is only half of the battle as a software engineer. The next step to overcome is the pull request. Now that we're living in an asynchronous world, it's more important than ever to concisely communicate what changes you're making and why. In this talk, we'll discuss what makes a good pull request including the title, the size of the PR and ways to make reviewing your pull request a fun time.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: How do colorblind people perceive colors? How many types of colorblindness exist? How can we help as developers? There are many things we still don't know about it, and bad practice is very common online. In this talk, I will share my learnings about colorblindness, share my emulator project and its outcomes. Hopefully, to spread awareness and improve the experience of colorblind users. Because accessibility is everyone's matter :)

uk: вхід без авторизації

name: Accessibility & Ember: Learning about Colorblindness


uk: Комп'ютерні науки

description: Do your eyes hurt? is your brain aching? is your pain caused from too much deciphering difficult assembly (or decompiled C) code? Assembly can hurt, C code can be worse. Partial emulation to the rescue! Let the emulator walk you through the code, let it answer hard questions/problems you run into in your reversing/vuln research. This talk will introduce you the power of emulator-driven reversing. guide your RE with the help of an emulator (one that can survive limited context), emulate code you don't want to reverse, be better, learn more, be faster, with less brain-drain. Make no mistake, RE will always have room for magicians to show their wizardry... but after this talk, you may find yourself a much more powerful wizard.

uk: вхід без авторизації

name: Emulation driven Reverse Engineering for Finding Vulns


uk: Комп'ютерні науки

description: Service Fabric is a scalable and reliable container orchestrator developed by Microsoft. It is widely used in Microsoft Azure as well as in Microsoft’s internal production environments as an infrastructure for containerized applications. Developing a container orchestrator is not an easy task as it involves harnessing many technologies in a complicated and distributed environment. This complexity can ultimately lead to security issues. Such security issues can impose a critical risk since compromising an infrastructure allows attackers to escalate their privileges and take over an entire environment quickly and effectively. In this session, Aviv will share his research on Service Fabric and his journey of escalating from an isolated container to cluster admin. He will go through researching the code and finding a zero-day vulnerability, explaining his exploitation process in Azure Service Fabric offering while dealing with race conditions and other limitations, and explain how it all allowed him to break out of his container to later gain full control over the underlying Service Fabric cluster. In the end, he will share his thoughts on security in the cloud and his concerns on cloud multitenancy.

uk: вхід без авторизації

name: The Journey From Isolated Container to Cluster Admin


uk: Комп'ютерні науки

description: MS-RPC is Microsoft's implementation of the Remote Procedure Calls protocol. Even though the protocol is extremely widespread, and serves as the basis for nearly all Windows services on both managed and unmanaged networks, little has been published about MS-RPC, its attack surface and design flaws. In this talk, we will walkthrough and demonstrate a 0-day RCE vulnerability which we discovered through our research of MS-RPC. When exploited, this vulnerability allows an attacker to execute code remotely and potentially take over the Domain Controller. We believe this vulnerability may belong to a somewhat novel bug-class which is unique to RPC server implementations, and would like to share this idea as a possible research direction with the audience. To aid future research into the topic of MS-RPC, we will share a deep, technical overview of the RPC system in Windows, explain why we decided to target it, and point out several design flaws. We will also outline the methodology we developed around RPC as a research target along with some tools we built to facilitate the bug-hunting process.

uk: вхід без авторизації

name: Exploring Ancient Ruins to Find Modern Bugs


uk: Комп'ютерні науки

description: Ben Gardiner, Chris Poore and other security researchers have been analyzing signals and performing research against trailers and Power Line Communication for multiple years. This year the team was able to disclose two vulnerabilities focused on the ability to remotely inject RF messages onto the powerline and in turn send un-authenticated messages to the brake controller over the link. The team will discuss the details of PLC4TRUCKS, identify what led to this research and the discovery of the vulnerabilities, and then highlight the details of the SDR and software used to perform the attack. The talk will conclude with the demonstration of a remotely induced brake controller solenoid test using an FL2K and the release of the GNU radio block used to perform the test to the community to promote further research in the area.

uk: вхід без авторизації

name: Trailer Shouting - Talking PLC4TRUCKS Remotely with an SDR


uk: Комп'ютерні науки

description: A recent trend in high security locks is to add a moving element to the key: this prevents casting, 3D printing and many other forms of unauthorised duplication. Pioneered by the Mul-T-Lock Interactive locks, we see the technique used in recent Mul-T-Lock iterations, the Abloy Protec 2 and most recently, the Medeco M4, which is only rolling out to customers now. We have identified a major vulnerability in this technology, and have developed a number of techniques to unlock these locks using a key made from a solid piece of material, which defeats all of the benefits of an interactive key. I’ll demonstrate how it can be applied to Mul-T-Lock Interactive, Mul-T-Lock MT5+ and the Medeco M4, allowing keys to be duplicated by casting, 3D printing and more. I’ll also cover other techniques to defeat moving elements in a key, such as printing a compliant mechanism and printing a captive element directly. With this talk, we’re also releasing a web application for anyone to generate 3D printable files based on this exploit. Finally, I’ll also discuss the responsible disclosure process, and working with the lock manufacturers to patch the vulnerability and mitigate the risk.

uk: вхід без авторизації

name: Defeating Moving Elements in High Security Keys


uk: Комп'ютерні науки

description: As Russia invaded Ukraine in February of this year, the Ukrainian government sent requests to ICANN and RIPE to have Russia removed from the Internet. Those requests were refused, but engendered a lively debate on the role of Internet operators and the Internet governance system in sanctioning bad actors, on the Internet and in the world. This talk will introduce how governmental and intergovernmental sanctions are defined and enacted, and discuss the Internet community’s reaction to past attempts to engage the Internet in sanctions enforcement, the current conflict, and what the Internet community is doing in this area to prepare for future conflicts.

uk: вхід без авторизації

name: The Internet’s role in sanctions enforcement: Russia/Ukraine & the future


uk: Комп'ютерні науки

description: Container security is a prevalent topic in security research. Due to the great design and long-term effort, containers have been more and more secure. Usage of container technology is increasingly being used. Container security is a topic that has started to be discussed a lot lately. In late 2021, Google increased the vulnerability reward program in kCTF infrastructure, which was built on top of Kubernetes and Google Container Optimized OS, with a minimum reward of $31,337 per submission. In this talk, we will share about how we managed to have 4 successful submissions on kCTF VRP by exploiting four Linux kernel bugs to perform container escape on kCTF cluster, we will explain some interesting kernel exploit techniques and tricks that can be used to bypass the latest security mitigation in Linux kernel. We will also share what we did wrong that causes us to nearly lose 1 of the bounty. As of writing, there are 14 successful entries to kCTF. In this presentation, we are willing to share our full, in-depth details on the research of kCTF. To the best of our knowledge, this presentation will be the first to talk about a complete methodology to pwn kCTF (find and exploit bugs within 0-day and 1-day) in public.

uk: вхід без авторизації

name: All Roads Lead to GKEs Host: 4+ Ways to Escape


uk: Комп'ютерні науки

description: Why looking into a 30 years old "malicious" software make sense in 2022? Because this little "jewels", written in a bunch of bytes, reached a level of complexity surprisingly high. With no other reason than pranking people or show off technical knowledge, this software show how much you can do with very limited resources: this is inspiring for us, looking at modern malicious software, looking at how things are done and how the same things could have been done instead.

uk: вхід без авторизації

name: Old Malware, New tools: Ghidra and Commodore 64


uk: Комп'ютерні науки

description: A Policy Fireside Chat with the National Cyber Director Chris Inglis, moderated by Kim Zetter.

uk: вхід без авторизації


Killer Hertz

uk: Комп'ютерні науки

description: Governments and the private sector around the world spend billions of dollars on Electronic Counter Measures (ECMs) which include jamming technologies. These jammers are used by police departments to disrupt criminal communication operations as well as in prisons to disrupt prisoners using smuggled in cell phones. The military use jammers to disrupt radar communications, prevent remote IEDs from triggering and radio communications. The private sector use jammers to disrupt espionage in the board room and to protect VIPS from RC-IEDs. What if there was a way of communicating that was immune to jammers without knowing the point of origin. A way of communicating at short to medium distances, an Electronic Counter Countermeasure ECCM to the jammer. Using a custom-built Tx/Rx, I will use the earth’s crust to generate a H-field Near Field Communication (NFC) channel spanning 1-11km away in the sub 9 kHz range to communicate encrypted messages in a jammed environment.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Eleven years ago, "Sour Pickles" was presented by Marco Slaviero. Python docs already said pickles were insecure at that time. But since then, machine learning frameworks started saving models in pickled formats as well. So, I will show how simple it is to add a backdoor into any pickled object using machine learning models as an example. As well as an example of how to securely save a model to prevent malicious code from being injected into it.

uk: вхід без авторизації

name: Backdooring Pickles: A decade only made things worse


Why Patients Should Hack Med Tech

uk: Комп'ютерні науки

description: What do Apple, John Deere and Wahl Shavers have in common with med-tech companies? They all insist that if you were able to mod their stuff, you would kill yourself and/or someone else... and they've all demonstrated, time and again, that they are unfit to have the final say over how the tools you depend on should work. As right to repair and other interoperability movements gain prominence, med-tech wants us to think that it's too life-or-death for modding. We think that med-tech is too life-or-death NOT to to be open, accountable and configurable by the people who depend on it. Hear two hacker doctors and a tech activist talk about who's on the right side of history and how the people on the wrong side of history are trying to turn you into a walking inkjet printer, locked into an app store.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Kubernetes has taken the DevOps world by storm, but its rapid uptake has created an ecosystem where many popular solutions for common challenges—storage, release management, observability, etc.—are either somewhat immature or have been “lifted and shifted” to Kubernetes. What critical security smells can pentesters look for when looking at the security of a cluster? We are going to talk through five different security problems that we have found (and reported, no 0-days here) in popular open-source projects and how you can look for similar vulnerabilities in other projects.

uk: вхід без авторизації

name: The Call is Coming From Inside The Cluster: Mistakes Tha Lead to Whole Cluster Pwnership


Hunting Bugs in the Tropics

uk: Комп'ютерні науки

description: Aruba Networks makes networking products for the enterprise. I make enterprise products run arbitrary code. Over the past couple of years, I've been hunting for vulnerabilities in some of Aruba's on-premise networking products and have had a bountiful harvest. A curated (read: patched) selection of these will be presented for your enjoyment. Pre-auth vulnerabilities and interesting bug chains abound, as well as a few unexpected attack surfaces and a frequently overlooked bug class. This talk will explore some of the vulnerabilities I've found in various products in the Aruba range, and include details of their exploitation. I'll elaborate on how I found these bugs, detailing my workflow for breaking open virtual appliances and searching for vulnerabilities in them.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The nature of global power has changed. Cybersecurity is national security, economic stability, and public safety. Hackers - and the DEF CON community - sit at the intersection of technology and public policy. Policymakers seek our counsel and many of us have become regulars in policy discussions around the world. The DEF CON Policy Department creates a high-trust, high-collaboration forum unlike any other in the world for hackers and policymakers to come together. Join this session to hear the vision for public policy at DEF CON, including where we’ve been, where we are, and where we’re going - as well as how you can be a part of it. Guest speakers will describe the history of hacking and hackers in public policy and provide a preview of this year’s sessions.

uk: вхід без авторизації

name: Policy Dept - What is it, what are we trying to do for hackers in PolicyWorld?


uk: Комп'ютерні науки

description: CSRF is (really) dead. SameSite killed it. Browsers protect us. Lax by default! Sounds a bit too good to be true, doesn't it? We live in a world where browsers get constantly updated with brand new web features and new specifications. The complexity abyss is getting wider and deeper. How do we know web technologies always play perfectly nice with each other? What happens when something slips? In this talk, I focus on three intertwined web features: HTTP Cookie's SameSite attribute, PWA's Service Worker, and Fetch. I will start by taking a look at how each feature works in detail. Then, I will present how the three combined together allows CSRF to be resurrected, bypassing the SameSite's defense. Also, I will demonstrate how a web developer can easily introduce the vulnerability to their web apps when utilizing popular libraries. I will end the talk by sharing the complex disclosure timeline and the difficulty of patching the vulnerability due to the interconnected nature of web specifications.

uk: вхід без авторизації

name: The CSRF Resurrections: Starring the Unholy Trinity: Service Worker of PWA, SameSite of HTTP Cookie, and Fetch


uk: Комп'ютерні науки

description: Satellite designs are myriad as stars in the sky, but one common denominator across all modern missions is their dependency on long-distance radio links. In this briefing, we will turn a hacker’s eye towards the signals that are the lifeblood of space missions. We’ll learn how both state and non-state actors can, and have, executed physical-layer attacks on satellite communications systems and what their motivations have been for causing such disruption. Building on this foundation, we’ll present modern evolutions of these attack strategies which can threaten next-generation space missions. From jamming, to spoofing, to signal hijacking, we’ll see how radio links represent a key attack surface for space platforms and how technological developments make these attacks ever more accessible and affordable. We’ll simulate strategies attackers may use to cause disruption in key space communications links and even model attacks which may undermine critical safety controls involved in rocket launches. The presentation will conclude with a discussion of strategies which can defend against many of these attacks. While this talk includes technical components, it is intended to be accessible to all audiences and does not assume any prior background in radio communications, astrodynamics, or aerospace engineering. The hope is to provide a launchpad for researchers across the security community to contribute to protecting critical infrastructure in space and beyond.

uk: вхід без авторизації

name: Exploring Radio Frequency Attacks in Outer Space


uk: Комп'ютерні науки

description: As leaks become more prevalent, they come from an increasing variety of sources: from data that simply isn't secured, to insiders, to hacktivists, and even occassional state-actors (both covert and overt). Often treated as a threat, when handled responsibly leaks are a necessary part of the ecosystem of a healthy and free society and economy. In spite of prosecutors' love of prosecution, the eternal fixation with Fear, Uncertainty and Doubt and DDoSecrets' apocalyptic motto, leaks won't destroy the world - they can only save it. In this presentation, we'll discuss the necessity and evolution of leaks, and how various types of leaks and sources can offer different sorts of revelations. We'll then explore how we can responsibly handle different types of leaks even during volatile and politically charged situations, as well as past failures. We'll also debunk the myth that hacktivism is just a cover for state actors by exploring examples of entities with state ties and how they were identified, as well as how both hacktivists and state actors have been misidentified or mishandled in the past. Finally, we'll discuss some of the lessons activists, newsrooms and governments can learn from the last decade, and where we should collectively go from here.

uk: вхід без авторизації

name: Leak The Planet: Veritatem cognoscere non pereat mundus


uk: Комп'ютерні науки

description: Virtualization and containers are the foundations of cloud services. Containers should be isolated from the real host’s settings to ensure the security of the host. In this talk we’ll answer these questions: “Are Windows process-isolated containers really isolated?” and “What can an attacker achieve by breaking the isolation?” Before we jump into the vulnerabilities, we’ll explain how Windows isolates the container’s processes, filesystem and how the host prevents the container from executing syscalls which can impact the host. Specifically, we’ll focus on the isolation implementation of Ntoskrnl using server silos and job objects. We’ll compare Windows containers to Linux containers and describe the differences between their security architectural designs. We’ll follow the scenario of an attacker-crafted container running with low privileges. We'll show in multiple ways how to gain privilege escalation inside the container to NT/System. After gaining NT/System permissions, we'll talk about how we escaped the isolation of the container and easily achieved a dump of the entire host’s kernel memory from within the container. If the host is configured with a kernel debugger, we can even dump the host’s Admin credentials. We’ll finish by demonstrating how an attacker-crafted container with low privileges can read UEFI settings and then set them. Using this technique an attacker can communicate between containers and cause a permanent Denial-of-Service (DoS) to a host with default settings, through the UEFI interface.

uk: вхід без авторизації

name: The COW (Container On Windows) - Who Escaped the Silo: Isolations are made to be broken


uk: Комп'ютерні науки

description: First defined in 1998, the iCalendar standard remains ubiquitous in enterprise software. However, it did not account for modern security concerns and allowed vendors to create proprietary extensions that expanded the attack surface. I demonstrate how flawed RFC implementations led to new vulnerabilities in popular applications such as Apple Calendar, Google Calendar, Microsoft Outlook, and VMware Boxer. Attackers can trigger exploits remotely with zero user interaction due to automatic parsing of event invitations. Some of these zombie properties were abandoned years ago for their obvious security problems but continue to pop up in legacy code. Furthermore, I explain how iCalendar’s integrations with the SMTP and CalDAV protocols enable multi-stage attacks. Despite attempts to secure these technologies separately, the interactions that arise from features such as emailed event reminders require a full-stack approach to calendar security. I conclude that developers should strengthen existing iCalendar standards in terms of design and implementation. I advocate for an open-source and open-standards approach to secure iCalendar rather than proprietary fragmentation. I will release a database of proprietary iCalendar properties and a technical whitepaper.

uk: вхід без авторизації

name: You Have One New Appwntment - Hacking Proprietary iCalendar Properties


uk: Комп'ютерні науки

description: Hello, my name is BWL-X8620, and I'm a SOHO router. For many years my fellow SOHO routers and I were victims of endless abuse by hackers. Default credentials, command injections, file uploading - you name it. And it is all just because we're WAN-facing devices. Just because our ISP leaves our web server internet-facing makes hackers think it's okay to attack and make us zombies. But today, I say NO MORE! In this talk, I will show that if a web client can attack a web server, then an ISP client can attack the ISP servers! I will reveal a hidden attack surface and vulnerabilities in popular network equipment used by ISPs worldwide to connect end-users to the internet. BRAS devices are not that different from us SOHO routers. No one is infallible. But, BRAS devices can support up to 256,000 subscribers, and exploiting them can cause a ruckus. Code executing can lead to a total ISP compromise, mass client DNS poisoning, end-points RCE, and more! This talk will present a high severity logical DOS vulnerability in a telecommunications vendor implementation of PPPoE and a critical RCE vulnerability in PPP. That means we, the SOHO routers, can attack and execute code on the ISP's that connect us to the internet! Today we are fighting back!

uk: вхід без авторизації

name: Hacking ISPs with Point-to-Pwn Protocol over Ethernet (PPPoE)


Emoji Shellcoding

uk: Комп'ютерні науки

description: Shellcodes are short executable stubs that are used in various attack scenarios, whenever code execution is possible. After quickly recalling what a shellcode is and why designing shellcodes under constraints is an art, we'll study a new constraint for which (to the best of our knowledge) no such shellcode was previously known: emoji shellcoding. We'll tackle this problem by introducing a new and more generic approach to shellcoding under constraints. Brace yourselves, you'll see some black magic weaponizing these cute little emojis

uk: вхід без авторизації


Hacking Law is for Hackers

uk: Комп'ютерні науки

description: What a year for hacker law! 2021-2022 saw major changes to laws that regulate hacking, such as the notorious CFAA, the grotesque DMCA Sec. 1201, and China's grisly "Management of Security Vulnerabilities" regulation. This presentation will walk through each of these developments and etail their implications for security researchers. We'll give background on how these laws have recently changed, identify areas of continued risk for hackers, and suggest concrete ways for the security community to make additional progress in shaping a favorable legal environment. An extended roundtable discussion will follow the presentation.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Anonymity networks such as Tor are used to protect the identity of people or services. Several deanonymization techniques have been described over time. Some of them attacked the protocol, others exploited various configuration issues. Through this presentation I will focus on deanonymization techniques of the http services of such networks by exploiting configuration issues. In the first part of the presentation, I will present deanonymization techniques on TOR which are public, and I will also present the techniques developed by me and the interesting story of how I came to develop them. In the last part of my presentation, I will do a demo with the exploitation of http hidden services in TOR and I will present each technique separately. I will also present how one of the techniques can be used successfully not only in the TOR network, but also on the internet in order to obtain information about the server that will help you discover other services.

uk: вхід без авторизації

name: Deanonymization of TOR HTTP Hidden Services


Do Not Trust the ASA, Trojans

uk: Комп'ютерні науки

description: Cisco ASA and ASA-X are widely deployed firewalls that are relied upon to protect internal networks from the dangers of the outside world. This key piece of network infrastructure is an obvious point of attack, and a known target for exploitation and implantation by APT such as the Equation Group. Yet it’s been a number of years since a new vulnerability has been published that can provide privileged access to the ASA or the protected internal network. But all good things must come to an end. In this talk, new vulnerabilities affecting the Cisco ASA will be presented. We’ll exploit the firewall, the system’s administrators, and the ASA-X FirePOWER module. The result of which should call into question the firewall’s trustworthiness. The talk will focus on the practical exploitation of the ASA using these new vulnerabilities. To that end, new tooling and Metasploit modules will be presented. For IT protectors, mitigation and potential indicators of compromise will also be explored.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Mainframes run the world, literally. Have you ever paid for something, a mainframe was involved, flown? Used a bank? Gone to college? A mainframe was involved. Do you live in a country with a government? Mainframes! The current (and really only) mainframe OS is z/OS from IBM. If you've ever talked to a mainframer you'll get told how they're more secure because buffer overflows are (were) impossible. This talk will prove them all wrong! Finding exploits on z/OS is no different than any other platform. This talk will walk through how you too can become a mainframe exploit researcher! Remote code execution is extra tricky on a mainframe as almost all sockets read data with the ASCII character set and convert that to EBCDIC for the application. With this talk you will find out how to find and then remotely overflow a vulnerable mainframe C program and create a ASCII - EBCDIC shellcode to escalate your privileges remotely, without auth. Previous mainframe talks focused on infrastructure based attacks. This talk builds on those but adds a class of vulnerabilities, opening up the mainframe hacking community.

uk: вхід без авторизації

name: Doing the Impossible - How I Found Mainframe Buffer Overflows


uk: Комп'ютерні науки

description: The recent rise of HTTP Request Smuggling has seen a flood of critical findings enabling near-complete compromise of numerous major websites. However, the threat has been confined to attacker-accessible systems with a reverse proxy front-end... until now. In this session, I'll show you how to turn your victim's web browser into a desync delivery platform, shifting the request smuggling frontier by exposing single-server websites and internal networks. You'll learn how to combine cross-domain requests with server flaws to poison browser connection pools, install backdoors, and release desync worms. With these techniques I'll compromise targets including Apache, Akamai, Varnish, Amazon, and multiple web VPNs. While some classic desync gadgets can be adapted, other scenarios force extreme innovation. To help, I'll share a battle-tested methodology combining browser features and custom open-source tooling. We'll also release free online labs to help hone your new skillset. I'll also share the research journey, uncovering a strategy for black-box analysis that solved several long-standing desync obstacles and unveiled an extremely effective novel desync trigger. The resulting fallout will encompass client-side, server-side, and even MITM attacks; to wrap up, I'll demo breaking HTTPS on Apache.

uk: вхід без авторизації

name: Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling


uk: Комп'ютерні науки

description: How do you go bug hunting in devices you own when the manufacturer has slapped some pesky encryption scheme on the firmware? Starting from an encrypted blob of bits and getting to executable code is hard and can be even more frustrating when you already know the bug is there, you just want to see it! Join me on my expedition to access the contents of my Zyxel firewall's firmware using password and hash cracking, hardware and software reverse engineering, and duct taping puzzle pieces together. We'll start with a device and a firmware blob, flail helplessly at the crypto, tear apart the hardware, reverse engineer the software and emulate the platform, and finally identify the decryption routine – ultimately breaking the protection used by the entire product line to decrypt whatever firmware version we want.

uk: вхід без авторизації

name: Tear Down this Zywall: Breaking Open Zyxel Encrypted Firmware


PreAuth RCE Chains on an MDM - KACE SMA

uk: Комп'ютерні науки

description: MDM solutions are, by design, a single point of failure for organizations. MDM appliances often have the ability to execute commands on most of the devices in an organization and provide an “instant win” target for attackers. KACE Systems Management Appliance is a popular MDM choice for hybrid environments. This talk will cover the technical details of 3 preauthentication RCE as root chains on KACE SMA and the research steps taken to identify the individual vulnerabilities used.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The year was 1986 and the arena rock of the 1970s was coming to a whimpering end, while rap had not quite gained a mainstream foothold. The unlikely collaboration between Aerosmith and Run D.M.C. changed the course of music forever, reinvigorating the relevance of rock while bringing rap to the forefront of prominence. This collaboration, unexpected, and by some accounts uncomfortable, paved the way for the future of music and celebrated the genius of innovation of partnership. The cybersecurity community has much to learn from this example of partnership for the better.

uk: вхід без авторизації

name: Walk This Way: What Run DMC & Aerosmith Can Teach On Future of Cybersec


uk: Комп'ютерні науки

description: Learn how we used our Pico Ducky to escape Chromebook jail, rescue our friends along the way, and have some fun Living Off the Land! Leveraging a discovered (but previously disclosed) Command Injection vulnerability in the ChromeOS crosh shell, we rabbithole into the internal ChromeOS Linux system, obtain persistence across reboots, and exfiltrate user data even before Developer Mode has been enabled. Learn how to provision and utilize local services in order to perform Privilege Escalations, and also create a 'Master Key' with the Pico Ducky and custom GTFO 1-liners, in order to perform a full Chromebook Breakout!

uk: вхід без авторизації

name: Chromebook Breakout - Escaping Jail Using a Pico Ducky


uk: Комп'ютерні науки

description: Identified early in 2022, PIPEDREAM is the seventh-known ICS-specific malware and the fifth malware specifically developed to disrupt industrial processes. PIPEDREAM demonstrates significant adversary research and development focused on the disruption, degradation, and potentially, the destruction of industrial environments and physical processes. PIPEDREAM can impact a wide variety of PLCs including Omron and Schneider Electric controllers. PIPEDREAM can also execute attacks that take advantage of ubiquitous industrial protocols, including CODESYS, Modbus, FINS, and OPC-UA. This presentation will summarize the malware, and detail the difficulties encountered during the reverse engineering and analysis of the malware to include acquiring equipment and setting up our lab. This talk will also release the latest results from Drago's lab including an assessment of the breadth of impact of PIPEDREAM's CODESYS modules on equipment beyond Schneider Electric's PLCs, testing Omron servo manipulation, as well as OPC-UA server manipulation. While a background in ICS is helpful to understand this talk, it is not required. The audience will learn about what challenges they can expect to encounter when testing ICS malware and how to overcome them.

uk: вхід без авторизації

name: Analyzing PIPEDREAM - Challenges in Testing an ICS Attack Toolkit


OpenCola The AntiSocial Network

uk: Комп'ютерні науки

description: The internet, as it stands today, is not a very trustworthy environment, as evidenced by the numerous headlines of companies abusing personal data and activity. This is not really surprising since companies are responsible for optimizing revenue, which is often at odds with user benefit. The result of these incentives has produced or exacerbated significant problems: tech silos, misinformation, privacy abuse, concentration of wealth, the attention economy, etc. We built OpenCola, free and open source, as an alternative to existing big-tech applications. It puts users in control of their personal activity and the algorithms that shape the flow of data to them. We believe that this solution, although simple, can significantly mitigate the challenges facing the Internet.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Hundreds of thousands of human hours are invested every year in finding common security vulnerabilities with relatively simple fixes. These vulnerabilities aren’t sexy, cool, or new, we’ve known about them for years, but they’re everywhere! The scale of GitHub & tools like CodeQL (GitHub's code query language) enable one to scan for vulnerabilities across hundreds of thousands of OSS projects, but the challenge is how to scale the triaging, reporting, and fixing. Simply automating the creation of thousands of bug reports by itself isn’t useful, & would be even more of a burden on volunteer maintainers of OSS projects. Ideally the maintainers would be provided with not only information about the vulnerability, but also a fix in the form of an easily actionable pull request. When facing a problem of this scale, what is the most efficient way to leverage researcher knowledge to fix the most vulnerabilities across OSS? This talk will cover a highly scalable solution - automated bulk pull request generation. We’ll discuss the practical applications of this technique on real world OSS projects. We’ll also cover technologies like CodeQL & OpenRewrite (a style-preserving refactoring tool created at Netflix & now developed by Moderne). Let’s not just talk about vulnerabilities, let’s actually fix them at scale.

uk: вхід без авторизації

name: Scaling the Security Researcher to Eliminate OSS Vulnerabilities


Automotive Ethernet Fuzzing

uk: Комп'ютерні науки

description: Car hacking is a tricky subject to hackers because it requires lots of money and hardware knowledge to research with a real car. An alternative way would be to research with an ECU but it also difficult to know how to setup the equipment. Moreover, in order to communicate with Automotive Ethernet services running on the ECU, you need additional devices such as media converters and Ethernet adapters supporting Virtual LAN(VLAN). Even if you succeed in building the hardware environment, you can't communicate with the ECU over SOME/IP protocol of Automotive Ethernet if you don't know the network configuration, such as VLAN ID, service IDs and IP/port mapped to each service. This talk describes how to do fuzzing on the SOME/IP services step by step. First, we demonstrate how to buy an ECU, how to power and wire it. Second, we explain network configurations to communicate between ECU and PC. Third, we describe how to find out the information required to perform SOME/IP fuzzing and how to implement SOME/IP Fuzzer. We have conducted the fuzzing with the BMW ECUs purchased by official BMW sales channels, not used products. We hope this talk will make more people to try car hacking and will not go through the trials and errors that we have experienced.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: We present a Microsoft Windows vulnerability that allows a remote attacker to impersonate a Bluetooth Low Energy (BLE) keyboard and perform Wireless Key Injection (WKI) on its behalf. It can occur after a legitimate BLE keyboard automatically closes its connection because of inactivity. In that situation, an attacker can impersonate it and wirelessly send keys. In this talk we will demonstrate the attack live and we will explain the theoretical basis behind it and the process that led us to discover the vulnerability. We will also release the tool that allows to reproduce the attack and we will detail how to use it.

uk: вхід без авторизації

name: Wireless Keystroke Injection via Bluetooth Low Energy


uk: Комп'ютерні науки

description: What do you get when you cross pointer authentication with microarchitectural side channels? The PACMAN attack is a new attack technique that can bruteforce the pointer authentication code (PAC) for an arbitrary kernel pointer without causing any crashes using microarchitectural side channels. We demonstrate the PACMAN attack against the Apple M1 CPU.

uk: вхід без авторизації

name: The PACMAN Attack: Breaking PAC on Apple M1 with Hardware Attacks


Hack the Hemisphere

uk: Комп'ютерні науки

description: The Shadytel cabal had an unprecedented opportunity to legally uplink to and use a vacant transponder slot on a geostationary satellite about to be decommissioned. This talk will explain how we modified an unused commercial uplink facility to broadcast modern HD DVB-S2 signals and created the media processing chain to generate the ultimate information broadcast. You'll learn how satellite transponders work, how HDTV is encoded and transmitted, and how you can create your own hacker event broadcast.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The Russia-Ukraine war has seen a lot of computer hacking, on both sides, by nations, haxor collectives, and random citizens, to steal, deny, alter, destroy, and amplify information. Satellite comms have gone down. Railway traffic has been stymied. Doxing is a weapon. Fake personas and false flags are expected. Every major platform has had issues with confidentiality, integrity, and availability. Hacked social media and TV have been a hall of mirrors and PSYOP. Russian comms are unreliable, so Ukrainian nets have become honeypots. Hackers have been shot in the kneecaps. Talking heads have called for a RUNET shutdown. The Ukrainian government has appealed for hacker volunteers – just send your expertise, experience, and a reference. The Great Powers are hacking from afar, while defending their own critical infrastructure, including nuclear command-and-control. Ukraine has many hacker allies, while Russian hackers are fleeing their country in record numbers. Some lessons so far: connectivity is stronger than we thought, info ops are stealing the day, drones are the future, and it is always time for the next hack.

uk: вхід без авторизації

name: Computer Hacks in the Russia-Ukraine War


uk: Комп'ютерні науки

description: Tired of obfuscating strings and recompiling to break signatures? Wish you could keep PE-sieve from ripping your malware out of memory? Interested in learning how to do all of this with your existing COTS or private toolsets? For years, reverse engineers and endpoint security software have used memory scanning to locate shellcode and malware implants in Windows memory. These tools rely on IOCs such as signatures and unbacked executable memory. This talk will dive into the various methods in which memory scanners search for these indicators and demonstrate a stable evasion technique for each method. A new position-independent reflective DLL loader, AceLdr, will be released alongside the presentation and features the demonstrated techniques to evade all of the previously described memory scanners. The presenter and their colleagues have used AceLdr on red team operations against mature security programs to avoid detection successfully. This talk will focus on the internals of PE-sieve, MalMemDetect, Moneta, Volatility malfind, and YARA to understand how they find malware in memory and how malware can be modified to fly under their radar consistently.

uk: вхід без авторизації

name: Avoiding Memory Scanners - Customizing Malware to Evade YARA, PE-sieve


uk: Комп'ютерні науки

description: This presentation covers the first black-box hardware security evaluation of the SpaceX Starlink User Terminal (UT). The UT uses a custom quad-core Cortex-A53 System-on-Chip that implements verified boot based on the ARM trusted firmware (TF-A) project. The early stage TF-A bootloaders, and in particular the immutable ROM bootloader include custom fault injection countermeasures. Despite the black-box nature of our evaluation we were able to bypass signature verification during execution of the ROM bootloader using voltage fault injection. Using a modified second stage bootloader we could extract the ROM bootloader and eFuse memory. Our analysis demonstrates that the fault model used during countermeasure development does not hold in practice. Our voltage fault injection attack was first performed in a laboratory setting and later implemented as a custom printed circuit board or 'modchip'. The presented attack results in an unfixable compromise of the Starlink UT and allows us to execute arbitrary code. Obtaining root access on the Starlink UT is a prerequisite to freely explore the Starlink network and the underlying communication interfaces. This presentation will cover an initial exploration of the Starlink network. Other researchers should be able to build on our work to further explore the Starlink ecosystem.

uk: вхід без авторизації

name: A Black-Box Security Evaluation of SpaceX Starlink User Terminal


uk: Комп'ютерні науки

description: In this talk I will show how to reverse engineer a proprietary HTTP Server in order to leverage memory corruption vulnerabilities using high level HTTP protocol exploitation techniques. To do so, I will present two critical vulnerabilities, CVE-2022-22536 and CVE-2022-22532, which were found in SAP's proprietary HTTP Server, and could be used by a remote unauthenticated attacker to compromise any SAP installation in the world. First, I will explain how to escalate an error in the request handling process to Desynchronize data buffers and hijack every user’s account with Advanced Response Smuggling. Furthermore, as the primitives of this vulnerability do not rely on header parsing errors, I will show a new technique to persist the attack using the first Desync botnet in history. This attack will prove to be effective even in an “impossible to exploit” scenario: without a Proxy! Next I will examine a Use-After-Free in the shared memory used for Inter-Process Communication. By exploiting the incorrect deallocation, I will show how to tamper messages belonging to other TCP connections and take control of all responses using Cache Poisoning and Response Splitting theory. Finally, as the affected buffers could also contain IPC control data, I will explain how to corrupt memory address pointers and end up obtaining RCE.

uk: вхід без авторизації

name: Internet Server Error: Exploiting Inter-Process Communication with new Desynchronization Primitives


Taking a Dump In The Cloud

uk: Комп'ютерні науки

description: Taking a Dump In The Cloud is a tale of countless sleepless nights spent reversing and understanding the integration between Microsoft Office resources and how desktop applications access them. The release of the TeamFiltration toolkit, a modern toolkit connecting all the data points to more effectively launch attacks against Microsoft Azure Tenants, understanding the benefits of non-interactive logins and how one can abuse the magic of Microsofts OAuth implementation with Single-Sign-On to automagically exfiltrate all the loot. Streamlining the process of account enumeration and validation. Thoughts on working effectively against Azure Smart Lockout. Exploring options of vertical movement given common AAD configurations, and more!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Offline RFID systems rely on data stored within the key to control access and configuration. But what if a key lies? What if we can make the system trust those lies? Well then we can do some real spooky things… This is the story of how a strange repeating data pattern turned into a skeleton key that can open an entire range of RFID access control products in seconds.

uk: вхід без авторизації

name: Digital Skeleton Keys - We’ve got a bone to pick with offline Access Control Systems


uk: Комп'ютерні науки

description: Why focus on heavily guarded crown jewels when you can dominate an organization through its shadow IT? Low-Code applications have become a reality in the enterprise, with surveys showing that most enterprise apps are now built outside of IT, with lacking security practices. Unsurprisingly, attackers have figured out ways to leverage these platforms for their gain. In this talk, we demonstrate a host of attack techniques found in the wild, where enterprise No-Code platforms are leveraged and abused for every step in the cyber killchain. You will learn how attackers perform an account takeover by making the user simply click a link, move laterally and escalate privileges with zero network traffic, leave behind an untraceable backdoor, and automate data exfiltration, to name a few capabilities. All capabilities will be demonstrated with POCs, and their source code will be shared. Finally, we will introduce an open-source recon tool that identifies opportunities for lateral movement and privilege escalation through low-code platforms.

uk: вхід без авторизації

name: Low Code High Risk - Enterprise Domination via Low Code Abuse


uk: Комп'ютерні науки

description: Windows 11 ships with a nifty feature called Power Automate, which lets users automate mundane processes. In a nutshell, Users can build custom processes and hand them to Microsoft, which in turn ensures they are distributed to all user machines or Office cloud, executed successfully and reports back to the cloud. You can probably already see where this is going.. In this presentation, we will show how Power Automate can be repurposed to power malware operations. We will demonstrate the full cycle of distributing payloads, bypassing perimeter controls, executing them on victim machines and exfiltrating data. All while using nothing but Windows baked-in and signed executables, and Office cloud services. We will then take you behind the scenes and explore how this service works, what attack surface it exposes on the machine and in the cloud, and how it is enabled by-default and can be used without explicit user consent. We will also point out a few promising future research directions for the community to pursue. Finally, we will share an open-source command line tool to easily accomplish all of the above, so you will be able to add it into your Red Team arsenal and try out your own ideas.

uk: вхід без авторизації

name: No-Code Malware - Windows 11 at Your Service


One Bootloader to Load Them All

uk: Комп'ютерні науки

description: Introduced in 2012, Secure Boot - the OG trust in boot - has become a foundational rock in modern computing and is used by millions of UEFI-enabled computers around the world due to its integration in their BIOS. The way Secure Boot works is simple and effective, by using tightly controlled code signing certificates, OEMs like Microsoft, Lenovo, Dell and others secure their boot process, blocking unsigned code from running during boot. But this model puts its trust in developers developing code without vulnerabilities or backdoors; in this presentation we will discuss past and current flaws in valid bootloaders, including some which misuse built-in features to inadvertently bypass Secure Boot. We will also discuss how in some cases malicious executables can hide from TPM measurements used by BitLocker and remote attestation mechanisms. Come join us as we dive deeper and explain how it all works, describe the vulnerabilities we found and walk you through how to use the new exploits and custom tools we created to allow for a consistent bypass for secure boot effective against every X86-64 UEFI platform.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: What happens when you have networked projectors, misconfigured devices, and a bored high school student looking for the perfect senior prank? You get a massive rickroll spanning six high schools and over 11,000 students at one of the largest school districts in suburban Chicago. This talk will go over the coordination required to execute a hack of this scale and the logistics of commanding a botnet of IoT systems. It will also describe the operational security measures taken so that *you* can evade detection, avoid punishment, and successfully walk at graduation.

uk: вхід без авторизації

name: The Big Rick - How I Rickrolled My High School District, Got Away With It


uk: Комп'ютерні науки

description: Microsoft Teams offers the possibility to integrate your own communication infrastructure, e.g. your own SIP provider for phone services. This requires a Microsoft-certified and -approved Session Border Controller. During the security analysis of this federation, Moritz Abrell identified several vulnerabilities that allow an external, unauthenticated attacker to perform toll fraud. This talk is a summary of this analysis, the identified security issues and the practical exploitation as well as the manufacturer's capitulation to the final fix of the vulnerabilities.

uk: вхід без авторизації

name: Phreaking 2.0 - Abusing Microsoft Teams Direct Routing


uk: Комп'ютерні науки

description: Initial access payloads have historically had limited methods that work seamlessly in phishing campaigns and can maintain a level of evasion. This payload category has been dominated by Microsoft Office types, but as recent news has shown, the lifespan of even this technique is shortening. A vehicle for payload delivery that has been greatly overlooked for initial access is ClickOnce. ClickOnce is very versatile and has a lot of opportunities for maintaining a level of evasion and obfuscation. In this talk we’ll cover methods of bypassing Windows controls such as SmartScreen, application whitelisting, and trusted code abuses with ClickOnce applications. Additionally, we’ll discuss methods of turning regular signed or high reputation .NET assemblies into weaponized ClickOnce deployments. This will result in circumvention of common security controls and extend the value of ClickOnce in the offensive use case. Finally, we’ll discuss delivery mechanisms to increase the overall legitimacy of ClickOnce application deployment in phishing campaigns. This talk can bring to attention the power of ClickOnce applications and code execution techniques that are not commonly used.

uk: вхід без авторизації

name: Less SmartScreen More Caffeine: ClickOnce (Ab)Use for Trusted Code Execution


uk: Комп'ютерні науки

description: Exploring in depth the android permission mechanism, through different protection levels. Step by step exploitations techniques that affect more than 98% of all Android devices including the last official release (Android 12). In this talk I reveal a few different techniques that I uncovered in my research, which can allow hackers to bypass permissions from all protection levels in any Android device, which is more than 3 billion active devices according to the google official stats. These vulnerabilities enable the hacker to bypass the security measures of android, by abusing default (built in) services and get access to abilities and resources which are protected by permission mechanism. Some vulnerabilities are partially fixed, others won't be fixed as google considers as intended behavior. In this talk I'll survey the different vulnerabilities, and deep dive into a few of different exploitations. Finally, I'll demonstrate how those techniques can be combined together to create real life implications and to use for: Ransomware, Clickjacking, Uninstalling other apps and more, completely undetected by security measures.

uk: вхід без авторизації

name: Bypassing Android Permissions From All Protection Levels


uk: Комп'ютерні науки

description: In this presentation, we go over the main challenges we faced during our analysis of the top selling router in a local eCommerce, and how we found a zero-click remote unauthenticated RCE vulnerability. We will do a walkthrough on how we located the root cause of this vulnerability and found that it was ingrained in Realtek’s implementation of a networking functionality in its SDK for eCos devices. We then present the method we used to automate the detection of this vulnerability in other firmware images. We reflect on the fact that on most routers this functionality is not even documented and can’t be disabled via the router’s web interface. We take this as an example of the hidden attack surface that lurks in OEM internet-connected devices. We conclude by discussing why this vulnerability hasn’t been reported yet, despite being easy to spot (having no prior IoT experience), widespread (affecting multiple devices from different vendors), and critical. Our research highlights the poor state of firmware security, where vulnerable code introduced down the supply chain might never get reviewed and end up having a great impact, evidencing that security is not a priority for the vendors and opening the possibility for attackers to find high impact bugs with low investment and little prior knowledge.

uk: вхід без авторизації

name: Hidden Attack Surface of OEM IoT devices: Pwning thousands of routers with a vulnerability Realtek's SDK for eCos OS


uk: Комп'ютерні науки

description: Code Integrity is a threat protection feature first introduced by Microsoft over 15 years ago. On x64-based versions of Windows, kernel drivers must be digitally signed and checked each time they are loaded into memory. This is also referred to as Driver Signature Enforcement (DSE). The passing year showed high-profile APT groups kept leveraging the well-known tampering technique to disable DSE on runtime. Meanwhile, Microsoft rolled out new mitigations: driver blocklists and Kernel Data Protection (KDP), a new platform security technology for preventing data-oriented attacks. Since using blocklist only narrows the attack vector, we focused on how KDP was applied in this case to eliminate the attack surface. We found two novel data-based attacks to bypass KDP-protected DSE, one of which is feasible in real-world scenarios. Furthermore, they work on all Windows versions, starting with the first release of DSE. We’ll present each method and run them on live machines. We’ll discuss why KDP is an ineffective mitigation. As it didn’t raise the bar against DSE tampering, we looked for a different approach to mitigate it. We’ll talk about how defenders can take a page out of attackers’ playbook to cope with the issue until HVCI becomes prevalent and really eliminates this attack surface.

uk: вхід без авторизації

name: Running Rootkits Like A Nation-State Hacker


uk: Комп'ютерні науки

description: Hash Table, as the most fundamental Data Structure in Computer Science, is extensively applied in Software Architecture to store data in an associative manner. However, its architecture makes it prone to Collision Attacks. To deal with this problem, 25 years ago, Microsoft designed its own Dynamic Hashing algorithm and applied it everywhere in IIS, the Web Server from Microsoft, to serve various data from HTTP Stack. As Hash Table is everywhere, isn't the design from Microsoft worth scrutinizing? We dive into IIS internals through months of Reverse-Engineering efforts to examine both the Hash Table implementation and the use of Hash Table algorithms. Several types of attacks are proposed and uncovered in our research, including (1) A specially designed Zero-Hash Flooding Attack against Microsoft's self-implemented algorithm. (2) A Cache Poisoning Attack based on the inconsistency between Hash-Keys. (3) An unusual Authentication Bypass based on a hash collision. By understanding this talk, the audience won't be surprised why we can destabilize the Hash Table easily. The audience will also learn how we explore the IIS internals and will be surprised by our results. These results could not only make a default installed IIS Server hang with 100% CPU but also modify arbitrary HTTP responses through crafted HTTP request. Moreover, we'll demonstrate how we bypass the authentication requirement with a single, crafted password by colliding the identity cache!

uk: вхід без авторизації

name: Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS


uk: Комп'ютерні науки

description: While each nation and region around the world has unique governance models and concerns, there is a large commonality in our: adversaries, markets, supply chains, vulnerabilities, and connectivity. So each nation and region approaches cyber policy in ways that are unique and ways that are in common with the broader global community. Join this session to hear from national leaders in cyber policy on what makes their distinct practices appropriate for them, and how they work together on the international stage where interests and concerns are aligned.

uk: вхід без авторизації

name: Panel - Global Challenges, Global Approaches in Cyber Policy


uk: Комп'ютерні науки

description: Cyber criminals are no longer focusing all their efforts on the biggest fish, which means organizations below the security poverty line - who often struggle with achieving adequate cyber resilience - are increasingly being hit. At the same time, we've seen an increase in supply chain attacks, which makes sense as more and more of the tech ecosystem is moving to cloud or managed service provider models. Various governments are paying attention to these shifts and are considering how regulating digital service providers may advance security more broadly, while also alleviating the burden on small to medium businesses. This session will be led by one or two governments working on this issue and will include an open discussion on the challenges and opportunities of this approach.

uk: вхід без авторизації

name: Panel - Moving Regulation Upstream - Focus on the Role of Digital Service Providers


uk: Комп'ютерні науки

description: In an ideal world, members of a community work together towards a common goal or greater good. Unfortunately, we do not (yet) live in such a world. In this talk, we discuss what appears to be a systemic issue impacting our cyber-security community: the theft and unauthorized use of algorithms by corporate entities. Entities who themselves may be part of the community. First, we’ll present a variety of search techniques that can automatically point to unauthorized code in commercial products. Then we’ll show how reverse-engineering and binary comparison techniques can confirm such findings. Next, we will apply these approaches in a real-world case study. Specifically, we’ll focus on a popular tool from a non-profit organization that was reverse-engineered by multiple entities such that its core algorithm could be recovered and used (unauthorized), in multiple commercial products. The talk will end with actionable takeaways and recommendations, as who knows, this may happen to you too! For one, we'll present strategic approaches (and the challenges) of confronting culpable commercial entities (and their legal teams). Moreover, we’ll provide recommendations for corporations to ensure this doesn’t happen in the first place, thus ensuring that our community can remain cohesively focused on its mutual goals.

uk: вхід без авторизації

name: Deja Vu - Uncovering Stolen Algorithms in Commercial Products


uk: Комп'ютерні науки

description: With a recent market cap of over $100 billion and the genericization of its name, the popularity of Zoom is undeniable. But what about its security? This imperative question is often quite personal, as who amongst us isn't jumping on weekly (daily?) Zoom calls? In this talk, we’ll explore Zoom’s macOS application to uncover several critical security flaws. Flaws, that provided a local unprivileged attacker a direct and reliable path to root. The first flaw, presents itself subtly in a core cryptographic validation routine, while the second is due to a nuanced trust issue between Zoom’s client and its privileged helper component. After detailing both root cause analysis and full exploitation of these flaws, we’ll end the talk by showing how such issues could be avoided …both by Zoom, but also in other macOS applications.

uk: вхід без авторизації

name: You’re Muted Rooted Exploiting Zoom on macOS


uk: Комп'ютерні науки

description: Terry Gilliam’s 1985 cult film Brazil posits a polluted, hyper-consumerist and totalitarian dystopia in which a renegade heating engineer, Archibald Tuttle, takes great risks to conduct repairs outside of the stifling and inefficient bureaucracy of “Central Services.” When Tuttle’s rogue repairs are detected, Central Services workers demolish and seize repaired systems under the pretext of “fixing” them. It’s dark. It's also not so far off from our present reality in which device makers use always-on Internet connections, DRM and expansive copyright and IP claims to sustain “Central Services”-like monopolies on the service and repair of appliances, agricultural and medical equipment, personal electronics and more. The net effect of this is a less- not more secure ecosystem of connected things that burdens consumers, businesses and the planet. Our panel of repair and cybersecurity experts will delve into how OEMs’ anti-repair arguments trumpet cybersecurity risks, while strangling independent repair and dissembling about the abysmal state of embedded device security. We’ll also examine how the emergent “right to repair” movement aims to dismantle this emerging “Brazil” style dystopia and lay the foundation for a “circular” economy that reduces waste while also ensuring better security and privacy protections for technology users.

uk: вхід без авторизації

name: Brazil Redux - Short Circuiting Tech-Enabled Dystopia Right to Repair


uk: Комп'ютерні науки

description: In this talk, we will present novel vulnerabilities and exploitation techniques that reliably bypass Linux syscall tracing. A user mode program does not need any special privileges or capabilities to reliably avoid system call tracing detections by exploiting these vulnerabilities. The exploits work even when seccomp, SELinux, and AppArmor are enforced. Advanced security monitoring solutions on Linux VMs and containers offer system call monitoring to effectively detect attack behaviors. Linux system calls can be monitored by kernel tracing technologies such as tracepoint, kprobe, ptrace, etc. These technologies intercept system calls at different places in the system call execution. These monitoring solutions can be deployed on cloud compute instances such as AWS EC2, Fargate, EKS, and the corresponding services from other cloud providers. We comprehensively analyzed the Time-of-check-to-time-of-use (TOCTOU) issues in the Linux kernel syscall tracing framework and showed that these issues can be reliably exploited to bypass syscall tracing. Our exploits manipulate different system interactions that can impact the execution time of a syscall. We demonstrated that significant syscall execution delays can be introduced to make TOCTOU bypass reliable even when seccomp, SELinux, and AppArmor are enforced. Compared to the phantom attacks in DEFCON 29, the new exploit primitives we use do not require precise timing control or synchronization. We will demonstrate our bypass for Falco on Linux VMs/containers and GKE. We will also demonstrate bypass for pdig on AWS Fargate. In addition, we will demonstrate exploitation techniques for syscall enter and explain the reason why certain configurations are difficult to reliably exploit. Finally, we will summarize exploitable TOCTOU scenarios and discuss potential mitigations in various cloud computing environments.

uk: вхід без авторизації

name: Trace me if you can: Bypassing Linux Syscall Tracing


uk: Комп'ютерні науки

description: I have explored the subject of UFOs seriously and in depth and detail for 44 years. I have worked with some of the best and brightest in the "invisible college" to do academic research and reach conclusions based on the evidence. I contributed to the celebrated history, "UFOs and Government: A Historical Inquiry," the gold standard for historical research into the subject now in over 100 university libraries. This talk more than updates the latest government statements on the subject--it is the most complete, honest, and forthright presentation I can make. I will tell the most truth I can, based on data and evidence. As an NSA analyst told me, "Richard, they are here. They're here."

uk: вхід без авторизації

name: UFOs, Alien Life, and the Least Untruthful Things I Can Say


How Russia is trying to block Tor

uk: Комп'ютерні науки

description: In December 2021, some ISPs in Russia started blocking Tor's website, along with protocol-level (DPI) and network-level (IP address) blocking to try to make it harder for people in Russia to reach the Tor network. Some months later, we're now at a steady-state where they are trying to find new IP addresses to block and we're rotating IP addresses to keep up. In this talk I'll walk through what steps the Russian censors have taken, and how we reverse engineered their attempts and changed our strategies and our software. Then we'll discuss where the arms race goes from here, what new techniques the anti-censorship world needs if we're going to stay ahead of future attacks, and what it means for the world that more and more countries are turning to network-level blocking as the solution to their political problems.

uk: вхід без авторизації