...stuff I do and things I like...

Conferences

Defcon has more talks: Do-It-Yourself Cellular IDS

CfP

SEC-T in Stockholm, Sweden. I highly recommend submitting.
SyScan360 SyScan is always a lot fun.
Hack in the Box (I submitted).

Here my REcon review. I must say REcon became my favorite conference together with CanSecWest. There were to bunch of really cool talks. I always enjoy REcon talks out side of my main work area. One such talk was about old video game cabinet security: Just keep trying ! Unorthodox ways to hack an old-school hardware. I didn't find the link to the slides anymore. But pretty much 90% of the talks were good. REcon also had mobile talks. jduck's talk on Reversing and Auditing Android's Proprietary Bits was pretty good. I especially liked Wardriving from your pocket: Reversing the Broadcom chipset with Wireshark the talk was about reversing the Broadcom Wifi firmware to enable monitor mode. Their website is here: bcmon.blogspot.com. Super interesting as well was Hiding @ Depth Exploring & Subverting NAND Flash memory and Reversing HLR, HSS and SPR: rooting the heart of the Network and Mobile cores from Huawei to Ericsson. Altogether if you missed REcon you missed out!

Links

XDA-Developers now has a security forum. First post is on vendor security contacts.

Slides on: Android Reversing and Defense

I actually decided to go to Defcon after all.

Conferences

Black Hat USA has the following talks: A PRACTICAL ATTACK AGAINST MDM SOLUTIONS, ANDROID: ONE ROOT TO OWN THEM ALL, BLACKBERRYOS 10 FROM A SECURITY PERSPECTIVE, HIDING @ DEPTH - EXPLORING: SUBVERTING AND BREAKING NAND FLASH MEMORY, HOW TO BUILD A SPYPHONE, I CAN HEAR YOU NOW: TRAFFIC INTERCEPTION AND REMOTE MOBILE PHONE CLONING WITH A COMPROMISED CDMA FEMTOCELL, MACTANS: INJECTING MALWARE INTO IOS DEVICES VIA MALICIOUS CHARGERS, MOBILE ROOTKITS: EXPLOITING AND ROOTKITTING ARM TRUSTZONE, ROOTING SIM CARDS, ABUSING WEB APIS THROUGH SCRIPTED ANDROID APPLICATIONS, and LTE BOOMS WITH VULNERABILITIES.

Defcon has: I Can Hear You Now: Traffic Interception and Remote Mobile Phone Cloning with a Compromised CDMA Femtocell, Defeating SEAndroid, and Inside The Strange World Of Java Cards SIM Card Apps And Over-The-Air Updates

BreakPoint has: A TALE OF TWO ANDROIDS

BruCON has: CobraDroid, Geolocation of GSM mobile devices, even if they do not want to be found

Stuff

HushSMS ROOT Edition released Blog post about how to acquire certain permissions on Android. Good read for Android hackers.

Waterboard: Advanced Forensic Logical Acquisition for iOS Devices

Runtime inspection for iOS apps

Exploiting Samsung Galaxy S4 Secure Boot

Android OEM applications insecurity and backdoors without permission (slides)

Is Blackberry Dead: intro to BB10 security (slides)

Anti Taint Droid source + paper