Leave a Comment

25C3: Solar-powering your gear
Hack a Day — ... The 25th Chaos Communication Congress is underway in Berlin. One of the first talks we dropped in on was [script]’s ...

A Visit to 25C3
A VC — ... My son Josh and I made a trip to the Chaos Communications Congress today (aka 25C3). It's a hacker conference that takes place in Berlin in late December every year. Here's ...

Meet the iPhone Dev Team [Hackers]
Gizmodo — ... Yes, all we have here is an annotated hour-long PowerPoint, and yes, almost all of the content is of interest only to the actual haxxors that gathered at 25C3 to watch, but for me, it's a thrill to hear these guys talk about the software that we've covered and used ourselves for so long. It's also a thrill to hear little tidbits like the 180 IP addresses inside apple that the Dev Team guys have tracked as frequent updaters of Pwnage and Quickpwn. ...

Outdated Security Threatens Web Commerce
Bits — ... the researchers presented at a technical conference in Berlin. The flaw is contained in an algorithm known as MD5, which is widely used to produce unique digital fingerprints. The weakness had first been discovered in 2004 by a group of Chinese researchers, but at the time, it still required vast amounts of computing to produce a forged certificate. But the group of independent cryptographers and mathematicians, based in California, the Centrum voor Wiskunde en Informatica and Eindhoven University of Technology in the Netherlands and the École Polytechnique Fédérale de ...

Researchers Show How to Forge Site Certificates
Freedom to Tinker — ... Today at the Chaos Computing Congress, a group of researchers (Alex Sotirov, Marc Stevens, Jake Appelbaum, Arjen Lenstra, Benne de Weger, and David Molnar) announced that they have found a way to forge website certificates that will be accepted as valid by most browsers. This means that they can successfully impersonate any website, even for secure connections. ...

Yes, Trust In The PKI Is Broken
InformationWeek - All Stories And Blogs — ... presented at the 25th Chaos Computer Congress shows that forging digital certificates is possible and practical. Trust in the SSL is now broken. SSL digital certificates are signed by certificate authorities, or CAs. When you go to an SSL-enabled Web site, the browser checks to see if the certificate was signed by a certificate authority contained in the browser. (To see a list of trusted CAs in Firefox, go to Tools->Options->Advanced->Encryption->View Certificates then click on Authorities for CAs and Servers for self-signed certificates. In IE7, go to Tools->Internet ...

MD5 collision creates rogue Certificate Authority
CrunchGear — ... At the 25th Chaos Communication Congress (CCC) today, researchers will reveal how they utilized a collision attack against the MD5 algorithm to create a rogue certificate authority. This is pretty big news, so read on. ...

Security and Privacy on Social Networks and the Semantic Web
ReadWriteWeb — ... While the MD5 hack that puts e-commerce sites at risk by faking security certificates received most of the ...

200 Sony PS3s Harnessed To Crack Secure Site Certification
InformationWeek - All Stories And Blogs — ... and banking sites. The researchers -- Jake Appelbaum, Arjen Lenstra, David Molnar, Dag Arne Osvik, Alex Sotirov, Marc Stevens, and Benne de Weger -- presented their work on Tuesday at the Chaos Computing Congress , a four-day computer ...

Chaos Communication Congress accepting submissions
MAKE Magazine — ... The categories are Society, Hacking, Making, Science, Culture, and Community. Further descriptions of these are outlined on the site. You might check out last year's event site and ...