HES 2012

That's right! I was there again! deadbytes house again! And this time we pushed it to another level, eight people sleeping in the same room. Oh, and we won the wargame... again! :D
To be completely honest, my team did much of the work themselves. 
I don't even want to get started on the quality of the talks and the awesomeness of those guys. If you like the security world, no matter which colour your hat is, you should be at HES.
You simply have to.

Armindo

Armindo, the cyber janitor.

Who is Armindo, you might ask. Armindo is another project from my hackerspace. Armindo is going to be a cyber janitor, which will allow the members so physically login to our hackerspace. He will have several modes of identification, namely a webcam (live) that recognizes QR-codes from members card for active login.
If you forget your card, don't worry, just bring your cell phone.
Armindo is going to be equipped with bluetooth and wifi, that will permanently be scanning for known mac addresses of members for passive login. This way, you just have to be nearby and he logs you in automatically.

But his main feature is that he randomly  speaks Chuck Norris jokes via festival. :P

Neat!

Hack yourself a USB microscope

This really couldn't get any easier. I found myself at my hackerspace with an incredible amount of lazyness in my hands. Well, lazyness to clean up the place.
Suddently I noticed an old plastic microscope (with and impressive 1000x zoom) and an old stripped usb webcam.
It was pretty obvious what to do... After adjusting the camera lenses to (very) close focus, an usb microscope was working in no time. You can even remove the IR filter from the webcam and get some IR lights under the microscope to get some awesome images, with the right colorants.

My blood. No kidding. No IR lights here tough.

Nuclear Taco

This year Codebits had, once again, Nuclear Tacos.
Nuclear Tacos are super hot super spicy to the point of insanity tacos.
So I did what any decent human being would do and I volunteered to be the guinea pig of altLab hackerspace Nuclear Taco Helmet.

Talk about sweat and tears...

Kudos to altLab. Hack on!

CODEBITS V

Sapo Codebits just rocks... need to say more?

Lego Mindstorm NXT printer

So, me and the guys at our Hackerspace got our hands into a Lego Mindstorm NXT. Actually, I admit, I bought it some months ago. Seriously, I never imagined I could be > 30 years old and still played with Legos...
Anyway, we flashed it with LeJOS real quickly before anything else. "Wait, what?"
For those who are not familiar with LeJOS, leJOS NXJ offers the following:

• Object oriented language (Java)
• Preemptive threads (tasks)
• Arrays, including multi-dimensional
• Recursion
• Synchronization
• Exceptions
• Java types including float, long, and String
• Most of the java.lang, java.util and java.io classes
• A Well-documented Robotics API

Although not essential for our goal, it was fun to fell that warm fuzzy feeling when you're not sure if you just bricked your appliance again.

Well, these were the results:

Cool eh? I like.

Hackito Ergo Sum 2011

Last weekend I was in Paris, taking part of one of the most awesome security conferences worldwide.Talk about skill...

Three intense days full of technical talks, a wargame by Steven from OverTheWire with a really cool story behind. I was lucky to stay at deadbytes house and meet really skilled hackers from Europe. My sincere thanks to deadbyte, for letting so many people into his house and making  sure everybody was confortable, showing us the finest french cousine and hospitality.
I also got to stay at LeLoop, one of the most fantastic Hackerspaces i've been to. Five squared km occupied building, full of people from every spectrum of society.

HES 2011 rocked! And our team won the wargame, which was pretty cool.

Next year, I'm going. I am.

Codebits IV

Froggy frog is being froggy...

Play! Framework <= 1.0.3.1 Directory Transversal Vulnerability

Play! Framework is really great! Since I saw the video intro on their site I decided to bring that technology into my company. I strongly recommend checking it out.
That being said, I was thinking: "Well it's a new technology, let me give it a quick spin, security wise..."
Blam! It suffered from a vulnerability that allowed for anyone to read any file the owner of the java process (play! is java) could read.
So I contacted the author and gave him the details. Let me tell you, he was a very cool guy, and one hour later a fix was released.
Yes, you read it right, one hour later... kudos play!, kudos...
I later published it to the Exploit Database for the curious ones.

libpng <= 1.4.2 DoS

CVE-2010-1205 came out and I decided to play around with it for a bit, since the potential surface attack was huge. Although I couldn't manage to dedicate much time, I eventually published a PoC for it, for those who might wonder you can get it from the excellent Exploit Database.
Fell free to dig into the code, if you manage to get a full working exploit I would love to hear from you.