Bogdan Alecu: Playing buggy Codecamp

•Als PPTX, PDF herunterladen•

1 gefällt mir•381 views

Codecamp Iasi 2013 - Playing buggy Bogdan Alecu presents some real world examples of bugs, specially the ones related to mobile security For more info go to www.m-sec.net

Technologie

Topics
▪ About me
▪ The buggy world
▪ Where does your data go?
Bogdan ALECU

About me
Bogdan ALECU
▪ Independent security researcher
▪ Sysadmin @ LEVI9
▪ Passionate about security, specially when it’s related to
mobile devices, CISSP, CEH, CISA,CCSP
▪ #infosec conferences: DeepSec, DefCamp, EUSecWest
▪ Started with NetMonitor, continued with VoIP and finally
GSM networks / mobile phones
▪ @msecnet / www.m-sec.net / alecu@m-sec.net

The buggy world
Bogdan ALECU
▪Developers
▪Testers
▪Customers
▪How do you test?
▪But is it enough?

The buggy world
Bogdan ALECU
READY FOR SOME
REAL LIFE EXAMPLES?

The buggy world
Bogdan ALECU
© Prisacaru Anatolie

The buggy world
Bogdan ALECU
NEVER trust the user’s input!

The buggy world
Bogdan ALECU
▪ 20K application
▪ Two factor authentication
▪ ACL IP
▪ User authenticated automatically if …
… coming from the right internal IP

The buggy world
Bogdan ALECU
PLEASE CHECK YOUR
ERS

The buggy world
Bogdan ALECU
▪How was the IP address checked?

The buggy world
Bogdan ALECU
▪ X-FORWARDED-FOR HTTP header

The buggy world
Bogdan ALECU
▪ Modify Headers – Firefox Extension
▪ https://addons.mozilla.org/en-US/firefox/addon/modify-headers/

The buggy world
Bogdan ALECU
▪ Try accessing the website while pretending
to be browsing from your mobile device
▪ You would be surprised of the instant
access you get
▪ No luck? Try Googlebot!
▪ If your log shows a sensitive access being
made by GoogleBot, will you worry ?

The buggy world
Bogdan ALECU
▪ Those damn headers …
DEMO time

The buggy world
Bogdan ALECU
▪ Having the right headers (security by
obscurity) can open a lot of doors

The buggy world
Bogdan ALECU
▪ Those damn headers … AGAIN!
Yet another demo

The buggy world
Bogdan ALECU
▪ Don’t bullshit me: admit your weakness!

The buggy world
Bogdan ALECU
▪Implementation gone wild
▪ How many of you use the Internet on
your mobile device?
▪ Do you know what DNS is?

The buggy world
Bogdan ALECU
Setup a VPN server on port 53, UDP (DNS
port)
… and connect to your server
… pass the traffic to the Internet
UNLIMITED
MOBILE DATA TRAFFIC!

The buggy world
Bogdan ALECU
▪ The standard itself may have issues

The buggy world
Bogdan ALECU
▪SIM Toolkit

The buggy world
Bogdan ALECU
▪ SIM Toolkit
▪ Vulnerability discovered in June 2010
▪ Reported on August 26 2010
▪ CVE-2010-3612

The buggy world
Bogdan ALECU
▪ SIM Toolkit
… and the demo

The buggy world
Bogdan ALECU
▪ FIX THIS NOW!

Where does your data go?
Bogdan ALECU
▪Is the data securely transferred?
▪What info is the app sending?
▪When does it sends the info?
▪Does the app accept any certificate?
▪What is it stored locally?

Where does your data go?
Bogdan ALECU
▪Mallory gateway
http://intrepidusgroup.com/insight/
2010/12/mallory-and-me-setting-
up-a-mobile-mallory-gateway/

Where does your data go?
Bogdan ALECU
▪ Short demo

Call to action
Bogdan ALECU
▪ Don’t rely on thing that most users have no
idea how to check if your app is secure.
You might meet someone like me and it
will get ugly 
▪ Write your code in a secure way
▪ Testers: learn how to really tests mobile
apps. It’s not all about the usage
experience!

The end?!?
Bogdan ALECU
Thank you all!
Don’t forget about feedback
forms
www.m-sec.net / @msecnet

Weitere ähnliche Inhalte

Ähnlich wie Bogdan Alecu: Playing buggy Codecamp

Gadgetbridge, a free and open source project, has existed since 2015 to allow wearable device customers to use their hardware without being tied to the online services of the manufacturers. The small but very focused and capable technical community working on the basic functionalities such as retrieving the various data from the wearables (detected activities, sleep, pulse per minute, peripheral oxygen saturation, ...) lacks the expertise on specialised algorithms that could help to perform advanced analysis/diagnostics. The goal of this talk is to explore a potential collaboration between our communities: Gadgetbridge provides local-only support for an extensive list of wearable devices and a community of engineers and privacy minded users, Data4SmartHealth might contribute advanced algorithms and AI on edge devices.

SFSCON23 - Daniele Gobbetti - Gimme! Gimme! Gimme! (Some good algorithms)

South Tyrol Free Software Conference

Introduction to PhoneGap

Raymond Camden

As a web developer it´s easy to feel intimidated by the world of hardware hacking and the physical web, we have to leave our comfort zone and need to get familiar with a completely new development environment. But not anymore, thanks to wonderful possibilities that the WebUSB Api brings to our browsers. In this talk I will give an intro to the endless wonders we can encounter in the hardware world through our browser windows. Aside from leaerning the basics of USB and serial port communication, we´ll paint on USB displays, live tweet to receipt printers, control an Arduino, steal data from Android phones and many more… The only limit is your imagination.

JS Fest 2019. Sebastian Golasch. The Universal Serial Web

JSFestUA

Internet of Things

Andy Gelme

A tale of the Neo900 project about the obstacles on its way to achieve The Ultimate Private Phone. What are the threats for smartphone user's privacy? How to deal with them? Is it possible to make a phone that will protect us so well that it will let us forget about privacy at all? The talk has been given via videoconference on 2014-11-29 at OpenPhoenux Hard- and Software Workshop 2014 in Garching, Munich. Recording: https://www.youtube.com/watch?v=ahPFCFooBv0&list=PL-s0IumBit8Mofxj0Fn2kH6RB9VtnKS4K

Neo900: Crafting The Private Phone

Sebastian Krzyszkowiak

Mobile networks: exploiting HTTP headers and data traffic - DefCamp 2012

DefCamp

Developing wearable technology apps quickly

Raul Chong

Getting started with IoT with only your Laptop - July 2019 - Digital Lincoln

Peter Gallagher

Hyper Island - 2012

Detectify

SWONtech News, January 2012

SWON Libraries Consortium

Getting started with IoT with only your Laptop - March 2019 - DDD North

Peter Gallagher

Introduction google glass en - rev 20 - codemotion

Codemotion

Getting started with IoT with only your Laptop - March 2019 - IoT Leeds

Peter Gallagher

The Universal Serial Web @HolyJS

asciidisco

JavaScript is finding its way further and further out of the browser. Only a couple of years ago, if someone had said they wanted to build robots only using JS you'd think they were crazy. Having tried it at the time those naysayers were correct - it was a disaster. Recently, particularly as a result of the nodebots project, JS Robotics has started to come of age and it's now possible to build simple robots using JavaScript for the majority of the stack - everything from control and sensing to motors to lights, AI and computer vision. This talk will give an overview of what's currently possible, where the current gotchas are, how to get started and have some interactive elements that can be played with during or after the session. Andrew is a creator & destroyer of things that combine mobile web, ubicomp and lots of data. Sometime programmer, interaction researcher & CTO @ JBA. Be Responsive meetup / Melbourne Geek Night Crossover night September 2014

Building Droids with JavaScript

Andrew Fisher

WebRTC is an exciting new technology, perhaps the most exciting thing to happen to voice communication since the invention of Voice over IP. With WebRTC, we are no longer limited to a disjointed communication experience with poor quality audio on antiquated networks. Now we have the ability to put high-definition audio and video where it will have the most impact: right in line with the business processes that benefit the most from it. This session will present an overview of how WebRTC works, reviewing both the network services that support it and the user-facing software that delivers it. We will look at how Asterisk can be used to give WebRTC additional capabilities that aren’t possible with browsers alone, and how to deploy Asterisk to get the most out of this powerful combination. As with all new technology, however, there are rough edges. In the final part of this presentation, we will look at the common ways that WebRTC can break down, from technical deployment problems to user interface and design issues. These lessons are drawn from real-world experience deploying WebRTC over the last 3 years and multiple applications that are in production today.

AstriCon 2015: WebRTC: How it Works, and How it Breaks

Mojo Lingo

Getting started with IoT with only your Laptop - February 2019 - Lancs Tech T...

Peter Gallagher

Google glass

baabtra.com - No. 1 supplier of quality freshers

Don Bailey - A Million Little Tracking Devices

Source Conference

Hacking with paper

Sumedt Jitpukdebodin

Ähnlich wie Bogdan Alecu: Playing buggy Codecamp (20)

SFSCON23 - Daniele Gobbetti - Gimme! Gimme! Gimme! (Some good algorithms)

Introduction to PhoneGap

JS Fest 2019. Sebastian Golasch. The Universal Serial Web

Internet of Things

Neo900: Crafting The Private Phone

Mobile networks: exploiting HTTP headers and data traffic - DefCamp 2012

Developing wearable technology apps quickly

Getting started with IoT with only your Laptop - July 2019 - Digital Lincoln

Hyper Island - 2012

SWONtech News, January 2012

Getting started with IoT with only your Laptop - March 2019 - DDD North

Introduction google glass en - rev 20 - codemotion

Getting started with IoT with only your Laptop - March 2019 - IoT Leeds

The Universal Serial Web @HolyJS

Building Droids with JavaScript

AstriCon 2015: WebRTC: How it Works, and How it Breaks

Getting started with IoT with only your Laptop - February 2019 - Lancs Tech T...

Google glass

Don Bailey - A Million Little Tracking Devices

Hacking with paper

Kürzlich hochgeladen

Discover the innovative features and strategic vision that keep WSO2 an industry leader. Explore the exciting 2024 roadmap of WSO2 API management, showcasing innovations, unified APIM/APK control plane, natural language API interaction, and cloud native agility. Discover how open source solutions, microservices architecture, and cloud native technologies unlock seamless API management in today's dynamic landscapes. Leave with a clear blueprint to revolutionize your API journey and achieve industry success!

WSO2's API Vision: Unifying Control, Empowering Developers

WSO2

Passkeys: Developing APIs to enable passwordless authentication Cody Salas, Sr Developer Advocate | Solutions Architect - Yubico Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...

apidays

Dubai, known for its towering skyscrapers, luxurious lifestyle, and relentless pursuit of innovation, often finds itself in the global spotlight. However, amidst the glitz and glamour, the emirate faces its own set of challenges, including the occasional threat of flooding. In recent years, Dubai has experienced sporadic but significant floods, disrupting normalcy and posing unique challenges to its infrastructure. Among the critical nodes in this bustling metropolis is the Dubai International Airport, a vital hub connecting the world. This article delves into the intersection of Dubai flood events and the resilience demonstrated by the Dubai International Airport in the face of such challenges.

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Orbitshub

Angeliki Cooney has spent over twenty years at the forefront of the life sciences industry, working out of Wynantskill, NY. She is highly regarded for her dedication to advancing the development and accessibility of innovative treatments for chronic diseases, rare disorders, and cancer. Her professional journey has centered on strategic consulting for biopharmaceutical companies, facilitating digital transformation, enhancing omnichannel engagement, and refining strategic commercial practices. Angeliki's innovative contributions include pioneering several software-as-a-service (SaaS) products for the life sciences sector, earning her three patents. As the Senior Vice President of Life Sciences at Avenga, Angeliki orchestrated the firm's strategic entry into the U.S. market. Avenga, a renowned digital engineering and consulting firm, partners with significant entities in the pharmaceutical and biotechnology fields. Her leadership was instrumental in expanding Avenga's client base and establishing its presence in the competitive U.S. market.

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Angeliki Cooney

Architecting Cloud Native Applications

WSO2

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Rustici Software

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on the deployment of external web forms using Jotform for Bonterra Impact Management. This solution can be customized to your organization’s needs and deployed to support the common use cases below: - Intake and consent - Assessments - Surveys - Applications - Program registration Interested in deploying web form automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Jeffrey Haguewood

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Artificial Intelligence Chap.5 : Uncertainty

Khushali Kathiriya

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

MadyBayot

[BuildWithAI] Introduction to Gemini.pdf

Sandro Moreira

Understanding the FAA Part 107 License ..

Christopher Logan Kennedy

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Edi Saputra

Dubai, often portrayed as a shimmering oasis in the desert, faces its own set of challenges, including the occasional threat of flooding. Despite its reputation for opulence and modernity, the emirate is not immune to the forces of nature. In recent years, Dubai has experienced sporadic but significant floods, testing the resilience of its infrastructure and communities. Among the critical lifelines in this bustling metropolis is the Dubai International Airport, a bustling hub that connects the city to the world. This article explores the intersection of Dubai flood events and the resilience demonstrated by the Dubai International Airport in the face of such challenges.

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Orbitshub

Following the popularity of “Cloud Revolution: Exploring the New Wave of Serverless Spatial Data,” we’re thrilled to announce this much-anticipated encore webinar. In this sequel, we’ll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you’re building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

💉💊+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHABI}}+971581248768 +971581248768 Mtp-Kit (500MG) Prices » Dubai [(+971581248768**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Maya Whatsapp +971581248768 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971581248768''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971581248768' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Cl

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Retrieval augmented generation (RAG) is the most popular style of large language model application to emerge from 2023. The most basic style of RAG works by vectorizing your data and injecting it into a vector database like Milvus for retrieval to augment the text output generated by an LLM. This is just the beginning. One of the ways that we can extend RAG, and extend AI, is through multilingual use cases. Typical RAG is done in English using embedding models that are trained in English. In this talk, we’ll explore how RAG could work in languages other than English. We’ll explore French, Chinese, and Polish.

Introduction to Multilingual Retrieval Augmented Generation (RAG)

Zilliz

Six Myths about Ontologies: The Basics of Formal Ontology

johnbeverley2021

Kürzlich hochgeladen (20)

WSO2's API Vision: Unifying Control, Empowering Developers

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...

Rising Above_ Dubai Floods and the Fortitude of Dubai International Airport.pdf

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Architecting Cloud Native Applications

Corporate and higher education May webinar.pptx

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Artificial Intelligence Chap.5 : Uncertainty

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

[BuildWithAI] Introduction to Gemini.pdf

Understanding the FAA Part 107 License ..

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Strategies for Landing an Oracle DBA Job as a Fresher

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

Introduction to Multilingual Retrieval Augmented Generation (RAG)

Six Myths about Ontologies: The Basics of Formal Ontology

Bogdan Alecu: Playing buggy Codecamp

2. Playing boogie buggy Bogdan ALECU

3. Topics ▪ About me ▪ The buggy world ▪ Where does your data go? Bogdan ALECU

4. About me Bogdan ALECU ▪ Independent security researcher ▪ Sysadmin @ LEVI9 ▪ Passionate about security, specially when it’s related to mobile devices, CISSP, CEH, CISA,CCSP ▪ #infosec conferences: DeepSec, DefCamp, EUSecWest ▪ Started with NetMonitor, continued with VoIP and finally GSM networks / mobile phones ▪ @msecnet / www.m-sec.net / alecu@m-sec.net

5. The buggy world Bogdan ALECU ▪Developers ▪Testers ▪Customers ▪How do you test? ▪But is it enough?

6. The buggy world Bogdan ALECU READY FOR SOME REAL LIFE EXAMPLES?

7. The buggy world Bogdan ALECU

8. The buggy world Bogdan ALECU

9. The buggy world Bogdan ALECU

11. The buggy world Bogdan ALECU NEVER trust the user’s input!

12. The buggy world Bogdan ALECU

13. The buggy world Bogdan ALECU NEVER trust the user’s input!

14. The buggy world Bogdan ALECU

15. The buggy world Bogdan ALECU NEVER trust the user’s input!

16. The buggy world Bogdan ALECU

17. The buggy world Bogdan ALECU ▪ 20K application ▪ Two factor authentication ▪ ACL IP ▪ User authenticated automatically if … … coming from the right internal IP

18. The buggy world Bogdan ALECU PLEASE CHECK YOUR ERS

19. The buggy world Bogdan ALECU ▪How was the IP address checked?

20. The buggy world Bogdan ALECU ▪ X-FORWARDED-FOR HTTP header

21. The buggy world Bogdan ALECU ▪ Modify Headers – Firefox Extension ▪ https://addons.mozilla.org/en-US/firefox/addon/modify-headers/

22. The buggy world Bogdan ALECU

23. The buggy world Bogdan ALECU ▪ Try accessing the website while pretending to be browsing from your mobile device ▪ You would be surprised of the instant access you get ▪ No luck? Try Googlebot! ▪ If your log shows a sensitive access being made by GoogleBot, will you worry ?

24. The buggy world Bogdan ALECU ▪ Those damn headers … DEMO time

25. The buggy world Bogdan ALECU

26. The buggy world Bogdan ALECU ▪ Having the right headers (security by obscurity) can open a lot of doors

27. The buggy world Bogdan ALECU ▪ Those damn headers … AGAIN! Yet another demo

28. The buggy world Bogdan ALECU

29. The buggy world Bogdan ALECU ▪ Don’t bullshit me: admit your weakness!

30. The buggy world Bogdan ALECU ▪Implementation gone wild ▪ How many of you use the Internet on your mobile device? ▪ Do you know what DNS is?

31. The buggy world Bogdan ALECU Setup a VPN server on port 53, UDP (DNS port) … and connect to your server … pass the traffic to the Internet UNLIMITED MOBILE DATA TRAFFIC!

32. The buggy world Bogdan ALECU

33. The buggy world Bogdan ALECU ▪ The standard itself may have issues

34. The buggy world Bogdan ALECU ▪SIM Toolkit

35. The buggy world Bogdan ALECU ▪SIM Toolkit

36. The buggy world Bogdan ALECU ▪ SIM Toolkit ▪ Vulnerability discovered in June 2010 ▪ Reported on August 26 2010 ▪ CVE-2010-3612

37. The buggy world Bogdan ALECU

38. The buggy world Bogdan ALECU

39. The buggy world Bogdan ALECU ▪ SIM Toolkit … and the demo

40. The buggy world Bogdan ALECU ▪ FIX THIS NOW!

41. Where does your data go? Bogdan ALECU

42. Where does your data go? Bogdan ALECU ▪Is the data securely transferred? ▪What info is the app sending? ▪When does it sends the info? ▪Does the app accept any certificate? ▪What is it stored locally?

43. Where does your data go? Bogdan ALECU ▪Mallory gateway http://intrepidusgroup.com/insight/ 2010/12/mallory-and-me-setting- up-a-mobile-mallory-gateway/

44. Where does your data go? Bogdan ALECU ▪ Short demo

45. Where does your data go? Bogdan ALECU

46. Call to action Bogdan ALECU ▪ Don’t rely on thing that most users have no idea how to check if your app is secure. You might meet someone like me and it will get ugly  ▪ Write your code in a secure way ▪ Testers: learn how to really tests mobile apps. It’s not all about the usage experience!

47. The end?!? Bogdan ALECU Thank you all! Don’t forget about feedback forms www.m-sec.net / @msecnet

Bogdan Alecu: Playing buggy Codecamp

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Ähnlich wie Bogdan Alecu: Playing buggy Codecamp

Ähnlich wie Bogdan Alecu: Playing buggy Codecamp (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Bogdan Alecu: Playing buggy Codecamp