ADS-B research was worth it!

ICAO to create Cyber Security Task Force (CSTF) - Our research is mentioned as key points!

Download/view here

Thanks to Aimee Turner for notifying us.

Errata: In the above PDF, it is wrongly mentioned “Dr. Andrei Costin” - wish I . It’s still a long way, until than it should read “PhD candidate”

Hybrid++ car concept - fuel, electric and bicycles/dynamos

During a coffee break, this idea came to my mind. Thought to post rather than throw it to brain-garbage.

Here is the concept of a hybrid car concept - fuel, electric and bicycles/dynamos - all in the name of so pushed greener and healthier tomorrow…

Idea is simple - why not having “pluginable” seats for electric cars, where bicycles/dynamo machines can be used with a two-fold purpose - get yourself fit (while husband/wife drives you to work) and at the same time charge your car so that you burn your green electricity later when needed?

Read more! »

Finally got some time to put all the papers in one place.

Papers’ content overlap, but each one has something specific to the given conference, so feel free to explore.

Here is my papers archive.

Feel free to:

• point out errors (and yes, we accept constructive criticism )
• suggest corrections
• suggest improvements

More to come, stay tuned…

Cheers,
zveriu

Tags: Hacking Printers MFPs for fun profit and (anti)warfare Andrei Costin hack.lu syscan eusecwest t2 sec-t

EuSecWest 2010 - ‘Hacking printers for fun and profit’

UPDATE 20120110: here is the second part of this research “Hacking MFPs - PostScript:um, you’ve been hacked”

Most probably you have come to the right place if you were looking for:
- “Hacking printers for fun and profit” paper from EuSecWest 2010
- Andrei Constin or Andrei Constantin presentation from EuSecWest 2010

Actually, by a mis-fortunate spelling mistake on the initial publication of the speakers list for EuSecWest 2010, which (given the copy-paste and propagation effect of the blogs and mailing-lists) transformed my correct name Andrei Costin to become Andrei Constin which then by Google’s “wisdom” became Andrei Constantin.

Download here: EuSecWest 2010 “Hacking Printers for fun and profit” Andrei Costin

Download here: Remote-initiated PPE (printer payload exploit) using Java applets.

ESW10 Feedback

Seems some people really liked the talk, paper and the ideas, while others took their most hilarious laughs ever (not sure if it was because of my talk or because of Amsterdam treats =)) ).

Tweetfeeds of the conference can be found here and here.

All in all, the event was very nice. Special thanks to Dragos and all the crew for organizing a great event.

After hearing about hackers on the plane and hackers on the train, we were doing hackers on the boat on Amsterdam’s canals. Also, it was nice to see that a cool crowd from ESW10 DoS-ed the tram literally on their way to the boats .
PS: we almost got owned by the boat captain like a group of kindergarten kids =))… shhhhh and quiet, otherwise get kicked in the ass

And yeah, props to Dragos for the pelican case full of beer and to the guys caring the heavy devil of ice and beer .

EUSecWest 2010 is near

I invite you to take a look at EUSecWest 2010 agenda and register. Perhaps we could meet there, who knows…