CCC – We learn Security!

Like last here here some recommendations for starting into 2019. Mainly from 35C3 and one from Bluehat.

See the original thread from twitter here (It’s a bit messed up, but should be complete):

A deep dive into the world of DOS viruses by @Benjojo12 https://t.co/ufSYk5Bcs8

— Daniel Sauder (@DanielX4v3r) January 4, 2019

What The Fax?! by @ynvb and @eyalitkin https://t.co/aw1GMV9pqn

— Daniel Sauder (@DanielX4v3r) January 4, 2019

Compromising online accounts by cracking voicemail systems by @martin_vigo https://t.co/ZZWqDwiuus

— Daniel Sauder (@DanielX4v3r) January 4, 2019

Space Ops 101 – An introduction to Spacecraft Operations by Sven Prüferhttps://t.co/pGEX25XKAP

— Daniel Sauder (@DanielX4v3r) January 4, 2019

The Layman's Guide to Zero-Day Engineering – A demystification of the exploit development lifecycle by @itszn13 and @gaasedelen https://t.co/08Uu4ceTnc

— Daniel Sauder (@DanielX4v3r) January 4, 2019

Du kannst alles hacken – du darfst dich nur nicht erwischen lassen. – OpSec für Datenreisende, about Opsec for hackes (German, English also available) by @Linuzifer and @__ths__https://t.co/CaOTrLjWCQ

— Daniel Sauder (@DanielX4v3r) January 6, 2019

Inside the AMD Microcode ROM – (Ab)Using AMD Microcode for fun and security by Benjamin Kollenda and Philipp Koppe
Slides: https://t.co/zF7HY5S8fc
github: https://t.co/R4aiWHF5Kc
Video: https://t.co/tz8ceqz48c

— Daniel Sauder (@DanielX4v3r) January 7, 2019

Self-encrypting deception – weaknesses in the encryption of solid state drives (SSDs) by Carlo Meijer
Draft Paper https://t.co/XzW43l8mwB
Slides https://t.co/TAH2nSchkP
Talk https://t.co/R5Bka9kYaz

— Daniel Sauder (@DanielX4v3r) January 7, 2019

https://t.co/jmj3mVQhWU – Hacking the most popular cryptocurrency hardware wallets by @nedos, @cryptotx, @stacksmashing https://t.co/Oejsevyf2Z

— Daniel Sauder (@DanielX4v3r) January 8, 2019

The Mars Rover On-board Computer – How Curiosity's Onboard Computer works, and what you can learn from how it was designed by @breakthesystem https://t.co/iGWKdedTS8

— Daniel Sauder (@DanielX4v3r) January 8, 2019

A new year always brings the talks from the Chaos Communication Congress. Since I had some time for watching, here is a list with my tweets of recommended talks (plus one from Blackhat). Have fun watching.

34C3 talk 1-day exploit development for Cisco IOS by @artkond https://t.co/OvoCBvGzxc

— Daniel Sauder (@DanielX4v3r) December 28, 2017

34C3 Talk: Everything you want to know about x86 microcode, but might have been afraid to ask https://t.co/jGLO5C0jez Great research by Benjamin Kollenda and Philipp Koppe

— Daniel Sauder (@DanielX4v3r) December 29, 2017

#34C3 The Ultimate Apollo Guidance Computer Talk by @pagetable and @hessi https://t.co/aMKFjcRkIF

— Daniel Sauder (@DanielX4v3r) December 29, 2017

#34C3 How risky is the software you use? by Tim Carstens & Parker Thompson https://t.co/DVHAsmwabv and slides https://t.co/dRDxEcFDuF

— Daniel Sauder (@DanielX4v3r) December 29, 2017

#34C3 iOS kernel exploitation archaeology by @_argp https://t.co/eJ3SGLOCTE

— Daniel Sauder (@DanielX4v3r) December 29, 2017

#34C3 Microarchitectural Attacks on Trusted Execution Environments by @inf_0_ https://t.co/wQZcTyIS54

— Daniel Sauder (@DanielX4v3r) December 29, 2017

#34C3 a fun one about car hacking – How to drift with any car by @0xP1kachu and @PapaZours https://t.co/gloFe1QF24 slides https://t.co/lec5tcXJJl

— Daniel Sauder (@DanielX4v3r) December 29, 2017

Missed my talk about type confusion at #34c3? Check out slides https://t.co/KnIvE0402r video https://t.co/QJxgmN4ihp and code https://t.co/B7B7LJNvry

— Mathias Payer (@gannimo) December 30, 2017

Blackhat Talk – Zero Days, Thousands of Nights: The Life & Times of Zero-Day Vulns and Their Exploits by @LilyAblon Video: https://t.co/dOTCZnkAOh Paper: https://t.co/hNQxvtSpY8

— Daniel Sauder (@DanielX4v3r) December 31, 2017

#34C3 avatar² Towards an open source binary firmware analysis framework by nsr video: https://t.co/PVBXNKPVyx
slides: https://t.co/6zV7qgBhY8

— Daniel Sauder (@DanielX4v3r) December 31, 2017

#34C3 ASLR on the line by @brainsmoke video: https://t.co/Zu37VZHkLC paper: https://t.co/uxwnTGpwaY slides: https://t.co/urMsBAatTG

— Daniel Sauder (@DanielX4v3r) January 5, 2018

#34C3 SCADA – Gateway to (s)hell – Hacking industrial control gateways by @StackSmashing https://t.co/tqBeAJcZzg

— Daniel Sauder (@DanielX4v3r) January 5, 2018

#34C3 Taking a scalpel to QNX – Analyzing & Breaking Exploit Mitigations and Secure Random Number Generators on QNX 6.6 and 7.0 by @s4mvartaka and @bl4ckic3 https://t.co/jlrg44LJdM

— Daniel Sauder (@DanielX4v3r) January 5, 2018

Category: CCC

Recommended Talks for the New Year (mainly 35C3)

Recommended Talks for the New Year (34C3, BH)