Infosec

Malware Analysis: Aint Nobody Not Got Time for That

jonnyX — Wed, 29 Oct 2014 05:09:29 +0000

There's no shortage of malware to poke at, especially if you work on a blue team. Whether you're in a fast-paced SOC environment or looking for a weekend project, an assembly fan or code-phobic, there's something that you can learn from malware samples using what you've got. The talk will make some suggestions about ways to best spend your time in malware analysis (as well as why you should bother). It'll be a mix of content that should be widely accessible and content geared towards people comfortable with looking at a disassembly.

x86 Assembly - It's Really Not Actually That Bad

jonnyX — Wed, 29 Oct 2014 05:00:43 +0000

Knowledge of assembly language is an awesome tool. It can help foster a better understanding of how computers work at a lower level and allow you to unlock the secrets of compiled code. It can also look kind of scary which discourages people from diving in, but the truth is that it really isn't. The presentation aims to explain what assembly language is, why it's worth learning, and, to an extent, how it works via the discussion of CPU architecture.

The Hacker Next Door: Confessions of a Black Hat

jonnyX — Wed, 29 Oct 2014 04:48:18 +0000

An in-depth look at how the black hat community operates. From goals to methodologies, Alex will pull back the curtains on some of the world’s most dangerous cyber-attacks and attackers so you can better understand the threats you face.

Included in this session:

The 4 universal steps of a cyber-attack
What happens from the attacker’s point of view
What happens after an attack

Don’t miss this unique insight into how black hat hackers operate, and how you can protect your network.

Tech Hobby to Tech Paycheck

jonnyX — Wed, 29 Oct 2014 04:32:04 +0000

Get solid advice on how to create and expand your resume, how to get your resume noticed, how to work with and find recruiters (and get them to find you!), how to choose and use job boards, how to list skills such as game jams, hackathons, and other hobby work, and tips on the best way to make progress towards finding your dream job.

If you have a resume, bring it along to get one-on-one advice on how it looks, and suggestions on ways it might be improved, or where and how to post it to get the most attention.

Comrades, Contribute to Free and Open Source Software!

jonnyX — Sun, 12 Oct 2014 00:25:05 +0000

Anecdotally, it seems that many supporters of free and open source principles have never had the opportunity to get involved in a FOSS project. This is understandable, since getting involved with a project can be no small feat without appropriate mentorship and/or introduction. In this talk we will break down the process of setting up contribution environments for both the Linux kernel and the Firefox web browser. Most importantly, this is not just for software engineers, as non-developers make invaluable contributions in many areas; from submitting bug reports to graphic design.

How the Second Amendment Works

jonnyX — Sat, 11 Oct 2014 21:34:08 +0000

In a move that is bound to piss off everybody in the entire community, Decius is going to present his thoughts on the history and interpretation of the Second Amendment to the United States Constitution.

Heartburn from the Heartbleed Vulnerability

jonnyX — Tue, 23 Sep 2014 18:25:00 +0000

What is the Heartbleed vulnerability really about, how do you defend yourself, and how many of your favorite web sites are still vulnerable?

The heartbleed bug was caused by a coding error in the OpenSSL crypto library used by 17% of all the sites on the Internet using HTTPS.

In the aftermath of the bug we have discovered some serious weaknesses in many of the systems that make the Internet possible.

Is public key infrastructure up to the task of protecting our most sensitive data?

Has Linus's Law been refuted? Can we trust open source software?

NarkNet: Passive Wi-Fi Surveillance

jonnyX — Tue, 23 Sep 2014 18:23:02 +0000

Do you use open Wi-Fi? Did you know that it is possible to passively intercept your traffic? See a live demo and learn how to protect yourself.

NarkNet uses free off-the-shelf technology that comes natively with many operating systems to passively intercept wireless networking traffic.

The WiFi network adapter in your computer is a radio. The radio can be manually tuned to the radio frequency used by a WiFi access point (AP).

Wikipedia: Tips on Communicating with the Hive Mind

jonnyX — Tue, 23 Sep 2014 15:27:05 +0000

Bring your computers and/or questions to this workshop, where Elonka, a Wikipedia administrator since 2007, will explain the best ways to create, expand, or modify Wikipedia articles, and teach you some of the tricks and syntax techniques that go on behind the scenes.

From Elonka: "No limit on size (attendance), everyone should have a computer and wi-fi. Recommend they already have an account setup, and perhaps the names of a couple articles they'd like to edit/create/investigate."

Famous Unsolved Codes

jonnyX — Tue, 23 Sep 2014 15:24:53 +0000

Elonka goes over some of the world's most famous unsolved codes, including the CIA's Kryptos sculpture, the centuries-old Voynich Manuscript, and inspiration for "National Treasure," the "Beale Papers".