...stuff I do and things I like...

Conferences

BruCon 5-7 October: Daan Raman - A distributed approach to mobile malware scanning, Markus Vervier - Stealing a Mobile Identity Using Wormholes

CFPs

SEC-T Stockholm, Sweden.

ReCON Montreal, Canada

Confidence Krakow, Poland

Source Boston, MA, USA

My good friend Nick has started a campaign to support Android users in risk and will provide free iPhones to them

Nice captures of what happens with the cellular service when the President is around: 1 2.

Inside a StingRay. Matt Blaze would take your spare StingRay base unit.

The Gemalto hack by GSHQ/NSA makes a lot of sense and is pretty interesting. Stories by Wired and The Register.


Links

How Safe is Your Child's Tablet: A review of the nine most popular models

Jduck's Android cluster toolkit recently updated

Daniel's iOS pentesting and research toolkit recently updated

PowerSpy: Location Tracking using Mobile Device Power Analysis

Mobile Internet traffic hijacking via GTP and GRX

Vulnerabilities of GPRS

Python Protocol Simulator for SIM related protocols

RIM helps Google to fix Android security Doesn't seem like the worst idea ever.

Postdoctoral position in Mobile Malware Analysis

Is your phone spying on you? info graphic

An Exploration of ARM TrustZone

Apktool 2.0.0

Disassembling MobiCore Trustlets

Qualcomm TrustZone Integer Signedness bug

Conferences

TelcoSecDay @ Troopers Markus Vervier: Borrowing Mobile Network Identities - Just Because We Can, Tobias Engel: Securing the SS7 Interconnect, Ravishankar Borgaonkar - TelcoSecurity Mirage: 1G to 5G, Dieter Spaar - How to Assess M2M Communication from an Attacker's Perspective.

CanSecWest Timur Yunusov & Kirill Nesterov - Bootkit via SMS: 4G access level security assesment. Team Pangu Userland Exploits of Pangu 8, the first untethered iOS8 jailbreak.

Hack in the Box Amsterdam The Savage Curtain: Mobile SSL Failures; Eight Ou Two Mobile; Mobile Authentication Subspace Travel; Fuzzing Objects d'ART: Digging Into the New Android L Runtime Internals; Relay Attacks in EMV Contactless Cards with Android OTS Devices; Bootkit via SMS: 4G Access Level Security Assessment

TelcoSecDay @ Troopers looks pretty awesome. Too bad that I can't go because of the 100% overlap with CanSec. Sadly this seems to be a new trend that a number of top conferences overlap or are so close to each other that it is impossible to attend both.

Somebody is selling fake versions of the Android Hacker's Handbook on Amazon. Indicators are missing pictures or the white book backside (original one is black).

We recently presented BabelCrypt at Financial Crypto. I would love to see a usable implementation of this. Unfortunately I don't have the time to make this happen. I would pay money for this app.


Links

Google Play Store X-Frame-Options (XFO) Gaps Enable Android Remote Code Execution (RCE)

Beemer, Open Thyself! - Security vulnerabilities in BMW's ConnectedDrive (attack was carried out over the air)

Google Android and iOS apps now in scope for vulnerability rewards from Google

OpenBTS and Metasploit integration

Blackphone p0wnd

AndroidCensus got updated again (+30 new samples)

Adrian Ludwig's response on WebView vulns

Native Android Runtime Emulation

Can you imagine Internet service provider hijack customers' traffic to replace APKs they're downloading? Well in CN everything is possible. (very interesting, I would love to see more data on this)

giefroot: A tool to root your device using CVE-2014-7911 (by Keen Team) and CVE-2014-4322

CVE-2014-7911 - A Deep Dive Analysis of Android System Service Vulnerability and Exploitationa