http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2014-08-31 00:26:17 - Black Hat Announcements : One of the best-received talks at Black Hat DC 2009 so far, Moxie Marlinspike's frankly disconcerting presentation regarding practical ways to beat the SSL underpinnings of Secure web commerce will definitely spark a lot of conversation You can see the presentation yourself online now http://www.secuobs.com/revue/news/532328.shtmlhttp://www.secuobs.com/revue/news/532328.shtml Secuobs.com : 2010-03-10 18:50:58 - Black Hat Announcements - This intense four day hands on course is taught by the creators of Backtrack The course has sold out by June with double digit waitlist every year that we have offered the course This will be our third year and it is 25pourcents full in the first week of registration If you are interested in taking the course, register by April 1 to get the best pricing And a guaranteed seat http://www.secuobs.com/revue/news/200316.shtmlhttp://www.secuobs.com/revue/news/200316.shtml Secuobs.com : 2010-03-09 22:52:20 - Black Hat Announcements - By the end of this course, you will be able to research and develop an exploit from scratch by auditing code or fuzzing an application, reverse engineering the issue, and developing a exploit for the vulnerability you discovered This knowledge will help developers produce better code, and will help security researchers or malware analysts in their daily tasks http://www.secuobs.com/revue/news/199936.shtmlhttp://www.secuobs.com/revue/news/199936.shtml Secuobs.com : 2010-03-09 19:10:22 - Black Hat Announcements - Learn to be become a skilled and knowledgeable IPS tester http://www.secuobs.com/revue/news/199841.shtmlhttp://www.secuobs.com/revue/news/199841.shtml Secuobs.com : 2010-03-05 00:44:37 - Black Hat Announcements - To register for this month's webcast visit http wwwblackhatcom html webcast webcast-2010_auditassesshtml http://www.secuobs.com/revue/news/198190.shtmlhttp://www.secuobs.com/revue/news/198190.shtml Secuobs.com : 2010-03-03 22:06:58 - Black Hat Announcements - The Super Early Bird Rate closes on April 1 http://www.secuobs.com/revue/news/197728.shtmlhttp://www.secuobs.com/revue/news/197728.shtml Secuobs.com : 2010-02-16 20:27:19 - Black Hat Announcements - We have just completed our first round of selections for Europe to be posted by the end of the week If you are interested in presenting in Barcelona, best to get those submissions in http://www.secuobs.com/revue/news/192408.shtmlhttp://www.secuobs.com/revue/news/192408.shtml Secuobs.com : 2010-02-11 23:18:32 - Black Hat Announcements - Sign up for the Feb 18th Webcast, receive EUR 150 off Black Hat Europe 2010 Briefings Registration http://www.secuobs.com/revue/news/191117.shtmlhttp://www.secuobs.com/revue/news/191117.shtml Secuobs.com : 2010-02-09 22:55:42 - Black Hat Announcements - Chris Tarnovsky's DC 2010 presentation has been written up by the Associated Press http://www.secuobs.com/revue/news/190212.shtmlhttp://www.secuobs.com/revue/news/190212.shtml Secuobs.com : 2010-01-21 17:08:21 - Black Hat Announcements - We would like to announce that Gregory Schaffer, US Department of Homeland Security DHS Secretary Janet Napolitano appointed Greg Schaffer as Assistant Secretary for Cybersecurity and Communications http://www.secuobs.com/revue/news/184058.shtmlhttp://www.secuobs.com/revue/news/184058.shtml Secuobs.com : 2010-01-20 18:56:01 - Black Hat Announcements - Registration for Black Hat Europe 2010 Briefings Training is now open The Super Early rate closes on February 1 http://www.secuobs.com/revue/news/183725.shtmlhttp://www.secuobs.com/revue/news/183725.shtml Secuobs.com : 2009-12-15 01:45:52 - Black Hat Announcements - Save 200 by registering by December 15 http://www.secuobs.com/revue/news/171907.shtmlhttp://www.secuobs.com/revue/news/171907.shtml Secuobs.com : 2009-12-09 00:29:03 - Black Hat Announcements - Black Hat DC 2010 will be held at the Hyatt Regency Crystal City The Group Rate closes on January 7 Last year we sold out Reserve early and have the convenience of staying at the venue hotel http://www.secuobs.com/revue/news/169910.shtmlhttp://www.secuobs.com/revue/news/169910.shtml Secuobs.com : 2009-12-09 00:29:03 - Black Hat Announcements - Black Hat and Dark Reading are hosting their first-ever joint virtual event, exploring the security landscape for the next ten years and how you can prepare for what lies ahead - today In addition, Black Hat will host its annual DC event and as a special offer, if you register for the free upcoming virtual event on Dec 9th you will receive a 250 discount to Briefings Visit the promo page to learn more http://www.secuobs.com/revue/news/169909.shtmlhttp://www.secuobs.com/revue/news/169909.shtml Secuobs.com : 2009-12-03 22:26:34 - Black Hat Announcements - InformationWeek s Dark Reading and Black Hat come together for their first-ever joint security virtual event, exploring the security landscape for the next ten years and how you can prepare for what lies ahead - today http://www.secuobs.com/revue/news/168372.shtmlhttp://www.secuobs.com/revue/news/168372.shtml Secuobs.com : 2009-12-02 22:46:07 - Black Hat Announcements - Registration for Black Hat Europe 2010 Briefings is now open http://www.secuobs.com/revue/news/167955.shtmlhttp://www.secuobs.com/revue/news/167955.shtml Secuobs.com : 2009-11-14 00:26:37 - Black Hat Announcements - First round of Black Hat DC 2010 speakers have been selected We have a second round that should be coming through in the next week or so which leaves very few slots less than 10 left If you have great research and want a chance to present, please complete the Call for Papers application ASAP since that closes on December 1 although it may close earlier if we fill the remaining slots before then http://www.secuobs.com/revue/news/160750.shtmlhttp://www.secuobs.com/revue/news/160750.shtml Secuobs.com : 2009-10-27 00:21:52 - Black Hat Announcements - Take advantage of Early Bird Registration pricing, saving 900 off the cost of onsite registration rates http://www.secuobs.com/revue/news/154275.shtmlhttp://www.secuobs.com/revue/news/154275.shtml Secuobs.com : 2009-10-19 23:24:18 - Black Hat Announcements - Thursday, Oct 29th Time 1 00 pm PT 4 00 pm ET Register at http bitly XXiuG Physical memory is definitely a goldmine of information and its analysis is part of several practices including troubleshooting, incident response, forensics investigation, etc This webcast aims at explaining one major point and step Why using Microsoft Crash Dump file format is way more efficient than a common raw dump under a Windows machine for forensics analysis http://www.secuobs.com/revue/news/151970.shtmlhttp://www.secuobs.com/revue/news/151970.shtml Secuobs.com : 2009-09-18 23:42:25 - Black Hat Announcements - The September webcast will focus on Privacy Anonymity featuring Matt Wood's work on Veiled a browser-based darknet project Veiled is a proof of concept that allows anyone to join from any platform which has a web browser whether a PC or an iPhone This presentation will discuss and demonstrate the Veiled darknet and look at the technical implementation and challenges of such features, we also explore some interesting properties of browser-based darknets Wednesday, September 30, 2009, 1 00 pm Pacific 4 00 pm Eastern http://www.secuobs.com/revue/news/142374.shtmlhttp://www.secuobs.com/revue/news/142374.shtml Secuobs.com : 2009-09-02 23:13:42 - Black Hat Announcements - The Call for Papers for DC 2010 is now open Deadline for submissions is December 1 http://www.secuobs.com/revue/news/137136.shtmlhttp://www.secuobs.com/revue/news/137136.shtml Secuobs.com : 2009-08-19 22:54:26 - Black Hat Announcements - The August Webcast has been rescheduled to Thursday, August 27th at 1300 PST 16 00 EST and will be a wrap-up of Black Hat USA 2009 with some of the hot talks from the live event Several of the speakers will discuss their work presented in Las Vegas and give you an opportunity to ask questions about their research http://www.secuobs.com/revue/news/132507.shtmlhttp://www.secuobs.com/revue/news/132507.shtml Secuobs.com : 2009-07-29 22:06:31 - Black Hat Announcements - Speaker materials - slides, whitepapers and tools are now available for download Content will be updated as we will posted as we receive them http://www.secuobs.com/revue/news/126287.shtmlhttp://www.secuobs.com/revue/news/126287.shtml Secuobs.com : 2009-07-11 19:20:08 - Black Hat Announcements - Black Hat Webcast 7 on OS X Security with Jesse D'Aguanno and Tiller Beauchamp is online and available for download now You can also watch the Web Sync version that shows the slides along with the audio Let us know what you think about the webcasts and suggest new topics we're always looking for good suggestions http://www.secuobs.com/revue/news/119262.shtmlhttp://www.secuobs.com/revue/news/119262.shtml Secuobs.com : 2009-06-30 00:36:48 - Black Hat Announcements - Travis Goodspeed promises a live demo and new vulnerability release forhis presentation at USA 2009http://www.secuobs.com/revue/news/115039.shtmlhttp://www.secuobs.com/revue/news/115039.shtml Secuobs.com : 2009-06-29 11:36:38 - Black Hat Announcements - Robert F Lentz, Deputy Assistant Secretary of Defense for Cyber,Identity and Information Assurance CIetIA in the Office of theAssistant Secretary of Defense, Networks and InformationIntegration/Chief Information Officer, will be the Day 2 Keynote atthe USA 2009 BriefingsMr Lentz, as a Deputy Assistant Secretary of Defense in both the Bushand Obama administrations and the first Senior Information AssuranceOfficial for the Department of Defense serving since Nov 2000 willprovide his perspective and lessons learned over several decadesworking in the cyber security field Mr Lentz will outline his futurevision and goals and those critical policy, technical and operationalchallenges facing us in this race to leverage the power of theinternethttp://www.secuobs.com/revue/news/114766.shtmlhttp://www.secuobs.com/revue/news/114766.shtml Secuobs.com : 2009-06-22 20:27:53 - Black Hat Announcements - From SC Magazine - Friday, 19 June 2009Black Hat topics include hacking parking meters, social networksOn the agenda this year at the 2009 Black Hat conference are topicsranging from the psychology of social networking to hacking parkingmetersEager attendees got a taste of what's to come at the conference, to beheld July 25 to 30 in Las Vegas, during a webcast Thursday in whichselected speakers gave a preview of their talksRead the complete articlehttp://www.secuobs.com/revue/news/112346.shtmlhttp://www.secuobs.com/revue/news/112346.shtml Secuobs.com : 2009-06-11 21:26:30 - Black Hat Announcements - The Black Hat USA 2009 discounted group rate at Caesars Palace has beenextended until July 3 Have the convenience of staying at the venuehotel, just an elevator ride away from the show floor Reserve nowhttp://www.secuobs.com/revue/news/108681.shtmlhttp://www.secuobs.com/revue/news/108681.shtml Secuobs.com : 2009-06-09 07:50:23 - Black Hat Announcements - The complete press release is available for review from the Black Hatwebsitehttp://www.secuobs.com/revue/news/107281.shtmlhttp://www.secuobs.com/revue/news/107281.shtml Secuobs.com : 2009-06-08 09:18:49 - Black Hat Announcements - USA 2009 Briefings schedule is now onlinehttp://www.secuobs.com/revue/news/106862.shtmlhttp://www.secuobs.com/revue/news/106862.shtml Secuobs.com : 2009-06-05 23:02:52 - Black Hat Announcements - The audio for the May 21 Webcast on Mobility et Security is nowavailablehttp://www.secuobs.com/revue/news/106401.shtmlhttp://www.secuobs.com/revue/news/106401.shtml Secuobs.com : 2009-05-23 12:12:03 - Black Hat Announcements - This year Black Hat is offering for the first time, a Hacking byNumbers Cadet Online Edition hosted by SensePost This is a self-pacedintroductory course for technical people with no previous experiencein the world of hacking To learn more courses offered by all ourtraining partners at Black Hat USA visit us athttps://wwwblackhatcom/http://www.secuobs.com/revue/news/100962.shtmlhttp://www.secuobs.com/revue/news/100962.shtml Secuobs.com : 2009-05-08 21:00:57 - Black Hat Announcements - We've selected the first round of Briefings Speakers for Black Hat USA2009 This year we'll be announcing them as selections are made, soit's a good idea to check back periodically The list will grow untilJune 15, when we expect to have the final list compiledhttp://www.secuobs.com/revue/news/93786.shtmlhttp://www.secuobs.com/revue/news/93786.shtml Secuobs.com : 2009-04-30 21:57:44 - Black Hat Announcements - Good news for anyone struggling to get a submission into the Black HatCFP system before the door closes -we've extended the deadline fromMay 1 to Tuesday May 5 If you've got the goods for a great Black Hatpresentation, make sure to let us know before then We're lookingforward to your submissionsFor all the rules and regulations, you can visit our CFP FAQ sectionhttp://www.secuobs.com/revue/news/90660.shtmlhttp://www.secuobs.com/revue/news/90660.shtml Secuobs.com : 2009-04-28 23:06:40 - Black Hat Announcements - If you're thinking about submitting to the Black Hat USA 2009 Call forPapers, please bear in mind that the CFP closes on May 1 - only a fewdays away If you have something great to share with the broadersecurity community, get your idea in to us at the Black Hat CFP siteright away For all the rules and regulations, you can visit our CFPFAQ sectionhttp://www.secuobs.com/revue/news/89392.shtmlhttp://www.secuobs.com/revue/news/89392.shtml Secuobs.com : 2009-04-28 23:06:40 - Black Hat Announcements - All paid registrants for Black Hat events get the opportunity toreview and rate the submissions from the Black Hat CFP It's a greatway to take the pulse of the security research community and to helpcreate the kind of Black Hat you want to attend To learn more aboutour process, you can check out the Black Hat USA 2009 Call For PapersCrowdsourcing FAQ We hope you'll take a little time and help us out -your feedback is very important to ushttp://www.secuobs.com/revue/news/89391.shtmlhttp://www.secuobs.com/revue/news/89391.shtml Secuobs.com : 2009-04-20 23:26:22 - Black Hat Announcements - Our next webcast will be a round table examining the present andfuture of security as it relates to the booming world of mobilecomputing devices, from traditional laptops and smartphones to theexploding world of netbooks We'll have participation from bothresearchers and vendors and we're expecting a lively and valuableconversation The new format is designed to be more interactive, soplease join us and bring your best questions You can register forthis May 21 Webcast online nowhttp://www.secuobs.com/revue/news/85793.shtmlhttp://www.secuobs.com/revue/news/85793.shtml Secuobs.com : 2009-04-20 23:26:22 - Black Hat Announcements - Charlie Miller and Vincenzo Iozzo's presentation on Mac and iPhonepayloads was one of the most remarked-upon presentations at lastweek's Black Hat Europe event, and now it's available online foranyone who missed ithttp://www.secuobs.com/revue/news/85792.shtmlhttp://www.secuobs.com/revue/news/85792.shtml Secuobs.com : 2009-04-11 01:18:07 - Black Hat Announcements - We're pleased to announce the addition of Lord Erroll as Keynotespeaker for Black Hat Europe 2009 Lord Erroll, 60, is a cross-benchmember of the British House of Lords and takes pride in “votingagainst stupid Government ideas whoever is in power”The topic of his keynote presentation will be “Privacy ProtectingPeople or People Protecting Privacy”You can read his full biography on our Black Hat Europe 09 speakerpageThis addition has changed the Briefings schedule a bit, so if you'reattending please take a look at our Briefings schedule page for thelatest updateshttp://www.secuobs.com/revue/news/82103.shtmlhttp://www.secuobs.com/revue/news/82103.shtml Secuobs.com : 2009-04-04 00:40:48 - Black Hat Announcements - We're trying something new to get people following our Twitter feed -we'll be giving away a Black Hat Track Jacket to a randomly selectedTwitter follower on Monday If you're not already following us, joinus at https://twittercom/blackhateventsWe'll announce the winner on Twitter Monday at 3pm PDT If you've gotfriends you think would like a Black Hat Track Jacket, spread thewordhttp://www.secuobs.com/revue/news/79311.shtmlhttp://www.secuobs.com/revue/news/79311.shtml Secuobs.com : 2009-03-25 03:15:45 - Black Hat Announcements - We've posted the audio to this month's Black Hat Webcast previewingsome of the exciting presentations from Black Hat Europe 2009You can download the audio or you can watch the WebSync versionhttp://www.secuobs.com/revue/news/74806.shtmlhttp://www.secuobs.com/revue/news/74806.shtml Secuobs.com : 2009-03-11 02:33:02 - Black Hat Announcements - We've posted the audio to last month's Black Hat webcast on RichInternet Application Security with Billy Hoffman from HP, Alex Stamosfrom iSec and Peleus Uhley from AdobeYou can download the audio or you can watch the WebSync versionhttp://www.secuobs.com/revue/news/69896.shtmlhttp://www.secuobs.com/revue/news/69896.shtml Secuobs.com : 2009-03-10 20:11:18 - Black Hat Announcements - Dan Kaminsky has been all over the news since his disclosure of amajor DNS flaw at Black Hat USA 2008 At Black Hat DC, he talked aboutthe state of DNS today and gave a strong endorsement to DNSSEC Thisis part two of a two-part interviewYou can download the video now or you can watch it on YouTubehttp://www.secuobs.com/revue/news/69760.shtmlhttp://www.secuobs.com/revue/news/69760.shtml Secuobs.com : 2009-03-09 21:01:21 - Black Hat Announcements - Black Hat Europe is right around the corner - we'll be returning toAmsterdam April 14-17 We're very excited about the lineup of speakerswe've put together, and this webcast will be a sort of sneak previewof what kind of presentations attendees will get to see at the liveeventPlease join Black Hat Founder Jeff Moss for what we are sure will bean eye-opening look under the hood of Black Hat Europe 2009 You canregister for the Black Hat webcast for free hereSpeakers confirmed thus far:Enno Rey and Daniel MendeAll Your Packets Are Belong to Us - Attacking Backbone TechnologiesCharlie Miller and Vincenzo IozzoFun and Games Using In-Memory Execution on Mac OS X and iPhoneStefano ZaneroMasibty: a Web Application Firewall Based on Anomaly DetectionRoberto Gassira' and Roberto PiccirilloHijacking Mobile Data Connectionshttp://www.secuobs.com/revue/news/68783.shtmlhttp://www.secuobs.com/revue/news/68783.shtml Secuobs.com : 2009-03-06 21:57:21 - Black Hat Announcements - We now have the full Briefings Schedule for Black Hat Europe 2009 onlinenow Please take a lookhttp://www.secuobs.com/revue/news/68202.shtmlhttp://www.secuobs.com/revue/news/68202.shtml Secuobs.com : 2009-02-27 06:54:06 - Black Hat Announcements - Dan Kaminsky has been all over the news since his disclosure of amajor DNS flaw at Black Hat USA 2008 At Black Hat DC, he talked aboutthe state of DNS today and gave a strong endorsement to DNSSEC Thisis part one of a two-part interviewYou can download the video now or you can watch it on YouTubehttp://www.secuobs.com/revue/news/65831.shtmlhttp://www.secuobs.com/revue/news/65831.shtml Secuobs.com : 2009-02-24 06:31:50 - Black Hat Announcements - Duc Nguyen gave a very impressive presentation on the weaknesses of thecurrent facial recognition option in some very popular laptops,defeating the protection in a live demo Black Hat founder Jeff Mossinterviewed him about the discovery and his the future of thattechnology and his firm's researchYou can download the video right away or in the next few hours you canwatch it on YouTubehttp://www.secuobs.com/revue/news/64587.shtmlhttp://www.secuobs.com/revue/news/64587.shtml Secuobs.com : 2009-02-24 03:13:46 - Black Hat Announcements - For those who weren't able to attend the event live, the videos of everysession at Black Hat DC 2009 are available in several formats onSource of Knowledge's websitehttp://www.secuobs.com/revue/news/64524.shtmlhttp://www.secuobs.com/revue/news/64524.shtml Secuobs.com : 2009-02-23 21:59:55 - Black Hat Announcements - These new and innovative techniques were analyzed and ranked based upontheir novelty, impact, and pervasiveness To find out more about whothe panel of judges Rich Mogull, Chris Hoff, H D Moore, and JeffForristal selected, you can check out Jeremiah Grossman's Bloghttp://www.secuobs.com/revue/news/64419.shtmlhttp://www.secuobs.com/revue/news/64419.shtml Secuobs.com : 2009-02-20 02:16:50 - Black Hat Announcements - The Invisible Things Lab team returned to Black Hat with brand newresearch on weaknesses in current TXT implementations and how they canbe practically exploited The video is online nowhttp://www.secuobs.com/revue/news/63392.shtmlhttp://www.secuobs.com/revue/news/63392.shtml Secuobs.com : 2009-02-20 02:16:50 - Black Hat Announcements - The keynote for Black Hat DC 2009 is available online nowhttp://www.secuobs.com/revue/news/63391.shtmlhttp://www.secuobs.com/revue/news/63391.shtml Secuobs.com : 2009-02-20 02:16:50 - Black Hat Announcements - Black Hat DC 2009 is drawing to a close, and we had a wealth of excellenttalks For those that couldn't be here with us, we've assembled apartial list of Black Hat DC 2009 press coverage to give you theflavor of the event The page will grow as more stories roll in, sofeel free to check backhttp://www.secuobs.com/revue/news/63390.shtmlhttp://www.secuobs.com/revue/news/63390.shtml Secuobs.com : 2009-02-19 19:23:25 - Black Hat Announcements - One of the best-received talks at Black Hat DC 2009 so far, MoxieMarlinspike's frankly disconcerting presentation regarding practicalways to beat the SSL underpinnings of "Secure" web commerce willdefinitely spark a lot of conversation You can see the presentationyourself online nowhttp://www.secuobs.com/revue/news/63278.shtmlhttp://www.secuobs.com/revue/news/63278.shtml Secuobs.com : 2009-02-19 06:43:24 - Black Hat Announcements - Black Hat founder Jeff Moss interviews Moxie Marlinspike, who showed hisnew tool SSLStrip and a host of new ways to beat the SSL protectionthat web commerce relies on this morning at Black Hat You candownload the video or watch it on YouTube http://www.secuobs.com/revue/news/63105.shtmlhttp://www.secuobs.com/revue/news/63105.shtml Secuobs.com : 2009-02-18 19:39:15 - Black Hat Announcements - You can see the powerpoints and whitepapers for DC 2009 online nowhttp://www.secuobs.com/revue/news/62911.shtmlhttp://www.secuobs.com/revue/news/62911.shtml Secuobs.com : 2009-02-16 19:41:29 - Black Hat Announcements - Peleus Uhley is a senior security researcher within the Secure SoftwareEngineering team at Adobe, and he's joining our February 26th Webcaston the topic of Rich Internet Applications If you have RIA securityquestions related to AIR and Flash, this will be a great place to getthem answered He'll be joining Billy Hoffman of HP and ALex Stamos ofiSec for what promises to be a very interesting conversation You canregister for the webcast online nowhttp://www.secuobs.com/revue/news/62211.shtmlhttp://www.secuobs.com/revue/news/62211.shtml Secuobs.com : 2009-02-07 04:45:37 - Black Hat Announcements - Now that the Black Hat Europe CFP is closed, we have begun the speakerselection process You can find the first group of accepted BH Europe09 speakers online now Please keep an eye on that page, as we'll havesome more speakers to announce very soonhttp://www.secuobs.com/revue/news/59489.shtmlhttp://www.secuobs.com/revue/news/59489.shtml Secuobs.com : 2009-02-04 02:29:12 - Black Hat Announcements - The Black Hat USA 2009 Call for Papers is now open We've also posted thetrack listing for USA 2009 to help guide your submissions If you havean infosec presentation the world needs to see, this is theopportunity to get it seen - please remember to submit early becausethe CFP will close once we have all the slots filledhttp://www.secuobs.com/revue/news/58052.shtmlhttp://www.secuobs.com/revue/news/58052.shtml Secuobs.com : 2009-02-03 04:49:03 - Black Hat Announcements - Rich Internet Application RIA frameworks are seeing an enormous growthin popularity - technologies like Ajax and Flash create nearlyunlimited opportunities to expand and improve the web user experienceThey also bring with them a host of new security risks The popularityof these frameworks among application developers insures that we'llsee more attacks and issues in the months and years aheadJoin Black Hat Founder and Director Jeff Moss and his guests BillyHoffman of HP and Alex Stamos of iSec for a lively discussion of newissues and security implications in the world of Rich InternetApplications You can register for the webcast online nowhttp://www.secuobs.com/revue/news/57698.shtmlhttp://www.secuobs.com/revue/news/57698.shtml Secuobs.com : 2009-02-03 01:32:05 - Black Hat Announcements - Black Hat USA will be returning to Caesars Palace in Las Vegas again thissummer The training sessions will be July 25-28 and the Briefingswill be July 29-30 The super early bird registration rate of $1295 USis available now, and it's a savings of $100 US off the early birdrate that begins March 16http://www.secuobs.com/revue/news/57631.shtmlhttp://www.secuobs.com/revue/news/57631.shtml Secuobs.com : 2009-01-28 22:49:27 - Black Hat Announcements - We're very excited about DC Keynote speaker Paul B Kurtz's selectedtopic He will be speaking on the topic of "The Move from StrategicIndecision to Leadership in Cyberspace" Kurtz is a veteran of theNSC, the Home land Security Council, and the Cyber Security IndustryAlliance, among others, and his presentation comes at a time when theincoming American administration has declared the cyber infrastructurea strategic asset and wants to give cybersecurity a Cabinet-levelprofile Mr Kurtz's full bio is on our DC 09 speakers pagehttp://www.secuobs.com/revue/news/56100.shtmlhttp://www.secuobs.com/revue/news/56100.shtml Secuobs.com : 2009-01-27 21:20:32 - Black Hat Announcements - From Jeremiah Grossman's Blog"It's time once again to create the TopTen Web Hacking Techniques of the past year Every year Web securityproduces a plethora of new and extremely clever hacking techniquesloosely defined, not specific incidents This year is special, because the researcher who places #1 will notonly receive praise amongst his peers, but also receive one free passto attend the BlackHat USA Briefings 2009 Over $1,000 US valueGenerously sponsored by Black Hat Winners will be chosen by a panelof judges Rich Mogull, Chris Hoff, HD Moore, Jeff Forristal on thebasis of novelty, impact, and pervasiveness"There are already over 40 candidates, so to enter a candidate or justcheck out the current field, you can visit Jeremiah's blog posthttp://www.secuobs.com/revue/news/55665.shtmlhttp://www.secuobs.com/revue/news/55665.shtml Secuobs.com : 2009-01-26 23:46:01 - Black Hat Announcements - The Hyatt Regency Crystal City - home to Black Hat DC 2009 - has added aweek to our group rate This means you have an additional seven daysto save on rooms at the hotelThe simplest and most convenient way to reserve your room is toregister onlineYou may also call the hotel directly:+703-418-1234 or1-800-233-1234 and use the Group Code: BLACK HAT, Tech Web or UBMhttp://www.secuobs.com/revue/news/55315.shtmlhttp://www.secuobs.com/revue/news/55315.shtml Secuobs.com : 2009-01-24 03:12:11 - Black Hat Announcements - Black Hat Webcast 7 on OS X Security with Jesse D'Aguanno and TillerBeauchamp is online and available for download now You can also watchthe Web Sync version that shows the slides along with the audio Letus know what you think about the webcasts and suggest new topics -we're always looking for good suggestionshttp://www.secuobs.com/revue/news/54750.shtmlhttp://www.secuobs.com/revue/news/54750.shtml Secuobs.com : 2009-01-22 01:09:16 - Black Hat Announcements - Researcher Vincenzo Iozzo will be revealing a new way to inject hostilecode into OS X machines at next month's Black Hat DC event TheRegister has a very interesting article to get you ready for hispresentationhttp://www.secuobs.com/revue/news/53911.shtmlhttp://www.secuobs.com/revue/news/53911.shtml Secuobs.com : 2009-01-18 05:46:40 - Black Hat Announcements - Black Hat webcast #7 on OS X security was covered in internetnewscomand the author has a pretty good synopsis of the events If you wantto revisit the presentations, you can check out the websync version ofthe webcastor you can watch this space for the audio version that will be up nextweekhttp://www.secuobs.com/revue/news/52561.shtmlhttp://www.secuobs.com/revue/news/52561.shtml Secuobs.com : 2009-01-13 11:28:07 - Black Hat Announcements - Rafal Wojtczuk and Joanna Rutkowska will be presenting the softwarethey've created to compromise Intel's Trusted Exectuion Technologyformerly LaGrande at Black Hat DC 2009 The announcement has madesome big waves already, as evidenced by this piece in InfoWorldhttp://wwwinfoworldcom/article/09/01/06/Researchers_hack_into_Intels_vPro_1htmlYou can read the abstract for their Black Hat presenation herehttp://blackhatcom/html/bh-dc-09/bh-dc-09-speakershtml#Wojtczukhttp://www.secuobs.com/revue/news/50911.shtmlhttp://www.secuobs.com/revue/news/50911.shtml Secuobs.com : 2009-01-10 00:13:39 - Black Hat Announcements - There's an interesting article in Forbes online about the top candidatesfor the incoming administration's "Cyber Czar" Choice quote: "PaulKurtz, currently a security consultant with Arlington, Va-based GoodHarbor Consulting, is the new administration's top choice for thepost, according to several sources within Washington's cybersecuritycommunity" You can read the entire article here:http://wwwforbescom/technology/2008/12/18/cybersecurity-czar-obama-tech-security-cx_ag_1219cyberczarhtmlhttp://www.secuobs.com/revue/news/50302.shtmlhttp://www.secuobs.com/revue/news/50302.shtml Secuobs.com : 2009-01-09 04:22:05 - Black Hat Announcements - We have our speaker lineup for the Briefings almost entirely hammeredout, just about a week ahead of schedule and we’re very pleased withthe way it’s shaped up You can take a look here:https://wwwblackhatcom/html/bh-dc-09/bh-dc-09-speakershtmlhttp://www.secuobs.com/revue/news/50010.shtmlhttp://www.secuobs.com/revue/news/50010.shtml Secuobs.com : 2009-01-09 04:22:05 - Black Hat Announcements - Our seventh installment of the Black Hat Webcast Series arrives next weekwith an in-depth and fascinating look into the world of Mac SecurityAs the Mac platform grows in popularity both with the general publicand the enterprise, we’ve seen an increase both in attacks andreasearcher interest in the topic of OS X SecurityBlack Hat Speaker Jesse D’Aguanno will be presenting on the topic of“Crafting OS X Kernel Rootkits – Fundamentals” We’ll also have apresentation by Tiller Beauchamp of IOActive will be talking aboutApplied Reverse Engineering on OS X Please join me and our guests forwhat is sure to be a fascinating conversation Bring your questions -the last 30 minutes or so will be a question-and-answer session Youcan register online here:http://won24com/rhtme=128064ets=1etk=3F843DBF6E877F085F4395413D3FD660For more information about Black Hat's webcast series, including anarchive of our previous webcasts in audio format you can go tohttps://wwwblackhatcom/html/webinars/webinars-indexhtmlDelegate Tip for January: We’ve mentioned it before, but it bearsrepeating If you still have questions after a briefings presentationis over, you can stay a moment and follow the presenter to discussionroom All Black Hat speakers make themselves available forconversation with interested delegates immediately after theirpresentation ends It’s a great time to meet the speakers and get youranswers in a quieter environment that allows for more conversationalexchangeshttp://www.secuobs.com/revue/news/50009.shtmlhttp://www.secuobs.com/revue/news/50009.shtml Secuobs.com : 2008-12-30 20:41:43 - Black Hat Announcements - Today, Alexander Sotirov and Jacob Applebaum presented a proof of conceptshowing an attacker can subvert browser certificate validation andread or alter data sent to secure websites Read more about their MD5collision presentation here on Sotirov's bloghttp://www.secuobs.com/revue/news/47361.shtmlhttp://www.secuobs.com/revue/news/47361.shtml Secuobs.com : 2008-12-23 23:36:04 - Black Hat Announcements - Nathan McFeters, Jon Heasman and Rob Carter gave a very popular andheavily covered presentation this year that introduced the world tothe term "gifar" It's fascinating information, and well presented Wehope that those of you who couldn't make it to the Vegas event willget a taste of the kind of presentations attendees get to see andattendees who weren't able to make it to the Beyond DocumentCookiewill get their chance to see the presentation in fullStandard VideoFull Videomp3 Audiohttp://www.secuobs.com/revue/news/46207.shtmlhttp://www.secuobs.com/revue/news/46207.shtml Secuobs.com : 2008-12-23 23:36:04 - Black Hat Announcements - You can now listen David Litchfield's webcast presentation about his newOracle database forensics tool orablock online here:Bookmarkable audio version:https://mediablackhatcom/webinars/black-hat-6-december-2008-litchfieldm4bWeb Sync Versionhttp://won24com/rhtme=122240ets=1etk=57F93C9128D5D1BBC64B8AE7177FB981http://www.secuobs.com/revue/news/46206.shtmlhttp://www.secuobs.com/revue/news/46206.shtml Secuobs.com : 2008-12-23 22:08:48 - Black Hat Announcements - We usually wait until the CFP is closed before we start posting speakers,but we've accepted some speakers for our DC event early We're prettyexcited about how things are shaping up, so we're publishing thespeakers page a little early There will be a lot of changes to thispage in the next few weeks, so keep checking back with ushttp://wwwblackhatcom/html/bh-dc-09/bh-dc-09-speakershtmlhttp://www.secuobs.com/revue/news/46179.shtmlhttp://www.secuobs.com/revue/news/46179.shtml Secuobs.com : 2008-12-23 04:28:06 - Black Hat Announcements - Looking for another way to connect with Black Hat We're experimentingwith a Facebook Fan Page We'd love to see your check it out, andmaybe share something - photos, ideas, links to interestinginformation Hope to see you therehttp://wwwfacebookcom/pages/Black-Hat-Briefings/107691635153http://www.secuobs.com/revue/news/45998.shtmlhttp://www.secuobs.com/revue/news/45998.shtml Secuobs.com : 2008-12-16 22:45:01 - Black Hat Announcements - Black Hat DC's earlybird registration rate will end January 1, 2009 soconsider registering soon for the best rate You can register onlinehere:https://wwwblackhatcom/html/bh-registration/bh-registration-dc-09htmlor learn more about the event here:http://wwwblackhatcom/html/bh-dc-09/bh-dc-09-mainhtmlhttp://www.secuobs.com/revue/news/44418.shtmlhttp://www.secuobs.com/revue/news/44418.shtml Secuobs.com : 2008-12-10 06:54:17 - Black Hat Announcements - Bookmarkable audio for all talks is now available in the Japan 08archive Lots of good stuff there - please enjoy The archive link ishttps://wwwblackhatcom/html/bh-japan-08/brief-bh-jp-08-archiveshtmlThe Keynote is enclosed with this entry, but there are lots of greatpresentations to check outhttp://www.secuobs.com/revue/news/42431.shtmlhttp://www.secuobs.com/revue/news/42431.shtml Secuobs.com : 2008-11-26 22:42:23 - Black Hat Announcements - Database Security expert David Litchfield will join us to discuss his newpaper "Oracle Forensics Part 7: Using the Oracle System Change Numberin Forensic Examinations" and his new database forensics tool,orablockYou can learn more here:https://wwwblackhatcom/html/webinars/orablockhtmlAnd you can register by following this link:http://won24com/rhtme=122240ets=1etk=57F93C9128D5D1BBC64B8AE7177FB981http://www.secuobs.com/revue/news/38922.shtmlhttp://www.secuobs.com/revue/news/38922.shtml Secuobs.com : 2008-11-24 22:23:50 - Black Hat Announcements - Techworldcom has an interesting article about the IETF and theirdeliberations over the DNS vuln that dan Kaminsky presented at BlackHat USA 2008http://wwwtechworldcom/security/news/indexcfmRSSetNewsID=107430Choice Quote:"The DNS is a really old protocol and it is fundamentalto the Internet We're not talking about patching software We'retalking about patching a protocol We want to make sure that whateverwe do doesn't break the Internet"You can see Dan's presentation here:http://wwwblackhatcom/presentations/bh-usa-08/Kaminsky/08_bhb_od2_slidesm4vhttp://www.secuobs.com/revue/news/38392.shtmlhttp://www.secuobs.com/revue/news/38392.shtml Secuobs.com : 2008-11-24 03:59:28 - Black Hat Announcements - Black Hat speaker Chris Wysopal has some interesting comments onSecurityFocus about clickjacking - the subject of our most recentwebcast You can read his posting at this link:http://wwwsecurityfocuscom/columnists/483Choice quote: “Clickjacking isn’t going to go away any time soonEvery browser or plug-in that can display a flexible user interfacewill need to be made more restrictive”http://www.secuobs.com/revue/news/38195.shtmlhttp://www.secuobs.com/revue/news/38195.shtml Secuobs.com : 2008-11-12 23:19:46 - Black Hat Announcements - If you're interested in submitting for Black Hat DC, please go to:https://wwwblackhatcom/html/bh-dc-09/bh-dc-09-cfphtmlTo learn the rules and get your paper into our system If you'reinterested in Black Hat Europe, the link ishttps://wwwblackhatcom/html/bh-europe-09/bh-eu-09-cfphtmlhttp://www.secuobs.com/revue/news/35622.shtmlhttp://www.secuobs.com/revue/news/35622.shtml Secuobs.com : 2008-10-31 20:29:11 - Black Hat Announcements - Black Hat Webcast #5 will be on the subject of Clickjacking withco-discoverer of the issue Jeremiah Grossman The free event will takeplace on Thursday, November 20 at 1pm PT/ 4pm ET You can registerhere:http://won24com/rhtme=122494ets=1etk=05ED21C1734D531D2D84CA56F4ADB0F2http://www.secuobs.com/revue/news/32846.shtmlhttp://www.secuobs.com/revue/news/32846.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - The Black Hat USA Call For Papers closes May 1, so be sure to get yoursubmissions in on time We are looking forward to a great roster ofpresentations, and we'll begin posting the accepted presentations asthe submitters are notified Please submit online athttps://cfpblackhatcomFor a tentative track listing to help guide submissions please visithttps://blackhatcom/html/bh-usa-08/bh-usa-08-tracklistinghtmlhttp://www.secuobs.com/revue/news/28903.shtmlhttp://www.secuobs.com/revue/news/28903.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - If you want to take advantage of the Early Bird registration rates forBlack Hat USA 2008, be sure to get registered before May 1 You canregister online at https://commerceblackhatcom/bh_usa_2008http://www.secuobs.com/revue/news/28902.shtmlhttp://www.secuobs.com/revue/news/28902.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Black Hat USA 2008 is still months away, but some of the presentationtopics are already beginning to make news Sherri Sparks and ShawnEmbleton are scheduled to demonstrate a new type of rootkit that hidesitself in System Management Mode, currently out of reach of the AVproductsThe presentation is already sparking interest in places likeSlashdot andPC WorldTo read their abstract go to the Black Hat USA 2008 Speakers Pagehttp://www.secuobs.com/revue/news/28901.shtmlhttp://www.secuobs.com/revue/news/28901.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - We've set up a Twitter feed for Black Hat USA 2008 and we hope you'lltake the time to follow us As the show draws closer, we think it willbe a great way to learn about new developments in the event, toschedule off-site meetups with other delegates and to stay connectedwith BH headquarters Clicking the link in this post or on the mainpage at blackhatcom will get you to the signup page It takes only aminute, and will keep you in the loop as we round the corner to BlackHathttp://www.secuobs.com/revue/news/28900.shtmlhttp://www.secuobs.com/revue/news/28900.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - The EC Council will be offering two classes at this year's Black Hat USATraining and both are available for online registration now Theclasses are:ECSA/LPT Certification Preparation - The ECSA course equips one withthe knowledge and know-hows to become an EC-Council LicensedPenetration TesterandCertified Ethical Hacker C|EH Version 6 -This course deals withIntrusion Detection, Policy Creation, Social Engineering, DDoSAttacks, Buffer Overflows and Virus CreationIf certification in either of these areas interests you, please clickon the course name to read furtherhttp://www.secuobs.com/revue/news/28899.shtmlhttp://www.secuobs.com/revue/news/28899.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - The BH USA 2208 speaker selection is finally complete We're very pleasedwith the depth and variety of presentations we'll be able to bring toattendees this year and we hope you'll take a moment to check it outThis is the first event where we've had delegate input in theselection process and we think it's been a huge success You can seethe schedule for yourself athttps://wwwblackhatcom/html/bh-usa-08/bh-usa-08-schedulehtmlhttp://www.secuobs.com/revue/news/28898.shtmlhttp://www.secuobs.com/revue/news/28898.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Black Hat is presenting its very first webcast on June 26, 2008 at 1pmPST/4PM EST It's scheduled for one hour followed by a Q and A periodThe webcast will be presented free of charge and it will focus onpreviewing the BH USA 2008 eventThe event will be introduced and facilitated by BH Founder andDirector Jeff Moss and will feature "teaser talks" - shortenedversions of the full presentations lined up for Vegas - by severalconfirmed speakers who will each provide a brief preview of the topicsthey will be presenting at the Black Hat Briefings et Trainings inAugust Here's a small glimpse into the future:Topic:Malware Detection through Network Flow AnalysisPresenter: Bruce Potter, Founder, Shmoo GroupMr Potter has co-authored several books including "80211 Security"and"Mastering FreeBSD and OpenBSD Security" published by O'Reilly and"Mac OS XSecurity" by New RidersTopic:Nmap - Scanning the InternetPresenter: Fyodor Vaskovich, founding member of the Honeynetprojectandco-author of the books "Know Your Enemy: Honeynets" and "Stealing theNetwork: How to Own a Continent"Topic: Satan is on My Friends List: Attacking Social NetworksPresenters: Shawn Moyer, CISO of Agura Digital Security and NathanHamiel,Senior Consultant for Idea Information Security and founder of theHexagonSecurity GroupTo learn more, please visithttps://wwwblackhatcom/html/webinars/usa2008previewhtmlTo register directly, please visithttp://wwwtechwebonlineeventscom/ars/eventregistrationdomode=eventregetF=1001004etK=1AA1A1We plan for this Webcast to be the first in a year-round series ofonline presentations that allow our speakers to present breakingresearch between shows and provide the Black Hat community withanother stream of fresh, relevant, and usable security knowledge Wehope you'll join us for our first foray into webcasting and let usknow what you thinkhttp://www.secuobs.com/revue/news/28897.shtmlhttp://www.secuobs.com/revue/news/28897.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Every year at DEFCON, Riverside runs the Wall of Sheep - exposing theshame of attendees who log into the conference network as root But inaddition to embarrassment, Riverside's crew offers enlightenment -they're available in person to show you the setup that's sniffing outyour mistakes and to educate you on the fine points of hardening yourbox for the rigors of public computingThis year, Black Hat attendees will have the same learning/shamingopportunities as the Wall makes its way to Black Hat for the firsttime Compute accordinglyHere's a link to an old article in MAKE that lays it out for youhttp://blogmakezinecom/archive/2005/07/_defcon_the_wall_of_sheephtmlhttp://www.secuobs.com/revue/news/28896.shtmlhttp://www.secuobs.com/revue/news/28896.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Jim Stodgill of the O'Reilly Radar Bloghttp://radaroreillycom/archives/2008/06/satan-is-on-my-friends-listhtmlhas checked in with an exceptionally funny piece on the difference theBlack Hat style and the style of other tech conferences We're sureyou'll get a chuckle of recognition out of the piece A choice quote:"Maybe I'm reading too much into this, but for what its worth, I'veattended both Black Hat and O'Reilly conferences and can't recallSatan making a single appearance in an O'Reilly conference program"At Black Hat HQ we loved the piece and we look forward to seeing himat the webcasthttp://www.secuobs.com/revue/news/28895.shtmlhttp://www.secuobs.com/revue/news/28895.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Black Hat presents its first webcast on June 26 at 1pm pacific/ 4pmeastern The subject is "The Forbidden Sneak Peek - Black Hat USA2008" and we'll have some great speakers on hand to give you a lookinto some of the subjects they'll be presenting in August We'replanning to turn this into a regular event, so your participation andfeedback are encouraged It's free of charge - you can sign up athttp://wwwtechwebonlineeventscom/ars/eventregistrationdomode=eventregetF=1001004etK=1AA1A1if you'd like to subscribe to a mailing list that will alert you toupcoming Black Hat Webcast events, send an email tosubscribe-webcasts@blackhatcomhttp://www.secuobs.com/revue/news/28894.shtmlhttp://www.secuobs.com/revue/news/28894.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - All prospective Black Hat attendees should keep in mind that the regularrates in place now will be ending on July 1 To take advantage ofcurrent prices, consider registering soonhttp://www.secuobs.com/revue/news/28893.shtmlhttp://www.secuobs.com/revue/news/28893.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - The headline is pretty sensationalistic, but we're always happy to seethe tech press recognizing the importance of upcoming Black Hat talksIn an online article for ZDNetcomau, Mark's talk is referenced andalthough Mark doesn't say anything nearly as inflammatory as thetitle, we encourage you to check out his talk at BH USA 2008, sinceobliteration of a major OS is bound to make some newshttp://wwwzdnetcomau/news/security/soa/Vista-security-to-be-obliterated-at-Black-Hat/0,130061744,339290040,00htmhttp://www.secuobs.com/revue/news/28892.shtmlhttp://www.secuobs.com/revue/news/28892.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Our first webcast went very well - over 500 of you joined us We're goingto try to do these at least monthly from now on, so if you want toknow when the next Black Hat webcast is happening, you can subscribeto our Webcast Mailing List by sending an email tosubscribe-webcasts@blackhatcomAnother way to keep in touch with us is to join the Black hat Twitterfeed - we'll announce all upcoming events and activities there Tosubscribe, head on over tohttp://wwwtwittercom/blackhatusa2008http://www.secuobs.com/revue/news/28891.shtmlhttp://www.secuobs.com/revue/news/28891.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Our first webcast is now online If you couldn't be there live, this isyour opportunity to preview some of the presentations going on atBlack Hat USA 2008The webcast audio is located athttps://mediablackhatcom/webinars/blackhat-webcast-1-june-08mp3The powerpoint presentation is located athttps://mediablackhatcom/webinars/blackhat-webcast-1-june-08mp3tIf you'd like to be alerted about our next webcast, please sign up toour notification list atsubscribe-webcasts@blackhatcomhttp://www.secuobs.com/revue/news/28890.shtmlhttp://www.secuobs.com/revue/news/28890.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Dan Kaminsky announced today a massive, multi-vendor issue with DNS thatcould allow attackers to compromise any name server - clients, tooKaminsky also announced that he had been working for months with alarge number of major vendors to create and coordinate today's releaseof a patch to deal with the vulnerabilityDan will be elaborating much further on the discovery and the solutionat Black Hat USA 2008 and in our second Black Hat webcast on June 24,2008 at 1pm PT To get on the subscription list for free registrationinformation for Black Hat webcasts please send a mail tosubscribe-webcasts@blackhatcomTo find out if you are vulnerable to this issue, you can use the DNSchecker link on the top of Kaminsky's webpage at :http://wwwdoxparacomTo read the executive summary to the CERT advisory, you can go tohttp://wwwsecurosiscom/publications/DNS-Executive-OverviewpdfTo hear the audio of today's press conference in full, go tohttps://mediablackhatcom/webinars/blackhat-kaminsky-dns-press-conferencemp3To get webcast and other breaking information from Black Hat ontwitter, go tohttp://wwwtwittercom/BlackHatUSA 2008http://www.secuobs.com/revue/news/28889.shtmlhttp://www.secuobs.com/revue/news/28889.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - It's all over the news: Dan Kaminsky found a major, fundamental flaw inDNS that renders practically any name server vulnerable He'll bespeaking in depth on this discovery in August at BH USA, but he'sagreed to discuss it a few weeks early Get your best questions ready- the webcast will be live Thursday, July 24 at 1pm PT/4pm ETJoin Dan Kaminsky, director of penetration testing for IOactive; JerryDixon, former director of the National Cyber Security Division at DHS;and other experts to discuss the largest synchronized security updatein the history of the Internet Dan will tell the story behind thediscovery, and the process of creating and deploying the fixReserve your place by registering now athttp://won24com/rhtme=114268ets=1etk=638307695FF31ED953EF9EC0DF969C02http://www.secuobs.com/revue/news/28888.shtmlhttp://www.secuobs.com/revue/news/28888.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - After 134 submissions and what we assume were heavy and spiriteddeliberations, the list of Pwnie nominees is up Take a look herehttp://pwnie-awardsorg/2008/awardshtmlhttp://www.secuobs.com/revue/news/28887.shtmlhttp://www.secuobs.com/revue/news/28887.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - The EFF Is IN Booth is a public service provided at Black Hat USA 2008in Las Vegas, Nevada from August 6 to August 8 At the EFF Is INBooth, attorneys from the Electronic Frontier Foundation will beavailable to provide legal information on reverse engineering,vulnerability reporting, copyright law, patent, trade secret, freespeech and other issues related to security research and reportingWe'll also be available to consult with individuals or companies whowant more information about how the law might affect their currentresearch and upcoming presentationsThe EFF Is IN Booth is a service of EFF's Coders' Rights Project Tomake an appointment for a consultation, please email Alyssa Ralston,Development Assistant, at alyssa@efforg, or drop by the table at theconferenceTo learn more about the Electronic Frontier Foundation:http://wwwefforghttp://www.secuobs.com/revue/news/28886.shtmlhttp://www.secuobs.com/revue/news/28886.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Our second webcast was very well attended and full of great informationfrom Kaminsky about the DNS Vulnerability that's all over the newsthese days If you weren't able to make it to the live event, you cancatch up now onlineTo view a synced online replay, follow this linkhttps://eventon24com/eventRegistration/EventLobbyServlettarget=registrationjspeteventid=114268To download the mp3, follow this linkhttps://wwwblackhatcom/webinars/html/blackhat-webcast-2-july-08mp3http://www.secuobs.com/revue/news/28885.shtmlhttp://www.secuobs.com/revue/news/28885.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Here's a link to a story in InfoWorld that deals with the subject ofMcFeters, Heasman and Carter's BH USA 2008 presentation, entitled TheInternet is Broken The researchers will demo software they've createdthat makes it possible to create files that look to a server like astandard graphic file but to a browser appear to be a Java AppletThis could enable attackers to run malicious Java code in the victim'sbrowser If you're in Vegas for Black Hat, they are speaking on August7 at 3:15pm in the Florentine Ballroom You can also hear theirpreview of this talk onBlack Hat Webcast #1 here:http://wwwtechwebonlineeventscom/ars/eventregistrationdomode=eventregetF=1001004etK=4CIhttp://www.secuobs.com/revue/news/28884.shtmlhttp://www.secuobs.com/revue/news/28884.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - If you're planning on attending Black Hat USA 2008, please considersigning up for the Twitter Feed We'll use it sparingly, of courseto bring you updates and breaking information as the show goes on Itcan also be useful to meet other attendees and to twitter aboutwhatever you're doing when the talks are done for the night To signup, go tohttps://twittercom/BlackHatUSA2008http://www.secuobs.com/revue/news/28883.shtmlhttp://www.secuobs.com/revue/news/28883.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - The Electronic Frontier Foundation EFF todaylaunches its Coders' Rights Project -- a new initiative toprotect programmers and developers from legal threatshampering their cutting-edge researchIn conjunction with the project's launch, EFF is staffingan "EFF Is In" booth at Black Hat USA 2008 in Las Vegas onAugust 6 and 7 At the booth, EFF attorneys will providelegal information on reverse engineering, vulnerabilityreporting, and copyright law, as well as patent, tradesecret, and free speech issuesThe rest of the release is here:http://wwwefforg/press/archives/2008/08/05-0http://www.secuobs.com/revue/news/28882.shtmlhttp://www.secuobs.com/revue/news/28882.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - You can take a look at our official Flickr feed for USA 2008 here:http://flickrcom/photos/adunne/sets/72157606583937690/http://www.secuobs.com/revue/news/28881.shtmlhttp://www.secuobs.com/revue/news/28881.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - We've put the majority of the Black Hat USA 2008 slide presentations andWhite Papers online athttps://wwwblackhatcom/html/bh-usa-08/bh-usa-08-archivehtmlKeep your eye on this page for the rest of the presentations and videoand audiohttp://www.secuobs.com/revue/news/28880.shtmlhttp://www.secuobs.com/revue/news/28880.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Dan Kaminsky's talk about the DNS flaw he discovered was probablyenormously popular at BH USA 08 - we now make it available online forthe benefit of the wider security communityTo download the audio, follow the link belowhttps://wwwblackhatcom/presentations/bh-usa-08/Kaminsky/08_bhb_od2_slidesm4vTo download the audio with slides, follow the link belowhttps://wwwblackhatcom/presentations/bh-usa-08/Kaminsky/08_bhb_od2mp3Watch this space for more conference video and audio as it becomesavailablehttp://www.secuobs.com/revue/news/28879.shtmlhttp://www.secuobs.com/revue/news/28879.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - AV Tokyo, which used to be the "drinking party that follows Black HatJapan" has grown into a one-day conference of its own It's close,inexpensive and should be good fun If you're interested in learningmore, go tohttp://enavtokyoorg/We hope to see you therehttp://www.secuobs.com/revue/news/28878.shtmlhttp://www.secuobs.com/revue/news/28878.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - You can view the current speakers and schedule for BH Japan 08 byfollowing these links:Speakers:http://wwwblackhatcom/html/bh-japan-08/brief-bh-jp-08-speakershtmlSchedule:http://wwwblackhatcom/html/bh-japan-08/brief-bh-jp-08-indexhtml#brisch01Please continue checking the Black Hat Japan USA speakers and schedulepages for ongoing updates as the conference lineup is finalizedhttp://www.secuobs.com/revue/news/28877.shtmlhttp://www.secuobs.com/revue/news/28877.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - Black Hat Webcast #3 is scheduled for 1pm PT on Thursday, September 18and we're trying something new this time We're bringing back one ofour most popular talks for a live reprise We'll have AlexanderSotirov and Mark Dowd to give their Vista security presentation andanswer audience questions Whether you missed it because you were inanother talk, or because you weren't in Vegas at all, this is a greattime to get up close and personal with our speakers and get somecutting-edge info about VistaIf you're interested in registering for this free webcast event,follow this link:http://won24com/rhtme=117307ets=1etk=77CB8EE0B5BC4EC5AB070B8AB487B085http://www.secuobs.com/revue/news/28876.shtmlhttp://www.secuobs.com/revue/news/28876.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - BH Japan 2008 Online Regsitration closes September 30th If you wish toregsiter after that time you will need the Onsite Registration Formwhich can be found at this link:http://wwwblackhatcom/html/bh-japan-08/bh-jp-08-reg-forms/OnsiteRegForm_BRpdfThe Onsite Reg Form can be presented in person at the Venue, emailedto Black Hat Registrationbh-reg@blackhatcomBlack Hat Registrationor faxed to Black Hat at +1 206 219 4143http://www.secuobs.com/revue/news/28875.shtmlhttp://www.secuobs.com/revue/news/28875.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - In this webcast, we take the amazing Kapela/Pilosov BGP hijackingpresentation at DEFCON 16 as a starting point and look into the issuesthat relate to securing a world-wide trust-based network If youmissed it, they did a lot more than just present a talk - theyactually intercepted and rerouted all the traffic from the notorioulsyhostile DEFCON network as a proof of the concept Not only did itwork, but it was almost completely invisible to congoers Anton Kapelapresents, with Jeff Moss and a couple of special guests To learnmore, click here:https://wwwblackhatcom/html/webinars/practicalhijackinghtmlWe hope to see you therehttp://www.secuobs.com/revue/news/28874.shtmlhttp://www.secuobs.com/revue/news/28874.shtml Secuobs.com : 2008-10-15 15:49:39 - Black Hat Announcements - You can view them herehttps://wwwblackhatcom/html/bh-japan-08/brief-bh-jp-08-onsite-archivehtmlhttp://www.secuobs.com/revue/news/28873.shtmlhttp://www.secuobs.com/revue/news/28873.shtml Secuobs.com : 2008-04-12 01:31:43 - Black Hat Announcements - The Pwnie Awards ceremony will return to the Black Hat reception withan all new roster of "winners" The awards exist tocelebrate/humiliate the creators of the most infamous pwnage events ofthe previous 12 months Categories have included Best Server-side Bug,Mass 0wnage, Lamest Vendor Response and Most Overhyped Bug The awardsare independent of Black Hat, but we're pleased to provide a venue forthem where so much of the security community is gathered Last year'sinaugural event was a lot of fun, and we hope it will grow in 2008 Wehope to see you thereat what Linuxcom is already calling "Black Hat'sOscars"Links:http://pwnie-awardsorg/http://wwwlinuxcom/feature/118378wwwblackhatcomhttp://www.secuobs.com/revue/news/18087.shtmlhttp://www.secuobs.com/revue/news/18087.shtml Secuobs.com : 2008-04-05 04:31:59 - Black Hat Announcements - Black Hat Europe 2008 Speaker Matthew Lewis is getting a lot of mediaattention for his BH presentation entitled "Biologger - A BiometricKeylogger" The presentation included a demo showing howstate-of-the-art biometric security systems can be compromised Toread his whitepaper, download his tool or see his presentationhttps://wwwblackhatcom/html/bh-europe-08/bh-eu-08-archiveshtml#Lewishttp://www.secuobs.com/revue/news/16570.shtmlhttp://www.secuobs.com/revue/news/16570.shtml Secuobs.com : 2008-03-29 12:01:38 - Black Hat Announcements - This year's Europe event has come to a successful close and we've put thepresentations online for everyone who missed a briefing presentationor two, and everyone who couldn't make it to Amsterdam for the showWatch this space for video and audio presentations when they go livehttps://wwwblackhatcom/html/bh-europe-08/bh-eu-08-archiveshtmlhttp://www.secuobs.com/revue/news/14652.shtmlhttp://www.secuobs.com/revue/news/14652.shtml Secuobs.com : 2008-03-14 05:46:47 - Black Hat Announcements - Beginning with Black Hat USA 2008, paid delegates will be able to viewand rate CFP submissions Register and help us create the Black Hat ofyour dreams Learn more about how it will work in this BlackPage entryfrom Black Hat Director Jeff Mosshttps://wwwblackhatcom/html/blackpages/blackpageshtmlhttp://www.secuobs.com/revue/news/11142.shtmlhttp://www.secuobs.com/revue/news/11142.shtml Secuobs.com : 2008-03-13 20:44:27 - Black Hat Announcements - The Black Hat Europe 08 has been finalized and we're proud to announceour Keynote Speaker, Ian Angell Ian is Professor of InformationSystems at the London School of Economics and he will present a talkentitled "The Complexity in Computer Security"This presentation will be a theoretical talk on the complexity ofcomputer security He will discuss how a lack of understanding of thelimitations of, and distinctions made by, computerization leads tosystemic riskTo read the abstract and bio for Ian's keynote, click here:https://wwwblackhatcom/html/bh-europe-08/bh-eu-08-speakershtml#AngellTo see our full schedule of Briefings Speakers, click here:https://wwwblackhatcom/html/bh-europe-08/bh-eu-08-schedulehtmlhttp://www.secuobs.com/revue/news/10673.shtmlhttp://www.secuobs.com/revue/news/10673.shtml Secuobs.com : 2008-03-01 21:02:04 - Black Hat Announcements - We're freshly back from the success of the Black Hat DC event, and we'vebegun the process of putting the presentations and white papersonline Check the link to get yourself up to date on the stellarlineup of presentations or to catch up on a talk you missed in DCKeep your eyes on this space for audio and video very soonhttps://wwwblackhatcom/html/bh-dc-08/bh-dc-08-archiveshtmlhttp://www.secuobs.com/revue/news/10046.shtmlhttp://www.secuobs.com/revue/news/10046.shtml Secuobs.com : 2008-03-01 21:02:04 - Black Hat Announcements - This year's Black Hat DC was full of newsworthy talks, but one that hasgotten a lot of media attention was "Cracking GSM" by David Hulton andSteveThey demonstrated that they could capture and decrypt GSM traffic themost popular type of cellphone traffic with astonishing speed Theirpresentation is eye-opening and very worthy of your attentionTo see their slides, click here:http://wwwblackhatcom/presentations/bh-dc-08/Steve-DHulton/Presentation/bh-dc-08-steve-dhultonpdfTo see their whitepaper, click here:http://wwwblackhatcom/presentations/bh-dc-08/Steve-DHulton/Whitepaper/bh-dc-08-steve-dhulton-WPpdfTo see the actual talk, click herehttp://wwwblackhatcom/html/featured_media/bh08-002-Stream-1movhttp://www.secuobs.com/revue/news/10045.shtmlhttp://www.secuobs.com/revue/news/10045.shtml Secuobs.com : 2008-03-01 21:02:04 - Black Hat Announcements - Past Black Hat speaker Johnny Long has been profiled on Forbescom on thesubject of No-Tech Hacking The article is an interesting read andeven contains some quotes from BH Director Jeff MossThe article is here:http://wwwforbescom/2008/02/28/long-hacker-csc-tech-security-cx_ag_0229hackerhtmlTo learn more about Johnny Long, you can check out his site athttp://johnnyihackstuffcom/http://www.secuobs.com/revue/news/10044.shtmlhttp://www.secuobs.com/revue/news/10044.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Black Hat Europe 2006 Briefings and Trainings registration is now openThe Briefings offer two tracks over two days with 25 presentationsThere will be 10 Training classes with new offerings and an updatedSensePost class "Hacking by Numbers: Combat Edition" Due to limitedclass size, many of our classes fill up quickly Register early toensure training availability and to take advantage of our early birdregistration discounthttp://www.secuobs.com/revue/news/6039.shtmlhttp://www.secuobs.com/revue/news/6039.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Our networks are growing Is our understanding of them This talk willfocus on the monitoring and defense of very large scale networks,describing mechanisms for actively probing them and systems that mayevade our most detailed probes We will analyze these techniques inthe context of how IPv6 affects, or fails to affect them A number oftechnologies will be discussedhttp://www.secuobs.com/revue/news/6038.shtmlhttp://www.secuobs.com/revue/news/6038.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - This presentation details the methods attackers utilize to gain access towireless networks and their attached resources Examples of thetraffic that typifies each attack are shown and discussed, providingattendees with the knowledge too identify each attack Defensivemeasures that can be taken in real time to counter the attack are thenpresentedhttp://www.secuobs.com/revue/news/6037.shtmlhttp://www.secuobs.com/revue/news/6037.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Look at your new device It has a great case, plenty of buttons, andthose blue LEDs - wow But when you strip away the trappings of modernartistic design, what does it really do and how does it help you sleepat night Perhaps most importantly, what do hackers know about thisnew toy that you do not Would you be surprised to know that simpleTCP fragmentation can evade most security products in the world Whatwould you think if you learned that a hacker can apply simple,normally accepted encoding schemes to launch attacks right throughmost security tools Come and see what hackers know; if you rely onthese products to keep you safe, you can't afford not tohttp://www.secuobs.com/revue/news/6036.shtmlhttp://www.secuobs.com/revue/news/6036.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Interpreted, dynamically-typed, and object-oriented languages like Rubyand Python are very good for many programming task in my opinion Suchlanguages have many benefits from rapid, easy development to increasedsecurity against memory allocation and manipulation relatedvulnerabilities However, choice of programming language alone doesnot guarantee the resulting software written in the language will befree of security vulnerabilities, which is an obvious point, but thesources of the potential vulnerabilities may not be obvious at allhttp://www.secuobs.com/revue/news/6035.shtmlhttp://www.secuobs.com/revue/news/6035.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - This presentation will cover SIP and VoIP related automated fuzzingtechniques Using real world vulnerabilities and audit engagements wewill give a technical understanding of this emerging technology andits common attack vectors The techniques discussed in this talk willnot only be limited to SIP but will apply to methodical auditapproaches for fuzzing text based protocols which can be more complexthen fuzzing binary protocolshttp://www.secuobs.com/revue/news/6034.shtmlhttp://www.secuobs.com/revue/news/6034.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - In forensic research it is imperative to search for Japanese languagestrings However many of the tools used in forensic research are beingdeveloped outside of Japan, and therefore not tuned for the Japaneselanguage In Japan there is research being done on using characterencoding for anti-forensic countermeasures, and therefore characterencoding and Japanese are significant issues for Japanese agents Thissession will cover the various issues on Japanese when using popularforensic tools and other technical issues for future considerationshttp://www.secuobs.com/revue/news/6033.shtmlhttp://www.secuobs.com/revue/news/6033.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Last year at Black Hat, we introduced the rootkit FU FU took anunprecented approach to hiding not previously seen before in a Windowsrootkit Rather than patching code or modifying function pointers inwell known operating system structures like the system call table, FUdemonstrated that is was possible to control the execution pathindirectly by modifying private kernel objects in memory Thistechnique was coined DKOM, or Direct Kernel Object Manipulation Thedifficulty in detecting this form of attack caused concern foranti-malware developers This year, FU teams up with Shadow Walker toraise the bar for rootkit detectors once again In this talk we willexplore the idea of memory subversion We demonstrate that is not onlypossible to hide a rootkit driver in memory, but that it is possibleto do so with a minimal performance impact The application threatof this attack extends beyond rootkits As bug hunters turn towardkernel level exploits, we can extrapolate its application to worms andother forms of malware Memory scanners beware the axiom, "vidre estcredere" Let us just say that it does not hold the same way that itused tohttp://www.secuobs.com/revue/news/6032.shtmlhttp://www.secuobs.com/revue/news/6032.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The use of phishing/cross-site scripting XSS hybrid attacks forfinancial gain is spreading It's imperative that securityprofessionals familiarize themselves with these new threats to protecttheir websites and confidential corporate information This isn't justanother presentation about phishing scams or cross-site scriptingWe're all very familiar with each of those issues Instead, we'lldiscuss the potential impact when the two are combined to form newattack techniques Phishers are beginning to exploit these techniques,creating new phishing attacks that are virtually impervious toconventional security measures Secure sockets layer SSL,blacklists, token-based authentication, browser same-origin policy,and monitoring / take-down services offer little protection Eveneyeballing the authenticity of a URL is unlikely to helphttp://www.secuobs.com/revue/news/6031.shtmlhttp://www.secuobs.com/revue/news/6031.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Has your network ever been hacked, and all you have to show for yourinvestigative efforts is an IP address belonging to an ISP in IrkutskAre you tired of receiving e-mails from Citibank that resolve toMuscovite IP addresses Would you like to hack the Kremlin Or do youthink that the Kremlin has probably owned you first Maybe you justthink that Anna Kournikova is hot If the answer to any of the abovequestions is yes, then you need an introduction to the GulagArchipelago of the Internet, the Cyberia of interconnected networks,Russia http://www.secuobs.com/revue/news/6030.shtmlhttp://www.secuobs.com/revue/news/6030.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - In September 2004, much hype was made of a buffer overflow vulnerabilitythat existed in the Microsoft engine responsible for processing JPEGfiles While the resulting vulnerability itself was nothing new, thefact that a vulnerability could be caused by a non-executable filecommonly traversing public and private networks was reason forconcern File format vulnerabilities are emerging as more and morefrequent attack vector These attacks take advantage of the fact thatan exploit can be carried within non-executable files that werepreviously considered to be innocuous As a result, firewalls andborder routers rarely prevent the files from entering a network whenincluded as email attachments or downloaded from the Internethttp://www.secuobs.com/revue/news/6029.shtmlhttp://www.secuobs.com/revue/news/6029.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Many of the various attacking mechanism such as spam email, DDoS that areattacking the internet as whole in recent years can be attributed toBotnets However there is not much information on these Botnets yetTelecom ISAC-Japan and JPCERT/CC conducted a detailed investigationregarding botnet activity This session will cover what was foundduring the investigation and the current state of the massive amountof infected users and sub-species of botnetshttp://www.secuobs.com/revue/news/6028.shtmlhttp://www.secuobs.com/revue/news/6028.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The Business:Timeline - how did we get into this mess The Technology:Technical overview of different types of programs taxonomy Lookingahead: Market polarization, bad get worse, good get better morewhite, less grey Exploiting Adwarehttp://www.secuobs.com/revue/news/6027.shtmlhttp://www.secuobs.com/revue/news/6027.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - From the article "Last week Black Hat, the Vegas security conference thatwas at the center of the Ciscogate controversy last summer, waspurchased by CMP Media The sale has the internet hens clucking aboutwhether ownership by a larger, wealthier corporation will protectBlack Hat from future legal challenges, or make it more susceptible topressure from companies wanting to control vulnerability disclosuresThe more worrisome question is why Black Hat and other purveyors ofsecurity information must worry so much about what they disclose Forbetter or worse, the settlement I negotiated with Cisco in its caseagainst researcher Michael Lynn kept some important legal issues fromreaching a courtroom, and these unsettled questions cast a long shadowover security research todayhttp://www.secuobs.com/revue/news/6026.shtmlhttp://www.secuobs.com/revue/news/6026.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Kevin Mandia, a world recognized leader of incident response research,points out that a responder must have skills at least that of theattacker One of the challenges to IR is discovering there is anincident to begin with If we only look for known attacks, we willonly find the moderately skilled attackers, leaving us exposed to thetruly skilled adversarieshttp://www.secuobs.com/revue/news/6025.shtmlhttp://www.secuobs.com/revue/news/6025.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The Black Hat USA 2006 Call for Papers has now closed Speaker selectionhas begun, and the first round of selections and rejections should becomplete by the end of the weekhttp://www.secuobs.com/revue/news/6024.shtmlhttp://www.secuobs.com/revue/news/6024.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Black Hat would like to announce that online registration and the Callfor Papers for Black Hat DC is now openBlack Hat DC 2007 Briefings et Training will be February 26 to March 1,held at the Sheraton Crystal City hotel in Arlington VirginiaRegister early and take advantage of our early bird special and savewhen you register for the Briefings before January 1stPapers and requests to speak will be received and reviewed fromOctober 1, 2006 until January 1, 2007 We strongly suggest that yousubmit earlier than later, since we will close the CFP early if wereceive enough quality submissions to fill the slotsPlease submit using the online system at https://cfpblackhatcom/If you want to submit to the Call for Papers please note:Black Hat does not accept product or vendor related pitches If yourtalk is a veiled advertisement for a new product or service yourcompany is offering, please do not submitBlack Hat is launching its new electronic CFP submissions server withthis announcement You will be able to upload your submissions, makechanges, select your co-presenters, etc This system will allow you tosubmit multiple presentations as well as be able to change your infoshould you need to This new submission and review process will enablethe future possibility of peer review and online information exchangeFor now we are looking forward to seeing your submissions and wouldlike to hear any feedback you have on this new submissions processTopic Focus for Black Hat DC 2007:We would like presenters to think about offensive and defensivecomputer security operations and the application of your expertise andresearch Think about its application in an operational process thatcan be defensive or offense, large enterprise or distributed organizedcriminal group, military or civilian This is not a requirement tosubmit, but we want some differentiation for the DC conferenceThinking in terms of operational applicability will steer content in adirection we hope the DC audience will appreciateDates to Remember:https://cfpblackhatcom/Call for Papers closes: January 1st, 2007http://wwwblackhatcom/html/bh-registration/bh-registrationhtml#DCEarly Bird registration rate ends December 31stRegular registration rate ends Feb 18thMore information regarding speaker requirements and our guidelines forthis years submissions available at http://wwwblackhatcom/http://www.secuobs.com/revue/news/6023.shtmlhttp://www.secuobs.com/revue/news/6023.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Black Hat Europe 2007 Briefings et Training will be March 27 to March 30,held at the Hotel Movenpick in AmsterdamIf you want to submit to the Call for Papers please note Black Hatdoes not accept product or vendor related pitches, or voodoo If yourtalk is a veiled advertisement for a new product or service yourcompany is offering, please do not submit If your talk relies onvoodoo techniques or tools you are not willing to share, then youshould rethink the benefit the audience will get from sitting throughyour presentationWe strongly suggest that you submit earlier than later, since we willclose the CFP early if we receive enough quality submissions to fillthe slots Please submit using the new on-line system at:https://cfpblackhatcom/http://www.secuobs.com/revue/news/6022.shtmlhttp://www.secuobs.com/revue/news/6022.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - We at Black Hat would like to wish you the best this Holiday seasonWe hope you have plenty of family, food and fun to go around If youget bored you can always gather the family around the warm glow ofyour flat screen to watch the ghosts of presentations past There isno better gift than thatUnless of course your loved one registers you for the USA 2007 show,in warm sunny Las VegasEarly bird registration online at:http://wwwblackhatcom/html/bh-registration/bh-registrationhtml#USAPrices Vary Hotel Reservations now openhttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-venuehtmlhttp://www.secuobs.com/revue/news/6021.shtmlhttp://www.secuobs.com/revue/news/6021.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The Black Hat DC 2007 Call for Papers will be closing soon TheSubmission review process has begun, and the first round of selectionsand rejections should be coming out shortly after CFP closes You haveuntil January 5, 2007 to submitAs a reminder for Black Hat DC there will be a focus on operationsaspects of information securityWe would like presenters to thinkabout offensive and defensive computer security operations andapplication of your expertise and research in this context Instead oftechnology on its own, we would like you to contemplate itsapplication in an operational process The operational context can bedefensive or offense, large enterprise or distributed organizedcriminal group, military or civilian This directive is not hard andfast, but we recognize a need for continuity and differentiation forthe DC conference and thinking in terms of operational applicabilitywill steer content in a direction meaningful to the target audienceTopics that lend themselves to this would be:- Deploying zero day attacks to maximum effect- Tracking of bot nets and analyzing their structure- Automated detection of system anomaliesTopics that don't reflect this focus:- How to install a patch management system- Why updating your AUP is a good thingBlack Hat has always focused on the practical, applied uses ofinformation and computer security Your audience is looking to learnthe latest trends, the latest techniques to either attack or defendtheir networks Think practical and applied over pure research orpolicy developmentSpeakers may submit more than one proposal, but each proposal must bea separate submission Submit using the online submission system athttps://cfpblackhatcom/Good LuckAlso, Some date to remember:# Early Registration will close December 31, 2006# Only credit card payments will be accepted after February 1, 2007# Online registration closes February 18, 2007# On-site Registration rates begin February 19, 2007http://www.secuobs.com/revue/news/6020.shtmlhttp://www.secuobs.com/revue/news/6020.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Black Hat Europe 2007 Briefings et Training will be March 27 to March 30,held at the Hotel Movenpick in AmsterdamThere will be 4 different tracks, over 2 days comprised of renowninformation and computer security professionalsRegister Now Regular Registration rate closes February 18, 2007- Regular Registration rate closes on February 25, 2007- Only credit card payments will be accepted after February 25, 2007- Online registration closes March 18, 2007- Onsite registration rates begin March 19, 2007http://www.secuobs.com/revue/news/6019.shtmlhttp://www.secuobs.com/revue/news/6019.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Check out our New training classes, here's a short list of some of thenew classes available:- Metasploit 30 Internals with Matt Miller, aka skape: The nuts andbolts of the Metasploit Framework taught by one of its creatorsWeb Application Insecurity with NGS Software: If you are concernedwith the security of web applications and the insecurity theyintroduce to your back end information systems this is the workshopfor you- Advanced AspNet Exploits and Countermeasures with IOActive- Advanced level: Push AspNet to the limit See how AspNetapplications and environments can be exploited by skilled attackers,and how those same techniques can be used to protect the targetedassetsFor a complete list of training classes available visit us online athttp://wwwblackhatcom/html/bh-europe-07/train-bh-eu-07-indexhtmlhttp://www.secuobs.com/revue/news/6018.shtmlhttp://www.secuobs.com/revue/news/6018.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The Black Hat USA 2007 Call for Papers is now openDon't hesitate to submit your presentations for consideration Thisyear we have expanded from 9 tracks to 11 and are looking to expandthe depth and breath of content The Deep Knowledge track will nowspan both days of Black HatThe Black Hat USA 2007 Briefings tracks will include:Track 1: √ò-Day AttackTrack 2: √ò-Day DefenseTrack 3: Application SecurityTrack 4: Deep KnowledgeTrack 5: Forensics and Anti-ForensicsTrack 6: Hardware and Biometric SecurityTrack 7: Policy, Management and the LawTrack 8: Privacy and AnonymityTrack 9: Turbo TalksTrack 10: The NetworkTrack 11: Detection and EvasionPlease check out the description page to learn more about these tracksand to ensure you submit to the appropriate trackhttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-cfp-trackshtmlSubmit proposals by completing the submissions form on the CFP serverat:https://cfpblackhatcom/Submissions are due no later than May 1, 2007 The Black Hat Briefingswill be August 1-2 in Las VegasThere is a new submissions process this year so we have a helpful howto guide available at:http://wwwblackhatcom/html/bh-cfp/bh-cfp-howtohtmlThere you will find a step by step walk through to help you withregistering and using the CFP application system Use this system tosubmit presentation proposals for future Black Hat events by creatingan account Once your account email address is confirmed you will beable to submit proposals, upload supporting files and modify aspectsof your submissions, and add or remove co-presenters at any timeFor more information on this years call for papers please visit:http://wwwblackhatcom/html/bh-usa-07/bh-usa-07-cfphtmlBlack Hat USA 2007:http://wwwblackhatcom/html/bh-usa-07/bh-usa-07-indexhtmlEarly bird registration online at:http://wwwblackhatcom/html/bh-registration/bh-registrationhtml#USAHotel Reservations now openhttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-venuehtmlhttp://www.secuobs.com/revue/news/6017.shtmlhttp://www.secuobs.com/revue/news/6017.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Black Hat USA 2007 Training Classes now openPlease see the following link for a complete list of classes beingoffered this yearhttp://wwwblackhatcom/html/bh-usa-07/train-bh-usa-07-indexhtmlHighlights include over 35 training classes including two new four daysessions Below is a sample of what to expect:- The nuts and bolts of the Metasploit Framework: Metasploit 30Internals by Matt Miller, aka skape- Web Application Insecurity by NGS Software If you are concernedwith the security of web applications and the insecurity theyintroduce to your back end information systems this is the workshopfor you- TCP/IP Weapons School: Black Hat Edition by Richard Bejtlich,TaoSecurity Learn how networks can be abused and subverted, whileanalyzing the attacks, methods, and traffic that make it happen- Ultimate Hacking: Wireless Edition by Foundstone Knowledge is powerand you do not want the hackers to know more about your wirelessnetworks than you do- Hands-On Hardware Hacking and Reverse Engineering Techniques: BlackHat Edition by Joe Grand This course is the first of its kind andfocuses entirely on hardware hacking- ROOTKIT: Advanced 2nd Generation Digital Weaponry by Greg Hoglundand Jamie Butler Advanced class developed and taught by the creatorsof rootkitcom- Advanced Malware Deobfuscation by Jason Geffner et Scott Lambert NoSource No Symbols No Problem- Hacking by Numbers: Combat Grading by SensePost Advanced level Theworld‚Äôs first objective technical grading system for hackers andpenetration testersBlack Hat Briefings and Trainings USA 2007:http://wwwblackhatcom/html/bh-usa-07/bh-usa-07-indexhtmlRegistration online at:http://wwwblackhatcom/html/bh-registration/bh-registrationhtml#USAHotel Reservations now openhttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-venuehtmlhttp://www.secuobs.com/revue/news/6016.shtmlhttp://www.secuobs.com/revue/news/6016.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - In the build up for the big Black Hat Briefings and Training this summerwe have added some new training classesCheck out the three new classes we just added to the roster for US2007, Register now to reserve your seatIncident Response: Black Hat Edition by MandiantAs the sophistication and threats caused by malicious attacks continueto increase, Mandiant has raised the bar of effective detection,response, and remediation by introducing our Incident Response IRclass This two-day Special Edition class has been specificallydesigned for information security professionals and analysts whorespond to computer security incidents It is designed as anoperational course, using case studies and hands-on lab exercises toensure attendees are gaining experience in each topic areahttp://wwwblackhatcom/html/bh-usa-07/train-bh-us-07-md-irhtmlUnderstanding Stealth Malware by Joanna Rutkowska and AlexanderTereshkinThe course will provide attendees with an in-depth understanding ofhow advanced stealth malware works, how it interacts with theoperating system, underlying hardware and network Attendees will havea chance to run, analyze and experiment with several previouslyunpublished samples of proof-of-concept rootkits, similar to Deepdoor,FireWalk, Blue Pill and others The malware samples will be createdfrom scratch and in a slightly different way exclusively for the useduring the training, as the original implementations can not be useddue to NDA restrictionsSimpler stealth malware will also be briefly covered as well asapproaches to its detection, so that participants get a clearunderstanding what advantages the more sophisticated malware offers toattackershttp://wwwblackhatcom/html/bh-usa-07/train-bh-us-07-jrkhtmlBuilding and Testing Secure Web Applications by Aspect SecurityTraining developers and software testers in application securityoffers one of the highest returns on investment of any securityinvestment by eliminating vulnerabilities at the source Aspect'sBuilding and Testing Secure Web Applications training raises developerawareness of application security issues and provides examples of'what to do' and 'what not to do' The class is lead by an experiencedapplication security practitioner and is delivered in a veryinteractive mannerhttp://wwwblackhatcom/html/bh-usa-07/train-bh-us-07-as_btswahtmlhttp://www.secuobs.com/revue/news/6015.shtmlhttp://www.secuobs.com/revue/news/6015.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The Call For Papers will open for Black Hat Japan 2007 Briefings on May1,2007Submit proposals by completing the submissions form on the CFP serverat:https://cfpblackhatcom/Papers and requests to speak will be received and reviewed from May1until August 20, 2007 We strongly suggest that you submit earlierthan later since we will close the CFP early if we receive enoughquality submissions to fill the slotsBlack Hat Japan 2007 Briefings and Training Tokyo Shinjuku Keio PlazaHotelTraining: 23-24 October 2007Briefings: 25-26 October 2007http://wwwblackhatcom/html/bh-japan-07/bh-jp-07-mainhtmlhttp://www.secuobs.com/revue/news/6014.shtmlhttp://www.secuobs.com/revue/news/6014.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Chris Paget's "RFID for Beginners" and the ACLU presents "Rights ChippedAway"Most of you may have heard from various web posts about Chris Paget'sRFID talk at Black Hat DC this past February After receiving aletter from HID and several hours of intense negotiation Paget's talkwas on and off Ultimately, Paget modified his original talk and inaddition included a special presentation from Nicole A Ozer,Technology et Civil Liberties Policy Director at ACLU of NorthernCalifornia Her presentation was titled: Rights "Chipped" Away: RFIDand Identification Documents Both presentations are included in themedia as well as a QetA session with Paget that followsAudio is here:http://mediablackhatcom/bh-dc-07/audio/2007_BlackHat_DC-V1-Paget_and_ACLU-RFIDmp3Video is here:http://mediablackhatcom/bh-dc-07/video/2007_BlackHat_DC-V1-Paget_and_ACLU-RFIDmp4More Black Hat DC Audio will be coming soonChris wrote us a short blog entry on his presentation prior to HID'sObjection"It's fairly well-known that RFID is an insecure technology Mostpeople know that RFID tags can be cloned, but without knowing how - atbest, most people use expensive dedicated equipment, having beenscared off by the voodoo involved with anything Radio Frequency Afterdemonstrating an RFID-based smart bomb on Seattle-based KOMO news Idecided to take things a step further, and see just how small an RFIDcloner needed to be; I surprised even myself Two small chips and ahandful of passive components later about 5 dollars of parts in allI had a working cloner for HID RFID access badges, and had completelybusted the myth that Radio Frequency IDentification is hard to workwith This presentation will allow you to do the same thing - in oneshort talk I'll teach you everything you need to know in order tobuild and understand an RFID cloner; covering everything from MagneticFields to Manchester Encoding, with plenty of theory and backgroundinfo along the way If you're considering implementing, hacking, oreven using an RFID system, this presentation will give you everythingyou need to understand exactly how vulnerable these systems are, howto mess with them yourself, and how to have some electronic fun alongthe way" - Chris PagetPaget's modified slide deck can be found here:https://wwwblackhatcom/presentations/bh-dc-07/Paget/Presentation/bh-dc-07-pagetpdfOzer's Presentation is here:https://wwwblackhatcom/presentations/bh-dc-07/ACLU/Presentation/bh-dc-ozer-ACLUpdfTo read more news on Paget's Black Hat Talk:http://wwwgooglecom/searchhl=enetq=Paget%2BBlack+HatHID's Letter to IOActive, Courtesy of wired:http://blogwiredcom/27bstroke6/files/hid_ltr_to_ioactive_0221071pdfhttp://www.secuobs.com/revue/news/6013.shtmlhttp://www.secuobs.com/revue/news/6013.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - We have three very excellent and experienced Keynote speakers for thisyears Black Hat Las Vegas Tony Sager and Richard A Clarke will bespeaking simultaneously on day one and day two promises to be anstimulating address by Bruce SchneierCheck out our Black Hat USA 07 page for updateshttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-indexhtmlDay 1 Keynote: Tony SagerThe NSA Information Assurance Directorate and the National SecurityCommunityThe Information Assurance Directorate IAD within the NationalSecurity Agency NSA is charged in part with providing securityguidance to the national security community Within the IAD, theVulnerability Analysis and Operations VAO Group identifies andanalyzes vulnerabilities found in the technology, information, andoperations of the Department of Defense DoD and our other federalcustomersThis presentation will highlight some of the ways that the VAO Groupis translating vulnerability knowledge in cooperation with manypartners, into countermeasures and solutions that scale across theentire community This includes the development and release ofsecurity guidance through the NSA public website wwwnsagov andsponsorship of a number of community events like the Cyber DefenseInitiative and the Red Blue SymposiumIt also includes support for, or development of, open standards forvulnerability information like CVE, the standard naming scheme forvulnerabilities; the creation of the extensible ConfigurationChecklist Description Format XCCDF to automate the implementationand measurement of security guidance; and joint sponsorship, with theNational Institute of Standards and Technology NIST and the DefenseInformation Systems Agency DISA, of the Information SecurityAutomation Program ISAP, to help security professionals automatesecurity compliance and manage vulnerabilitiesThe presentation will also discuss the cultural shift we have beenmaking to treat network security as a community problem, one thatrequires large -scale openness and cooperation with security stakeholders at all points in the security supply chain - operators,suppliers, buyers, authorities and practitionersTony Sager, Chief, Vulnerability Analysis and Operations Group,Information Assurance Directorate, National Security Agency Tony Sageris the Chief of the Vulnerability Analysis and Operations VAO Group,part of the Information Assurance Directorate at the National SecurityAgency The mission of the VAO organization is to identify,characterize, and put into operational context vulnerabilities foundin the technology, information, and operations of the DoD and thenational security community and to help the community identifycountermeasures and solutions This group is known for its workdeveloping and releasing security configuration guides to providecustomers with the best options for securing widely used productsThe VAO Group also helps to shape the development of securitystandards for vulnerability naming and identification, such as theOpen Vulnerability and Assessment Language OVAL, partnering withNational Institute for Standards and technology NIST on theInformation Security Automation Program ISAP, developing theeXtensible configuration checklist description format XCCDF, and forhosting the annual Cyber Defense Exercise and the Red Blue SymposiumMr Sager is active in the public network security community, as amember of the CVE Common Vulnerabilities and Exposures SeniorAdvisory Council and the Strategic Advisory Council for The Center forInternet Security He is in his 29th year with the National SecurityAgency, all of which he has spent in the computer and network securityfieldADDITIONAL Day 1 Keynote: Richard A ClarkeA Story About Digital Security in 2017Richard A Clarke is a former US government official who specializedin intelligence, cyber security and counter-terrorism Until hisretirement in January 2003, Mr Clarke was a member of the SeniorExecutive Service He served as an advisor to four US presidentsfrom 1973 to 2003: Ronald Reagan, George HW Bush, Bill Clinton andGeorge W Bush Most notably, Clarke was the chief counter-terrorismadviser on the US National Security Council for both the latter partof the Clinton Administration and early part of the George W BushAdministration through the time of the 9/11 terrorist attacksClarke came to widespread public attention for his role ascounter-terrorism czar in the Clinton and Bush Administrations when inMarch of 2004 he appeared on the 60 Minutes television news magazine,his memoir about his service in government, Against All Enemies wasreleased, and he testified before the 9/11 Commission In all threeinstances, Clarke was sharply critical of the Bush Administration'sattitude toward counter-terrorism before the 9/11 terrorist attacksand the decision to go to war with IraqRichard Clarke is currently Chairman of Good Harbor Consulting, astrategic planning and corporate risk management firm, an on-airconsultant for ABC News, and a contributor to GoodHarborReportcom, anonline community discussing homeland security, defense, and politicsHe also recently published his first novel, The Scorpion's Gate, in2005; and a second, Breakpoint, in 2007Day 2 Keynote: Bruce SchneierThe Psychology of SecuritySecurity is both a feeling and a reality You can feel secure withoutactually being secure, and you can be secure even though you don'tfeel secure In the industry, we tend to discount the feeling in favorof the reality, but the difference between the two is important Itexplains why we have so much security theater that doesn't work, andwhy so many smart security solutions go unimplemented Two differentfields -- behavioral economics and the psychology of decision making-- shed light on how we perceive security, risk, and cost Learn howperception of risk matters and, perhaps more importantly, learn how todesign security systems that will actually get usedBruce Schneier is an internationally renowned security technologistand CTO of BT Counterpane, referred to by The Economist as a "securityguru" He is the author of eight books -- including the best sellers"Beyond Fear: Thinking Sensibly about Security in an Uncertain World,""Secrets and Lies," and "Applied Cryptography" -- and hundreds ofarticles and academic papers His influential newsletter, Crypto-Gram,and blog "Schneier on Security," are read by over 250,000 people Heis a prolific writer and lecturer, a frequent guest on television andradio, has testified before Congress, and is regularly quoted in thepress on issues surrounding security and privacyhttp://www.secuobs.com/revue/news/6012.shtmlhttp://www.secuobs.com/revue/news/6012.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Regular registration rate closes May 31, 2007 Register now to save yourseat and save some dough There are still plenty of class seatsavailable, plus a few new training courses Check out the Trainingpages for more infoBlack Hat Training:http://wwwblackhatcom/html/bh-usa-07/train-bh-usa-07-indexhtmlWe have started our speaker selection for Black Hat Briefings, Checkout or speaker page and schedule for updates We have three veryexcellent and experienced Keynote speakers for this years Black HatLas Vegas Tony Sager and Richard A Clarke will be speakingsimultaneously on day one and day two promises to be an stimulatingaddress by Bruce SchneierBlack Hat Briefings:http://wwwblackhatcom/html/bh-usa-07/bh-usa-07-indexhtmlJuly 28-August 2, 2007 in Caesars Palace Las VegasTo register:http://wwwblackhatcom/html/bh-registration/bh-registrationhtml#USAImportant dates:Only credit card payments are accepted after July 1, 2007Online registration closes on July 20, 2007Onsite Registration rates apply after July 20, 2007Registration Cancellations and requests for refunds are not acceptedafter June 30Registration Class Change Requests are not accepted after June 30http://www.secuobs.com/revue/news/6011.shtmlhttp://www.secuobs.com/revue/news/6011.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - We have made our first round of talk selections for our USA 2007, LasVegas conferenceOur initial schedule is online now at:http://wwwblackhatcom/html/bh-usa-07/bh-usa-07-schedulehtmlThis years tracks include;0-Day Attack and Defense,ApplicationSecurity,Deep Knowledge,Forensics and Anti-Forensics,Hardware andBiometric Security,Policy,Management and the Law,Privacy andAnonymity,Turbo Talks,The Network,Detection and EvasionHere is just a short list of some of the great presentations we havescheduled:Joel Eriksson and panel: Kernel WarsThomas H Ptacek: Don't Tell Joanna, The Virtualized Rootkit Is DeadDror-John Roecher: NACATTACKJohn Heasman: Hacking the extensible Firmware InterfaceDavid Maynor: Simple Solutions to Complex Problems from the LazyHacker‚Äôs Handbook: What Your Security Vendor Doesn't Want You toKnow Also selected to speak will be:Jennifer GranickGreg HoglundBruce SchneierPhil ZimmermannDavid LitchfieldJon CallasTony SagerRichard ClarkeRoger DingledineJim ChristieWith Many more to come Please check out our speakers page for acomplete list of speakers and for updateshttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-speakershtml Thereyou will find abstracts for the upcoming presentations and get somebackground information on the speakersKeep in mind we are still reviewing papers and making our decisions,if you have not received status of your submission by June 1, pleaseemail nikita at blackhat dot comIf you don't get selected for this show don't be discouraged, pleaseconsider submitting again Our Japan CFP is still open until August20, Submit now as we may close the cfp early if we receive enoughquality talks Submit here: https://cfpblackhatcom/Black Hat Japan 2007 Briefings and Training Tokyo Shinjuku Keio PlazaHotelTraining: 23-24 October 2007Briefings: 25-26 October 2007http://wwwblackhatcom/html/bh-japan-07/bh-jp-07-mainhtmlhttp://www.secuobs.com/revue/news/6010.shtmlhttp://www.secuobs.com/revue/news/6010.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - We have made our second round of speaker selection We only have a smallhandful of slots remaining and the competition is fierceHere is a short list of new talks:Static Detection of Application Back doors by Chris WysopalCovert Debugging: Circumventing Software Armoring Techniques by DannyQuist and ValsmithBreaking C++ Applications by Mark Dowd, John Mcdonald, and Neel MehtaThe Art of Unpacking by Mark Vincent YasonAlexander Sotirov, Heap Feng Shui in JavaScriptTiming attacks for recovering private entries from database engines byAriel WaissbeinTransparent weaknesses in VoIP by Peter ThermosDangling Pointer by Jonathan AfekAlso, Womans Executive Forum is back for a 2nd yearA sample of a few more SPEAKERS have been selected, in no order:Rohit Dhamankar and Rob King,Alfredo OrtegoYoriy BolyginAndrew LindellJonathan AfekSatyam TyagiJim HoalgandEzequiel GutesmanJerry SchneiderJeff MorinDavid ByrneStephan Chenetter and Moti JosephPaul Vincent SabanalWindow SnyderPlease check out our speakers page for a complete list of speakers andfor updateshttp://wwwblackhatcom/html/bh-usa-07/bh-usa-07-speakershtmlThere you will find abstracts for the upcoming presentations and getsome background information on the speakersKeep in mind we are still reviewing a small handful of papers, if youhave not received status of your submission, please email nikita atblackhatdot comIf you don't get selected for this show don't be discouraged, pleaseconsider submitting again Our Japan CFP is still open until August20, Submit now as we may close the cfp early if we receive enoughquality talks Submit here: https://cfpblackhatcom/Black Hat Japan Papers and requests to speak will be received andreviewed from May 1 until August 20, 2007 We strongly suggest thatyou submit earlier than later since we will close the CFP early if wereceive enough quality submissions to fill the slotsBlack Hat Japan 2007 Briefings and Training Tokyo Shinjuku Keio PlazaHotelTraining: 23-24 October 2007Briefings: 25-26 October 2007http://wwwblackhatcom/html/bh-japan-07/bh-jp-07-mainhtmlhttp://www.secuobs.com/revue/news/6009.shtmlhttp://www.secuobs.com/revue/news/6009.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - From the Black Page:Until early this week, security experts Nitin and Vipin Kumar of NVLabs were scheduled to present a briefing entitled "TPMkit: Breakingthe Legend of Trusted Computing TC TPM and Vista BitLocker" Thistalk was removed from the schedule at the request of the presentersThe topic generated quite a great deal of interest and its removalfrom the schedule without comment has generated some confusion andcontroversyFull article athttp://wwwblackhatcom/html/bh-blackpage/bh-blackpage-06292007htmlhttp://www.secuobs.com/revue/news/6008.shtmlhttp://www.secuobs.com/revue/news/6008.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Japan 2007 Briefings and Training Registration is now OPENRegister nowto assure a seat in the class of your choicehttp://wwwblackhatcom/html/bh-registration/bh-registrationhtml#JPHere is a list of current training classes available:Infrastructure Attacktecs and Defentecs: Hacking Cisco NetworksSteve DuganLive Digital Investigation : Investigating the EnterpriseWetStoneTechnologiesYou will need this course before you can take the IEM course Earn NSACertificationNSA InfoSec Assessment Methodology Course IAM - Level 1Security HorizonReverse Engineering on Windows: Application in Malicious Code AnalysisPedram Amini and Ero CarreraReverse Engineering with IDA ProChris EagleNew for 2007If you are concerned with the security of web applications and theinsecurity they introduce to your back end information systems this isthe workshop for youWeb Application InsecurityNGS SoftwareThe Breifings and Trainings will be held, October 23-26, Keio PlazaHotel, TokyoMore about the venue is available here:http://wwwblackhatcom/html/bh-japan-07/bh-jp-07-en-venuehtmlhttp://www.secuobs.com/revue/news/6007.shtmlhttp://www.secuobs.com/revue/news/6007.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - We are proud to announce our speakers for Black Hat JapanBrandon, Baker, Kick Ass HypervisorBilly Hoffman, The Little Hybrid Web Worm that CouldHalvar Flake, Automated Unpacking and Malware ClassificationClemens Kolbitsch and Sylvester Keil, Stateful Fuzzing of wirelessDevice Drivers in an Emulated EnviromentPaul Sebastian Ziegler, Multiplatform Malware within theNET-FrameworkPedram Amini and Aaron Portnoy, Fuzzing Sucks or Fuzz it like youmean itDavid LaPorte and Eric Kollmann, Passive OS Fingerprionting Using DHCPKanatoko, DNS Pinning and Socket APIKenneth Geers, Greetz from room 101Nguyen Anh Quynh, HiJacking Virtual Machine ExecutionJacob West, Secure Programming with Static AnalysisGreg Hartrell, Security Lessons from Xbox LiveBlack Hat Japan will be held October 23-26, at Keio Plaza Hotel, Tokyohttp://www.secuobs.com/revue/news/6006.shtmlhttp://www.secuobs.com/revue/news/6006.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - The final roster of speakers for Black Hat Japan 2007 is now availableonlineWe're proud of the variety and depth represented by this lineupand look forward to seeing many of you in Tokyo later this monthPlease keep in mind that Japan Registration closes on October 15th,and make your arrangements accordinglyThe final roster of speakers for Black Hat Japan 2007 is now availableonline View the detailed abstracts and bios here:http://wwwblackhatcom/html/bh-japan-07/bh-jp-07-en-speakershtmlPresentations Black Hat Japan 2007:Brandon, Baker, Kick Ass HypervisorBilly Hoffman, The Little Hybrid Web Worm that CouldHalvar Flake, Automated Unpacking and Malware ClassificationClemens Kolbitsch and Sylvester Keil, Stateful Fuzzing of wirelessDevice Drivers in an Emulated EnviromentPaul Sebastian Ziegler, Multiplatform Malware within theNET-FrameworkPedram Amini and Aaron Portnoy, Fuzzing Sucks or Fuzz it like youmean itDavid LaPorte and Eric Kollmann, Passive OS Fingerprionting Using DHCPKanatoko, DNS Pinning and Socket APINguyen Anh Quynh, HiJacking Virtual Machine ExecutionJacob West, Secure Programming with Static AnalysisNate McFeters, Billy K Rios, and Rob Carter, URI Use and AbuseBlack Hat Japan will be held October 23-26, at Keio Plaza Hotel, TokyoTo see the schedule for this year's briefings, check our website here:http://wwwblackhatcom/html/bh-japan-07/bh-jp-07-en-schedulehtmlLink: https://wwwblackhatcom/html/bh-link/briefingshtmlhttp://www.secuobs.com/revue/news/6005.shtmlhttp://www.secuobs.com/revue/news/6005.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Online registration for Black Hat DC 2008 is now open Follow the link totake advantage of the early bird rate and register on the webThe Briefings and Trainings will be held February 18-21 at the WestinWashington DC City Center More about the venue is available here:http://blackhatcom/html/bh-dc-08/bh-dc-08-venuehtmlYou must complete the on-line registration form regardless of yourpayment methodForms submitted via fax, email, telephone or snail mail will not beaccepted Early Bird Rate closes January 1, 2008http://www.secuobs.com/revue/news/6004.shtmlhttp://www.secuobs.com/revue/news/6004.shtml Secuobs.com : 2008-02-08 15:26:43 - Black Hat Announcements - Group room rates are now valid until February 1, 2008, 5PM EST So actnow toreserve your room at this special price The simplest and mostconvenientway to reserve your room is to register online You may also call thehoteldirectly: +202-429-1700 or 1-800-westin1 and use the Group Code: BLACKHATRegistration website:http://wwwstarwoodmeetingcom/StarGroupsWeb/booking/reservationid=0710170314etkey=324DERooms et Rates:Single/Double: $219 per night single and double occupancyWestin Washington DC City Center:Address: 1400 M Street NW, Washington DC, 20005Telephone: +202-429-1700 or 1-800-westin1http://www.secuobs.com/revue/news/6003.shtmlhttp://www.secuobs.com/revue/news/6003.shtml Secuobs.com : 2008-02-07 11:17:50 - Black Hat Announcements - Papers and presentations are now being accepted for the Black Hat USA2008 BriefingsThis year's conference will be focused on deep technical informationrather than policy and we're looking for groundbreaking work in a widevariety of topics We've made the list of presentation tracksavailable online athttps://wwwblackhatcom/html/bh-usa-08/bh-usa-08-cfphtml - pleasetake a look and consider submitting your workSubmit proposals by completing the submissions form on the CFP serverathttps://cfpblackhatcom/http://www.secuobs.com/revue/news/5490.shtmlhttp://www.secuobs.com/revue/news/5490.shtml Secuobs.com : 2008-02-06 01:52:53 - Black Hat Announcements - We have finished selecting speakers and our schedule is now fullPlease check out our speakers page for a complete list of speakers andfor updateshttp://wwwblackhatcom/html/bh-dc-08/bh-dc-08-speakershtmlThere you will find abstracts for the upcoming presentations and getsome background information on the speakersWe are done reviewing papers, if you have not received status of yoursubmission, please email nikita at blackhatdot comIf you didn't get selected for this show don't be discouraged, pleaseconsider submitting again Our USA CFP opens February 5 Submit here:https://cfpblackhatcom/http://www.secuobs.com/revue/news/5147.shtmlhttp://www.secuobs.com/revue/news/5147.shtml Secuobs.com : 2008-02-06 01:52:53 - Black Hat Announcements - Black Hat DC 2008 is pleased to announce the selection of a keynotespeaker Please join us at the Westin DC City Center to hear JerryDixon, Infragard's National Member Alliance's Vice President forGovernment Relations, Director of Analysis for Team Cymru, and formerExecutive Director of the National Cyber Security Division NCSD etUS-CERT,of the Department of Homeland SecurityJerry's Keynote is entitled "Quest for the Holy Grail" and theabstract follows:"Online fraud has become pervasive and increasing at an alarming rateaffecting all organizations, private and public This talk willprovidean overview of current trends affecting both government and privatesector companies, what enables online fraud, what are some of thebarriers, and suggestions for what organizations should be doing tocombat the problemhttp://www.secuobs.com/revue/news/5146.shtmlhttp://www.secuobs.com/revue/news/5146.shtml Secuobs.com : 2008-01-26 14:22:19 - Black Hat Announcements - Group room rates are valid until January 25, 2008, 5PM EST So act now toreserve your room at this special price The simplest and mostconvenientway to reserve your room is to register online You may also call thehoteldirectly: +202-429-1700 or 1-800-westin1 and use the Group Code: BLACKHATRegistration website:http://wwwstarwoodmeetingcom/StarGroupsWeb/booking/reservationid=0710170314etkey=324DERooms et Rates:Single/Double: $219 per night single and double occupancyWestin Washington DC City Center:Address: 1400 M Street NW, Washington DC, 20005Telephone: +202-429-1700 or 1-800-westin1http://www.secuobs.com/revue/news/3423.shtmlhttp://www.secuobs.com/revue/news/3423.shtml Secuobs.com : 2008-01-25 22:13:28 - Black Hat Announcements - Reserve your room now at the Moevenpick Hotel Amsterdam City Centre,grouprates will end February 19 The new Moevenpick Hotel Amsterdam CityCentreis located on the waters edge yet within walking distance from the oldcenter of Amsterdam and the Central StationAll guestrooms, conference facilities and public areas arenon-smoking,including the Restaurant and Bar Kindly note that there are nodesignatedsmoking areas on siteExcellent rooms: larger than average, with top of the bill facilitieswired/free wireless LAN highspeed internet, breathtaking view overtheharbour or city and other five star facilitiesThe excellent location makes the hotel an exciting place to be Thecombination between the adjacent Passenger Terminal Amsterdam andMuziekgebouw is unique and unsurpassed by anyone in Amsterdam Thearea isupcoming, trendy and holds a high cultural and creative allureTo learn more about the venue please visit our venue page:https://wwwblackhatcom/html/bh-europe-08/bh-eu-08-venuehtmlMoevenpick Hotel Amsterdam City CentreAddress: Piet Heinkade 11; 1019 BR Amsterdam; NetherlandsTelephone: +31 20 519 1200Facsimile: +31 20 519 1239email: hotelamsterdam@moevenpickcomGroup Reservations:Telephone: +31 20 519 1200Facsimile: +31 20 519 1239Rates Vaild for bookings made by February 19, 2008:Business single/double:EUR 155 per night inclusive of 6% VAT and service charge andexclusive of5% city tax DOES NOT include the breakfast Free Wireless isavailablethroughout the hotel Rates are good for stays from 23-29 March 2008http://www.secuobs.com/revue/news/3224.shtmlhttp://www.secuobs.com/revue/news/3224.shtml Secuobs.com : 2008-01-24 15:41:25 - Black Hat Announcements - We have made our first round of talk selections for our Black HatEurope2008 conferenceOur initial schedule is online now at:http://wwwblackhatcom/html/bh-europe-08/bh-eu-08-schedulehtmlHere is just a short list of some of the great presentations we havescheduled:Cracking GSM - David Hulton, Steve HultonDevelopments in Cisco IOS Forensics - Felix "FX" LindnerCrackStation - Nick BreeseThe Fundamentals of Physical Security- Deviant OllamExposing Vulnerabilities in Media Software - David ThielBiologger - A Biometric Keylogger - Matthew LewisMalware on the Net - Behind the Scenes- Iftach Ian AmitLDAP Injection et Blind LDAP Injection - Chema Alonso, Jose ParadaGimenoMobile phone spying tools - Jarno NiemelaTBD - David LitchfieldHacking Second Life - Michael ThumannMany more to come Please check out our speakers page for a completelist of speakers and for updates There you will find abstracts fortheupcoming presentations and get some background information on thespeakershttp://wwwblackhatcom/html/bh-europe-08/bh-eu-08-schedulehtmlIf you don't get selected for this show don't be discouraged, pleaseconsider submitting again Our Black Hat USA CFP will open February 1,Submit now as we may close the cfp early if we receive enough qualitytalksSubmit here: https://cfpblackhatcom/http://www.secuobs.com/revue/news/2892.shtmlhttp://www.secuobs.com/revue/news/2892.shtml Secuobs.com : 2008-01-24 15:41:25 - Black Hat Announcements - Group room rates are valid until January 25, 2008, 5PM EST So act now toreserve your room at this special price The simplest and mostconvenientway to reserve your room is to register online You may also call thehoteldirectly: +202-429-1700 or 1-800-westin1 and use the Group Code: BLACKHATRegistration website:http://wwwstarwoodmeetingcom/StarGroupsWeb/booking/reservationid=0710170314etkey=324DERooms et Rates:Single/Double: $219 per night single and double occupancyWestin Washington DC City Center:Address: 1400 M Street NW, Washington DC, 20005Telephone: +202-429-1700 or 1-800-westin1http://www.secuobs.com/revue/news/2891.shtmlhttp://www.secuobs.com/revue/news/2891.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - InformationWeek has a top 10 Infamous Moments In Security Researchartice, David Litchfield and Black Hat are listed as #1 for David'swork on an SQL problem that turned into the slammer worm You willnotice that Mike Lynn is mentioned as #3, but it is not revealed thathe presented this research at Black Hat as well, nor the ISS and Ciscolawsuits against Black Hat mentioned But not to worry, DavaidLitchfield is also in position #6 with his Oracle PLSQL gatewayvulnerabilityhttp://www.secuobs.com/revue/news/803.shtmlhttp://www.secuobs.com/revue/news/803.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Black Hat Federal 2006 Briefings and Trainings registration is now openThe Briefings offer two tracks over two days with 22 presentationsThere will be 11 Trainings classes, with new offerings such as SaumilShah's "The Exploit Laboratory - Buffer Overflows For Beginners," andMatt Hargett's "Binary Static Analysis: From the Inside-Out" Classsizes for all trainings are limited to ensure each student receivesindividual attention Register early before classes fill up and toreceive an early discounthttp://www.secuobs.com/revue/news/802.shtmlhttp://www.secuobs.com/revue/news/802.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - From the article "The legal wrangling finally ended this week, and theFBI case against Lynn has closed Lynn spoke with Wired News in Julyto tell his side of the story Now Black Hat founder Jeff Moss talksabout what happened from his perspective and why companies continue torepeat the mistakes of their predecessors in trying to suppress thefull disclosure of security bugs and punish security researchers"http://www.secuobs.com/revue/news/796.shtmlhttp://www.secuobs.com/revue/news/796.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Jeff Moss updates the BlackPage with his thoughts about ISS/Cisco vsMike Lynn/Black Hat From the article "This update to the BlackPagewill catch us up with what has happened in the ISS and Cisco vs MikeLynn and Black Hat case, and I hope to set the record straight I havealso asked for comment from other security experts, and that will beincluded as separate BlackPage entries"http://www.secuobs.com/revue/news/793.shtmlhttp://www.secuobs.com/revue/news/793.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - From the announcement "CMP Media, a marketing solutions company servingthe technology, healthcare and entertainment markets, announced todaythat it has acquired Black Hat Inc, a producer of informationsecurity conferences and training that includes Black Hat Briefingsand Conferences Jeff Moss, founder and owner, will continue to runBlack Hat and will join CMP Media as Director of Black Hat CombiningCMP's current portfolio of Computer Security Institute CSI, SecureEnterprise magazine and the Security Pipeline website with Black Hat,will position CMP Media as the strongest platform in the computersecurity media market This move will enable Black Hat to takeadvantage of growth opportunities we couldn't pursue as a smallcompany, such as international expansion, while enabling me to keepdoing what I love the most -- working with speakers and building theconference programs," Jeff Moss addedhttp://www.secuobs.com/revue/news/789.shtmlhttp://www.secuobs.com/revue/news/789.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Laurent Oudot is offering a new class Live Hacking on Honeypots for ourAmsterdam conference Overview: Few years after the birth of thosevaluable solutions to delude attackers, Honeypots have become a newkey to improve the security of IT infrastructures This 2 dayscomprehensive course is geared to teach you almost anything abouthoneypots technologies: theory, value, goals, conception, design,architectures, etc Practical periods will allow students to switchtheir role from whitehat to blackhat, with live hacking on dedicatedhoneypotshttp://www.secuobs.com/revue/news/785.shtmlhttp://www.secuobs.com/revue/news/785.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - At Black Hat USA 2005, reporter Robert Vamosi spoke with Black HatSpeaker Alex Wheeler regarding the state of vulnerabilities inAnti-virus software According to Robert, only one vendor - F-Securetook the threat seriously enough to determine that patches werewarranted Keep an eye on vulnerabilities in security related software- vulnerability researchers are starting to have them in their sightshttp://www.secuobs.com/revue/news/784.shtmlhttp://www.secuobs.com/revue/news/784.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat Federal 2006 CFP is closed, and speakers have been selectedand are now on-line The Federal show is highlighing some greatpresentations on technical attack, defense, root kit advancements andforensics Something for every security ninja in the new yearhttp://www.secuobs.com/revue/news/783.shtmlhttp://www.secuobs.com/revue/news/783.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - In a round-up of the highlights in technology this year, PC World listsCisco as a 'Loser' for it's censorship attempts at Black Hat USA 2005Juniper is shown as the 'Winner', having hired researcher and BlackHat speaker Michael Lynnhttp://www.secuobs.com/revue/news/782.shtmlhttp://www.secuobs.com/revue/news/782.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Speakers for Black Hat Europe 2006 Briefings have been selectedSelections include 'Skeletons in Microsoft's Closet - Silently FixedVulnerabilities' by Steve Manzuik and Andre Protas, 'RAIDE: RootkitAnalysis Identification Elimination' by Peter Silberman and JamieButler, and 'Exploiting Embedded Systems' by Barnaby Jack This is thesixth Briefings in Europe since our first Briefings in 2000 Black HatEurope 2006 Briefings and Trainings take place in Amsterdam, 28February - March 2006 Visit wwwblackhatcom for to register or forfurther informationhttp://www.secuobs.com/revue/news/781.shtmlhttp://www.secuobs.com/revue/news/781.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - David Litchfield presented the Black Hat Federal audience with a '0-day'Oracle vulnerability, as well as risk mitigation techniques afterOracle neglected to address the problem in their latest patch ThisSecurityFocus article discusses the growing frustration in thesecurity community regarding Oracles apparent lack of commitment tobuilding healthy relationships with independent researchershttp://www.secuobs.com/revue/news/780.shtmlhttp://www.secuobs.com/revue/news/780.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Brian Krebs of the Washington Post provides a summary of many of thegroundbreaking presentations at the Black Hat Federal 2006 Briefingshttp://www.secuobs.com/revue/news/779.shtmlhttp://www.secuobs.com/revue/news/779.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - As rootkit technology continues to advance, researcher John Heasmaninvestigates the potential for BIOS rootkits He concludes that thisis an attack-vector that could have devastating consequences John isworking on a toolkit to detect these attackshttp://www.secuobs.com/revue/news/778.shtmlhttp://www.secuobs.com/revue/news/778.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Parker and Devost show that it is not enough to take technicalcountermeasures to defend yourself it's necessary to understand whomay be attacking you Parker literally wrote the book on adversarycharacterization, and Government Computer News takes a look at hislatest researchhttp://www.secuobs.com/revue/news/777.shtmlhttp://www.secuobs.com/revue/news/777.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - In an extensive five-part review author Richard Bejtlich discusses eachpresentation he attended and interactions he had at Black Hat Federal06 Richard has trained at a previous Black Hat, was a contributor to'hacking exposed' and the author of 'The Tao of Network SecurityMonitoring: Beyond Intrusion Detection'http://www.secuobs.com/revue/news/776.shtmlhttp://www.secuobs.com/revue/news/776.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Black Hat Europe early bird rate is about to end There are 6 days leftof a $200 USD discount on registration for Black Hat Europe Briefingsand Trainings 2006 Black Hat Europe takes place February 28-March 3,2006 at the Grand Hotel Krasnapolsky, Amsterdam, NL Register now andsavehttp://www.secuobs.com/revue/news/775.shtmlhttp://www.secuobs.com/revue/news/775.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat USA 2006 Call for Papers is now open Don't hesitate tosubmit your presentations for consideration Unleash you best kung-fufor the greatest chance of being selected For complete details followthe linkhttp://www.secuobs.com/revue/news/774.shtmlhttp://www.secuobs.com/revue/news/774.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Online registration for Black hat Europe 2006 has closed On siteregistration for training will take place Tuesday, 28 February 2006,16:00 - 21:00 On site registration for the Briefings will beWednesday, 01 March 2006, 16:00 - 18:00 Follow the link for more thefull schedulehttp://www.secuobs.com/revue/news/773.shtmlhttp://www.secuobs.com/revue/news/773.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Microsoft sells a fingerprint reader designed to logs into web siteswithout remembering passwords Despite this, Microsoft explicatelystates that the device should not be used to protect sensativeinformation Mikko Kiviharju, a finnish researcher, discovered thatMicrosoft chose turn off the encryption that is supported by the OEM,Digital Persona What baffles the Black Hat team is the statement fromDigital Persona's CTO - 'The fact that they turned the encryption off,I would argue, does not in a practical sense open up any securityholes' Then why include it as a featurehttp://www.secuobs.com/revue/news/772.shtmlhttp://www.secuobs.com/revue/news/772.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Black Hat presenter Billy Hoffman, a researcher at SPI Dynamics,discusses the possibility of advanced Ajax based worms In onescenario discussed, if an online stock broker site was breached, itcould not only impact thousands of users on a site, but couldpotentially impact the stock market as a whole These threats are morethan theoretical, as the recent infection of MySpace has shownhttp://www.secuobs.com/revue/news/771.shtmlhttp://www.secuobs.com/revue/news/771.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Ryan Naraine writes for eWeek about Peter Silberman and Jamie Buttler'sRAIDE tool that was released at Black Hat Amsterdam From the article'Spurred on by the ongoing cat-and-mouse game between malicioushackers and existing anti-rootkit scanners, a pair of securityresearchers have teamed up on a new tool that promises a solution tothe threat from stealthy malware'http://www.secuobs.com/revue/news/770.shtmlhttp://www.secuobs.com/revue/news/770.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat USA 2006 Speaker selection process is now completeThis years Briefings will be the largest ever in terms of contentEven with an additional two track of content per day we wereoverwhelmed with submissions In the end there were over twentysubmissions we would have liked to accept, but simply had no roomCurious about who was selected, and what they are presenting on Checkout the speakers page belowThe quality and quantity of submissions was at an all time hight thisyear Even with an added two tracks of content there was not nearlyenough room to accept all the presentation we wanted toTo those who made it, congratulations Please work hard to impress theaudienceTo those who didn't please know that most submissions were up to ourstandards, but lack of room and subject matter overlap were the mainreasons for rejection Don't give uphttp://www.secuobs.com/revue/news/769.shtmlhttp://www.secuobs.com/revue/news/769.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Over at infoworld, an article about BlueBag, a custom Bluetooth sniffingset up created by Stefano Zanero A long time Black Hat contributorand his companyIf you make it to Black Hat this summer you can see it in actionduring their presentation"If you happened to fly through Milan's Malpensa Airport last March,your mobile phone may have been scanned by the BlueBag"http://www.secuobs.com/revue/news/768.shtmlhttp://www.secuobs.com/revue/news/768.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - I was asked by a reported to comment on this, so I went and read itMicrosoft has some nice things to say about Black Hat who would havethought the their security world would have changed so much in a fewshort years>From the article:"he cool part is that we will be the first software vendor to presentan entire Black Hat Briefing track on a pre-release product,specifically to gather security researcher feedback We submittedseveral presentations to the Black Hat event organizers and, based onthe technical merit and interest to the audience, they were acceptedDay two of the Black Hat event in Las Vegas will feature deeplytechnical presentations on security features and functionality inWindows Vista ThereÄôs a total of five presentations, and of courseMicrosoft researchers and architects will be there to activelyparticipate in the event"http://www.secuobs.com/revue/news/767.shtmlhttp://www.secuobs.com/revue/news/767.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat Briefings USA 2005 was held July 27-28 in Las Vegas atCaesars PalaceA post convention wrap up can be found athttp://wwwblackhatcom/html/bh-usa-05/bh-usa-05-indexhtmlBlack Hat Briefings bring together a unique mix in security: the bestminds from government agencies and global corporations with theunderground's most respected hackers These forums take placeregularly in Las Vegas, Washington DC, Amsterdam, and TokyoVideo, audio and supporting materials from past conferences will beposted here, starting with the newest and working our way back to theoldest with new content added as available Past speeches and talksfrom Black Hat in an iPod friendly mp4 h264 192k video format Ifyou want to get a better idea of the presentation materials go tohttp://wwwblackhatcom/html/bh-media-archives/bh-multi-media-archiveshtml#USA-2005and download them Put up the pdfs in one window while watching thetalks in the other Almost as good as being therehttp://www.secuobs.com/revue/news/766.shtmlhttp://www.secuobs.com/revue/news/766.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Past speeches and talks from the Black Hat Briefings computer securityconferencesThe Black Hat Briefings USA 2005 was held July 27-28 in Las Vegas atCaesars PalaceA post convention wrap up can be found athttp://wwwblackhatcom/html/bh-usa-05/bh-usa-05-indexhtmlBlack Hat Briefings bring together a unique mix in security: the bestminds from government agencies and global corporations with theunderground's most respected hackers These forums take placeregularly in Las Vegas, Washington DC, Amsterdam, and TokyoVideo, audio and supporting materials from past conferences will beposted here, starting with the newest and working our way back to theoldest with new content added as available Past speeches and talksfrom Black Hat in an iPod friendly mp3 cbr 64k audio format If youwant to get a better idea of the presentation materials go tohttp://wwwblackhatcom/html/bh-media-archives/bh-multi-media-archiveshtml#USA-2005and download them Put up the pdfs in one window while listening thetalks in the other Almost as good as being therehttp://www.secuobs.com/revue/news/765.shtmlhttp://www.secuobs.com/revue/news/765.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The BlackPage highlights breaking security research submitted by leadingcorporate professionals, government experts, and members of theunderground hacking communityThe June 13, 2006 page highlights thenumber of voice-service related presentations we will be seeing at ourupcoming conference"However, the security impacts of prevalent and cheap voice servicesover IP networks go far beyond device, protocol and server weaknessesWith voice communication comes social engineering, so this year wehave presentations demonstrating VoIP phishing, voice analytics usedto defend against social engineering attacks, and the more traditionalexploitation of technology weaknesses"http://www.secuobs.com/revue/news/764.shtmlhttp://www.secuobs.com/revue/news/764.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The BlackPage highlights breaking security research submitted by leadingcorporate professionals, government experts, and members of theunderground hacking community The June 20, 2006 page highlights theForensics and incident response and adversary identification topics wewill be seeing at our upcoming conference"I am so relieved It has finally happened: the forensic field istransitioning from techniques that satisfy the needs of lawenforcement to techniques that satisfy the needs of everyone else "http://www.secuobs.com/revue/news/763.shtmlhttp://www.secuobs.com/revue/news/763.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - One of many flaws found allowed them to take over a laptop byexploiting a bug in an 80211 wireless driver The hack will bedemonstrated at the upcoming Black Hat USA 2006 conference during apresentation by David Maynor, a research engineer with InternetSecurity Systems and Jon Ellch, a student at the US Navalpostgraduate school in Monterey, California"This would be the digital equivalent of a drive-by shooting," saidMaynor The victim would not even need to connect to a network for theattack to work, he said"http://www.secuobs.com/revue/news/762.shtmlhttp://www.secuobs.com/revue/news/762.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat Briefings Japan '06 speakers have been selected Wereceived many presentations this year and we have chosen a broadsampling of topics facing security professionals today, with anemphasis on issues facing the Asian Pacific region The schedule is online now and available on our Black Hat Japan site in both English andJapaneseThere will be 2 tracks, over 2 days comprised of renowned informationand computer security professionals We have a wide selection oftopics this year from "Catching Malware" to "Subverting Vista Kernel"Speakers include: Alex Stamos and Zane Lackey - Breaking AJAX WebApplications: Vulns 20 in Web 20 Jeremiah Grossman - HackingIntranet websites from the outside: Malware just got a lot moredangerous Dan Moniz - Six Degrees of XSSploitation Paul Bohm - TamingBugs: The art and science of writing secure code Joanna Rutkowska -Subverting Vista Kernel For Fun And Profit Kenneth Geers et AlexanderEisen - IPv6 World Update Strategy et Tactics Heikki Kortti - InputAttack Trees Mr Sugiura - Winny P2P security Darren Bilby - Low Downand Dirty: Anti-Forensic Rootkits Thorsten Holz and Georg Wicherski -Catching Malware to Detect, Track and Mitigate Botnets Yuji Hoshizawa- TBD Scott Stender - Attacking Internationalized SoftwarePlease check out our speakers page for updates There you will findAbstracts for the upcoming presentations and get some backgroundinformation on the speakers We look forward to seeing you at Tokyo,Keio Plaza Hotel, October 3-6th, 2006 More information is availableon our Black Hat Japan siteTo register visit us online at:http://wwwblackhatcom/html/bh-registration/bh-registrationhtml#JapanAct fast our early bird discount will end September 15th We lookforward to seeing you at Tokyo, Keio Plaza Hotel, October 3-6th, 2006More information on this years venue is available athttp://wwwblackhatcom/html/bh-japan-06/bh-jp-06-en-venuehtml http://www.secuobs.com/revue/news/761.shtmlhttp://www.secuobs.com/revue/news/761.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Black Hat Japan 2006 Presentations are now available onlinehttp://wwwblackhatcom/html/bh-media-archives/bh-archives-2006html#AS_2006Presentation topics available include:Anti-Forensic Rootkits, The Artand Science of Writing Secure Code, Hacking Intranet Websites from theOutside,Breaking AJAX Web Applications, Subverting Vista Kernel andmoreView more speaker info:http://wwwblackhatcom/html/bh-japan-06/bh-jp-06-en-speakershtmlWe Also have the presentation material from USA 2006 show online, andwe Anticipate we will have audio and video of the presentationsavailable for download within the next few monthsTo view the USA media archives and more:http://wwwblackhatcom/html/bh-multimedia-archives-indexhtmlhttp://www.secuobs.com/revue/news/760.shtmlhttp://www.secuobs.com/revue/news/760.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - Interested in submitting to Black Hat DC Here are some guidelines andsuggestionsBlack Hat DC this year will focus on the operational aspects ofinformation security, both defensive and offensive ByÄòoperationalÄô we mean techniques, technologies, and code that areused as part of an ongoing cycle for securing the information systemsof an organization It could be applied to the offensive initiativesof a group such as a pen test team or vulnerability researchersWe are not looking for how-tos, pure research, or pure policypresentations We are looking for innovations that can be applied toinformation security operations by real people in real organizationsHere are a few example topics that are good fits:-Automating detection and remediation of important threats-Methods to deploy zero-day attacks for maximum effect and minimalexposure-Integrating binary analysis into the patch management cycle tooptimize the decision-to-deploy process-Exposing vulnerabilities in little known systems that introduce novelattack vectors, from SCADA, WiFi, RFID, or machine BIOS-Determining security activities that are ongoing cycles that can beoptimized for strategic gain You would include specific examples within-depth discussion of the technical solutions and resultsAnd a few examples of topics that do not reflect our focus for BlackHat DC:-Why updating your AUP is a good thing-How to install anything-In-depth review of a specific toolIf you have questions about a topic as it applies, just drop us anemailBlack Hat has always focused on the practical, applied uses ofinformation and computer security Your audience is looking to learnthe latest trends, as well as the latest techniques to either attackor defend their networkshttp://www.secuobs.com/revue/news/759.shtmlhttp://www.secuobs.com/revue/news/759.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat Briefings USA 2006 held August 2-3 in Las Vegas at CaesarsPalace Two days, fourteen tracks, over 85 presentations Dan Larkinof the FBI was the keynote speaker Celebrating our tenth yearanniversary A post convention wrap up can be found athttp://wwwblackhatcom/html/bh-usa-06/bh-usa-06-indexhtmlBlack Hat Briefings bring together a unique mix in security: the bestminds from government agencies and global corporations with theunderground's most respected hackers These forums take placeregularly in Las Vegas, Washington DC, Amsterdam, and TokyoIf you want to get a better idea of the presentation materials go to:http://wwwblackhatcom/html/bh-media-archives/bh-multi-media-archiveshtml#USA-2006and download them Put up the pdfs in one window while watching thetalks in the other Almost as good as being thereVideo, audio and supporting materials from past conferences will beposted here, starting with the newest and working our way back to theoldest with new content added as available Past speeches and talksfrom Black Hat in an iPod friendly mp4 h264 192k video formatAlso check here to download:http://wwwblackhatcom/podcast/bh-usa-06-audiorsshttp://wwwblackhatcom/podcast/bh-usa-06-videorsshttp://www.secuobs.com/revue/news/758.shtmlhttp://www.secuobs.com/revue/news/758.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat Briefings USA 2006 was held August 2-3 in Las Vegas atCaesars Palace Two days, fourteen tracks, over 85 presentations DanLarkin of the FBI was the keynote speaker Celebrating our tenth yearanniversaryA post convention wrap up can be found athttp://wwwblackhatcom/html/bh-usa-06/bh-usa-06-indexhtmlBlack Hat Briefings bring together a unique mix in security: the bestminds from government agencies and global corporations with theunderground's most respected hackers These forums take placeregularly in Las Vegas, Washington DC, Amsterdam, and TokyoIf you want to get a better idea of the presentation materials go tohttp://wwwblackhatcom/html/bh-media-archives/bh-multi-media-archiveshtml#USA-2006and download them Put up the pdfs in one window while watching thetalks in the other Almost as good as being thereVideo, audio and supporting materials from past conferences will beposted here, starting with the newest and working our way back to theoldest with new content added as available Past speeches and talksfrom Black Hat in an iPod friendly mp3 audio and mp4 h264 192kvideo formathttp://www.secuobs.com/revue/news/757.shtmlhttp://www.secuobs.com/revue/news/757.shtml Secuobs.com : 2008-01-12 08:09:30 - Black Hat Announcements - The Black Hat Briefings USA 2006 was held August 2-3 in Las Vegas atCaesars Palace Two days, fourteen tracks, over 85 presentations DanLarkin of the FBI was the keynote speaker Celebrating our tenth yearanniversaryA post convention wrap up can be found athttp://wwwblackhatcom/html/bh-usa-06/bh-usa-06-indexhtmlBlack Hat Briefings bring together a unique mix in security: the bestminds from government agencies and global corporations with theunderground's most respected hackers These forums take placeregularly in Las Vegas, Washington DC, Amsterdam, and TokyoIf you want to get a better idea of the presentation materials go tohttp://wwwblackhatcom/html/bh-media-archives/bh-multi-media-archiveshtml#USA-2006and download them Put up the pdfs in one window while watching thetalks in the other Almost as good as being thereVideo, audio and supporting materials from past conferences will beposted here, starting with the newest and working our way back to theoldest with new content added as available Past speeches and talksfrom Black Hat in an iPod friendly mp3 audio and mp4 h264 192kvideo formathttp://www.secuobs.com/revue/news/756.shtmlhttp://www.secuobs.com/revue/news/756.shtml http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2009-05-27 01:49:08 - BlackHat Announcements : We have three new course offerings: Intercepting Secure Communicationsby Moxie Marlinspike, Mac Hacking Class by Vincenzo Iozzo, andAttacking Hardware: Unsecuring once Secure Devices by ChristopherTarnovsky Register by June 1 to get the best pricing A completelisting of all our course offerings is available on our USA 2009Training pagehttp://www.secuobs.com/revue/news/101970.shtmlhttp://www.secuobs.com/revue/news/101970.shtml Secuobs.com : 2009-05-27 01:49:08 - BlackHat Announcements - SensePost has added a new course to their stable of offerings: Hackingby Numbers: PCI Edition This is a practical, technical course aimedat beginner penetration testers, that teaches method-based hackerthinking, skills and techniques, specifically focusing on the approachand priorities for penetration testing required by the PCI DSSstandard Register by June 1 to get the Early Bird pricinghttp://www.secuobs.com/revue/news/101969.shtmlhttp://www.secuobs.com/revue/news/101969.shtml