Evilgrade, You Still Have Pending Upgrades?
Francisco Amato and Federico Kirschbaum details francisco Amato & Federico Kirschbaum - Evilgrade, You Still Have Pending Upgrades.
Summary
Architecture and Background
Francisco Amato & Federico Kirschbaum - Evilgrade, You Still Have Pending Upgrades? Vulnerabilities are disclosed daily and in the best case new patches are released. Is no new that many application's update process have security weaknesses allowing fake updates injection.
Vulnerability Analysis
The new version of the framework will show how many updates system are still vulnerable to this trivial attack. Francisco Amato is a researcher and computer security consultant who works in the area of vulnerability Development, blackbox testing, reverse engineering. He runs his own company - [ISR] Infobyte Security Research www.infobytesec.com, from where he published his developments in audit tools and vulnerabilities in products from companies like Novell, IBM, Sun Microsystems, Apple, Microsoft.
Exploitation and Demonstrations
Founding organizer of ekoparty south america security conference www.ekoparty.org. Federico Kirschabum is currently the CTO of Infobyte Security Research, company based in Buenos Aires, Argentina. With almost 10 years of experience researching and pentesting networks, he has developed a deep knowledge in the computer security & telecomunications field.
Remediation and Defensive Strategies
He is one of the founders of the ekoparty security conference, one of the biggest con in Latin America which is held yearly in BA. Besides computing, Federico studied Filmmaking and worked in several productions. In his free time he loves to play competitive paintball and make asados for his friends. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·49 min
Jon McCoy
Jon McCoy explores hacking .net applications: the black arts at DEF CON 19, examining malware-analysis and practical defenses.
Main Stage·43 min
Chaos Computer Club
Chaos Computer Club explores chaosvpn for playing ctfs at DEF CON 18, examining malware-analysis and practical defenses.
Main Stage·49 min
Lineberry · Richardson · and Wyatt
Lineberry and Richardson details anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For The rise of the robot revolution is among us.