overview for ashar

DIFFERENT – ShmooCon is an annual east coast hacker convention hell-bent on offering three days of an interesting atmosphere for demonstrating technology exploitation, inventive software and hardware solutions, and open discussions of critical infosec issues. The first day is a single track of speed talks called One Track Mind. The next two days bring three tracks: Build It, Belay It, and Bring It On.

AFFORDABLE – ShmooCon is about high quality without the high price. Keep in mind that space is limited, and we’ve sold out quickly every year.

ACCESSIBLE – ShmooCon is held in Washington, DC at the Washington Hilton about four blocks from the DC Metro’s Dupont Circle Station. Fly into DCA, IAD, or BWI or take a train to Union Station, and you’re just a short cab ride away from the con.

ENTERTAINING – Brain melting from all the cool tech you’re learning? Be sure to check out the other events running during ShmooCon, including the Lockpick Village, ShmooCon Labs, Hack Fortress, and more.

SHMOOCON SUPPORTS THE FREE AND OPEN EXCHANGE OF INFORMATION. We are proud to have attendees with unique and diverse viewpoints on just about any topic. We want to foster the exchange of ideas among attendees and think the community benefits from inclusiveness. To that end, we are committed to providing a friendly, lively, and welcoming environment for all.

6

Darknet Diaries EP 154: Hijacked Line (darknetdiaries.com)

submitted 8 months ago* (last edited 8 months ago) by ashar to c/security_cpe

0 comments fedilink

Darknet Diaries EP 154: Hijacked Line

Conor Freeman (x.com/conorfrmn) stole money online. Lots of it. In this episode we talk with him, and hear how he did it, why he did, and what he spent it on.

Conor’s website: https://conorfreeman.ie/

Conor’s X: https://x.com/conorfrmn

2

The Cost of an Incident - ShmooCon 2025 (infosec.exchange)

submitted 8 months ago by ashar to c/security_cpe

0 comments fedilink

The Cost of an Incident - ShmooCon 2025 by @TindrasGrove

"It covers some of the lessons we've learned at from cyber insurance claims about why some incidents are more expensive than others, and what organizations can do about it. "

3

38C3 - BlinkenCity: Radio-Controlling Street Lamps and Power Plants (media.ccc.de)

submitted 8 months ago by ashar to c/security_cpe

0 comments fedilink

BlinkenCity: Radio-Controlling Street Lamps and Power Plants

A significant portion of Europe's renewable energy production can be remotely controlled via longwave radio. While this system is intended to stabilize the grid, it can potentially also be abused to destabilize it by remotely toggling energy loads and power plants.

In this talk, we will dive into radio ripple control technology, analyze the protocols in use, and discuss whether its weaknesses could potentially be leveraged to cause a blackout, or – more positively – to create a city-wide Blinkenlights-inspired art installation.

With three broadcasting towers and over 1.3 million receivers, the radio ripple control system by EFR (Europäische Funk-Rundsteuerung) GmbH is responsible for controlling various types of loads (street lamps, heating systems, wall boxes, …) as well as multiple gigawatts of renewable power generation (solar, wind, biogas, …) in Germany, Austria, Czechia, Hungary and Slovakia.

The used radio protocols Versacom and Semagyr, which carry time and control signals, are partially proprietary but completely unencrypted and unauthenticated, leaving the door open for abuse.

This talk will cover:

An introduction to radio ripple control
Detailed analysis of transmitted radio messages, protocols, addressing schemes, and their inherent weaknesses
Hardware hacking and reversing
Implementation of sending devices and attack PoCs
(Live) demonstrations of attacks
Evaluation of the abuse potential
The way forward

Licensed to the public under http://creativecommons.org/licenses/by/4.0

2

BSidesNYC 2024 - 30 talks (self.security_cpe)

submitted 9 months ago* (last edited 9 months ago) by ashar to c/security_cpe

0 comments fedilink

BSidesNYC 2024 playlist

BSidesNYC 2024 schedule

5

38C3: Illegal Instructions (media.ccc.de)

submitted 9 months ago by ashar to c/security_cpe

0 comments fedilink

38C3: Illegal Instructions

(English and German language talks)

The 38th Chaos Communication Congress (38C3) takes place in Hamburg, 27.-30.12.2024, and is the 2024 edition of the annual four-day conference on technology, society and utopia organised by the Chaos Computer Club (CCC) and volunteers. Congress offers lectures and workshops and various events on a multitude of topics including (but not limited to) information technology and generally a critical-creative attitude towards technology and the discussion about the effects of technological advances on society.

https://events.ccc.de/congress/2024/

1

GDPR Hindi/Urdu Video Lectures (infosec.pub)

submitted 9 months ago* (last edited 9 months ago) by ashar to c/security_cpe

0 comments fedilink

GDPR Urdu Video Lectures part 1

GDPR Urdu Video Lectures part 2