Dan Kaminsky Feels a disturbance in The Internet

Researchers Present PKI Vulnerabilities

DEFCON’S TWO-BEER version of Dan Kaminski’s PKI flaws presentation was a repeat presentation of his Black Hat talk.  Kaminsky, a flamboyant security research with IOActive, described findings from a team of researchers looking at digital certificates. Digital certificates are the identity protection mechanism inside the TLS (a/k/a SSL) protocol we all use to protect credit card data and other sensitive traffic on the Internet.
 
Read more

Defcon 17: Still going strong

Some signs of grey hair in the mohawks

DEFCON, THE ‘HACKER CON’, part of the security conference activities in Las Vegas this week, seems to not have suffered too badly from the economy. Thousands of people – computer professionals, government security folks, frat boys looking to learn to pick locks, and various other flavors of geeks have shown up at the Riviera for Defcon 17.
Read more

Process Control Network Security: New Problems

Is obscurity really enough?

THIS WEEK AT BLACK HAT, and starting today at Defcon, the buzz around process control and power grid hacking has been quite noticeable. Mike Davis and Tony Flick each presented talks on power grid security issues, whilst Travis Goodspeed discussed the latest vulnerabilities in the wireless radio networking hardware. Informal hardware hacking tutorials have abounded, so I decided to take a closer look.
Read more

EtherCat controls robots

Fast networking on the fly

IF YOU WANT to control devices that require precise, coordinated movements, protocols like TCP/IP have too much overhead and latency making life difficult or impossible. Luckily, a standard called EtherCat is aimed at fixing all the things that makes TCP/IP unsuitable while still running over low cost 802.3 Ethernet hardware.
Read more