Pol van Aubel gave an excellent introduction to Physical(ly) Unclonable Functions from both a modern and historical perspective. If you want to know how to exploit intrinsic random properties of all kinds of things, give this talk a shot and don't be afraid of all the footnotes.
Takeaway: PUFs are kinda neat and if you're interested check out this talk.
Thursday, December 29, 2016
[33c3 TLDR] Decoding the LoRa PHY
Matt reverse engineered the PHY layer of the proprietary and patented LoRa techology and even wrote a GNUradio plug-in for it.
He also gave an excellent introduction to basics of the LoRa technology.
Actually, it was somehow an introduction to basics of radio technology in general and I highly recommend watching his talk.
Video
[33c3 TLDR] Making Technology Inclusive Through Papercraft and Sound
A talk by bunnie introducing their Love to Code program, a program for teaching children (adults too) to code using cheap papercraft-inspired devices and tools. The argument is that the diversity problem that exists in coding can maybe be fixed by starting at the earliest stages, i.e., starting with children.
From a technical perspective they had to solve some interesting problems to make the technology fast, cheap and usable. In particular, they have a pretty awesome technique using sound to upload code to the microcontrollers they use.
Takeaway: Pretty cool technology for a societally relevant goal. Check it out.
From a technical perspective they had to solve some interesting problems to make the technology fast, cheap and usable. In particular, they have a pretty awesome technique using sound to upload code to the microcontrollers they use.
Takeaway: Pretty cool technology for a societally relevant goal. Check it out.
[33c3 TLDR] Tapping into the core
An interesting talk about how to abuse the USB to JTAG bridge available in newer Intel processors to attack computers through their USB port.
It is not entirely clear to me if this is "just" another case of somebody forgetting to turn of a debug facility and leaving it as a security hole or if there are actually cases when it cannot be disabled.
Video
It is not entirely clear to me if this is "just" another case of somebody forgetting to turn of a debug facility and leaving it as a security hole or if there are actually cases when it cannot be disabled.
Video
[33c3 TLDR] Wheel of Fortune
Another talk about bad RNGs in embedded devices. This time discussing challenges in embedded systems a bit more in general.
The takeaway might be that these devices really need a hardware RNG even if it costs a little bit extra.
(Similar to Mathy's talk, maybe only watch one of them.)
Video
The takeaway might be that these devices really need a hardware RNG even if it costs a little bit extra.
(Similar to Mathy's talk, maybe only watch one of them.)
Video
[33c3 TLDR] Do as I Say not as I Do: Stealth Modification of Programmable Logic Controllers I/O by Pin Control Attack
This talk was about how to abuse a design peculiarity in PLCs. It is used to change the behavior of the controllers by simply changing the configuration of the I/O pins.
For example, switching a pin from output to input will suppress all writing to that pin without any feedback.
Video
For example, switching a pin from output to input will suppress all writing to that pin without any feedback.
Video
[33c3 TLDR] A Tale of Two Skype Calls
Earlier today we had two great talks focusing on the aftermath of the Snowden revelations:
- 3 Years After Snowden: Is Germany fighting State Surveillance?
- The Untold Story of Edward Snowden’s Escape from Hong Kong
First of all a chilling report on the state of the German surveillance machine detailing how the German intelligence agencies have gotten more money, more capabilities (under the law) and are processing more data. Often without good supervision. It is only because of Germany's attempt at an inquiry, which the two speaking journalists recorded, that we know some of the details of the mass surveillance apparatus.
At the end, instead of the regular Q&A, key witness #1 came and joined us over Skype: Edward Snowden.
Takeaway: things are getting worse, not better and we need to do more to combat this.
--
Second, a talk detailing the story of the people that kept the very same Edward Snowden safe during his stay as a refugee in Hong Kong, detailing their particular brand of self-sacrifice. Being refugees in Hong Kong, they are forced to live in squalor without rights. Government support was stripped away once their identities were known. These people, these guardian angels, now subsist on the donation efforts of third parties. Further attempts are being made to get these 7 people out of the country and to a safer place.
For the Q&A, Vanessa, one of the people that helped Snowden, skyped in and answered some of the questions pertaining to her recollection of the events as well as her current status.
Takeaway: the seven refugees that helped Edward Snowden stay hidden during his stay in Hong Kong need assistance. If you want to you can donate at the following places:
- https://fundrazr.com/snowdensguardians
- https://www.gofundme.com/snowdenguardians
- 3 Years After Snowden: Is Germany fighting State Surveillance?
- The Untold Story of Edward Snowden’s Escape from Hong Kong
First of all a chilling report on the state of the German surveillance machine detailing how the German intelligence agencies have gotten more money, more capabilities (under the law) and are processing more data. Often without good supervision. It is only because of Germany's attempt at an inquiry, which the two speaking journalists recorded, that we know some of the details of the mass surveillance apparatus.
At the end, instead of the regular Q&A, key witness #1 came and joined us over Skype: Edward Snowden.
Takeaway: things are getting worse, not better and we need to do more to combat this.
--
Second, a talk detailing the story of the people that kept the very same Edward Snowden safe during his stay as a refugee in Hong Kong, detailing their particular brand of self-sacrifice. Being refugees in Hong Kong, they are forced to live in squalor without rights. Government support was stripped away once their identities were known. These people, these guardian angels, now subsist on the donation efforts of third parties. Further attempts are being made to get these 7 people out of the country and to a safer place.
For the Q&A, Vanessa, one of the people that helped Snowden, skyped in and answered some of the questions pertaining to her recollection of the events as well as her current status.
Takeaway: the seven refugees that helped Edward Snowden stay hidden during his stay in Hong Kong need assistance. If you want to you can donate at the following places:
- https://fundrazr.com/snowdensguardians
- https://www.gofundme.com/snowdenguardians
Subscribe to:
Posts (Atom)