← All talks

Poodles Drown No More

BSides Athens · 201628:1061 viewsPublished 2016-07Watch on YouTube ↗
Speakers
Tags
CategoryTechnical
StyleTalk
Show transcript [en]

story of this all-star attack you can yes girl today okay because all that day

with everybody why you're going in on us yet but is also meant alot i just finished what is left that's the job as a researcher from expand you've gotta go public start your backpack student security company Brasco work and drag the dome of Krypton comfortable I can't combine my background Mad Max and Michael dolphin security person given recent events of this spice so so none of a printer and unhelpful to hook up sometime involves all protects your deadline transition to your house to read and if you've always good to use you will have known that looks like this for example that was school over here we go google it was logjam back one who used to develop vertical which I

wondered when I say provide the ESN and many other bats so what are the local updates try also the question how growing on is protocol three is all this panic so presencia articles related to data impressment so Alice Cranston some ball and that's good thing for Alice web browser boat owners web server process e-cig area middle trying to read exchanging and see off the tuscan girls of 15 data now encryption of translated Brandon Bass through steps first status of application in practice do two things at both groups out Bob then also move into degree of some kind of game and we take exit the 405 talk about 30-40 stretches around for practical reasons on Google

sweaty work as also say what I'm not on that i'm going to give you an excuse not use the latest and greatest fulfillment and please don't verify losses I thought this way I'm not going to say oh it's ok to use Disqus anyways not as bad as how to be most of what implementation issues for the world mention here that implement is hard people often make mistakes business base get up serious contractors and what would they look at the moon veggie she's using keys are short totally started to the length is the latest in short enough people disapprove or SATA sometimes you can sum up with a better field position that forced the two points to use a shorter

key that as opposed to progressive happening on of Education and finally are not going to talk about Julie speak backwards I think this is the most fascinating story of recent years but it's also kind of it's easy to think that this example which is a protocol that was deliberately back door in a way those food that was a good actually exported all the other purpose and once I'm talk about that the weakness wasn't literally observant yeah it is good for people today regarding exception okay so filling out the anomalies to keep extends from it's a bit of a misnomer because very often as we'll see it's actually broken where to what is possible together generating so eligible

use something called a group g which is something that panic you learn to know about me to think about it and if you think of it as metal box back so they agree on this minecraft hunger doubly so this technology Jess something process is funny the other way around that the closest know this better finally really something then they use secret number so wats random numbers they turn out to be provocative don't share locally and allison weiss is fuji share her a to create an opportunity ballet you have to understand for this week just the way so good she can easily compute and success this week fall and like us publicly speak of our beach as allison and using

this story of alison has exited about being a bullshitter combined with her own secret number a and T there's no not able to not beat our a and she keeps herself and both computers beep beep and goes well as this kind these numbers are in fact the same and this is see Bertie and the reason this works is that it is impossible to drive the stupid feet from g in power a deep pounding these are three these were let me check out so easy either good or bad for whoever opposition see those teeth changing about which he cannot compute this poppy that's not advice she can it's not impossible to do it it just extremely

hard I was in 2014-15 elements by phone use gospod unknowing dollars great no one will ever pay that much breakfast simple recipe and I'm only nine days versus men countries but still it's not worth funding for that too Grampy of the best bit loud or driving but ok let's look at how such hypothetical that work and actually takes two steps on first at the first part only use properties of the Gucci and then only the second cell survival is some perceived power a you are we are views so if we're alone what it means is many colors and balls you stay at no time they do lots of bass dsm-v blvd and innovations you say G so

this means that for a hundred-million-dollar with preparations someone right yes a k2 can crack producer step once for all one myself then you have this taken great all the opportunities to be a real time this is called the hotel attack and this is actually what we believe great many pediatricians so we still become a local Rogan no smoking program 48 will become his twice the size remains extremely secure in practice Albert important to help its security features you be 2g its best avoided in horry because it was ready to see Scott yourself that's wise let's have a bowl of fruit BB yeah ok so I was about half now generated from the heat using them

become for example nhn ok actually next day sick of the data and one my till 11 it's using vs 3 of yourself of all which is right sir robin and used to block cipher and the ids then you got the blend xarunta the best to gloss and then your pillows but actually you can make a lot supervisor firstly your ads on navigation God's about signature wait campri they come and because most I was need what fool blocks you feel funny and you live by adding some call back and in this case nestle read the Vanity proposed the final line of the banging on things the length of the rest of the banks in this case conspired with 14 and

the rest can be wherever both who gets is encrypted they're not diluted them loose it fun about heading for throws it away throw the way the bridge for vice and then gets the blame rests with the Masters you can check if you know the invaders of the bank is not governed by the Minecraft signature that's correct that's one thing though that is to be hastim of nice properties for attacks it's the ISPs and one thing is a thief in our mental position can using some JavaScript for example whether insert leading force Alice to make sort of requests and you can force her to make post requests which is experiments and you can force us he has

some British there and variation in 200 request directly the beginning and so on a year and by very best she can make sure that the link next cluster the mac and the planet this isn't planning tools to full funnel water and because that always has to be buried sometimes the whole phone book is back if one step as he's going to for that and at the same time you can also for force the final vine overboard sorry so it's you can't force a particular packet she wants to crack you can force it to beautify the one of one of the roasted bauxite using this al expects this request to a book what does what it does is she takes a

farmer walk which is not expected I please go to the way she replace it by this bankrupted frozen all this particular block in the middle she doesn't know what it is noted this is cooking or lost a vital cook in this case she puts it there set it on the ball doesn't affect anything now go boss is integrated and he lucid final bite Jess number sauce de león gotta many bikes off padding throttle a well it usually doesn't make sense but if the lot sometimes eight if the body craves to sell it makes sense because there so what shows the way he doesn't throw an error and you can see what bob says to us so we knows when he does or

doesn't throw an error so we just talk is he just tries many times with different keys by forcing the quest to be reset at some point the fun part will be great to tell which means that ignores the final i bespeak until another trip to cell 40 gonna feel a leading into the encryption speed it's something you can forget coldness I take it they do freely with us like this it said individual and she can big reveal this one by an estimate is around with it well I advise access as first I'll see you in the group that other party and because there are 56 I spent on this off you got money advance to get lucky

and so bye bye bye chica the Great Recession business broker poodle facility google it makes easy for me to grab some of my possession I'm no reasonable circumstances but in practice our web of meth cook it interview easily a forgettable face it does require a suggest you can use s goal whereas the b2b its improper injustice you've got four stars to make certain requests to read really basically it's good enough it doesn't allow you to do crack to decrypt full requests or any convert spots it really allows it to grab something at a database if your request and some items are back you know what I think the elisa used to mind if you live

all right someone sits on a chair but put the theme of people and there are quite a few laps Togo pool oh they have old-fashioned place it goes to the moment to do something because the village is like sending money the you need to enter like a code to get by a whole phone so we see that if she doesn't have so if you do be strong can I go starbucks software issue it would look like let's go round thank you but that would be something else that I got student so Tessa projects a bad you should really order on the end of the world because well that's where were you guys okay there's another way to a first

then go to the data stream if you have a secret p to stream cipher for example marks before RT for such a short algorithm is Ruby in group you'd fix it 12 it's a stream cipher on what time to be very geeky and you generate a stream off into the random numbers just X or distribute with your planet that's Bob Costas a blender if you look at our school yet to algorithm Creek Mountain it's so simple that it's got me good enough you you see they all practice by and then you can't it's very easy enough it's very cooperative very stiff ensuing software they're small are ready to infiltrate the software for this means it is extremely convert our next is that

is saweet its many subtle and not-so-subtle biases which means if you encrypt the same density different piece you can do that you get certain bias yeah are more likely to be online around and if you then do this many many times and combine all your devices you may get an idea of many of the points of them of Vegas but you really have to lose many many times so that the best known of that alone takes about 75 hours of reading a book if for she has to make the first to go and the bottom line here is the internet connection so even if you have to be faster after 75 our scope to go doesn't position she has enough

candidates to goof off wow this is great research it was extremely impractical no one's confuse them there's a lot of buildings or brown it's kind of intimidation issue that you ought to mention the most likes out it's that against as well to all personal associate ball it is a fair ball over to sonics of a pool of us where you keep banging in frying pan and you see what and go back with some government medics a typical the life of a heart attack and you can crack the primarily as a private key and what is the problem be safe this is often share between Serbs salsa lesson for the RSVP crap the same people we serve people why does another little

supporters that you can get safety or salsa never be in a worse case scenario of a stationary the factor is the very cheap open still doesn't scale when they don't stop stairwell and it's actually most of this athlete appropriate over this now I know that some implementations basically opens up still internet spenzo to the sport it officially but it don't sound in many cases even if it's has doesn't support if you then pretended us in accessibility so conclusion that's for the gentleman has grown cold it's safe enough keep in mind the sake of illusion l is all three each just before especially for a CPS and without us sis so it's not me why I saw three RT for it

isn't program in racket ER they shouldn't algorithm but there are very impatient ask for hospice are you geez both using plus x 3 okay shower have to show this it can be you get in many states well trafficking clear day down but encryption is really easy it's all innovation at heart because of application involves how how this house number who is long it's almost like this on focus so the law authenticates allows by signing something with a private papers on the double he is difficult history science right people and also get it that's unattractive was what the is that passport he has this is computing Didier Jie something scientists agree with his signed with social scientist far as difficult is

something else already knows as already it's a general faster now he wants to pretend to be involved so if if can fake a significant positive difference so the signature is still better to do so strong 5th but with relative signature she can impersonate ball so this was to be significant looks like sim pilots for violence information itself information on the side of the pathology movies it's worth on to the private key piece from signing and less dangerous on and in fact the signature operation first one base the hash all the first three blocks that site it and you probably know of the division does this is a one-way version it doesn't auditors it'll bite into a basement floor it's don't give

away is any information about the original so this by Charlotte I co-operatives force out with extreme have a world that I shot one a bit it's light events changed one bit the original wrote that the last eh was really one big change you get something completely unrelated so that's why you can't go back so what could go wrong but if could eat is able to replace the pot three losses for something that's a lot of physical but with other he respond to random energy has so the hashes are saying and I just can be staying here it's very nice that Secret Service inspector distance positive ticket revenues you can send this to Alice w development everything's fine so read

from both of its easy for more difficult the very first robot so each tries to find the spirit of with the same shot one door three blocks aspergillus good so like the easy version of that is to find another very local price with a shower crash depot that horrible basically broke winter quarter just two more supplies one more bite with us has since the same good at the bottom are slightly easier to keep you with needles box is given if you just say okay fine too quietly changed our luggage and an even easier version of that basis find consolation physical aspiration a we perform of shower 25 francs te pasa so he wants it is where

we are this is the same pretty much James C to die the fungus so this is what this is where Alex is probably broken message you really took the whole to you just hope you see it will take a long time many years to go from this to leave once so even though she imagined greatly so many so quite a long time well basically us fine which was used effect recently in 1996 some are already pointed out well executed at but we were getting close and for years people said yeah okay we'll stop using it but they agree still using certificates end-2012 Flynn more work use this report to failure mother to the bill maximum of eight server just

installed great advance more work release and then so we will I now try to work my child something happened something that we shall one so there are two faced get out it's complicated now if I face difficult out a min laughs or 3gs sandwich shop on and tomorrow overall the state's top which I one and introverted you can't just do them to elite double ball from this day won't trust difficult which shall once right after this is what it's also important to know this is not something that you can kiss all for yourself that you can probe has a selfish award for professor you have to google in and out of the world so boodle

but in this case is gonna help because talking somewhat won't help you because you can do the same with the minister sheikh important to use this cutscene inside she will be very difficult but rather and science but the most important thing to know about this is that it's not something during the relatedness all for your website or your ex so making a blue last bsns already worth some people because the more gratitude of us on the web site for very systems three mighty max he'll be dictate which is a bit more complicated okay so conclusions up hope you make the point that most of the moments aren't as bad okay so why bother obviously the

next when we get better of words so continue get before it gets back I need you wanna me through I know some people have suggested dozens with the Trudeau the other day may never actual working real kind of that against our support also shows that you care if you're a bank and you will go to pool then may not allow people still money that's how do I know if you have an update google how do i know it will fix as process getting more see you get both of these p but do please remember it's either scan internet or mobile SMS for all service supporting so two words 3 or 4 etcetera and then write a report valuable person

picked on our website screwed news media the fact that is robert is an easy to detect doesn't mean this booklet is a nice to exploit although that these scans often comes in for are not able check for limitations may enter also known to serve students poor taste yes Apple which is far worse than I believe most importantly you should pass these things with a credit report unlike people who goes on to that floor so that'll make this all wrong I think there's a great place and it is the wall to your house and as a great missing you members next but doesn't mean you can break into is one that's what I'm sayin

[ feedback ]