Archive

Archive for the ‘HAR2009’ Category

HAR: networking overview by the NOC team

August 16th, 2009 2 comments

How did you get the network here in the middle of the field (10Gbps).  By The NOC team

Internet was provided by XS4ALL, BIT and OpenTransit. There were direct peering connections with Akamai, Google and Giganews.

First problem: how do you get from Vierhouten to Amsterdam? In Vierhouten you have several options:
•    3KM fibers to Nunspeet
•    There are two fibers of KPN and UPC in Vierhouten

Read more…

Categories: Conferences, HAR2009 Tags: ,

HAR: Hackerspaces Everywhere by Esther Schneeweisz

August 16th, 2009 2 comments

So what is a hackerspace? “Desperate collaboration, rats and cooking with high voltage electricity”.

Esther started her presentation by showing a hackerspaces video. Which explained that hackerspaces are groups of people who are into hardware hacking and try to figure out how technology stuff works, and what you can make from basically whatever?
Read more…

HAR: DNSSEC restoring trust in DNS by Roland van Rijswijk

August 15th, 2009 No comments

Links from the HAR2009 site: Talk description and Slides.

Roland started off by explaining the basics of DNS Cache poisoning and the details of the trick discovered by Dan Kaminski last year. Explaining why you don’t have to wait for the answer to expire to in order to poison the cache.

Quite a bit of the patching done after the Kaminski attack became public is actually been undone by NAT-ing firewalls, who do not randomize the source ports the use to keep track of their NAT table.
Read more…

HAR: DNS Security in the broadest sense, some good, some bad by Bert Hubert of PowerDNS.com / Fox-IT

August 14th, 2009 1 comment

PowerDNS logoSlides are here

Bert Hubert introduced us in the world of DNS. He opened by stating that “DNS is Scary and complex” and “DNS it is everywhere”.

Read more…

HAR: Advanced MySQL Exploitation by Muhaimin Dzulfakar

August 13th, 2009 No comments

Nice way to upload files to a webserver. While there is nothingMySQL logo new about uploading a file to a web server and then executing it, using SQL injection to do it is a novelty. By using a Zlib compress, base64 encoded payload and uploading them via SQL injection the speaker would be able to bypass standard defenses like extension limiting and file type checking.

Read more…