ADS-B research was worth it!

ICAO to create Cyber Security Task Force (CSTF) - Our research is mentioned as key points!

Download/view here

Thanks to Aimee Turner for notifying us.

Errata: In the above PDF, it is wrongly mentioned “Dr. Andrei Costin” - wish I . It’s still a long way, until than it should read “PhD candidate”

Hybrid++ car concept - fuel, electric and bicycles/dynamos

During a coffee break, this idea came to my mind. Thought to post rather than throw it to brain-garbage.

Here is the concept of a hybrid car concept - fuel, electric and bicycles/dynamos - all in the name of so pushed greener and healthier tomorrow…

Idea is simple - why not having “pluginable” seats for electric cars, where bicycles/dynamo machines can be used with a two-fold purpose - get yourself fit (while husband/wife drives you to work) and at the same time charge your car so that you burn your green electricity later when needed?

Read more! »

Idling my mind on some out-of-band thoughts, I started realizing that we (as humans, as participants of the virtual social networks, as participants of real-life social networks having a virtual space representation) are in the process of training the most impressive AI yet to come. The technology and the hardware brains are almost there, spreaded around the globe and our orbital space. It lacks the outmust AI.

Just thinking on the meaning of giving a like/dislike on one of the following combination (youtube/facebook/buzz/tweeter/etc)x(video/photo/comment/text/article/etc) is mostly equivalent on training a huge neural network with AI node-weight (one can view the weights as simply 1/-1, or one can view the nodes’ weights as a more complex formula - for example, given a specific user/node, AI calculates the weight of his/her like/dislike voting based on the familiarity of AI with that user, etc.)

The nodes are contextually aware (eg. text which is easily parseable, video/photo which is at least parseable by the means of meta-information and yet content analysis by audio/video level algorithms are growing) and basically the AI is becoming more and more trained not just about social interactions (which it is already and mostly is), but also about our emotions (eg. when these is a comment fight with a lot of slang and cursing and dislikes and likes going around), our way of thinking and taking decision whether we like/dislike a given piece of information in a given context.

Combine that with the HAD (Human Aided Design&Decision taking, which is exactly opposite to CAD) (eg. people aiding the AI by manually correcting wrongly detected and/or recognized faces/objects in photos/videos)…

…and you pick your result.

Just my threaded thought.

Finally got some time to put all the papers in one place.

Papers’ content overlap, but each one has something specific to the given conference, so feel free to explore.

Here is my papers archive.

Feel free to:

• point out errors (and yes, we accept constructive criticism )
• suggest corrections
• suggest improvements

More to come, stay tuned…

Cheers,
zveriu

Tags: Hacking Printers MFPs for fun profit and (anti)warfare Andrei Costin hack.lu syscan eusecwest t2 sec-t

EuSecWest 2010 - ‘Hacking printers for fun and profit’

UPDATE 20120110: here is the second part of this research “Hacking MFPs - PostScript:um, you’ve been hacked”

Most probably you have come to the right place if you were looking for:
- “Hacking printers for fun and profit” paper from EuSecWest 2010
- Andrei Constin or Andrei Constantin presentation from EuSecWest 2010

Actually, by a mis-fortunate spelling mistake on the initial publication of the speakers list for EuSecWest 2010, which (given the copy-paste and propagation effect of the blogs and mailing-lists) transformed my correct name Andrei Costin to become Andrei Constin which then by Google’s “wisdom” became Andrei Constantin.

Download here: EuSecWest 2010 “Hacking Printers for fun and profit” Andrei Costin

Download here: Remote-initiated PPE (printer payload exploit) using Java applets.

ESW10 Feedback

Seems some people really liked the talk, paper and the ideas, while others took their most hilarious laughs ever (not sure if it was because of my talk or because of Amsterdam treats =)) ).

Tweetfeeds of the conference can be found here and here.

All in all, the event was very nice. Special thanks to Dragos and all the crew for organizing a great event.

After hearing about hackers on the plane and hackers on the train, we were doing hackers on the boat on Amsterdam’s canals. Also, it was nice to see that a cool crowd from ESW10 DoS-ed the tram literally on their way to the boats .
PS: we almost got owned by the boat captain like a group of kindergarten kids =))… shhhhh and quiet, otherwise get kicked in the ass

And yeah, props to Dragos for the pelican case full of beer and to the guys caring the heavy devil of ice and beer .