Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 8 11 17 25 37 54 79 116 171 250 366 535 537 786 900 1149 1151 1320 1436 1445 1446 1447 1448 1449 1515 1570 1607 1632 1649 1661 1669 1675 1678 1681 1683 1684 1685 1686 ▲ ▼
Phantom Network Surveillance UAV / Drone RICKY HILL SECURITY CONSULTANT DARPA, 2011, sponsored a contest named UAVForge which challenged teams to build a prototype unmanned aerial vehicle (UAV). Mission: "UAV must be small enough to fit in a soldier's rucksack and able to fly to, perch & stare from useful locations for several hours near targets of interest to provide real-time (visual) persistent surveillance." Long story short: 140 te....
Phantom Network Surveillance UAV / Drone RICKY HILL SECURITY CONSULTANT DARPA, 2011, sponsored a contest named UAVForge which challenged teams to build a prototype unmanned aerial vehicle (UAV). Mission: "UAV must be small enough to fit in a soldier's rucksack and able to fly to, perch & stare from useful locations for several hours near targets of interest to provide real-time (visual) persistent surveillance." Long story short: 140 te....
So You Think Your Domain Controller is Secure? JUSTIN HENDRICKS SECURITY ENGINEER, MICROSOFT Domain Controllers are the crown jewels of an organization. Once they fall, everything in the domain falls . Organizations go to great lengths to secure their domain controllers, however they often fail to properly secure the software used to manage these servers. This presentation will cover unconventional methods for gaining domain admin by ..
So You Think Your Domain Controller is Secure? JUSTIN HENDRICKS SECURITY ENGINEER, MICROSOFT Domain Controllers are the crown jewels of an organization. Once they fall, everything in the domain falls . Organizations go to great lengths to secure their domain controllers, however they often fail to properly secure the software used to manage these servers. This presentation will cover unconventional methods for gaining domain admin by ..
Protecting Data with Short-Lived Encryption Keys and Hardware Root of Trust DAN GRIFFIN PRESIDENT, JW SECURE, INC. The US National Security Agency has been public about the inevitability of mobile computing and the need to support cloud-based service use for secret projects. General Alexander, head of the NSA, recently spoke of using smartphones as ID cards on classified networks. And yet, mobile devices have a poor security track rec....
Protecting Data with Short-Lived Encryption Keys and Hardware Root of Trust DAN GRIFFIN PRESIDENT, JW SECURE, INC. The US National Security Agency has been public about the inevitability of mobile computing and the need to support cloud-based service use for secret projects. General Alexander, head of the NSA, recently spoke of using smartphones as ID cards on classified networks. And yet, mobile devices have a poor security track rec....
JTAGulator: Assisted Discovery Of On-Chip Debug Interfaces JOE GRAND AKA KINGPIN On-chip debug (OCD) interfaces can provide chip-level control of a target device and are a primary vector used by hackers to extract program code or data, modify memory contents, or affect device operation on-the-fly. Depending on the complexity of the target device, manually locating available OCD connections can be a difficult and time consuming task, som....
JTAGulator: Assisted Discovery Of On-Chip Debug Interfaces JOE GRAND AKA KINGPIN On-chip debug (OCD) interfaces can provide chip-level control of a target device and are a primary vector used by hackers to extract program code or data, modify memory contents, or affect device operation on-the-fly. Depending on the complexity of the target device, manually locating available OCD connections can be a difficult and time consuming task, som....
Java Every-Days: Exploiting Software Running on 3 Billion Devices BRIAN GORENC ZERO DAY INITIATIVE, HP SECURITY RESEARCH JASIEL SPELMAN SECURITY RESEARCHER Over the last three years, Oracle Java has become the exploit author's best friend. And why not? Java has a rich attack surface, broad install base, and runs on multiple platforms allowing attackers to maximize their return-on-investment. The increased focus on uncovering weaknesse....
Java Every-Days: Exploiting Software Running on 3 Billion Devices BRIAN GORENC ZERO DAY INITIATIVE, HP SECURITY RESEARCH JASIEL SPELMAN SECURITY RESEARCHER Over the last three years, Oracle Java has become the exploit author's best friend. And why not? Java has a rich attack surface, broad install base, and runs on multiple platforms allowing attackers to maximize their return-on-investment. The increased focus on uncovering weaknesse....
The Politics of Privacy and Technology: Fighting an Uphill Battle ERIC FULTON CEO, SUBSECTOR SOLUTIONS DANIEL ZOLNIKOV STATE REPRESENTATIVE, MONTANA In the past few decades the world has been dramatically transformed by technology. People have significantly evolved in how they interact with each other and the world; a side effect of this evolution is the drastic change in personal privacy. Private citizens, corporations, and governmen....
The Politics of Privacy and Technology: Fighting an Uphill Battle ERIC FULTON CEO, SUBSECTOR SOLUTIONS DANIEL ZOLNIKOV STATE REPRESENTATIVE, MONTANA In the past few decades the world has been dramatically transformed by technology. People have significantly evolved in how they interact with each other and the world; a side effect of this evolution is the drastic change in personal privacy. Private citizens, corporations, and governmen....
Defeating SEAndroid PAU OLIVA FORA SR. MOBILE SECURITY ENGINEER, VIAFORENSICS Security Enhancements for Android (SEAndroid) enables the use of SELinux in Android in order to limit the damage that can be done by malicious apps, trying to make exploitation harder. Some OEMs are trying hard to implement extra mitigations in their devices, especially those aiming to reach the enterprise market. We will present some issues that are found in ....
Defeating SEAndroid PAU OLIVA FORA SR. MOBILE SECURITY ENGINEER, VIAFORENSICS Security Enhancements for Android (SEAndroid) enables the use of SELinux in Android in order to limit the damage that can be done by malicious apps, trying to make exploitation harder. Some OEMs are trying hard to implement extra mitigations in their devices, especially those aiming to reach the enterprise market. We will present some issues that are found in ....
10000 Yen into the Sea FLIPPER The use of a pressure housing in an underwater vehicle can be difficult to implement without becoming a cost-center. Flipper will walk the audience through a new design for an Autonomous Underwater Glider which challenges assumptions about what is required or necessary to deploy sensors, transmitters, and payloads across long distances in the ocean. The speaker assumes no priory knowledge of subject matter....
10000 Yen into the Sea FLIPPER The use of a pressure housing in an underwater vehicle can be difficult to implement without becoming a cost-center. Flipper will walk the audience through a new design for an Autonomous Underwater Glider which challenges assumptions about what is required or necessary to deploy sensors, transmitters, and payloads across long distances in the ocean. The speaker assumes no priory knowledge of subject matter....
Google TV or: How I Learned to Stop Worrying and Exploit Secure Boot AMIR ETEMADIEH RESEARCH SCIENTIST AT ACCUVANT LABS CJ HERES IT CONSULTANT MIKE BAKER CO-FOUNDER OPENWRT HANS NIELSEN SENIOR SECURITY CONSULTANT AT MATASANO Google TV is intended to bring the Android operating system out of the mobile environment and into consumers' living rooms. Unfortunately, content providers began to block streaming access to popular content f....
Google TV or: How I Learned to Stop Worrying and Exploit Secure Boot AMIR ETEMADIEH RESEARCH SCIENTIST AT ACCUVANT LABS CJ HERES IT CONSULTANT MIKE BAKER CO-FOUNDER OPENWRT HANS NIELSEN SENIOR SECURITY CONSULTANT AT MATASANO Google TV is intended to bring the Android operating system out of the mobile environment and into consumers' living rooms. Unfortunately, content providers began to block streaming access to popular content f....
Electromechanical PIN Cracking with Robotic Reconfigurable Button Basher (and C3BO) JUSTIN ENGLER SENIOR SECURITY ENGINEER, ISEC PARTNERS PAUL VINES Password and PIN systems are often encountered on mobile devices. A software approach to cracking these systems is often the simplest, but in some cases there may be no better option than to start pushing buttons. This talk will cover automated PIN cracking techniques using two new tools....
Electromechanical PIN Cracking with Robotic Reconfigurable Button Basher (and C3BO) JUSTIN ENGLER SENIOR SECURITY ENGINEER, ISEC PARTNERS PAUL VINES Password and PIN systems are often encountered on mobile devices. A software approach to cracking these systems is often the simplest, but in some cases there may be no better option than to start pushing buttons. This talk will cover automated PIN cracking techniques using two new tools....
Noise Floor: Exploring the world of unintentional radio emissions MELISSA ELLIOTT APPLICATION SECURITY RESEARCHER, VERACODE If it's electronic, it makes noise. Not necessarily noise that you and I can hear, of course – unless you know how to tune in. The air around us is filled with bloops, bleeps, and bzzts of machines going about their business, betraying their existence through walls or even from across the street. The unintentional ....
Noise Floor: Exploring the world of unintentional radio emissions MELISSA ELLIOTT APPLICATION SECURITY RESEARCHER, VERACODE If it's electronic, it makes noise. Not necessarily noise that you and I can hear, of course – unless you know how to tune in. The air around us is filled with bloops, bleeps, and bzzts of machines going about their business, betraying their existence through walls or even from across the street. The unintentional ....
From Nukes to Cyber – Alternative Approaches for Proactive Defense and Mission Assurance LT. GEN. ROBERT ELDER USAF (RETIRED) In typical military operations, the advantage goes to the offense because the initiator controls the timing and is able to concentrate forces. A good defense is designed to undermine the advantage of the offense. Proactive defense approaches include: masking (obfuscation), maneuvering, and hardening of critica....
From Nukes to Cyber – Alternative Approaches for Proactive Defense and Mission Assurance LT. GEN. ROBERT ELDER USAF (RETIRED) In typical military operations, the advantage goes to the offense because the initiator controls the timing and is able to concentrate forces. A good defense is designed to undermine the advantage of the offense. Proactive defense approaches include: masking (obfuscation), maneuvering, and hardening of critica....
Pwn'ing You(r) Cyber Offenders PIOTR DUSZYNSKI SENIOR SECURITY CONSULTANT, TRUSTWAVE SPIDERLABS It is commonly believed that Offensive Defense is just a theory that is difficult to be used effectively in practice, but that is not entirely true... During my talk along with a new service emulation technique, that will render standard port scanner results nearly useless and leave your attackers with an arduous analysis, I will focus on ....
Pwn'ing You(r) Cyber Offenders PIOTR DUSZYNSKI SENIOR SECURITY CONSULTANT, TRUSTWAVE SPIDERLABS It is commonly believed that Offensive Defense is just a theory that is difficult to be used effectively in practice, but that is not entirely true... During my talk along with a new service emulation technique, that will render standard port scanner results nearly useless and leave your attackers with an arduous analysis, I will focus on ....
Privacy In DSRC Connected Vehicles CHRISTIE DUDLEY PRIVACY LEGAL RESEARCHER To date, remote vehicle communications such as OnStar have provided little in the way of privacy. The planned DSRC system will become the first large-scale nationwide direct public participation network outside of the internet. Much information and misinformation has been spread on what the upcoming DSRC system is and can do, especially in the information securi....
Privacy In DSRC Connected Vehicles CHRISTIE DUDLEY PRIVACY LEGAL RESEARCHER To date, remote vehicle communications such as OnStar have provided little in the way of privacy. The planned DSRC system will become the first large-scale nationwide direct public participation network outside of the internet. Much information and misinformation has been spread on what the upcoming DSRC system is and can do, especially in the information securi....
Proliferation AMBASSADOR JOSEPH R. DETRANI PRESIDENT, INTELLIGENCE AND NATIONAL SECURITY ALLIANCE (INSA) Ambassador Joseph DeTrani was named President of the Intelligence and National Security Alliance (INSA) on February 5, 2013. As President, he will lead INSA as its Chief Executive Officer on a day-to-day basis. Ambassador DeTrani has dedicated his professional career to public service with more than three decades of work for ....
Proliferation AMBASSADOR JOSEPH R. DETRANI PRESIDENT, INTELLIGENCE AND NATIONAL SECURITY ALLIANCE (INSA) Ambassador Joseph DeTrani was named President of the Intelligence and National Security Alliance (INSA) on February 5, 2013. As President, he will lead INSA as its Chief Executive Officer on a day-to-day basis. Ambassador DeTrani has dedicated his professional career to public service with more than three decades of work for ....
Revealing Embedded Fingerprints: Deriving intelligence from USB stack interactions ANDY DAVIS RESEARCH DIRECTOR, NCC GROUP Embedded systems are everywhere, from TVs to aircraft, printers to weapon control systems. As a security researcher when you are faced with one of these 'black boxes' to test, sometime in-situ, it is difficult to know where to start. However, if there is a USB port on the device there is useful information that can ....
Revealing Embedded Fingerprints: Deriving intelligence from USB stack interactions ANDY DAVIS RESEARCH DIRECTOR, NCC GROUP Embedded systems are everywhere, from TVs to aircraft, printers to weapon control systems. As a security researcher when you are faced with one of these 'black boxes' to test, sometime in-situ, it is difficult to know where to start. However, if there is a USB port on the device there is useful information that can ....
Do-It-Yourself Cellular IDS SHERRI DAVIDOFF LMG SECURITY SCOTT FRETHEIM LMG SECURITY DAVID HARRISON LMG SECURITY RANDI PRICE LMG SECURITY For less than $500, you can build your own cellular intrusion detection system to detect malicious activity through your own local femtocell. Our team will show how we leveraged root access on a femtocell, reverse engineered the activation process, and turned it into a proof-of-concept cellular ....
Do-It-Yourself Cellular IDS SHERRI DAVIDOFF LMG SECURITY SCOTT FRETHEIM LMG SECURITY DAVID HARRISON LMG SECURITY RANDI PRICE LMG SECURITY For less than $500, you can build your own cellular intrusion detection system to detect malicious activity through your own local femtocell. Our team will show how we leveraged root access on a femtocell, reverse engineered the activation process, and turned it into a proof-of-concept cellular ....
Stepping P3wns: Adventures in full spectrum embedded exploitation (and defense!) ANG CUI PH.D. CANDIDATE, COLUMBIA UNIVERSITY MICHAEL COSTELLO RESEARCH STAFF, COLUMBIA UNIVERSITY Our presentation focuses on two live demonstrations of exploitation and defense of a wide array of ubiquitous networked embedded devices like printers, phones and routers. The first demonstration will feature a proof-of-concept embedded worm capable of stea....
Stepping P3wns: Adventures in full spectrum embedded exploitation (and defense!) ANG CUI PH.D. CANDIDATE, COLUMBIA UNIVERSITY MICHAEL COSTELLO RESEARCH STAFF, COLUMBIA UNIVERSITY Our presentation focuses on two live demonstrations of exploitation and defense of a wide array of ubiquitous networked embedded devices like printers, phones and routers. The first demonstration will feature a proof-of-concept embedded worm capable of stea....
Home Invasion 2.0 - Attacking Network-Controlled Consumer Devices DANIEL "UNICORNFURNACE" CROWLEY MANAGING CONSULTANT, SPIDERLABS, TRUSTWAVE JENNIFER "SAVAGEJEN" SAVAGE SOFTWARE ENGINEER DAVID "VIDEOMAN" BRYAN A growing trend in electronics is to have them integrate with your home network in order to provide potentially useful features like automatic updates or to extend the usefulness of existing technologies such as door locks you....
Abusing NoSQL Databases Ming Chow Lecturer, Tufts University Department of Computer Science The days of selecting from a few SQL database options for an application are over. There is now a plethora of NoSQL database options to choose from: some are better than others for certain jobs. There are good reasons why developers are choosing them over traditional SQL databases including performance, scalabiltiy, and ease-of-use. Unfortunately....
Abusing NoSQL Databases Ming Chow Lecturer, Tufts University Department of Computer Science The days of selecting from a few SQL database options for an application are over. There is now a plethora of NoSQL database options to choose from: some are better than others for certain jobs. There are good reasons why developers are choosing them over traditional SQL databases including performance, scalabiltiy, and ease-of-use. Unfortunately....
SoundCloud has a service-oriented architecture, which allows us to use different languages for different services. With concurrency and…
Just over a decade ago, the dotcom bubble burst, and for the next 3-4 years, the IT industry (and IT job market) was in a slump. During the last presentation I did for Game On 2.0 on August 29th, one of the audience members asked me what the dotcom bubble actually was. I supplied the standard Web answer of “overspending in the IT market” and “mismanagement of IT resources” (or something like that).
Just over a decade ago, the dotcom bubble burst, and for the next 3-4 years, the IT industry (and IT job market) was in a slump. During the last presentation I did for Game On 2.0 on August 29th, one of the audience members asked me what the dotcom bubble actually was. I supplied the standard Web answer of “overspending in the IT market” and “mismanagement of IT resources” (or something like that).
SoundCloud has a service-oriented architecture, which allows us to use different languages for different services. With concurrency and…
I have been working with some of the above products at work for the past couple of weeks and I just cam
1 2 3 5 8 11 17 25 37 54 79 116 171 250 366 535 537 786 900 1149 1151 1320 1436 1445 1446 1447 1448 1449 1515 1570 1607 1632 1649 1661 1669 1675 1678 1681 1683 1684 1685 1686 ▲ ▼
73 visitors online