Hacktivity 2017 Wrap-Up Day 2

Let’s go for more wrap-ups. The second day started smoothly with Haroon Meer’s keynote. There was only one track today, the second room being fully dedicated to hackerspaces. Harron is a renowned speaker and the title of his keynote was “Time to play ‘D’”. The intro was simple: Nothing new,

[The post Hacktivity 2017 Wrap-Up Day 2 has been first published on /dev/random]

Continue reading Hacktivity 2017 Wrap-Up Day 2→

Hacktivity 2017 Wrap-Up Day 1

My wrap-up crazy week continues… I’m now in Budapest to attend Hacktivity for the first time. During the opening ceremony some figures were given about this event: 14th edition(!), 900 attendees from 23 different countries and 36 speakers. Here is a nice introduction video. The venue is nice with two tracks

[The post Hacktivity 2017 Wrap-Up Day 1 has been first published on /dev/random]

Continue reading Hacktivity 2017 Wrap-Up Day 1→

Hack.lu 2017 Wrap-Up Day 3

Hack.lu is already over and I’m currently waiting for my connecting flight in Munich, that’s the perfect opportunity to write my wrap-up. This one is shorter because I had to leave early to catch my flight to Hacktivity and I missed some talks scheduled in the afternoon. Thank Lufthansa for

[The post Hack.lu 2017 Wrap-Up Day 3 has been first published on /dev/random]

Continue reading Hack.lu 2017 Wrap-Up Day 3→

Hack.lu 2017 Wrap-Up Day 2

As said yesterday, the second day started very (too?) early… The winner of the first slot was Aaron Zauner who talked about pseudo-random numbers generators. The complete title of the talk was “Because ‘User Random’ isn’t everything: a deep dive into CSPRGNs in Operating Systems & Programming Languages”. He started

[The post Hack.lu 2017 Wrap-Up Day 2 has been first published on /dev/random]

Continue reading Hack.lu 2017 Wrap-Up Day 2→

Hack.lu 2017 Wrap-Up Day 1

Hack.lu is ongoing in Luxembourg, already the thirteen edition! I arrived yesterday to attend a pre-conference event: the MISP summit. Today the regular talks were scheduled. It seems that more attendees joined this edition. The number of talks scheduled is impressive this year: 11 talks today and 12 talks on

[The post Hack.lu 2017 Wrap-Up Day 1 has been first published on /dev/random]

Continue reading Hack.lu 2017 Wrap-Up Day 1→

[SANS ISC] Version control tools aren’t only for Developers

I published the following diary on isc.sans.org: “Version control tools aren’t only for Developers“. When you start to work on a big project or within a team of developers, it is very useful to use a version control system. The most known are probably ’svn’ or ‘git’. For developers, such

[The post [SANS ISC] Version control tools aren’t only for Developers has been first published on /dev/random]

Continue reading [SANS ISC] Version control tools aren’t only for Developers→

BruCON Network 0x09 Wrap-Up

BruCON 0x09 is over! It’s time to have a look at the data captured during the last Thursday and Friday. As the previous years, the setup was almost the same: An Internet pipe with a bunch of access-points, everything interconnected through a pfSense firewall. The guest network (dedicated to attendees)

[The post BruCON Network 0x09 Wrap-Up has been first published on /dev/random]

Continue reading BruCON Network 0x09 Wrap-Up→

[SANS ISC] Base64 All The Things!

I published the following diary on isc.sans.org: “Base64 All The Things!“. Here is an interesting maldoc sample captured with my spam trap. The attached file is “PO# 36-14673.DOC” and has a score of 6 on VT. The file contains Open XML data that refers to an invoice.. [Read more]

[The post [SANS ISC] Base64 All The Things! has been first published on /dev/random]

Continue reading [SANS ISC] Base64 All The Things!→

[SANS ISC] Investigating Security Incidents with Passive DNS

I published the following diary on isc.sans.org: “Investigating Security Incidents with Passive DNS“. Sometimes when you need to investigate a security incident or to check for suspicious activity, you become frustrated because the online resource that you’re trying to reach has already been cleaned. We cannot blame system administrators and

[The post [SANS ISC] Investigating Security Incidents with Passive DNS has been first published on /dev/random]

Continue reading [SANS ISC] Investigating Security Incidents with Passive DNS→