Incibe, el instituto sobre ciberseguridad español, celebra de su segundo evento anual sobre ciberseguridad CyberCamp del 1 al 4 de diciembre en León, España.

Este año, edición 16, trae dos nuevas iniciativas: novedades en el Hackathon y un torneo sobre desarrollo de software seguro.

Un Hackathon o “maratón de hacking”, es una actividad que está muy de moda en los círculos de la programación y el desarrollo de software. Esto no es necesariamente una competición, de hecho muchos grupos de desarrolladores se reúnen de forma mensual o cada X tiempo, para desarrollar aplicaciones para la comunidad, empresas sin ánimo de lucro, etc. En el caso de CyberCamp es una competición por equipos que se llevará a cabo durante los días del evento y cuyo objetivo es crear alguna herramienta nueva o mejorar alguna ya existente. El plazo de inscripción está actualmente abierto hasta el 1 de noviembre. La novedad, es que este año hay un apartado enfocado a los sistemas industriales SCADA, Supervisory Control And Data Acquisition (Supervisión, Control y Adquisición de Datos). Los participantes que se interesen por esta temática recibirán con antelación información adicional sobre la arquitectura de la plataforma industrial a utilizar en el evento. Además de esto y como un aliciente a las nuevas promesas del sector, se otorgaran créditos ECTS a todos los estudiantes universitarios que deseen participar en el evento

Junto con las presentaciones de DEF CON 24, ya también tenemos acceso a los vídeos:

• WIFI 204 Insteon, Inste off, Inste open
• WIFI 202 Evil ESP
• WIFI 201 WCTF Day 2 Kickoff
• WIFI 105 Introducing the HackMeRF
• WIFI 104 Handing Full Control of the Radio Spectrum Over to the Machines
• WIFI 103 How Do IBLE Hacking
• WIFI 102 Decoding LoRa Exploring Next Gen Wireless
• WIFI 101 Wireless Capture the Flag Inbrief
• Weaponizing Data Science for Social Engineering Automated E2E spear phishing on Twit
• weaponize your feature codes
• VLAN hopping, ARP poisoning & MITM Attacks in Virtualized Environments
• Use Their Machines Against Them Loading Code with a Copier
• Universal Serial aBUSe Remote physical access attacks
• toxic proxies bypassing HTTPS and VPNs to pwn your online identity
• The Remote Metamorphic Engine Detecting, Evading, Attacking the AI and Reverse Engin
• the next gen of emergency ph0nage
• T1 Jeopardy 2
• T1 Jeopardy 1
• Stumping the Mobile Chipset
• sticky keys to the kingdom
• Stargate Pivoting Through VNC To Own Internal Networks
• so you think you want to be a pentester
• Slouching Towards Utopia The State of the Internet Dream
• Sk3wlDbg Emulating all well many of the things with Ida
• Six Degrees of Domain Admin
• Side channel attacks on high security electronic safe locks
• sentient storage do ssd's have a mind of their own
• secure penetration testing operations
• SE 301 The Live SE Podcast
• SE 205 Advanced Social Engineering Techniques and The Rise of Cyber Scam Industrial
• SE 204 How to Un Work your job Revolutionism Radicals, and Engineering by Committee
• SE 203 SCAM CALL Call Dropped
• SE 202 Total Fail and Bad Mistakes I've Made a Few
• SE 201 Human Hacking You ARE the weakest link
• SE 105 You are being manipulated
• SE 104 US Interrogation Techniques and Social Engineering
• SE 103 7 Jedi Mind Tricks Influence Your Target without a Word
• SE 102 The Wizard of Oz Painting a reality through deception
• SE 101 Does Cultural differences become a barrier for social engineering
• Samsung Pay Tokenized Numbers, Flaws and Issues
• Robot Hacks Video Games How TASBot Exploits Consoles with Custom Controllers
• Retweet to win How 50 lines of Python made me the luckiest guy on Twitter
• Research on the Machines Help the FTC Protect Privacy & Security
• real time bluetooh device detection with blue hydra
• propaganda and you
• Project CITL
• Playing Through the Pain The Impact of Secrets and Dark Knowledge
• Platform Agnostic Kernel Fuzzing
• pin2pwn How to Root an Embedded Linux Box with a Sewing Needle
• Picking Bluetooth Low Energy Locks from a Quarter Mile Away
• phishing without failure and frustration
• PH 301 Packet Hacking Village, Block 5
• PH 202 Packet Hacking Village, Block 4
• PH 201 Packet Hacking Village, Block 3
• PH 102 Packet Hacking Village, Block 2
• PH 101 Packet Hacking Village, Block 1
• network protocol reverse engineering
• Mr Robot Panel
• MouseJack Injecting Keystrokes into Wireless Mice
• mouse jiggler offense and defense
• malware command and control channels a journey into darkness
• Maelstrom are you plaing with a full deck
• Machine Duping Pwning deep learning systems
• LOCK 302 Sesame Style Pad Locks
• LOCK 203 Intro to LockpickingPower
• LOCK 202 Intro to LockpickingPower
• LOCK 201 Intro to LockpickingDuffley
• LOCK 104 Intro to Lock PickingFitzhugh
• LOCK 102 Locking Picking 101
• LOCK 101 Locking Picking 101
• Light Weight Protocol! Serious Equipment! Critical Implications!
• Let's Get Physical Network Attacks Against Physical Security Systems
• Jittery MacGyver Lessons Learned from Building a Bionic Hand out of a Coffee Maker
• I've got 99 Problems, but LittleSnitch ain't one
• IOT 203 Tranewreck More Internet, More Problems
• IOT 202 Reversing and Exploiting Embedded Devices
• IOT 103 Is Your Internet Light On Protecting Consumers In the Age of Connected Every
• IOT 102 Btlejuice The Bluetooth Smart Mitm Framework
• Introduction the Wichcraft Compiler Collection Towards universal code theft
• inexpensive coordinated gsm anomaly detection
• I Fight For The Users, Episode I Attacks Against Top Consumer Products
• How To Remote Control An Airliner Security Flaws in Avionics
• How to overthrow a Government
• How to Make Your Own DEF CON Black Badge
• how to launch or improve your vulnerablitity research game
• how to generate a 4tbs DDOS for $5
• How to do it Wrong Smartphone Antivirus and Security Applications Under Fire
• How to design distributed systems resilient despite malicious participants
• how to build a processor in 10 minutes or less
• Honey Onions Exposing Snooping Tor HSDir Relays Guevara Noubir & Amirali Sanatinia
• Hiding Wookiees in HTTP HTTP smuggling
• HH 301 Basics of EAGLE CAD and PCB design tips
• HH 201 Basic Firmware Extraction
• HH 102 Why Amateur Radio in the Age of the Internet
• HH 101 Building malicious hardware out of analog circuits
• Help, I've got ANTs!!!
• Hacking Next Gen ATM's From Capture to Cashout
• Hacking Hotel Keys and Point of Sale systems
• hacking boarding passes for fun and profit
• Hacker Machine Interface State of the Union for SCADA HMI Vulnerabilities
• Game over, man! Reversing Video Games to Create an Unbeatable AI Player
• frontrunning the frontrunners
• Forcing a Targeted LTE Cellphone into Unsafe Network
• feds and 0days from before hearthbleed to after FBI apple
• Exploiting and attacking seismological networks remotely
• exploit mitigation techniques on iOS
• Examining the Internet's pollution
• esoteric exfiltration
• escaping the sandbox by not breaking it
• Drunk Hacker History Hacker Stories Powered by C2H6O for Fun & Profit
• Drones Hijacking multi dimensional attack vectors & countermeasures
• DIY Nukeproofing a new dig at data mining
• Discovering and Triangulating Rogue Cell Towers
• Direct Memory Attack the Kernel
• Developing Managed Code Rootkits for the Java Runtime Environment
• DEF CON Welcome & Badge Talk
• def con 101 panel III rise of the noobs
• DC 202
• DARPA Cyber Grand Challenge Award Ceremony
• Cyber Who Done It! Attribution Analysis Through Arrest History
• Cyber Grand Shellphish
• Cunning with CNG Soliciting Secrets from Schannel
• Crypto State of the Law
• CP 301 My Usability Goes to 11 A Hacker's Guide to User Experience Research
• CP 203 Catching a cheat practical exercise in code breaking
• CP 202 Blue Coat SSL Visibility Exposed
• CP 103 How to Backdoor Diffie Hellman
• CP 102 Security Logs Aren't Good Enough
• CP 101 Revocation, the Frailty of PKI
• compelled decryption state of the art doctrinal perversions
• Closing Ceremonies
• Cheap Tools for Hacking Heavy Trucks
• CH 201
• CH 301 Understanding Heavy Truck Event Data
• CH 203 Security Flaws in Automotive Immobilizer
• CH 202 Deep Learning on CAN BUS
• CH 103 Hacking the CHV Badge
• CH 102 The Mitsubishi Hack Explained
• CH 101 Vehicle to Infrastructure V2X
• CANSPY A Framework for Auditing CAN Devices
• Can You Trust Autonomous Vehicles Contactless Attacks
• CAN i haz car secret plz
• Bypassing Captive Portals and Limited Networks
• BSODomizer
• Breaking the Internet of Vibrating Things
• BlockFighting with a Hooker BlockfFghter2!
• BIO 305 Attention Hackers Cannabis Needs Your Help!
• BIO 304 Implants
• BIO 303 Hacking Perception
• BIO 302 CrisprCas9 Newest Tools for Biohacking Fun!
• BIO 301 Nootropics Better Living Through Chemistry or Modern Day Prometheus
• BIO 206 Transcranial Direct Current Stimulation Brain Stimulation the Do It Yourself
• BIO 205 Intro to Brain Based Authentication
• BIO 204 The Next Big Thing in Bioterrorism
• BIO 203 The Era of Bio Big Data Benefits and Challenges for Information Security, He
• BIO 202 The Bioethics of BioHacking
• BIO 201 Oday for the Soul
• Beyond the MCSE Red teaming active directory
• Backdooring the Frontdoor
• auditing 6loWPAN networks
• Attacking BaseStations an Odyssey through a Telco's Network
• Ask the EFF
• anti forensics AF
• An introduction to Pinworm man in the middle for your metadata
• All Your Solar Panels are belong to Me
• ADD 3 SDR Tips and Tricks
• ADD 2 Covert Cupid Under 11 Veil Approach for Covert WiFi
• ADD 1 I Amatuer Radio And So Can You!
• Abusing Bleeding Edge Web Standards for AppSec Glory
• A Monitor Darkly Reversing and Exploiting Ubiquitous
• 401 a frame work for managing security allerts
• 101 ways to brick your hardware
• Abusing Smart Cities the dark age of modern mobility

Ya también están disponibles de los vídeos de Black Hat USA 2016, así como el material presentado:

• Why This Internet Worked How We Could Lose It and the Role Hackers Play
• A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land
• The Art of Defense - How Vulnerabilities Help Shape Security Features and Mitigations in Android
• Call Me: Gathering Threat Intelligence on Telephony Scams to Detect Fraud
• Applied Machine Learning for Data Exfil and Other Fun Topics
• Canspy: A Platform for Auditing Can Devices
• Dangerous Hare: Hanging Attribute References Hazards Due to Vendor Customization
• Over the Edge: Silently Owning Windows 10's Secure Browser
• How to Make People Click on a Dangerous Link Despite Their Security Awareness
• Certificate Bypass: Hiding and Executing Malware From a Digitally Signed Executable
• Pay No Attention to That Hacker Behind the Curtain: A Look Inside the Black Hat Network
• Drone Attacks on Industrial Wireless: A New Front in Cyber Security
• Hackproofing Oracle Ebusiness Suite
• Using Undocumented CPU Behavior to See Into Kernel Mode and Break Kaslr in the Process
• Gattacking Bluetooth Smart Devices - Introducing a New BLE Proxy Tool
• Measuring Adversary Costs to Exploit Commercial Software
• Removing Roadblocks to Diversity
• HEIST: HTTP Encrypted Information Can Be Stolen Through TCP-Windows
• Memory Forensics Using Virtual Machine Introspection for Cloud Computing
• Secure Penetration Testing Operations: Demonstrated Weaknesses in Learning Material and Tools
• Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
• Towards a Holistic Approach in Building Intelligence to Fight Crimeware
• Subverting Apple Graphics: Practical Approaches to Remotely Gaining Root
• The Remote Malicious Butler Did It!
• Xenpwn: Breaking Paravirtualized Devices
• PWNIE
• An Open Collaborative Effort to Ameliorate Android N-Day Root Exploits
• Understanding HL7 2.X Standards, Pen Testing, and Defending HL7 2.X Messages
• 1000 Ways to Die in Mobile Oauth
• A Retrospective on the Use of Export Cryptography
• Windows 10 Segment Heap Internals
• Abusing Bleeding Edge Web Standards for Appsec Glory
• AMSI: How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does It
• Analysis of the Attack Surface of Windows 10 Virtualization-Based Security
• Augmenting Static Analysis Using Pintool: Ablation
• An Insider's Guide to Cyber-Insurance and Security Guarantees
• Cunning With Cng: Soliciting Secrets From Schannel
• Beyond the Mcse: Active Directory for the Security Professional
• Does Dropping Usb Drives in Parking Lots and Other Places Really Work?
• Demystifying the Secure Enclave Processor
• I Came to Drop Bombs: Auditing the Compression Algorithm Weapon Cache
• Breaking Payment Points of Interaction (POI)
• Into the Core: In-Depth Exploration of Windows 10 IoT Core
• Hacking Next-Gen Atms: From Capture to Cashout
• Can You Trust Me Now? An Exploration Into the Mobile Threat Landscape
• Investigating DDOS - Architecture Actors and Attribution
• Intra-Process Memory Protection for Applications on ARM and X86: Leveraging the ELF ABI
• Capturing 0Day Exploits With Perfectly Placed Hardware Traps
• Next-Generation of Exploit Kit Detection By Building Simulated Obfuscators
• HTTP/2 & Quic - Teaching Good Protocols to Do Bad Things
• Pwning Your Java Messaging With Deserialization Vulnerabilities
• Language Properties of Phone Scammers: Cyberdefense At the Level of the Human
• Recover a RSA Private Key From a TLS Session With Perfect Forward Secrecy
• The Linux Kernel Hidden Inside Windows 10
• O-Checker: Detection of Malicious Documents Through Deviation From File Format Specifications
• The Tao of Hardware the Te of Implants
• Access Keys Will Kill You Before You Kill the Password
• Hell on Earth: From Browser to System Compromise
• Discovering and Exploiting Novel Security Vulnerabilities in Apple Zeroconf
• BadWPAD
• Breaking Kernel Address Space Layout Randomization (Kaslr) With Intel TSX
• Airbnbeware: Short Term Rentals Long Term Pwnage
• Account Jumping Post Infection Persistency & Lateral Movement in AWS
• Captain Hook: Pirating Avs to Bypass Exploit Mitigations
• Hardening AWS Environments and Automating Incident Response for AWS Compromises
• Crippling HTTPs With Unholy PAC
• Horse Pill: A New Type of Linux Rootkit
• Design Approaches for Security Automation
• Greatfet: Making Goodfet Great Again
• SGX Secure Enclaves in Practice: Security and Crypto Review
• Using EMET to Disable EMET
• Weaponizing Data Science for Social Engineering: Automated E2E Spear Phishing on Twitter
• Viral Video - Exploiting Ssrf in Video Converters
• AVLeak: Fingerprinting Antivirus Emulators for Advanced Malware Evasion
• Windows 10 Mitigation Improvements
• Brute-Forcing Lockdown Harddrive Pin Codes
• Building a Product Security Incident Response Team: Learnings From the Hivemind
• Bad for Enterprise: Attacking BYOD Enterprise Mobile Security Solutions
• Cyber War in Perspective: Analysis From the Crisis in Ukraine
• Breaking Fido: Are Exploits in There?
• Security Through Design - Making Security Better By Designing for People
• Iran's Soft-War for Internet Dominance
• Side-Channel Attacks on Everyday Applications
• The Risk From Power Lines: How to Sniff the G3 and Prime Data and Detect the Interfere Attack
• Unleash the Infection Monkey: A Modern Alternative to Pen-Tests
• OSS Security Maturity: Time to Put on Your Big Boy Pants!
• Watching Commodity Malware Get Sold to a Targeted Actor
• PanGu 9 Internals
• A Lightbulb Worm?
• BadTunnel: How Do I Get Big Brother Power?
• PLC-Blaster: A Worm Living Solely in the PLC
• A Risk-Based Approach for Defining User Training and Awarding Administrative Privileges
• Dungeons Dragons and Security
• The Year in Flash
• Dark Side of the DNS Force
• VoIP Wars: the Phreakers Awaken
• Keystone Engine: Next Generation Assembler Framework
• Pindemonium: A DBI-Based Generic Unpacker for Windows Executable
• Web Application Firewalls: Analysis of Detection Logic
• Defense At Hyperscale: Technologies and Policies for a Defensible Cyberspace

Ya tenemos acceso a los vídeos de las charlas de GrrCON 2016, celebrada en Michigan los pasados 6 y 7 de octubre.

• 116 Security Guards LOL Brent White Tim Roberts
• 115 Attacking the Hospitality and Gaming Industries Tracking an Attacker Around the World in 7 Years
• 318 Welcome to The World of Yesterday Tomorrow Joel Cardella
• 317 On being an Eeyore in Infosec Stefan Edwards
• 217 Phish your employees for fun Kristoffer Marshall
• 216 Binary Ninja Jared Demott
• 316 Piercing the Air Gap Network Steganography for Everyone John Ventura
• 315 So Youve Inherited a Security Department Now What Amanda Berlin
• 215 Whats in your Top Ten Intelligent Application Security Prioritization Tony Miller
• 214 Tales from the Cryptanalyst Jeff Man
• 114 Breaking Android Apps for Fun and Profit Bill Sempf
• 113 Back to the Future Understanding our future but following the past Kevin Johnson
• 313 Alignment of business and IT Security Shane Harsch
• 213 Money Fame Power Build your success as a security professional Nathan Dragun
• 212 Machine Duping Pwning Deep Learning Systems Clarence Chio
• 211 Magnetic Stripes 101 Tyler Keeton
• 112 Guarding Lunch J Wolfgang Goerlich
• 111 Predator to Prey Tracking Criminals with Trojans and Data Mining for Fun and Profit Ken Westin
• 110 and bad mistakes Ive made a few Jayson Street
• 312 Contracting Privacy Security and 3rd Party Nathan Steed Kenneth Coleman
• 312 Contracting Privacy Security and 3rd Party Nathan Steed Kenneth Coleman
• 110 and bad mistakes Ive made a few Jayson Street (only first 30 min or so)
• 210 Encryption Mobility Cloud Oh My Bill Harmer
• 209 Using Virus Total Intelligence to track the latest Phishing Document campaigns Wyatt Roersma
• 311 Stop attacking your mothers car Charles Parker II
• 208 Cruise Ship Pentesting OR Hacking the High Seas Chad M Dewey
• 207 Quick and Easy Windows Timelines with Pyhon MySQL and Shell Scripting Dr Phil Polstra
• 310 How to Implement Crypto Poorly Sean Cassidy
• 309 Reality Checking Your AppSec Program Darren Meyer
• 308 Bad Guys Look Just Like You Justin Beard
• 205 Threat Detection Response with Hipara J Brett Cunningham
• 204 Reversing and Exploiting Embedded Devices Walking the software and hardware stack Elvis Collado
• 203 Surreal Paradigms Automotive Culture Crash D0xt0r Z3r0
• 108 Secure Dicks Michael Kemp
• 206 still broken after all these years aka utility security for smarties doug nibbelink
• 307 Getting to the Root of Advanced Threats Before Impact Josh Fazio
• 306 Fighting the Enemy Within Matt Crowe
• 305 How Do You Secure What You Dont Control Dimitri Vlachos
• 304 Pentester to customerI will 0wn your network Customer to pentesterNo I will make you cry David F
• 303 Make STEHM Great Again David HealWHans Schwartzberg
• 205 Threat Detection Response with Hipara J Brett Cunningham
• 204 Reversing and Exploiting Embedded Devices Walking the software and hardware stack Elvis Collado
• 203 Surreal Paradigms Automotive Culture Crash D0xt0r Z3r0
• 105 Abnormal Behavior Detection in Large Environments Dave Kennedy
• 302 Five Nights At Freddys What We Can Learn About Security From Possessed Bears Nick Jacob
• 300 Securing Trust Defending Against Next generation Attacks John Muirhead Gould
• 202 What do you mean Im pwnd I turned on automatic updates Scott Thomas Jeff Baruth
• 201 So You Want to Be a Pentester Absolute0x0
• 200 Internet of Things IoT radio frequency RF Analysis With Software Defined Radio Kevin Bong
• 103 Becoming a Cyborg The First Step Into Implantable Technology Michael Vieau
• 102 Weaponizing Nanotechnology and hacking humans defining the boundaries Chris Roberts
• 100 Act Three The Evolution of Privacy Finux

Del 4 al 6 de octubre se ha celebrado la LinuxCon edición Europa en Berlín, Alemania. Como puedes imaginar ésta, es una conferencia alrededor del kernel de Linux. Desde la web de la Fundación Linux puedes acceder a dichas presentaciones, que a continuación listo:

• Linux Kernel Security Update
• Ceph and Flash
• Efficient kernel backporting
• Making More Open: Creating open source infrastructure for your open source project
• Flowgrind: a TCP traffic generator for developers
• Efficient unit test and fuzz tools for kernel/libc porting
• Adding CPU frequency scaling for your ARM platform to Linux kernel
• entry_*.S: A carefree stroll through kernel entry code
• The Set of Programmers: How Math Restricts Us
• Why you hate security, and what you can do about it.
• The world of 100G Networking
• lguest: A journey of learning the Linux kernel internals
• Gender-Diversity Analysis of Technical Contributions to the Linux Kernel
• Chrome OS running Android in a container
• ELK: a log files management framework
• Bringing Android Explicit Fencing to Mainline: A new era for graphics
• Solving the Paradox: Less Downtime - More Security
• Application Profiling and Tuning – Or How I Stopped Worrying and Learned to Love the Tweak
• Using the Linux Tracing Infrastructure
• Deploying pNFS over Distributed File Storage
• Outreachy kernel internship report
• Strategic use of Free Software at Siemens
• Reimagining OpenStack
• Locking Down your systemd Services
• How Linux keeps mission critical application up 24x7
• Persistent Memory usage within Linux environment
• How Google Uses and Contributes to Open Source
• Linux DRM: new picture processing API
• openQA - Avoiding Disasters of Biblical Proportions
• Boosting Enterprise Transaction Processing using Hardware Acceleration
• Geo-Replication and Disaster recovery for cloud object storage with Ceph Rados Gateway
• Linux-Kernel Memory Ordering: Help Arrives At Last!
• Real life example of scaling load balancing using open source on commodity hardware
• Tutorial on Persistent Memory Programming with NVML
• Extending programming languages with persistent memory semantics
• PM Infrastructure in the Linux Kernel - Current Status and Future
• Open Enterprise & Open Community - Empowering Each Other
• If You Build It, They Won't Come
• NorNet -- Building an Inter-Continental Internet Testbed based on Open Source Software
• Clang: Much more than just a C/C++ compiler
• Tracking huge files with Git LFS
• Persistent Memory Extensions to libstdc++/libc++
• Graphite@Scale or How to store millon metrics per second
• Kernel Development - I still think we have a scaling problem
• Documenting Your Software Supply Chain with Linked Data

Hace algún tiempo publicamos una entrada sobre una guía creada por Google para convertirte en un buen ingeniero de software.

John Washam tiene un objetivo, y es el de convertirse en un empleado de Google. Para ello a creado en Github un repositorio con una amplia lista de recursos, que según él, debes conocer para que Google te contrate. Como decía, la lista es bastante amplia y va mucho más allá de ser una lista de recursos para ser contratado por Google, con ésta tienes bastante información para convertirte en un gran ingeniero de software.

Fuente: https://toggl.com/programming-princess

Sí, has leído bien el título. TetrOS es una versión del juego de Tetris que cabe perfectamente en el sector de arranque de tu disco.

El sector de arranque tiene un tamaño reservado de 512 bytes, y TetrOS sólo ocupa 446 bytes, el tamaño exacto del gestor de arranque del registro de arranque principal (Master Boot Record o MBR). Con lo que podríamos instalar TetrOS en el sector de arranque de nuestro disco duro y no necesitaríamos ni siquiera tener un sistema operativa, de ahí el nombre TetrOS (Tetris Operating System).

No es por muchos conocido, pero la editorial O’Reilly tiene una gran selección de libros gratuitos disponibles para descarga sobre varias materias. A continuación os dejo una de lista agrupada por tema:

• Programming

  • Ten Steps to Linux Survival - PDF, ePub, Mobi
  • Open by Design - PDF, ePub, Mobi
  • Getting Started with InnerSource - PDF, ePub, Mobi
  • Microservices AntiPatterns and Pitfalls - PDF, ePub, Mobi
  • Microservices vs. Service-Oriented Architecture - PDF, ePub, Mobi
  • Software Architecture Patterns - PDF, ePub, Mobi
  • Migrating to Cloud-Native Application Architectures - PDF, ePub, Mobi
  • Reactive Microservices Architecture: Design Principles for Distributed Systems - PDF, ePub, Mobi
  • An Engineering Managers Guide to Design Patterns - PDF, ePub, Mobi
  • Azure for Developers - PDF, ePub, Mobi

• Business

  • The Secrets Behind Great One-on-One Meetings - PDF, ePub, Mobi
  • Designing Culture: Behavioral Strategy for the Workplace - PDF, ePub, Mobi
  • The New Manager Mindset - PDF, ePub, Mobi
  • Introduction to OKRs - PDF, ePub, Mobi
  • Serving Workers in the Gig Economy: Emerging Resources for the On-Demand Workforce - PDF, ePub, Mobi
  • Build to Lead: How Lego Bricks Can Make You a Better Leader - PDF, ePub, Mobi
  • Your Critical First 10 Days as a Leader - PDF, ePub, Mobi
  • Three Critical Shifts in Thinking for the Evolving Leader - PDF, ePub, Mobi
  • Startup Essentials - PDF, ePub, Mobi
  • What’s the Future of Work? - PDF, ePub, Mobi

• Data

  • 2016 Data Science Salary Survey - PDF, ePub, Mobi
  • Embedding Analytics in Modern Applications - PDF, ePub, Mobi
  • Data Science in the Cloud with Microsoft Azure Machine Learning and Python - PDF, ePub, Mobi
  • Self-Service Analytics - PDF, ePub, Mobi
  • Going Pro in Data Science - PDF, ePub, Mobi
  • Evaluating Machine Learning Models - PDF, ePub, Mobi
  • What is Data Science? - PDF, ePub, Mobi
  • What Are Conversational Bots? - PDF, ePub, Mobi
  • The New Artificial Intelligence Market - PDF, ePub, Mobi
  • AI and Medicine - PDF, ePub, Mobi
  • What is Artificial Intelligence? - PDF, ePub, Mobi
  • The Future of Machine Intelligence - PDF, ePub, Mobi
  • Data, Technology, and the Future of Play - PDF, ePub, Mobi
  • Data and Democracy: How Political Data Science Is Shaping the 2016 Elections - PDF, ePub, Mobi
  • Advancing Procurement Analytics - PDF, ePub, Mobi
  • The Big Data Market - PDF, ePub, Mobi
  • Analyzing Data in the Internet of Things - PDF, ePub, Mobi
  • The Business of Genomic Data - PDF, ePub, Mobi
  • Getting Analytics Right - PDF, ePub, Mobi
  • Data Science, Banking, and Fintech - PDF, ePub, Mobi
  • Architecting for Access: Simplifying Analytics on Big Data Infrastructure - PDF, ePub, Mobi
  • Hadoop and Spark Performance for the Enterprise - PDF, ePub, Mobi
  • In Search of Database Nirvana - PDF, ePub, Mobi
  • Making Sense of Stream Processing - PDF, ePub, Mobi
  • Architecting Data Lakes - PDF, ePub, Mobi
  • Hadoop: What You Need to Know - PDF, ePub, Mobi
  • Fast Data: Smart and at Scale - PDF, ePub, Mobi
  • Migrating Big Data Analytics into the Cloud - PDF, ePub, Mobi

• IoT

  • Ambient Computing - PDF, ePub, Mobi
  • Governing the IoT - PDF, ePub, Mobi
  • Opportunities and Challenges in the IoT - PDF, ePub, Mobi
  • Creating Functional Teams for the IoT - PDF, ePub, Mobi
  • Building a Hardware Business - PDF, ePub, Mobi
  • When Hardware Meets Software - PDF, ePub, Mobi
  • What Is the Internet of Things? - PDF, ePub, Mobi
  • Software Above the Level of a Single Device: The Implications - PDF, ePub, Mobi
  • Software & Hardware Collide - PDF, ePub, Mobi
  • Hardware by the Numbers: Startups - PDF, ePub, Mobi
  • Innovation - PDF, ePub, Mobi
  • Pitching Your IoT Project: How to Get Executive Buy-In - PDF, ePub, Mobi
  • User Experience Design for the Internet of Things - PDF, ePub, Mobi
  • The Internet as Material - PDF, ePub, Mobi
  • Designing for the Internet of Things - PDF, ePub, Mobi
  • Ambient Computing - PDF, ePub, Mobi
  • Smart Energy - PDF, ePub, Mobi
  • Smart Cities, Smarter Citizens - PDF, ePub, Mobi
  • Evaluating and Choosing an IoT Platform - PDF, ePub, Mobi
  • Evolving Infrastructures of the Industrial IoT - PDF, ePub, Mobi
  • Life: Sustainable, Programmable, Bottom-Up Manufacturing - PDF, ePub, Mobi
  • 3D Printing Primer - PDF, ePub, Mobi
  • Predictive Maintenance - PDF, ePub, Mobi
  • Industrial Internet - PDF, ePub, Mobi

• Security

  • Cracking Security Misconceptions: Untangling Common Myths About Modern Information Security - PDF, ePub, Mobi
  • Patrolling the Dark Net: What You Don't Know Will Hurt You - PDF, ePub, Mobi
  • DevOpsSec: Securing Software through Continuous Delivery - PDF, ePub, Mobi
  • Not All Data Is Created Equal: Balancing Risk and Reward in a Data-Driven Economy - PDF, ePub, Mobi
  • Who Are the Bad Guys and What Do They Want? - PDF, ePub, Mobi
  • Docker Security - PDF, ePub, Mobi
  • The Security Data Lake - PDF, ePub, Mobi

• Web

  • Python Web Frameworks - PDF, ePub, Mobi
  • Modern SVG: A Curated Collection of Chapters from the O’Reilly SVG Library - PDF, ePub, Mobi
  • The Little Book of HTML/CSS Coding Guidelines - PDF, ePub, Mobi
  • Upgrading to PHP 7 - PDF, ePub, Mobi
  • Static Site Generators - PDF, ePub, Mobi
  • Transforms in CSS - PDF, ePub, Mobi
  • Getting Started with the Web - PDF, ePub, Mobi
  • Modern JavaScript - PDF, ePub, Mobi
  • Designing Great Web APIs - PDF, ePub, Mobi
  • The Little Book of HTML/CSS Frameworks - PDF, ePub, Mobi
  • Next.JS: A Manager's Guide - PDF, ePub, Mobi

• WebOps

  • Effective Performance Engineering - PDF, ePub, Mobi
  • Optimizing Cloud Migration - PDF, ePub, Mobi
  • Web Performance Warrior - PDF, ePub, Mobi
  • Web Page Size, Speed, and Performance - PDF, ePub, Mobi
  • HTTP/2: A New Excerpt from High Performance Browser Networking - PDF, ePub, Mobi
  • Compliance at Speed - PDF, ePub, Mobi
  • Mobile App Analytics - PDF, ePub, Mobi
  • Monitoring Distributed Systems: Case Studies from Google's SRE Teams - PDF, ePub, Mobi
  • Release Engineering: How Google Builds and Delivers Software - PDF, ePub, Mobi
  • Beyond the Twelve-Factor App - PDF, ePub, Mobi
  • Docker in the Cloud - PDF, ePub, Mobi
  • Network Automation with Ansible - PDF, ePub, Mobi
  • Are Your Networks Ready for the IoT? - PDF, ePub, Mobi
  • Docker Networking and Service Discovery - PDF, ePub, Mobi
  • Immutable Infrastructure - PDF, ePub, Mobi
  • Continuous Delivery with Windows and .NET - PDF, ePub, Mobi
  • Docker Security - PDF, ePub, Mobi
  • Kubernetes: Scheduling the Future at Cloud Scale - PDF, ePub, Mobi
  • Modern Web Operations - PDF, ePub, Mobi
  • Field Guide to the Distributed Development Stack - PDF, ePub, Mobi
  • 5 Unsung Tools of DevOps - PDF, ePub, Mobi
  • Lightweight Systems for Realtime Monitoring - PDF, ePub, Mobi
  • Anomaly Detection for Monitoring: A Statistical Approach to Time Series Anomaly Detection - PDF, ePub, Mobi
  • Are Your Networks Ready for the IoT? - PDF, ePub, Mobi
  • Network Automation with Ansible - PDF, ePub, Mobi
  • DevOpsSec: Securing Software through Continuous Delivery - PDF, ePub, Mobi
  • DevOps for Finance - PDF, ePub, Mobi
  • Building an Optimized Business - PDF, ePub, Mobi
  • Everything Is Distributed - PDF, ePub, Mobi
  • DevOps in Practice - PDF, ePub, Mobi
  • The Human Side of Postmortems - PDF, ePub, Mobi
  • Learning from First Responders: When Your Systems Have to Work - PDF, ePub, Mobi
  • DevOps Hiring - PDF, ePub, Mobi
  • Antifragile Systems and Teams - PDF, ePub, Mobi

Société Générale y Groupe BPCE, dos bancos franceses empiezan a emitir tarjetas de crédito con tecnología “Motion Code” (PDF).

Esta tecnología es una vuelta de tuerca a la lucha contra el fraude online. Básicamente lo que hace es generar cada hora un Código de Seguridad nuevo, también llamado Verificación de Datos de Tarjeta, Número de Verificación de Tarjeta, Valor de Verificación de Tarjeta (CVV). Éste código es uno de los datos requeridos para transacciones online, por lo que si alguien te roba los datos de tu tarjeta, tendría un plazo de 1 hora como máximo para efectuar algún tipo de transacción online, lo que sería muy como común.