VirtualF's chaotic mindblaster

Office Firewall

2010-06-17T17:16:00.002+02:00

Some time ago a french Minister mentioned in an official talk that there is a firewall in Office. Lots of ppl laughed at her at that time but now it has become reality. The Office Firewall.

Month of PHP Security 2010

2010-02-28T10:16:00.005+01:00

Yesterday Stefan Esser (ionic) announced the month of PHP security 2010 for May. So the whole month of may will be consecrated to PHP bugs, papers and security development in PHP.

Please read the following if you want to participate.

Month of PHP Security 2010 - CALL FOR PAPERS --------------------------------------------

Three years ago, in March 2007, the Hardened-PHP project had organized the Month of PHP Bugs. During one month more than 40 vulnerabilities in the PHP interpreter were disclosed in order to improve the overall security of PHP. Now, three years later, SektionEins GmbH will continue in the same spirit and organize the Month of PHP Security.

The intention of the Month of PHP Security is to gather the best research and articles about PHP security topics from the security community and share them with the rest of the world. This time the goal is not only to improve the security of PHP itself and applications directly by fixing security bugs, but also to help PHP developers around the world to write better and more secure PHP applications.

The Month of PHP Security will be held in May 2010 by SektionEins GmbH. During the month of May all qualifying entries will be published at http://php-security.org day by day.

CFP Committee
-------------

The CFP committee for the Month of PHP Security consists of

1) Johann-Peter Hartmann
2) Stefan Esser
3) Fukami
4) Ben Fuhrmannek

The CFP committee will review all submissions and select the list of articles that will be published on http://php-security.org

Accepted Topics/Articles
-------------------------

* New vulnerability in PHP [1] (not simple safe_mode, open_basedir bypass vulnerabilities)
* New vulnerability in PHP related software [1] (popular 3rd party PHP extensions/patches)
* Explain a single topic of PHP application security in detail (such as guidelines on how to store passwords)
* Explain a complicated vulnerability in/attack against a PHP widespread application [1]
* Explain a complicated topic of attacking PHP (e.g. explain how to exploit heap overflows in PHP's heap implementation)
* Explain how to attack encrypted PHP applications
* Release of a new open source PHP security tool
* Other topics related to PHP or PHP application security

[1] Articles about new vulnerabilities should mention possible fixes or mitigations.

Responsible Disclosure
----------------------

In case of submitted vulnerabilities SektionEins GmbH will contact the security team of the software vendor after the submission deadline and share the vulnerability information with them. Along with the vulnerability information SektionEins will provide the name of the submitting party in order to give proper credits.

Prizes
------

At the end of May the CFP committee will review the published material and determine the best entries. Selected winners will get the following prizes.

1. 1000 EUR + Syscan Ticket + CodeScan PHP License
2. 750 EUR + Syscan Ticket
3. 500 EUR + Syscan Ticket
4. 250 EUR + Syscan Ticket
5.-6. CodeScan PHP License
7.-16. Amazon Coupon of 65 USD/50 EUR

SektionEins reserves the right to disqualify any submitted entry. While employees of SektionEins can and will submit entries for the Month of PHP Security they are excluded from receiving prizes.

The 1000 EUR cash prize and the Syscan tickets were generously sponsored by Syscan. CodeScan PHP Licenses were sponsored by CodeScan Limited. All other cash and non-cash prizes are sponsored by SektionEins.

The winners of the Syscan tickets can choose one of the four Syscan 2010 conferences to go to. Syscan Tickets include free admission to the conference, speaker's dinner and speaker party. Hotel and travelcosts are NOT included. Please note that non-cash prizes cannot be changed into cash prizes.

Submission
----------

Submissions should be sent to cfp@php-security.org and consist of the following information:
1) Name and contact information (e-mail, postal address)
2) Employer and/or affiliations
3) Article about one of the allowed topics (at least 1000 words)
4) Optionally additional material like slides, whitepaper in PDF format

All submissions must be in English. The preferred delivery format is plain text or HTML, but PDF is also accepted. Please pack all the required items (pictures, text, ...) in a ZIP archive and submit this ZIP archive by email. Deadline for submissions is April 11, 2010.

Additional Information
----------------------

After submission SektionEins GmbH will acknowledge submissions with a signed email. If you do not receive such an email within one week after submission, then please contact us at cfp@php-security.org again.

By submitting your article you are granting SektionEins GmbH the rights to reproduce, distribute, advertise and show your article including but not limited to http://php-security.org, printed and/or electronic advertisements, and all other media. However you are still allowed to publish your own work in whatever way you want.

Thanks
------

We would like to thank Syscan and Coseinc for generously offering 1000 EUR cash prize and four tickets to Syscan. If you are interested in the latest and greatest security research you should really consider visiting one of the four Syscan conferences. You will find furhter information at http://www.syscan.org/

Also we would like to thank CodeScan Limited to offer CodeScan for PHP licenses as a prize. If you are interested in static code analysis for PHP, you might want to check http://www.codescan.com/.

Additional Drawing
------------------

If you help us to spread the word about the Month of PHP Security and the open CFP by writing a blog posting about it, you have the chance to win one of ten 33 USD/25 EUR Amazon Coupons. To participate you have to write a blog posting about the Month of PHP Security CFP and send a link to your blog posting to drawing@php-security.org The winners will be announced on May 1, 2010.

Thank you Stefan Esser Organiser Month of PHP Security / php-security.org SektionEins GmbH / www.sektioneins.com

Windows 7 God Mode

2010-01-05T14:57:00.003+01:00

Are you interested in putting your Windows 7 in God Mode?

Yes well then follow this nice link.

Netbook with Karmic Koala

2010-01-05T14:52:00.002+01:00

Got my HP mini 5101 around Xmas and wanted to have it dual boot. Decided to have Win7 on it and Ubuntu. While installing Ubuntu nearly everything works out of the box, there was just this tiny little problem with my Broadcom card.

lspci showed me that it was a Broadcom Corporation Device 4353. So electrically everything was working but there were no drivers loaded. After googling a bit around I found out that you have to use the Package Manager (System-->Administration-->Synaptic Package Manager and search for broadcom). There I loaded the broadcom wl sources package. After this I rebooted and went to System--> Administration --> Hardware Drivers where I was shown that the driver (STA driver fro broadcom) was now properly loaded and everything works now perfectly.

HOME

2009-06-13T21:52:00.002+02:00

Just about to view the HOME documentary. HOME jsut came out for the day of environment and was directed and produced by Yann Arthus-Bertrand and Luc Besson, i think it's worth having a look at it.

Stay tuned I will report more about the movie once I've seen it.

Farewell to Fravia

2009-05-06T22:50:00.006+02:00

on the 3rd May a brilliant and more than interesting human being left us for ever after having suffered a long illness.

Bye Bye Fravia and thanks for all the brilliant things you leave behind you.

CFP Hack.lu 2009

2009-05-06T22:50:00.002+02:00

Finally the CFP for hack.lu 2009 is out.

Call for Papers Hack.lu 2009
============================

The purpose of the hack.lu convention is to give an open and free
playground where people can discuss the implication of new technologies
in society. hack.lu is a balanced mix convention where technical and
non-technical people can meet each other and share freely all kind of
information. The convention will be held in the Grand-Duchy of
Luxembourg in October 2009 (28-30.10.2008). The conference is three days
of active discussions, presentations and workshops for sharing
experience around new attacks, defensive techniques and information
security (including funky experiments). We would like to announce the
opportunity to submit papers, and/or lightning talk proposals for
selection by the hack.lu technical review committee. This year we will
be doing one hour talks, and some shorter talk sessions.

Scope:
------

Topics of interest include, but are not limited to:
- Software Engineering and Security
- Honeypots/Honeynets
- Spyware, Phishing and Botnets (Distributed attacks)
- Newly discovered vulnerabilities in software and hardware
- Electronic/Digital Privacy
- Wireless Network and Security
- Attacks on Information Systems and/or Digital Information Storage
- Electronic Voting
- Free Software and Security
- Assessment of Computer, Electronic Devices and Information Systems
- Standards for Information Security
- Legal and Social Aspect of Information Security
- Software Engineering and Security
- Security in Information Retrieval
- Network security
- Forensics and Anti-Forensics
- Mobile communications security and vulnerabilities

Deadlines:
----------

The following dates are important if you want to participate in the CfP

Abstract submission: no later than 15 June 2009
Full paper submission: no later than 1st August 2009
Notification date: mid/end of August

Submission guideline:
---------------------

Authors should submit a paper in English up to 5.000 words, using a
non-proprietary and open electronic format. The program committee will
review all papers and the author of each paper will be notified of the
result, by electronic means. Abstract is up to 400 words. Submissions
must be sent using the following interface: http://2009.hack.lu/papers/

Submissions should also include the following:
1. Presenter, and geographical location (country of origin/passport)and
contact info.
2. Employer and/or affiliations.
3. Brief biography, list of publications or papers.
4. Any significant presentation and/or educational experience/background.
5. Reason why this material is innovative or significant or an important
tutorial.
6. Optionally, any samples of prepared material or outlines ready.
7. Information about if yes or no the submission has already been
presented and where.

The information will be used only for the sole purpose of the hack.lu
convention including the information on the public website. If you want
to remain anonymous, you have the right to use a nickname.

Speakers' Privileges:
---------------------

- Accommodation will be provided (3 nights).
- Travel expenses will be covered up to a max amount.
- Conference speakers night.

Publication and rights:
-----------------------

Authors keep the full rights on their publication/papers but give an
unrestricted right to redistribute their papers for the hack.lu
convention and its related electronic/paper publication.

Sponsoring:
-----------

If you want to support the initiative and gain visibility by sponsoring,
please contact us by writing an e-mail to info(AT)hack.lu

Web site and wiki:
------------------

http://2009.hack.lu/

Using a beamer with Ubuntu

2009-04-14T15:53:00.003+02:00

Some weeks ago I was giving a presentation with my Mac and had my Ubuntu laptop to show some demos on it. When I switched the connector of the beamer from my Mac to the Ubuntu machine I had to notice with astonishment that the beamer wouldn't show a damn image. So I had to make the demos with everybody standing in my back and trying to see what's going on.

After the presentation I played around with the beamer and different OSes and the beamer was always working fine exept with Ubuntu.

After having checked the configs and read a little bit about it I found out what to do to make it work.

Just add this little line to your xorg.conf (etc/X11/) file:

sudo vi /etc/X11/xorg.conf

scroll down to the "Device" Section and add

Option "Clone" "true"

save the config file

restart your X server and there you go the screen of the beammer will enlighten.

Cansecwest 09

2009-03-23T13:54:00.006+01:00

Cansecwest 09 is over and I am finally back home again fighting with the jetlag.
The 10th Cansecwest, held in Vancouver, as usual, was again one of the best security conference to go to. Although Dragos is trying to get it to an organised conference where everything is starting at its correct time, chaos came back during day 2 where an electricity outage and a delay in the presentations brought Cansecwest back where it always was and what people, who were there the last years so much appreciated with the conference.

Dragos and his team made really a very good job, although they could have tried for making the weather better but maybe putting the conference back to april will help to solve this problem, but then those that like to lengthen the conference with a trip to whistler wouldn't be happy anymore.

So once again thanks again to Dragos and his team for making this happen.

Coming now to the conference itself, day one was mainly focused on how easy or difficult it is to break mobiel devices like iphones, G1s, Blackberries and alike and there were really some very interesting talks about it.

Day two and three were discussing subjects like:

getting keystrokes by analysing eletrical signals froma PC,
how the situation of malware writers is in china,
Persistant BIOS infection and rootkits aso.

There was also the now famous pwn2own contest where interesting prices such as Laptops and money prices up to 10000$ were waiting for the players.
Although nobody hacked the mobile devices the brwoser contest was only a matter of minutes to some ppl until the hacked into them.

Charlie Miller won the contest of the Safari browser hack as he was the first to attempt hacking the Safari browser on Mac OSX and made it directly but there were also two other guys that were successfull in getting into it.

In this context one person (Nils) was hitting all the records as he was able to break into Safari, Firefox and IE8. He was infact the real winner of this context.

Nils, who I had the chance of having a little conversation with, is a german student finishing his masters thesis at the university of Oldenburg. He is hunting bugs for years now and it was not the first time he sold bugs to ZDI in fact he was financing his studies with his capabilities. :-)
He decided to come out this year as once he has finished his studies, he is looking for a job in the business and Cansecwest is definately the best place to get former employers being interested in you. So now he has probably the choice of the job he wants to get and can finish his studies wihtout fear of unemployment. :-)

Nils, I wish you all the best and maybe we will meet each other again later next year. :-)

Daft Punk in some other ways

2009-03-12T13:59:00.002+01:00

If you like Daft Punk and if you know how to play with your fingers, just check the following video and try it yourself. :-)

If you are not that good with your fingers but say you are better with a keyboard just check out idaft and have fun.

Wearing the sixth sense

2009-03-11T12:59:00.002+01:00

If you don't know the TED website then you definately should take a look at it and especially the videos of the talks given. While visiting TED I just stumbled across the 6th sense talk of Pattie Maes . It's just amazing to see what is done and researched at MIT, in this case the media lab at MIT. Just check out the talk and be amazed what the future will reserve us.

Plug Computing

2009-02-25T15:46:00.003+01:00

Today I came across a nice device and I really think that I will order one directly as this device is so kewl that I need to find out what is really possible with it. If this thing wokrs fine and is doing what I think it can then there will be lots of fun ahead with it. Now let's get it and then report back when tested. Stay tuned

Stonegate SG-500

2009-02-21T14:18:00.007+01:00

Just came across an old SG-500 appliance. I thought it would be interesting to see what else can run on these boxes, so I opened it and found some interesting things inside. Infact the appliance is nothing more than the Portwell NAD 2050 appliance. Based on a Via chip you have everything on the motherboard you need. You have usb connectors, vga output and a primary and secondary controller so you also can connect a full hdd to it. Unfortunately the board apparently stands a max of 512 mb Ram (SODIMM PC 133s).

The box is ideal to build some kind of server or firewall with DNS aso. by using Debian or alike.

So now I do my best to find some old RAMs to put them in and see what will happen with a 8GB CF card in it.

itunes U

2009-02-21T14:13:00.004+01:00

I don't know if you have seen it already bur I discovered in itunes this new section called itunes U. The section has lots of different university lectures on very various themes and it is really interesting to see that all those lectures are for free.

So if you are interested in learning new stuff just feel free to browse through as they are all FREE.

The making of a Panorama

2009-02-18T21:58:00.004+01:00

Well yes finally I found the time to follow this link to assemble some panoramas out of my pictures i've taken some time ago. And it worked just great. :-)

Hopefully I will now find the time to put them online. :-)

BT4 on USB stick with persistent changes

2009-02-16T13:56:00.002+01:00

As I already had BT3 running on an USB stick I wanted to see how easy it is with BT4.
So I got myself an 8GB Stick and followed the following tutorial. The tutorial is very nice and you should be able to do it very rapidly. I used qtparted to partition my USB stick and I chose to have a 2 GB main partition and the rest for the changes partition.

On the other hand side when I booted BT4 for the first time and started netwroking on my Sony Vaio TX3XP networking was tremendusly slow. So I did changed the few things I mentioned in my last blog when installing Ubuntu and now networking is just a pleasure. :-) and the changes stay persistent of course.

Ubuntu and network issues

2009-01-29T14:24:00.003+01:00

Ever installed Ubuntu and your network response went down to practically 0?
Well then welcome to the club.
Installing Ubuntu out of the box and trying to get a nice network connections seems not possible. So here some things you can do to get it to normal speed.
Do the following:

edit /etc/sysctl.conf and add:
net.ipv4.tcp_sack = 0
net.ipv4.tcp_window_scaling = 0

edit /etc/modprobe.d/aliases to remove:
alias net-pf-10 ipv6
and add:
alias net-pf-10 off
alias net-pf-10 off ipv6

if this doesn't help try to comment our everything related to ipv6 in your /etc/hosts file

another thing you could do if the problem is the DNS resolution. Edit your /etc/nsswitch.conf file .

Change the following line:

hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4

into

hosts: files dns mdns4_minimal [NOTFOUND=return] mdns

if this doesn't help try the next step and change the line into

hosts: files dns.

These things should help to speed up your network connection again.

Cansecwest 09

2009-01-21T21:59:00.002+01:00

Cansecwest I'm coming :-)

Finally I registered for Cansecwest. That will be the 4th time I'll participate and I am already looking forward to it as Dragos is really the perfect conference organiser. :)

So see you in march in Vancouver.

C3L DECT meeting

2009-01-19T21:51:00.003+01:00

Hey,

good news. On 16.2 C3L will have two persons from the dedected.org team in their premises in order to have a talk and demo about the DECT issues.

Looking forward to it.

New laptops on the radar

2009-01-19T21:42:00.002+01:00

There are really cool things out there in the wild. As i am always looking around for new gear I came by two computers one so called netbook and the other one is a notebook that is really nice.

The netbook is the Sony Vaio P modell which looks to be really a performant and slock netbook although the price is not so cool. Take a look here

The notebook os the IBM Thinkpad x301 with the 128 GB SSD. Also very nice. x301

Well we'll see what the result will be. :-)

Revival

2009-01-19T09:12:00.002+01:00

Finally I try to do I revival of my old blog. Hopefully I will have the time to update it regularly. Let's hope.

Zen and the art of Risk analysis

2006-08-23T10:47:00.000+02:00

More people are killed every year by pigs than by sharks, which shows you how good we are at evaluating risk.’

-Bruce Schneier

Nothing more to say. :-)

Hack.lu 2006

2006-08-21T14:48:00.000+02:00

CFP closed. Speakers chosen please read hereafter and visit www.hack.lu and register!

Hello all,

It's time again - the second edition of Hack.lu is approaching fast, with a very promising speakers' lineup, and lots of fun in perspective.

This year's event will be held during 3 days, with the first day dedicated to several deep knowledge sessions.

Thanks to our generous sponsors, there is now a fixed fee for the 3 days entrance, no more early bird, no nothing - as the number of seats is limited, be sure to register early nevertheless. And the catering for lunches is included in the entrance fee.

Hack.lu 06

Hack.lu is an open convention /conference where people can discuss about
computer security, privacy, information technology and its cultural/technical implication on society.
The aim of the convention is to make a bridge of the various actors in the
computer security world.
The convention will be held in the Grand-Duchy of Luxembourg in October
2006 (19-21.10.2006).

Scope

Topics of interest include, but are not limited to:
. Software Engineering
. Honeypots/Honeynets
. Electronic/Digital Privacy
. Wireless Network and Security
. Attacks on Information Systems and/or Digital Information Storage
. Electronic Voting
. Free Software and Security
. Assessment of Computer, Electronic Devices and Information Systems
. Standards for Information Security
. Legal and Social Aspect of Information Security
. Software Engineering and Security
. Malware and malicious software
. New security vulnerabilities in Computer Science
. Network security!

Draft Agenda

Thursday 19.10.2006

This day will be filled with so called deep knowledge/hands-on talks. These
talks will cover 2-4 hours and often attendees are requested to bring their
own laptop to be able to follow the course.

The deep knowledge/hands-on talks will be splitted in three tracks (3 rooms
with capacity of approx. 150 persons). There will be no pre-registration
for the rooms but the principle of first come, first serve will be applied.

Here a draft list of the talks we already have:
. Tactical VoIP: VoIPhreaking Intensive by The Gruqq
. Writing Metasploit plugins - from vulnerability to exploit by Saumil
Shah
. 802.11 security Tips and Tricks by Phillippe Teuwen and Cedric
Blancher
. Using Computer Forensics at the police by FCCU (Federal Computer Crime
Unit of Belgium)
. OpenBGP by Henning Brauer

More to come please check regularly
http://www.hack.lu/index.php/Workshops

Friday and Saturday 20/21.10.2006

These two days will be the lecture days with lecture slots of 45 mins.
Please find hereafter a draft Agenda of these two days.

|Friday 20.10.2006 |Saturday 21.10.21006 |
|9:00 |Opening Speech |9:00 |Software Engineering |
| |Renaud Deraison: | |Security |
| | | |Wietse Venema |
|9:50 |Towards an Invisible |9:50 |Security in Grid Computing |
| |Honeypot Monitoring System | |Lisa Thalheim |
| |Nguyen Anh Quynh | | |
|10:40|Refreshment Break |10:40|Refreshment Break |
|11:00|An empirical analysis of |11:00|Secure networking |
| |malware | |Hannes Mehnert, Andreas |
| |Oliver Schmid | |Bogk |
|11:50|Sensible defence |11:50|WiFi Advanced Stealth |
| |Koen Maris | |Laurent Butti & Franck |
| | | |Veysset |
|12:40|Lunch Break |12:40|Lunch Break |
|14:00|Bluetooth Hacking revisited|14:00|Exploiting hidden services |
| | | |to setup anonymous |
| |Thierry Zoller & Kevin | |communication |
| |Finistere | |infrastructure |
| | | |Fabio Pietrosanti |
|14:50|Triple Play; Triple |14:50|Data Broadcasting by Misuse|
| |threats ? - IPTV Security | |of Satellite ISPs |
| |Yen-Ming Chen | |Andre Adelsbach |
|15:40|Refreshment Break |15:40|Refreshment Break |
|16:00|IPv6 Security and |16:00|How to find anything |
| |insecurity | |underneath the commercial |
| |Van Hauser | |web: Powersearching without|
| | | |google |
| | | |Fravia |
|16:50|Smashing Heap by Free |16:50|Not announced yet |
| |Simulation | | |
| |Sandip Chaudhari | | |
|17:40|Closing of the first |17:40|Closing of the conference |
| |lecture day. | |with Announcement of the |
| |Maybe Lightning Talks or | |results of the CTF contest |
| |something alike. | | |

CTF (Capture The Flag) contest

On Saturday 21.10.2006 there will also in parallel to the lectures a CTF
contest with up to 6 teams that compete against each others.
Capture-the-Flag is a team game where each side tries to capture the other
flag, while defending their own flag from falling prey to the enemy. If the
flag is successfully captured, it must be carried unless the opposite team
succeeds to hold it back.
Particularly, in this contest, to capture the flag means to intrude the
computer of another team. The more the team spends time in the opposite
camp, the more the team scores, until the opposite team manages to expel
the intruders.
There are nice prices to win.
More on http://www.hack.lu

Venue

The venue of this year conference will be the Novotel at Luxembourg
Kirchberg. All reservation can be done directly with the Hotel by
mentioning the name of the conference (hack.lu 2006). Special rates are
available. Please see the web site for all the details
(http://www.hack.lu/index.php/Venue)

Registration

As the number of seats is limited, be sure to register early at
http://www.hack.lu/index.php/registration. The entrance fee covers all 3
days, along with catering for the lunches.

Post Cansecwest

2006-04-26T15:00:00.000+02:00

Hey there,

It's now a while that Cansecwest 2006 is over and I wanted to take the occasion to comment a little bit about it. Cansecwest is really one of the best security conferences one can go. It has everything from the very best and nicest ppl to the evening events that are just crazy.

Our presentation went fine so far and the echos to it were just amazing. We were not sure if we would hit somethign old and well known to the society but apparently no and lots of persons are interested and want to cooperate with us. Just great.

Cansecwest thanks again and see you next year for sure.

Vancouver and Cansecwest 2006

2006-04-06T03:48:00.000+02:00

Hey here we are, being in sunny Vancouver. This city is really amazing with the sea and the mountains, where the tops are still white because of the snow.
Cansec started and the presentations are as they used to be, the best. Now we are fine tuning our presentation and on Friday it's our turn and we'll see how the audience will like it. But as usual the " creme de la creme" in computer security is present and also as usual the talks between ppl are always interesting and new information is exchanged and discussed.

I love Cansecwest. Thanks Dragos.

Cansecwest'06

2006-03-06T11:20:00.000+01:00

Yesss we got it. Sascha Rommelfangen and myself have been selected to present at Cansecwest'06. So now we have to prepare for it grin.

CFP hack.lu 2006

2006-03-03T17:36:00.000+01:00

Finally it's out. Yes the CFP for hack.lu 2006 is out and you are kindly invited to participate and submit your paper to the committee. The conference itself will take place from 19-21 octobre in Luxembourg.

Feel free to visit the website of hack.lu 2006

Tentations

2006-02-21T14:59:00.000+01:00

Last Saturday I have bought a book called Tentations by Philippe Conticini.
This book is really great. The reciepes and the pictures you find in this book are just marvellous. But by buying a cookbook and looking thorugh you still don't know what the reciepes taste like. That's why my wife and myself decided to test two dishes yesterday evening. The first one was the Tomato bonbon, which is really tremendous if you like to get great sensations while eating food. The second one was the melted Nutella with coconut icecream dish which was in my opinion one of the best desserts I ever ate till there and which is really easy to do.

Finally my CV is updated

2006-02-16T14:01:00.000+01:00

Finally I managed to update my CV on my website. If you are interested to know more about me have a look at: fred's CV

Malware Contest

2006-02-04T17:39:00.000+01:00

Do you like to analyze binaries? Especially if they can not be trusted?
Do you like to show how you do binary analysis?
Have you ever wanted to analyze real world malware?
Well you are lucky. CSRRT-LU has it all for you.
Participate in the contest and win some nice presents.

Uni.lu

2005-11-13T00:28:00.000+01:00

Alex and myself are giving a workshop/course about Forensic analysis on network captures and Honeypots. the first session took place last Tuesday and it was quite ok.
Let's see what the second session will bring us. Surpise surprise.I have the feeling that the students will have to prove their knowledge ;-))

Zaurus2

2005-11-13T00:17:00.000+01:00

Got finally the Zaurus. After having plaed around with the sharp rom and then Opie, I finally decided to go for pdaXrom and this piece of software is just amazing and works fine. As it seems even my gps mouse is working with it. This woud be nice for using kismet with it.
So stay posted as I think I will talk more about this little piece of hardware.

Zaurus

2005-11-04T20:46:00.000+01:00

Actually I am very nervous on gettting the new Sharp Zaurus SL-C3100. I collected already lots of links about new OSes to put on and how to deal with the small gadget. So stay tuned to hear more about it.

German Misc Magazine #1

2005-10-20T18:07:00.000+02:00

Right on Time for the beginning of hack.lu 2005, the german Misc magazine made its appearance on the market and guess what Sascha and myself had an article published in it.

The article will be publishe don my website later this year. I fyou want to read it earlier or are curious what Misc magazine is just take a look at Miscmag

Hack.lu 2005

2005-10-20T18:03:00.000+02:00

Hi everybody,

We did it. Hack.lu is over and I guess it was a success. That's at least the echo we got from the attendance. We (CSRRT-LU group) had great fun in organising it although we did mistakes and we will learn out of them and avoid them for the next conference.

Sascha did really a great job in setting up the CTF contest although there were minor problems with the game server byt hey nobody is perfect. :-))

So hope to see you all next year at hack.lu 2006.

If you are interested in what I tell you here just get a look at www.hack.lu.

fred

Hack.lu 2005

2005-09-15T17:08:00.000+02:00

The preparations for the conference are running at its maximum.
So far everything looks positive. There are already lots of ppl registered without even having done too much publicity. Let's see how big the interest will be at the end.

Hack.lu 2005

A two days conference in the center of Europe for bridging ethics and security in computer science.

Welcome to the public web site and wiki of hack.lu 2005. Hack.lu is an open and free convention/conference where people can discuss about computer security, privacy, information technology and its cultural/technical implication on society. The aim of the convention is to make a bridge of the various actors (http://www.foo.be/p23-conti.pdf) in the computer security world.

Knowledge is power --Sir Francis Bacon

Hack.lu 2005 will be held on Friday/Saturday 14-15 octobre 2005 at Luxembourg/Kirchberg.

iTrip

2005-08-19T08:45:00.000+02:00

Hey,

Yesterday I was at a friend's house to visit the place and there I saw the iTrip piece in action for the first time.
It's really a nice idea to use your iPod on an FM radio. Apparently the iTrip is ok in usage but there are better pieces by other manufacturers. I am now looking to find these.

The guys from the iPod team are really innovating ppl.

What the Hack (cont'd)

2005-08-01T21:58:00.000+02:00

Back from What the Hack.
It was really great.
Met nice ppl had a good time with adulau and pst and even if it was raining we were doing the best out of it.
Check my gallery for pictures from WTH 2005. They'll be up soon.

What the Hack

2005-07-13T00:21:00.000+02:00

Only two more weeks and soem folx and myself will head to What the hack in Holland. Hopefully weather will be good so that we won't have to drown in mud to assist to the interesting speeches that will be given. If some of you folks are there just post a comment and maybe we can have some beers together :-))

Stress testing IDSes

2005-07-13T00:18:00.000+02:00

Last week I assisted a work done by Yannick Loth, where he wrote some code to stress test a snort IDS at high speed bandwidth. The results were quite interesting and I guess there is some more investigations to do to it.
As the code will be GPL I look forward testing it with different HW on different IDses like Dragon and others.

Searching is Power

2005-06-30T21:47:00.000+02:00

Do you know that searcvhing correctly on the Internet can give you tremendous power as you may be able to find information about everything.
Wanna learn to search correctly?
Just take a look at fravia and have fun.

Google satellite maps

2005-06-30T05:02:00.000+02:00

Wanna have a look from the skies of my workplace?
Feel free to use the Google satellite maps and find interesting details you didn't knwo about. ;-)

VirtualF's BLog

2005-06-30T02:46:00.000+02:00

Hi there.
Finally I got it up and running. A Blog of mine. More to come.