3 ms·

Any recommendations in particular?

by dzuc 12y ago

venaoy 12y ago
I liked: Iridium Pager Hacking. Turns out messages are not encrypted at all, and can be captured by any one over wide geographical ranges (~1000 km). https://www.youtube.com/watch?v=xCf5JFpOkDs&index=36&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=xCf5JFpOkDs&index=36&list=PL... Security Analysis of Estonia's Internet Voting System. https://www.youtube.com/watch?v=JY_pHvhE4os&index=37&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=JY_pHvhE4os&index=37&list=PL... AMD x86 SMU firmware analysis. Not watched it yet, but topic seems interesting. https://www.youtube.com/watch?v=yE_PMcwltzo&index=16&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=yE_PMcwltzo&index=16&list=PL... And of course the SS7 talks showing glaring flaws in mobile networks: Mobile self-defense. https://www.youtube.com/watch?v=GeCkO0fWWqc&index=10&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=GeCkO0fWWqc&index=10&list=PL... SS7: Locate. Track. Manipulate. https://www.youtube.com/watch?v=lQ0I5tl0YLY&index=4&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=lQ0I5tl0YLY&index=4&list=PLO... SS7map: mapping vulnerability of the international mobile roaming infrastructure https://www.youtube.com/watch?v=SfPC9IHCW-U&index=27&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=SfPC9IHCW-U&index=27&list=PL...
ash 12y ago
"Fernvale: An Open Hardware and Software Platform, Based on the Closed-Source MT6260 SoC" Interesting attempt to bridge Chinese and Western cultures towards open collaboration. https://youtube.com/watch?v=msrTR3hNDQM https://youtube.com/watch?v=msrTR3hNDQM
florian-f 12y ago
I particularly enjoyed: Reproducible Builds: on creating a build that produces the same exact binary on every machine so people can verify the integrity of the binaries published by an open source project). Snitches get Stitches: pen testing switches used in utilities like furnaces. And of course the SS7 talks.
yk 12y ago
The UEFI talk [1] and EFI bootkits for Apple MacBooks [2] are both really interesting. ( Both are about flashing firmware. ) And for a rather impressive demonstration how fucked the western IP law is, bunnie's and Xobs talk about the MT6260 SoC. [3] (They try to implement a free as in freedom OS on a cell phone SoC which is open in a Chinese context. The hops they have to jump through are rather ridiculous.) [1] http://media.ccc.de/browse/congress/2014/31c3_-_6129_-_en_-_saal_2_-_201412282030_-_attacks_on_uefi_security_inspired_by_darth_venamis_s_misery_and_speed_racer_-_rafal_wojtczuk_-_corey_kallenberg.html#video http://media.ccc.de/browse/congress/2014/31c3_-_6129_-_en_-_... [2] http://media.ccc.de/browse/congress/2014/31c3_-_6128_-_en_-_saal_1_-_201412291830_-_thunderstrike_efi_bootkits_for_apple_macbooks_-_trammell_hudson.html#video http://media.ccc.de/browse/congress/2014/31c3_-_6128_-_en_-_... [3] http://media.ccc.de/browse/congress/2014/31c3_-_6156_-_en_-_saal_1_-_201412282145_-_fernvale_an_open_hardware_and_software_platform_based_on_the_nominally_closed-source_mt6260_soc_-_bunnie_-_xobs.html#video http://media.ccc.de/browse/congress/2014/31c3_-_6156_-_en_-_...

Any recommendations in particular?

by dzuc 12y ago

Any recommendations in particular?

I liked: Iridium Pager Hacking. Turns out messages are not encrypted at all, and can be captured by any one over wide geographical ranges (~1000 km). https://www.youtube.com/watch?v=xCf5JFpOkDs&index=36&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=xCf5JFpOkDs&index=36&list=PL... Security Analysis of Estonia's Internet Voting System. https://www.youtube.com/watch?v=JY_pHvhE4os&index=37&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=JY_pHvhE4os&index=37&list=PL... AMD x86 SMU firmware analysis. Not watched it yet, but topic seems interesting. https://www.youtube.com/watch?v=yE_PMcwltzo&index=16&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=yE_PMcwltzo&index=16&list=PL... And of course the SS7 talks showing glaring flaws in mobile networks: Mobile self-defense. https://www.youtube.com/watch?v=GeCkO0fWWqc&index=10&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=GeCkO0fWWqc&index=10&list=PL... SS7: Locate. Track. Manipulate. https://www.youtube.com/watch?v=lQ0I5tl0YLY&index=4&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=lQ0I5tl0YLY&index=4&list=PLO... SS7map: mapping vulnerability of the international mobile roaming infrastructure https://www.youtube.com/watch?v=SfPC9IHCW-U&index=27&list=PLOcrXzpA0W83uyr5LX-U47F3V5IfAZ-UP https://www.youtube.com/watch?v=SfPC9IHCW-U&index=27&list=PL...

ash 12y ago

"Fernvale: An Open Hardware and Software Platform, Based on the Closed-Source MT6260 SoC" Interesting attempt to bridge Chinese and Western cultures towards open collaboration. https://youtube.com/watch?v=msrTR3hNDQM https://youtube.com/watch?v=msrTR3hNDQM

florian-f 12y ago

I particularly enjoyed: Reproducible Builds: on creating a build that produces the same exact binary on every machine so people can verify the integrity of the binaries published by an open source project). Snitches get Stitches: pen testing switches used in utilities like furnaces. And of course the SS7 talks.

yk 12y ago

The UEFI talk [1] and EFI bootkits for Apple MacBooks [2] are both really interesting. ( Both are about flashing firmware. ) And for a rather impressive demonstration how fucked the western IP law is, bunnie's and Xobs talk about the MT6260 SoC. [3] (They try to implement a free as in freedom OS on a cell phone SoC which is open in a Chinese context. The hops they have to jump through are rather ridiculous.) [1] http://media.ccc.de/browse/congress/2014/31c3_-_6129_-_en_-_saal_2_-_201412282030_-_attacks_on_uefi_security_inspired_by_darth_venamis_s_misery_and_speed_racer_-_rafal_wojtczuk_-_corey_kallenberg.html#video http://media.ccc.de/browse/congress/2014/31c3_-_6129_-_en_-_... [2] http://media.ccc.de/browse/congress/2014/31c3_-_6128_-_en_-_saal_1_-_201412291830_-_thunderstrike_efi_bootkits_for_apple_macbooks_-_trammell_hudson.html#video http://media.ccc.de/browse/congress/2014/31c3_-_6128_-_en_-_... [3] http://media.ccc.de/browse/congress/2014/31c3_-_6156_-_en_-_saal_1_-_201412282145_-_fernvale_an_open_hardware_and_software_platform_based_on_the_nominally_closed-source_mt6260_soc_-_bunnie_-_xobs.html#video http://media.ccc.de/browse/congress/2014/31c3_-_6156_-_en_-_...