Blog-o-Mix

AthCon3 (2012) was a pleasant surprise - Kris and Kyp and their crew did a great job putting it all together so nicely!

It was a very technical, 1-track 2-day conference in Athens, or better said in a very nice green&quiet country club right outside of Athens.

I have been surprised also by the following facts:

• the audience was mostly young professionals
• the number of attendees was pretty impressive for a hacker/security scene which is not much advertising itself
• the audience definitely featured a pool of both raw and polished talent which could be a gold mine for headhunters

Read more! »

What can be more fun and crazier than Amsterdam? That’s right - HTIB2012 in Amsterdam !

It is over now and I would like to take this opportunity to thank the reviewers and the organizers for providing the chance to meet them and meet other cool presenters and the extraordinary audience!

Special thanks to Dhillon, @fish_, Yuri, Amy - you guys&gals rock!

Read more! »

Harvesting and Collecting Voice Conference Bridges, Passwords, Pins, Access, Codes

Sadly, BlackHat 2012 US and DefCon20 refused this short/fast/lightning talk.

Here are the slides for “Harvesting and Collecting Voice Conference Bridges, Passwords, Pins, Access, Codes”.

Here is the CFP submission:

Code:

Enjoy!

Securely yours,
Andrei

Electronic part of “how condoms are made” - NaN is not encouraging at all

Youtube is great at suggesting sometimes meaningless or totally unrelated (definitely these are random psy experiments or sneaky product placements )) ). Nevertheless, the following one was fun and entertaining, especially from a hacking perspective.

It’s called “How BILLY BOY condoms are made". The part which amused me most is this:

• in condoms, one especially would appreciate their certainty characteristic, i.e. it should be certain with a high degree of confidence that it will not fail
• production line computer and electronic testing system however, produces very uncertain-looking results, as shown in the screenshot - NaN or non-a-number is not a very encouraging result or measurement…
• even if the computer was turned on just for the marketing TV shooting, this kind of sloppy mistakes make you wonder about the entire quality of the production software and chain
• happy “safe NaN sex”
• perhaps a new brand “Billy Boy NaN - special for geeks” would be an option

Condoms testing NaN not a number result

Have a pleasant learning experience here - “How BILLY BOY condoms are made":

Read more! »

UPDATE: You can subscribe to postscript-sec@andreicostin.com for notifications and tools & PoC releases.

Small updates on the Xerox security front.

Few days back Xerox issued its Security Bulletin XRX12-005 and the P49 security patch.

Read more! »