Termin:Chaotic-Congress-Cinema Nr. 1: Difference between revisions
mNo edit summary |
Wir schauen dann doch 27C3 videos |
||
| Line 11: | Line 11: | ||
Weitere Informationen unter [http://wiki.attraktor.org/index.php/Category:Chaotic-Congress-Cinema Chaotic Congress Cinema]. | Weitere Informationen unter [http://wiki.attraktor.org/index.php/Category:Chaotic-Congress-Cinema Chaotic Congress Cinema]. | ||
== | == Running your own GSM stack on a phone == | ||
Introducing Project OsmocomBB | |||
In recent years, we have seen several Free Software projects implementing the network side of the GSM protocol. In 2010, OsmocomBB was started to create a free software implementation of the telephone-side. | |||
The OsmocomBB project is a Free Software implementation of the GSM protocol stack running on a mobile phone. | |||
For decades, the cellular industry comprised by cellphone chipset makers and network operators keep their hardware and system-level software as well as GSM protocol stack implementations closed. As a result, it was never possible to send arbitrary data at the lower levels of the GSM protocol stack. Existing phones only allow application-level data to be specified, such as SMS messages, IP over GPRS or circuit-switched data (CSD). | |||
Using OsmocomBB, the security researcher finally has a tool equivalent to an Ethernet card in the TCP/IP protocol world: A simple transceiver that will send arbitrary protocol messages to a GSM network. | |||
http://events.ccc.de/congress/ | http://events.ccc.de/congress/2010/Fahrplan/events/3952.en.html | ||
== Recent advances in IPv6 insecurities == | |||
New protocol features have been proposed and implemented in the last 5 years and ISPs are now slowly starting to deploy IPv6. This talk starts with a brief summary of the issues presented five years ago, and then expands on the new risks. Discovered implemention security issues in Windows 7/2008, Linux and Cisco will be shown too. Comes with a GPL'ed toolkit: thc-ipv6 | |||
Five years have past since my initial talk on IPv6 insecurities at the CCC Congress. New protocol features have been proposed and implemented since then and ISPs are now slowly starting to deploy IPv6. Few changes have led to a better security of the protocol, several increase the risk instead. This talk starts with a brief summary of the issues presented 5 years ago, and then expands on the new risks especially in multicast scenarios. As an add-on, discovered implemention security issues in Windows 7/2008, Linux and Cisco will be shown too. Lets hope patches are out until the conference, if not - they had enough time. All accompanied with GPL'ed tools to and a library: the new thc-ipv6 package. rewritten, expanded, enhanced. | |||
http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html | |||
Latest revision as of 20:11, 8 January 2011
Chaotic-Congress-Cinema Nr. 1
| Beginn: |
12.01.2011 20:00 |
| Ende: |
12.01.2011 23:00 |
Wir schauen uns die Aufzeichnung von Congress Vorträgen an. Du bist herzlich eingeladen, in den Clubräumen im Mexikoring 21 aufzutauchen und mit uns die Talks anzuschauen und zu diskutieren. Es wird Getränke und Knabberkram zu moderaten Preisen geben. Falls Du kein CCC-, CCCHH- oder Attraktor e.V.-Mitglied bist, macht das überhaupt nichts: Alle Gäste sind gern gesehen. :-)
Weitere Informationen unter Chaotic Congress Cinema.
Running your own GSM stack on a phone
Introducing Project OsmocomBB
In recent years, we have seen several Free Software projects implementing the network side of the GSM protocol. In 2010, OsmocomBB was started to create a free software implementation of the telephone-side.
The OsmocomBB project is a Free Software implementation of the GSM protocol stack running on a mobile phone.
For decades, the cellular industry comprised by cellphone chipset makers and network operators keep their hardware and system-level software as well as GSM protocol stack implementations closed. As a result, it was never possible to send arbitrary data at the lower levels of the GSM protocol stack. Existing phones only allow application-level data to be specified, such as SMS messages, IP over GPRS or circuit-switched data (CSD).
Using OsmocomBB, the security researcher finally has a tool equivalent to an Ethernet card in the TCP/IP protocol world: A simple transceiver that will send arbitrary protocol messages to a GSM network.
http://events.ccc.de/congress/2010/Fahrplan/events/3952.en.html
Recent advances in IPv6 insecurities
New protocol features have been proposed and implemented in the last 5 years and ISPs are now slowly starting to deploy IPv6. This talk starts with a brief summary of the issues presented five years ago, and then expands on the new risks. Discovered implemention security issues in Windows 7/2008, Linux and Cisco will be shown too. Comes with a GPL'ed toolkit: thc-ipv6
Five years have past since my initial talk on IPv6 insecurities at the CCC Congress. New protocol features have been proposed and implemented since then and ISPs are now slowly starting to deploy IPv6. Few changes have led to a better security of the protocol, several increase the risk instead. This talk starts with a brief summary of the issues presented 5 years ago, and then expands on the new risks especially in multicast scenarios. As an add-on, discovered implemention security issues in Windows 7/2008, Linux and Cisco will be shown too. Lets hope patches are out until the conference, if not - they had enough time. All accompanied with GPL'ed tools to and a library: the new thc-ipv6 package. rewritten, expanded, enhanced.
http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html