Más presentaciones para colección, esta vez de la Breakpoint 2012 celebrada en Australia los pasados 17 y 18 de octubre. Aquí tenéis la lista de las presentaciones que están disponibles:

• iOS6 Security
• Modeling the exploitation and mitigation of memory safety vulns
• Advanced Exploitation of Mobile/Embedded Devices:the ARM Microprocessor
• Binary Instrumentation For Android
• Emulating DFU to Quickly Reverse and Exploit USB Devices
• Detecting Bugs Using Decompilation and Dataflow Analysis
• Tackling the Android Challenge
• Unravelling Windows 8 Security and the ARM Kernel
• Rootkit in your Laptop: Hidden Code in your Chipset
• The Case for Semantics-Based Methods in Reverse Engineering
• Android Forensic Deep Dive

Espectacular esta serie de 18 vídeos creados por TheCherno en los que nos explica PASO A PASO (desde como instalar Eclipse hasta empezar con la primera rutina del juego) un juego tipo shooter (de disparos) con estética de aventuras de fantasía medieval, parecido a uno llamado Realm of The Mad God, usando Java.

Imagen: Space.com

Sabéis que hace poco se se ha descubierto un planeta más o menos del tamaño de la Tierra en nuestra estrella más cercana, en concreto a Alfa Centauri B (Alfa Centauri es un sistema con tres estrellas).

Este hallazgo es realmente importante, es el planeta que está "sólo" a 4 años luz de la Tierra. Con nuestra tecnología actual tardaríamos cientos o miles de años en llegar, pero si encontramos vías alternativas de propulsión (como se explica en este magnífico post de Eureka) este sería seguro nuestro primer lugar a visitar.

http://open.spotify.com/track/6giRxIFTtNRgitHi5eHu5x

Hazlo por mi ;) , tienes que escucharla hasta el final…

minuto 2:45 espectacular … sube el volumen … perfecto para empezar este domingo gris de Noviembre…

Antennas to Heaven

PD: No la he encontrado en YouTube, la he puesto desde Spotify (supongo que tendrás que instalarlo).

Para aquellos que trabajéis con tecnología de Microsoft o simplemente estéis interesado en ella, aquí tienes el listado de todos los vídeos de las charlas que se dieron en el evento llamado //build/, que celebró Microsoft en casa, Redmon, WA.

• Build 2012 Day 1 Keynote
• BUILD 2012 Day 2 Keynote
• Bringing existing C++ code to Windows Store apps
• HTML5 & CSS3 latest features in action!
• Developing Continuous Services : Real world experiences of the Team Foundation Service engineering…
• What's New for Developers in Office 2013 and SharePoint 2013
• Designing games for Windows 8
• Developing a Windows Store app
• Introduction to creating Windows Store apps using HTML and JavaScript
• 50 performance tricks to make your HTML5 apps and sites faster
• BUILD 2012 Day 2 Keynote
• It’s all about performance: Using Visual C++ 2012 to make the best use of your hardware
• Graphics at the core of Windows 8 and your app
• Chalk Talk: Reading and publishing
• Bridging the DEV-OPS gap with Windows Server 2012 and Visual Studio 2012
• Angle Brackets, Curly Braces, One ASP.NET and the Cloud
• Ask the experts panel: Device apps
• Chalk Talk: Gaming and graphics apps
• Deep dive on WinJS ListView
• Easy Asynchrony with C#: No More Callbacks!
• Monetizing your Windows 8 app with advertising
• Key technologies for Windows Store business apps
• Bing Maps for Windows apps
• The Future of C++
• Ask the experts panel: Connected apps
• Bleeding edge ASP.NET: See what is next for MVC, Web API, SignalR and more…
• Powering your apps with Microsoft accounts
• Delivering Applications with RemoteFX in Windows Server 2012
• Guidance for shopping apps
• The Microsoft design language
• Building Awesome HTML apps in Blend for Windows 8
• Building apps for Office and SharePoint 2013 using the web technologies you know and love, Part 1
• Building data centric applications for web, desktop and mobile with Entity Framework 5.
• Core technologies for Windows 8 games
• The power of C++ - Project Austin app
• New multi-touch, ink, and pen technologies that can revolutionize your apps on any size of screens
• Tips on self-evaluating the UX of your app
• Windows Store: how does it work?
• Designing awesome XAML apps in Visual Studio and Blend for Windows 8 and Windows Phone 8
• Xbox Live on Windows 8 Deep Dive
• Key technologies for shopping apps
• Connecting C++ Apps to the Cloud via Casablanca
• Building apps for Office and SharePoint 2013 using the web technologies you know and love, Part 2
• Extending & customizing Dynamic Access Control
• Building Cross-Device Xbox Games
• 1+1=3: Using app contracts to integrate with Windows 8 experiences
• Developing a Windows Store app using C++ and DirectX
• Making money with your app on the Windows Store
• Shopping app case studies
• Don’t break the web: Why web standards matter and how to use them responsibly.
• Super-Natural Interaction
• Windows Azure Overview
• How to make your applications manageable
• Designing great reading experiences
• Security in Windows Store apps
• Lighting up Windows: From websites to apps
• Building High-Performing JavaScript for Modern Engines
• Application Lifecycle Management: It’s a Team Sport
• Introduction to Windows Azure Infrastructure as a Service (IaaS)
• Kinect Design Considerations
• DirectX Graphics Development with Visual Studio 2012
• Designing rich media scenarios in your Windows Store app
• Building Rich Media Applications on Windows 8 with Windows Azure Media Services
• Introduction to creating Windows Store apps using XAML
• Key technologies for building great reading experiences
• The story of state: AppData, settings, and the process lifecycle
• What’s new in VS2012
• Diagnosing performance and memory issues in JavaScript-based Windows Store apps
• Apps for Office and SharePoint development using the all new browser-based “Napa” and Visual Studio…
• Advanced Windows Azure Infrastructure as a Service (IaaS)
• Building Big: Lessons learned from Windows Azure customers - Part I
• Developing Mobile Solutions with Windows Azure Part I
• Graphics with the Direct3D11.1 API made easy
• Using media extensions to build great video playback apps
• Desktop apps: WPF 4.5 and Visual Studio 2012
• Designing awesome XAML apps in Visual Studio and Blend for Windows 8 and Windows Phone 8 (Repeat)
• Diving deep into C++ /CX and WinRT
• The Evolution of .NET
• Building Big: Lessons learned from Windows Azure customers - Part II
• Developing Mobile Solutions with Windows Azure Part II
• Key technologies for building advanced media apps
• The developer’s guide to the SkyDrive API
• Performance tips for Windows Store apps using XAML
• Diagnosing performance and memory issues in JavaScript-based Windows Store apps (Repeat)
• Building end-to-end apps for SharePoint with Windows Azure and Windows 8
• Kinect for Windows Programming Deep Dive
• Alive with activity: Tiles, notifications, and background tasks
• Building world-ready Windows Store apps with XAML
• Tips and tricks for developing connected applications
• Performance tips for Windows Store apps using DirectX and C++
• Windows Store device apps
• Tips for building a Windows Store app using XAML and C++: The Hilo project
• DevOps: Integrating development and operations for the last mile velocity
• Introducing TypeScript: A language for application-scale JavaScript development
• Windows Azure Active Directory: enabling single sign on and directory services for cloud SaaS apps
• From zero to hero! Building a Windows Store game in HTML5
• XAML list controls
• Continuous Integration with Windows Azure Websites
• Deep dive into WinJS
• Developer Productivity with Visual Studio & TFS 2012
• Building Awesome HTML apps in Blend for Windows 8 (Repeat)
• Developing an app for SharePoint autohosted in Windows Azure Web Sites with an autoprovisioned…
• Building Real-time Web Apps with ASP.NET SignalR
• Writing Windows Server 2012 Applications to leverage the file based shared storage
• Windows Azure Internals
• Gaming reimagined: Gaming case studies
• Building mixed-language apps
• Testing Untestable Code with Stubs and Shims in Visual Studio 2012
• TouchDevelop: A touch-first IDE for the Web created with TypeScript
• Building Services for Any Client with ASP.NET Web API
• Developing Big Data Analytics Applications with JavaScript and .NET for Windows Azure and Windows
• Media app case studies
• Touchscreen and stylus and mouse, oh my!
• Analytics for Windows Store apps
• Modern JavaScript
• Getting Started with Cloud Services Development
• Javascript from client to cloud with Windows 8, Node.js, and Windows Azure
• Building world-ready Windows Store apps with HTML/CSS/JavaScript
• Chalk Talk: Media apps
• Windows 8 Connectathon with Windows Azure Mobile Services
• Building Connected Business Applications with Visual Studio LightSwitch
• Building Windows 8 LOB apps
• Deep Dive into the Kernel of .NET on Windows Phone 8
• Advanced Cloud Services Development
• Data Options in Windows Azure. What's a developer to do?
• Writing Windows Store apps with jQuery
• Bootstrapping your Startup with Windows Azure
• Introduction to Xbox SmartGlass
• Unit Testing Windows Store Apps
• Developing for Windows Azure Web Sites and SharePoint Online
• Top tips for iOS devs building Windows Store apps
• Developing, deploying, and monetizing Windows Store games with Unity
• Windows Azure Storage – Building applications that scale
• Create Cross-platform Apps using Portable Class Libraries
• Building HTML 5 Web Apps with Visual Studio & ASP.NET
• Developing highly-available, scale-out applications for Windows Server 2012
• The Windows Runtime Q&A
• Build 2012 Day 1 Keynote
• Workflow & Workflow Manager 1.0: What’s New, What’s Coming
• Building Hybrid Applications using the Windows Azure Service Bus
• How to Leverage your Code across WP8 and Windows 8
• Windows Phone 8: HTML5/IE10 for Developers
• How to Leverage your Code across WP8 and Windows 8 (Repeat)
• Nokia Music Windows Phone 8 App-to-App APIs
• Windows Phone 8: Application Model
• Windows Phone 8: Native C/C++ Game Development
• Windows Phone 8: XAML Application Development
• Windows Phone 8: In App Purchase & Developer Center
• Windows Phone 8: Critical Developer Practices for Delivering Outstanding Apps
• Windows Phone 8: Networking, Bluetooth, and NFC Proximity for Developers
• Windows Phone 8: Making Money with Your Application on Windows Phone
• Windows Phone 8: Maps, Location, and Background Execution for Developers
• Windows Phone 8: Performance & Optimization for Developers
• Windows Phone 8: Photo and Lens Apps
• Windows Phone 8: Tiles, Lock Screen, and Notifications
• Windows Phone 8: Native C/C++ Game Development (Repeat)
• Windows Phone 8: Using C++ in your Applications
• Windows Phone 8: Using C++ in your Applications (Repeat)
• Windows Phone 8: Using the Speech API
• Windows Phone 8: Wallet and Deals for Developers
• Windows Phone 8: App to App Communication
• Windows Phone 8: Enterprise Development
• Preshow Day 1
• Windows Phone 8: Application Model (Repeat)
• HTML5 & CSS3 latest features in action! (Repeat)
• Building Windows 8 LOB Apps (Repeat)

En la web de www.vidarholen.net tienen un par de gráficas basadas en la búsqueda de ciertas palabras dentro del código fuente del núcleo de Linux. Los ficheros buscados son todos los .c, .h y .s y concretamente las palabras, como podemos ver en la gráfica que encabeza esta entrada son: fuck, shit, crap, bastard y penguin.

Mirando a la gráfica (haz click sobre ella para verla más grande), se puede ver rápidamente, la versión 2.6.35.5 del núcleo causó algún que otro dolor de cabeza entre los desarrolladores :)

Feliz día de Carl Sagan

Carl Sagan Day

En la gran web de irongeek han publicado las Stable Talks de la Derbycon de este año. Las Stable Talks son charlas, sobre seguridad también, pero cuya duración suelen ser más cortas que las charlas tradicionales.

Sin más, aquí tenéis el listado:

• Valerie Thomas: Appearance Hacking 101 - The Art of Everyday Camouflage
• Tim Tomes "LanMaSteR53": Next Generation Web Reconnaissance
• Thomas Hoffecker: Hack Your Way into a DoD Security Clearance
• John Seely CounterSploit MSF as a defense platform
• Chris Murrey "f8lerror" & Jake Garlie "jagar": Easy Passwords = Easy Break-Ins
• Tyler Wrightson: The Art and Science of Hacking Any Target
• Thomas Richards: Android in the Healthcare Workplace
• Spencer McIntyre: How I Learned to Stop Worrying and Love the Smart Meter
• Shawn Merdinger: Medical Device Security
• Rockie Brockway: Business Ramifications of Internet's Unclean Conflicts
• Nathan Magniez: Alice in Exploit Redirection Land
• Magen Hughes: Are you HIPAA to the Jive
• Justin Brown & Frank Hackett: Breaking into Security
• Josh Thomas: Off Grid Communications with Android
• Jennifer "savagejen" Savage & Daniel "unicorn Furnance": The Patsy Proxy
• Jason Pubal: SQL Injection 101
• James Siegel: Nice to Meet You
• Brett Cunningham: Beyond Strings - Memory Analysis During Incident Response
• Gus Fritschie & Nazia Khan: Hacked Hollywood
• Evan Anderson: Active Directory Reconnaissance - Attacks and Post-Exploitation
• David Young: ISO8583 or Pentesting with Abnormal Targets
• David Cowen: Running a Successful Red Team
• Damian Profancik: Managed Service Providers - Pwn One and Done
• Ben Toews & Scott Behrens: Rapid Blind SQL Injection Exploitation with BBQSQL
• Andy Cooper: Why Integgroll Sucks at Python..And You Can Too

En este enlace tienes un estupendo tutorial de una de las herramientas de análisis de redes más utilizada, tcpdump.

Eso sí, hay que conocer un poco el funcionamiento del protocolo TCP/IP (aquí tienes un libro completo) antes de ponerte a analizar paquetes de datos, ya que tcpdump es una muy buena herramienta pero la información que devuelve y su utilización desde la línea de comandos hacen que sea a la vez potente pero un poco más complicada de usar.