YouTube has a recording of the presentation as given by Tim and Mike.

HMBCATSHEMFC.pdf
November 7, 2014

1.0 MiB
MD5 hash: bbb11f398183aba9d48b224c2fcfa18a
Details

Date:

November 7, 2014

The post How many bugs can a time server have? appeared first on Portcullis Labs.

While there we will not only be sponsoring the Lounge where people can come and enjoy a space to relax and drink beer and setting up Portcullis Village where people can visit us and exchange ideas but we will be having members of Portcullis hosting talks throughout the weekend.

How Many Bugs Can A Time Server Have? Friday 29th @ 14:00PM Stage B

Portcullis members Tim Brown and Mike Emery will be talking about a number of new advisories to be released by Portcullis during the event including remote root in a network device. The attack surface area will be broken down, with the bugs in each area exposed. The impact of the finding as a whole will then be discussed, with the consequences potentially reaching far beyond the compromised device itself!

Minimal Effort Web Application Security (a.k.a. how to make my job harder) Sunday 31st @ 12:00 Stage C

Portcullis member Graham Sutherland will be presenting his quick tips on making your web applications more resistant to common attack vectors, without putting a lot of effort in. Graham says “In some cases, simply adding a like to a configuration file can completely prevent entire classes of attack from being viable”. Graham will take a look at hardening against XSS, SQL injection, click jacking, password cracking, and a few other bits if there’s time. “With any luck, you’ll make my job a lot harder!”

For those spoilt for choice both talks will be featured in our EMF blog to be posted after the event.

The post EMF Camp 2014 talk appeared first on Portcullis Labs.

Instructions

This is a cross between a scavenger hunt and a CTF event. Each USB key will contain a puzzle which has to be solved, giving the location of the next USB key. These puzzles aren’t security specific, so anyone technically minded should be able to take part. If you’d like to participate, come along to the Portcullis Village and we’ll point you towards the first location.

Please note: These USB keys are not guaranteed to be safe! The team before you may have left all sorts of nasties on there. Please use sensible precautions, as you would when plugging any unknown device into your computer.

Rules

• Please don’t remove the USB keys from their locations, or move them from where you found them. This will ruin the fun for others!
• Once you find a USB key, copy the contents off before you start working on the challenge.
• Please don’t alter the contents of the USB keys.
• Have Fun!

Problems?

If you have any issues, think something is wrong, or just need some help, please come and find us at the village!

The post EMF Camp 2014 USB scavenger hunt appeared first on Portcullis Labs.