Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  1. Home
  2. Categories
  3. Uncategorized
  4. At #39c3, @piko and I gave a (German) talk about different voting systems!

At #39c3, @piko and I gave a (German) talk about different voting systems!

Uncategorized
2 1 3
Log in to reply

Feed RSS
At #39c3, @piko and I gave a (German) talk about different voting systems!

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti
  • wuzzy@cyberplace.socialundefined

    The #Rowhammer talk at #CCC is basically a tradition at this point.

    Uncategorized rowhammer ccc 39c3 hacking security
    1
    0 Votes
    1 Posts
    3 Views
    wuzzy@cyberplace.socialundefined
    The #Rowhammer talk at #CCC is basically a tradition at this point.So obviously it has returned to #39C3 and if I understood it right their conclusion was that 12.5% of RAMs (that they tested) are vulnerable to automated #Rowhammer attacks. Ouch!#CCC #hacking #security
  • th@social.v.stundefined

    Good morning Hamburg!

    Uncategorized 39c3
    1
    1
    0 Votes
    1 Posts
    7 Views
    th@social.v.stundefined
    Good morning Hamburg! It's day three of #39c3
  • oots@infosec.exchangeundefined

    The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too.

    Uncategorized 39c3 bluetooth phone whatsapp amazon youcannotbeparanoideno security
    1
    0 Votes
    1 Posts
    7 Views
    oots@infosec.exchangeundefined
    The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the #Bluetooth address and "master" encryption keys used for the communication with paired devices (e.g. a #phone).Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.Then they started recovering access a #WhatsApp account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.As the cherry on top, they escalated into the victim's #Amazon account.Scary shit. #YouCannotBeParanoidEnough #security
  • filippo@abyssdomain.expertundefined

    💥💥💥💥💥 age v1.3.0 💥💥💥💥💥

    Uncategorized 39c3
    1
    1
    0 Votes
    1 Posts
    5 Views
    filippo@abyssdomain.expertundefined
    💥💥💥💥💥 age v1.3.0 💥💥💥💥💥Post-quantum keys, seeking DecryptReaderAt API, age-inspect CLI tool, built-in recipients compatible with hardware plugins, non-interactive passphrase input, Go framework for implementing plugins, and sooooo many improved errors.Our best release yet, six years to the day after the first beta, again released from the floor of #39c3!https://github.com/FiloSottile/age/releases/tag/v1.3.0