{"id":37373,"date":"2019-10-31T22:17:16","date_gmt":"2019-10-31T19:17:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-interesnyh-dokladov-s-hakerskih-konferentsij\/"},"modified":"2019-10-31T22:17:16","modified_gmt":"2019-10-31T19:17:16","slug":"10-interesnyh-dokladov-s-hakerskih-konferentsij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij","title":{"rendered":"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u0159em\u00fd\u0161lel jsem, \u017ee by bylo skv\u011bl\u00e9 pokr\u00fdt ud\u00e1losti z mezin\u00e1rodn\u00edch konferenc\u00ed. Ne jen v obecn\u00e9m p\u0159ehledu, ale sd\u00edlet p\u0159\u00edb\u011bhy o nejzaj\u00edmav\u011bj\u0161\u00edch p\u0159edn\u00e1\u0161k\u00e1ch. P\u0159edkl\u00e1d\u00e1m v\u00e1m prvn\u00ed horkou des\u00edtku.<\/p>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"#a1\">\u2013 V o\u010dek\u00e1v\u00e1n\u00ed harmonick\u00e9ho tandemu \u00fatok\u016f IoT a ransomware<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a2\">\u2013 \u201eOtev\u0159i \u00fasta, \u0159ekni 0x41414141\u201c: \u00datok na l\u00e9ka\u0159skou kybernetickou infrastrukturu<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a3\">\u2013 Zubat\u00fd exploit na ost\u0159\u00ed \u0161p\u00edze kontextov\u00e9 reklamy<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a4\">\u2013 Jak opravdov\u00ed hacke\u0159i uh\u00fdbaj\u00ed \u043f\u0435\u0440\u0435\u0434\u00e1te\u010dn\u00ed reklam\u011b<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a5\">\u2013 20 let prolomen\u00ed MMORPG: grafika lep\u0161\u00ed, exploity stejn\u00e9<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a6\">\u2013 Hackneme roboty, ne\u017e p\u0159ejde Skynet<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a7\">\u2013 Militarizace strojov\u00e9ho u\u010den\u00ed<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a8\">\u2013 Vzpom\u00ednat na v\u0161echno: implantace hesel do kognitivn\u00ed pam\u011bti<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a9\">\u2013 A zeptala se drobe\u010dek: \u201eOpravdu si mysl\u00ed\u0161, \u017ee kybernetick\u00e9 \u00fatoky na energetickou s\u00ed\u0165 mohou prov\u00e1d\u011bt jen vl\u00e1dn\u00ed hacke\u0159i?\u201c<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"#a10\">\u2013 Internet u\u017e v\u00ed, \u017ee jsem t\u011bhotn\u00e1<\/a><\/noindex><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/1c626a731dd48ceaf26aa580caf69ceb.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" name=\"a1\"><\/a><\/noindex><\/p>\n<h1 id=\"1-v-ozhidanii-druzhnogo-tandema-iot-atak-i-ranzomvari\">1. V o\u010dek\u00e1v\u00e1n\u00ed harmonick\u00e9ho tandemu \u00fatok\u016f IoT a ransomware<\/h1>\n<p><\/p>\n<h2 id=\"christopher-elisan-demystifying-the-ransomware-and-iot-threat--rootcon-2017httpsmediarootconorgrootcon2011talksdemystifying20the20ransomware20and20iot20threatpdf\"><noindex><a rel=\"nofollow\" href=\"https:\/\/media.rootcon.org\/ROOTCON%2011\/Talks\/Demystifying%20The%20Ransomware%20and%20IoT%20Threat.pdf\">Christopher Elisan. Demystifikace hrozby ransomware a IoT \/\/ ROOTCON. 2017<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>V roce 2016 jsme byli sv\u011bdky rychl\u00e9ho n\u00e1r\u016fstu \u00fatok\u016f ransomware. Je\u0161t\u011b jsme se nesta\u010dili zotavit z t\u011bchto \u00fatok\u016f, kdy\u017e n\u00e1s zas\u00e1hla nov\u00e1 vlna DDoS \u00fatok\u016f vyu\u017e\u00edvaj\u00edc\u00ed IoT. V t\u00e9to p\u0159edn\u00e1\u0161ce autor pod\u00e1v\u00e1 krok za krokem popis, jak prob\u00edh\u00e1 \u00fatok ransomwarem. Jak ransomware funguje a co by m\u011bl v\u00fdzkumn\u00edk d\u011blat v ka\u017ed\u00e9 f\u00e1zi, aby \u010delil ransomware.<\/p>\n<p><\/p>\n<p>P\u0159itom se op\u00edr\u00e1 o osv\u011bd\u010den\u00e9 metody. Pot\u00e9 p\u0159edn\u00e1\u0161ej\u00edc\u00ed osv\u011btluje, jak se IoT pod\u00edl\u00ed na DDoS \u00fatoc\u00edch: sd\u00edl\u00ed, jakou roli v realizaci t\u011bchto \u00fatok\u016f hraje pomocn\u00fd malware (pro n\u00e1slednou pomoc s jeho strany p\u0159i prov\u00e1d\u011bn\u00ed DDoS \u00fatoku arm\u00e1dou IoT). Tak\u00e9 vysv\u011btluje, jak tandem ransomware a \u00fatok\u016f IoT m\u016f\u017ee p\u0159edstavovat velkou hrozbu v nadch\u00e1zej\u00edc\u00edch letech. P\u0159edn\u00e1\u0161ej\u00edc\u00ed je autorem knih \u201eMalware, Rootkits &amp; Botnets: a Beginner\u2019s Guide\u201c, \u201eAdvanced Malware Analysis\u201c, \u201eHacking Exposed: Malware &amp; Rootkits Secrets &amp; Solutions\u201c, tak\u017ee m\u00e1 dob\u0159e znalosti o t\u00e9matu.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/8ad68db7bf14f25036159ec1ee475a98.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a2\"><\/a><\/noindex><\/p>\n<h1 id=\"2-otkroy-rot-skazhi-0x41414141-ataka-na-medicinskuyu-kiberinfrastrukturu\">2. \u201eOtev\u0159i \u00fasta, \u0159ekni 0x41414141\u201c: \u00datok na l\u00e9ka\u0159skou kybernetickou infrastrukturu<\/h1>\n<p><\/p>\n<h2 id=\"robert-portvliet-open-up-and-say-0x41414141-attacking-medical-devices--toorcon-2017httpswwwyoutubecomwatchvsbw78men_70\"><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=SBw78men_70\">Robert Portvliet. Otev\u0159i \u00fasta a \u0159ekni 0x41414141: \u00datok na l\u00e9ka\u0159sk\u00e9 p\u0159\u00edstroje \/\/ ToorCon. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>Internetem p\u0159ipojen\u00e9 l\u00e9ka\u0159sk\u00e9 vybaven\u00ed je dnes b\u011b\u017enou klinickou realitou. Takov\u00e9 za\u0159\u00edzen\u00ed je cennou oporou pro zdravotnick\u00fd person\u00e1l, proto\u017ee automatizuje zna\u010dnou \u010d\u00e1st rutinn\u00ed pr\u00e1ce. Nicm\u00e9n\u011b toto vybaven\u00ed obsahuje mnoho zranitelnost\u00ed (jak softwarov\u00fdch, tak hardwarov\u00fdch), kter\u00e9 otev\u00edraj\u00ed \u0161irok\u00e9 pole pro potenci\u00e1ln\u00ed \u00fato\u010dn\u00edky. V p\u0159edn\u00e1\u0161ce se \u0159e\u010dn\u00edk pod\u011bl\u00ed o osobn\u00ed zku\u0161enosti s prov\u00e1d\u011bn\u00edm penetra\u010dn\u00edch test\u016f pro l\u00e9ka\u0159skou kybernetickou infrastrukturu a tak\u00e9 popisuje, jak \u00fato\u010dn\u00edci kompromituj\u00ed l\u00e9ka\u0159sk\u00e9 za\u0159\u00edzen\u00ed.<\/p>\n<p><\/p>\n<p>\u0158e\u010dn\u00edk popisuje: 1) jak \u00fato\u010dn\u00edci vyu\u017e\u00edvaj\u00ed propriet\u00e1rn\u00ed komunika\u010dn\u00ed protokoly, 2) jak objevuj\u00ed zranitelnosti v s\u00ed\u0165ov\u00fdch slu\u017eb\u00e1ch, 3) jak kompromituj\u00ed syst\u00e9my \u017eivotn\u00ed podpory, 4) jak vyu\u017e\u00edvaj\u00ed hardwarov\u00e9 ladic\u00ed rozhran\u00ed a syst\u00e9movou datovou sb\u011brnici; 5) jak \u00fato\u010d\u00ed na hlavn\u00ed bezdr\u00e1tov\u00e9 rozhran\u00ed a specifick\u00e9 propriet\u00e1rn\u00ed bezdr\u00e1tov\u00e9 technologie; 6) jak pronikaj\u00ed do l\u00e9ka\u0159sk\u00fdch informa\u010dn\u00edch syst\u00e9m\u016f a pot\u00e9 \u010dtou a upravuj\u00ed: osobn\u00ed zdravotn\u00ed informace pacienta; pracovn\u00ed l\u00e9ka\u0159sk\u00e9 z\u00e1znamy, jejich\u017e obsah je norm\u00e1ln\u011b i od pacienta skryt; 7) jak naru\u0161uj\u00ed komunika\u010dn\u00ed syst\u00e9m, kter\u00fd l\u00e9ka\u0159sk\u00e9 vybaven\u00ed pou\u017e\u00edv\u00e1 pro v\u00fdm\u011bnu informac\u00ed a pracovn\u00edch p\u0159\u00edkaz\u016f; 8) jak omezuj\u00ed p\u0159\u00edstup zdravotnick\u00e9ho person\u00e1lu k vybaven\u00ed; nebo ho zcela blokuj\u00ed.<\/p>\n<p><\/p>\n<p>B\u011bhem sv\u00fdch penetra\u010dn\u00edch test\u016f \u0159e\u010dn\u00edk objevil u l\u00e9ka\u0159sk\u00e9ho vybaven\u00ed \u0159adu probl\u00e9m\u016f. Mezi nimi: 1) slab\u00e1 kryptografie, 2) mo\u017enost manipulace s daty; 3) mo\u017enost vzd\u00e1len\u00e9 v\u00fdm\u011bny za\u0159\u00edzen\u00ed, 3) zranitelnosti v propriet\u00e1rn\u00edch protokolech, 4) mo\u017enost neautorizovan\u00e9ho p\u0159\u00edstupu k datab\u00e1z\u00edm, 5) tvrd\u011b naprogramovan\u00e9 nem\u011bnn\u00e9 p\u0159ihla\u0161ovac\u00ed jm\u00e9na\/hesla. A tak\u00e9 dal\u0161\u00ed citliv\u00e9 informace, kter\u00e9 jsou ulo\u017eeny bu\u010f v firmwaru za\u0159\u00edzen\u00ed, nebo v syst\u00e9mov\u00fdch bin\u00e1rk\u00e1ch; 6) n\u00e1chylnost l\u00e9ka\u0159sk\u00e9ho vybaven\u00ed k vzd\u00e1len\u00fdm DoS \u00fatok\u016fm.<\/p>\n<p><\/p>\n<p>Po sezn\u00e1men\u00ed se s p\u0159edn\u00e1\u0161kou je jasn\u00e9, \u017ee kybernetick\u00e1 bezpe\u010dnost v l\u00e9ka\u0159sk\u00e9m sektoru dnes p\u0159edstavuje klinick\u00fd p\u0159\u00edpad a vy\u017eaduje intenzivn\u00ed terapii.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/e776c87b87910f319dbf1cd670ea4ea5.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a3\"><\/a><\/noindex><\/p>\n<h1 id=\"3-zubastyy-eksployt-na-ostrie-shampura-kontekstnoy-reklamy\">3. Zubat\u00fd exploit na \u0161p\u00edzu kontextov\u00e9 reklamy<\/h1>\n<p><\/p>\n<h2 id=\"tyler-cook-false-advertising-how-modern-ad-platforms-can-be-used-for-targeted-exploitation--toorcon-2017httpswwwyoutubecomwatchvbhqxmdmiyae\"><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=BhqXMDMIyAE\">Tyler Cook. Fale reklam\u011b: Jak modern\u00ed reklamn\u00ed platformy mohou b\u00fdt pou\u017eity k c\u00edlen\u00e9 exploataci \/\/ ToorCon. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>Ka\u017ed\u00fd den miliony lid\u00ed nav\u0161t\u011bvuj\u00ed soci\u00e1ln\u00ed s\u00edt\u011b: kv\u016fli pr\u00e1ci, pro z\u00e1bavu nebo jen tak. Pod kapotou soci\u00e1ln\u00edch s\u00edt\u00ed se skr\u00fdvaj\u00ed neviditeln\u00e9 pro b\u011b\u017en\u00e9 n\u00e1v\u0161t\u011bvn\u00edky reklamn\u00ed platformy, kter\u00e9 jsou odpov\u011bdn\u00e9 za to, aby p\u0159iv\u00e1d\u011bly relevantn\u00ed kontextovou reklamu n\u00e1v\u0161t\u011bvn\u00edk\u016fm. Reklamn\u00ed platformy jsou snadno pou\u017eiteln\u00e9 a velmi efektivn\u00ed. Proto jsou mezi inzerenty vyhled\u00e1van\u00e9.<\/p>\n<p><\/p>\n<p>Krom\u011b mo\u017enosti oslovit \u0161irok\u00e9 publikum, co\u017e je pro firmy velmi v\u00fdhodn\u00e9, reklamn\u00ed platformy tak\u00e9 umo\u017e\u0148uj\u00ed z\u00fa\u017eit c\u00edlen\u00ed \u2013 a\u017e na jednu konkr\u00e9tn\u00ed osobu. Nav\u00edc, funkce modern\u00edch reklamn\u00edch platforem dokonce umo\u017e\u0148uj\u00ed vybrat, na jak\u00e9m z mnoha za\u0159\u00edzen\u00ed t\u00e9 konkr\u00e9tn\u00ed osoby se reklama zobraz\u00ed.<\/p>\n<p><\/p>\n<p>T\u00edm p\u00e1dem modern\u00ed reklamn\u00ed platformy umo\u017e\u0148uj\u00ed inzerentovi dostat se k jak\u00e9koli osob\u011b, kdekoli na sv\u011bt\u011b. Ale tato mo\u017enost m\u016f\u017ee b\u00fdt tak\u00e9 vyu\u017eita \u00fato\u010dn\u00edky, jako vstupn\u00ed br\u00e1na do s\u00edt\u011b, ve kter\u00e9 funguje jejich zam\u00fd\u0161len\u00e1 ob\u011b\u0165. Prezentuj\u00edc\u00ed ukazuje, jak m\u016f\u017ee zlonam\u011brn\u00fd inzerent vyu\u017e\u00edt reklamn\u00ed platformu k vysoce p\u0159esn\u00e9mu c\u00edlen\u00ed sv\u00e9 phishingov\u00e9 kampan\u011b, zam\u011b\u0159en\u00e9 na doru\u010den\u00ed personalizovan\u00e9ho exploitu konkr\u00e9tn\u00ed osob\u011b.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a4\"><\/a><\/noindex><\/p>\n<h1 id=\"4-kak-nastoyaschie-hakery-uvorachivayutsya-ot-targetingovoy-reklamy\">4. Jak se skute\u010dn\u00ed hacke\u0159i vyh\u00fdbaj\u00ed c\u00edlen\u00e9 reklam\u011b<\/h1>\n<p><\/p>\n<h2 id=\"weston-hecker-opt-out-or-deauth-trying---anti-tracking-bots-radios-and-keystroke-in-jection--def-con-2017httpsmediadefconorgdef20con2025def20con202520presentationsdef20con202520-20weston-hecker-opt-out-or-deauth-tryingpdf\"><noindex><a rel=\"nofollow\" href=\"https:\/\/media.defcon.org\/DEF%20CON%2025\/DEF%20CON%2025%20presentations\/DEF%20CON%2025%20-%20Weston-Hecker-Opt-Out-or-Deauth-Trying.pdf\">Weston Hecker. Opt Out or Deauth Trying !- Anti-Tracking Bots Radios and Keystroke Injection \/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>Ve sv\u00e9m ka\u017edodenn\u00edm \u017eivot\u011b pou\u017e\u00edv\u00e1me mnoho r\u016fzn\u00fdch po\u010d\u00edta\u010dov\u00fdch slu\u017eeb. A je pro n\u00e1s t\u011b\u017ek\u00e9 se jich vzd\u00e1t, i kdy\u017e se n\u00e1hle dozv\u00edme, \u017ee n\u00e1s sleduj\u00ed tot\u00e1ln\u011b. Tak intenzivn\u011b, \u017ee monitoruj\u00ed ka\u017ed\u00fd n\u00e1\u0161 pohyb a ka\u017ed\u00fd n\u00e1\u0161 dotyk.<\/p>\n<p><\/p>\n<p>Prezentuj\u00edc\u00ed srozumiteln\u011b vysv\u011btluje, jak modern\u00ed market\u00e9\u0159i pou\u017e\u00edvaj\u00ed \u0161irok\u00e9 spektrum ezoterick\u00fdch metod c\u00edlen\u00ed. My <noindex><a rel=\"nofollow\" href=\"https:\/\/xakep.ru\/2018\/01\/12\/mobile-paranoid\/\">jsme ned\u00e1vno psali<\/a><\/noindex> o mobiln\u00ed paranoid\u011b, o tot\u00e1ln\u00edm sledov\u00e1n\u00ed. A mnoz\u00ed \u010dten\u00e1\u0159i to brali jako ne\u0161kodn\u00fd vtip, ale z prezentovan\u00e9ho dokumentu je patrn\u00e9, \u017ee modern\u00ed market\u00e9\u0159i ji\u017e pln\u011b vyu\u017e\u00edvaj\u00ed podobn\u00e9 technologie ke sledov\u00e1n\u00ed n\u00e1s.<\/p>\n<p><\/p>\n<p>Co se d\u00e1 d\u011blat, odv\u011btv\u00ed kontextov\u00e9 reklamy \u2013 kter\u00e9 toto tot\u00e1ln\u00ed sledov\u00e1n\u00ed podporuje \u2013 kr\u00e1\u010d\u00ed obrovsk\u00fdmi kroky. A\u017e tak daleko, \u017ee modern\u00ed reklamn\u00ed platformy mohou sledovat nejen online aktivitu \u010dlov\u011bka (stisky kl\u00e1ves, pohyb my\u0161i atd.), ale tak\u00e9 jeho fyziologick\u00e9 rysy (jak\u00fdm zp\u016fsobem stiskneme kl\u00e1vesy a posunujeme my\u0161). Tak\u017ee modern\u00ed sledovac\u00ed prost\u0159edky reklamn\u00edch platforem, integrov\u00e1ny do slu\u017eeb, bez kter\u00fdch si nedovedeme p\u0159edstavit \u017eivot, \u2013 nejen\u017ee se dost\u00e1vaj\u00ed pod spodn\u00ed pr\u00e1dlo, ale u\u017e dokonce i pod k\u016f\u017ei. Pokud nem\u00e1me mo\u017enost se t\u011bchto p\u0159ehnan\u011b pozorovateln\u00fdch slu\u017eeb vzd\u00e1t, pro\u010d se alespo\u0148 nepokusit je bombarderovat bezcenn\u00fdmi informacemi?<\/p>\n<p><\/p>\n<p>Ve zpr\u00e1v\u011b je p\u0159edstaven autorsk\u00fd za\u0159\u00edzen\u00ed (softwarov\u011b-hardware bot), kter\u00e9 umo\u017e\u0148uje: 1) prov\u00e1d\u011bt injekce Bluetooth beacon\u016f; 2) \u0161um\u011bt data shrom\u00e1\u017ed\u011bn\u00e1 z palubn\u00edch senzor\u016f automobilu; 3) falsifikovat identifika\u010dn\u00ed parametry mobiln\u00edho telefonu; 4) \u0161um\u011bt styl stisk\u016f prst\u016f (na kl\u00e1vesnici, my\u0161i a dotykov\u00e9m panelu). V\u0161echny tyto informace, jak je zn\u00e1mo, se pou\u017e\u00edvaj\u00ed pro c\u00edlen\u00ed reklamy na mobiln\u00edch za\u0159\u00edzen\u00edch.<\/p>\n<p><\/p>\n<p>Na demonstraci je vid\u011bt, \u017ee po spu\u0161t\u011bn\u00ed autorsk\u00e9ho za\u0159\u00edzen\u00ed syst\u00e9m sledov\u00e1n\u00ed ze\u0161\u00edl\u00ed; shrom\u00e1\u017ed\u011bn\u00e9 informace se stanou natolik za\u0161um\u011bn\u00fdmi a nep\u0159esn\u00fdmi, \u017ee na\u0161im pozorovatel\u016fm u\u017e nebudou v\u016fbec k ni\u010demu. Jako dobrou legraci ukazuje p\u0159edn\u00e1\u0161ej\u00edc\u00ed, jak d\u00edky p\u0159edstaven\u00e9mu za\u0159\u00edzen\u00ed 'sledovac\u00ed syst\u00e9m' za\u010d\u00edn\u00e1 vn\u00edmat 32let\u00e9ho hackera jako 12letou d\u00edvku, kter\u00e1 \u0161\u00edlen\u011b miluje kon\u011b.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/a8eeeb51f0be2af8b9dcfca1cea2de80.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a5\"><\/a><\/noindex><\/p>\n<h1 id=\"5-20-let-vzlomu-mmorpg-grafika-kruche-eksployty-te-zhe\">5. 20 let hackov\u00e1n\u00ed MMORPG: grafika lep\u0161\u00ed, exploity stejn\u00e9<\/h1>\n<p><\/p>\n<h2 id=\"twenty-years-of-mmorpg-hacking-better-graphics-same-exploits--def-con-2017httpsarchiveorgdetailsyoutube-pfbmzjsb1cq\"><noindex><a rel=\"nofollow\" href=\"https:\/\/archive.org\/details\/youtube-PfbMZJsb1cQ\">Twenty Years of MMORPG Hacking: Better Graphics, Same Exploits \/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>T\u00e9ma hackov\u00e1n\u00ed MMORPG se na DEF CON diskutuje u\u017e 20 let. Na oslavu tohoto v\u00fdro\u010d\u00ed p\u0159edn\u00e1\u0161ej\u00edc\u00ed popisuje nejv\u00fdznamn\u011bj\u0161\u00ed momenty z t\u011bchto diskuz\u00ed. D\u00e1le vypr\u00e1v\u00ed o sv\u00fdch dobrodru\u017estv\u00edch na poli neleg\u00e1ln\u00edho lovu v online hr\u00e1ch. Za\u010d\u00ednaj\u00edc\u00ed s Ultima Online (v roce 1997). A v n\u00e1sleduj\u00edc\u00edch letech: Dark Age of Camelot, Anarchy Online, Asherons Call 2, ShadowBane, Lineage II, Final Fantasy XI\/XIV, World of Warcraft. Mezi nimi tak\u00e9 n\u011bkolik nov\u011bj\u0161\u00edch z\u00e1stupc\u016f: Guild Wars 2 a Elder Scrolls Online. A to je zdaleka ne cel\u00fd \u017eivotopis p\u0159edn\u00e1\u0161ej\u00edc\u00edho!<\/p>\n<p><\/p>\n<p>Ve zpr\u00e1v\u011b jsou uvedeny technick\u00e9 detaily k vytv\u00e1\u0159en\u00ed exploit\u016f pro MMORPG, kter\u00e9 pom\u00e1haj\u00ed obohatit se virtu\u00e1ln\u00edmi pen\u011bzi, a kter\u00e9 jsou relevantn\u00ed t\u00e9m\u011b\u0159 pro ka\u017edou MMORPG. P\u0159edn\u00e1\u0161ej\u00edc\u00ed stru\u010dn\u011b hovo\u0159\u00ed o v\u011b\u010dn\u00e9m konfliktu mezi pytl\u00e1ky (v\u00fdrobci exploit\u016f) a \"rybn\u00ed inspekc\u00ed\"; a o sou\u010dasn\u00e9m technick\u00e9m stavu tohoto z\u00e1vodu ve zbrojen\u00ed.<\/p>\n<p><\/p>\n<p>Vysv\u011btluje metodiku podrobn\u00e9 anal\u00fdzy paket\u016f a jak nastavit exploit, aby na stran\u011b serveru nebyl jeho zneu\u017eit\u00ed odhaleno. Zahrnuje tak\u00e9 prezentaci nejnov\u011bj\u0161\u00edho exploitu, kter\u00fd v dob\u011b prezentace m\u011bl v\u00fdhodu p\u0159ed \"rybn\u00ed inspekc\u00ed\" v z\u00e1vodu ve zbrojen\u00ed.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a6\"><\/a><\/noindex><\/p>\n<h1 id=\"6-haknem-robotov-poka-skaynet-ne-prishyol\">6. Hacking Roboty p\u0159ed Skynetem<\/h1>\n<p><\/p>\n<h2 id=\"lucas-apa-hacking-robots-before-skynet--rootcon-2017httpswwwyoutubecomwatchvbpvsvp2d9vi\"><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=BpvSvP2D9VI\">Lucas Apa. Hacking Robots before Skynet \/\/ ROOTCON. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>Roboty jsou nyn\u00ed velmi na o\u010d\u00edch. V bl\u00edzk\u00e9 budoucnosti budou v\u0161ude: na vojensk\u00fdch mis\u00edch, p\u0159i chirurgick\u00fdch operac\u00edch, p\u0159i stavb\u011b mrakodrap\u016f; jako asistenti nakupuj\u00edc\u00edch v obchodech; person\u00e1l nemocnic; obchodn\u00ed asistenti, sexu\u00e1ln\u00ed partne\u0159i; dom\u00e1c\u00ed kucha\u0159i a plnopr\u00e1vn\u00ed \u010dlenov\u00e9 rodiny.<\/p>\n<p><\/p>\n<p>Jak se ekosyst\u00e9m robot\u016f roz\u0161i\u0159uje a vliv robot\u016f v na\u0161\u00ed spole\u010dnosti a ekonomice rychle roste, za\u010d\u00ednaj\u00ed p\u0159edstavovat v\u00fdznamnou hrozbu pro lidi, zv\u00ed\u0159ata a podniky. V podstat\u011b jsou roboti po\u010d\u00edta\u010de s rukama, nohama a koly. A v sou\u010dasn\u00fdch re\u00e1li\u00edch kybernetick\u00e9 bezpe\u010dnosti jsou to zraniteln\u00e9 po\u010d\u00edta\u010de s rukama, nohama a koly.<\/p>\n<p><\/p>\n<p>Softwarov\u00e9 a hardwarov\u00e9 zranitelnosti modern\u00edch robot\u016f umo\u017e\u0148uj\u00ed \u00fato\u010dn\u00edkovi vyu\u017e\u00edt fyzick\u00fdch schopnost\u00ed robota, aby zp\u016fsobil majetkovou nebo finan\u010dn\u00ed \u0161kodu; nebo dokonce n\u00e1hodn\u011b \u010di \u00famysln\u011b vytvo\u0159it hrozbu pro lidsk\u00fd \u017eivot. Potenci\u00e1ln\u00ed hrozby pro v\u0161echno, co se nach\u00e1z\u00ed v bl\u00edzkosti robot\u016f, se s \u010dasem exponenci\u00e1ln\u011b zvy\u0161uj\u00ed. A to v kontextech, jak\u00e9 etablovan\u00fd obor po\u010d\u00edta\u010dov\u00e9 bezpe\u010dnosti dosud nevid\u011bl.<\/p>\n<p><\/p>\n<p>Ve sv\u00fdch ned\u00e1vn\u00fdch v\u00fdzkumech prezentuj\u00edc\u00ed odhalil \u0159adu kritick\u00fdch zranitelnost\u00ed v dom\u00e1c\u00edch, firemn\u00edch a pr\u016fmyslov\u00fdch robotech od zn\u00e1m\u00fdch v\u00fdrobc\u016f. V zpr\u00e1v\u011b odhaluje technick\u00e9 detaily aktu\u00e1ln\u00edch hrozeb a vysv\u011btluje, jak p\u0159esn\u011b mohou \u00fato\u010dn\u00edci kompromitovat r\u016fzn\u00e9 komponenty ekosyst\u00e9mu robot\u016f. S demonstrac\u00ed funk\u010dn\u00edch exploit\u016f.<\/p>\n<p><\/p>\n<p>Mezi probl\u00e9my, kter\u00e9 prezentuj\u00edc\u00ed odhalil v ekosyst\u00e9mu robot\u016f, pat\u0159\u00ed: 1) nezabezpe\u010den\u00e9 komunikace; 2) mo\u017enost po\u0161kozen\u00ed pam\u011bti; 3) zranitelnosti umo\u017e\u0148uj\u00edc\u00ed vzd\u00e1len\u00e9 vykon\u00e1v\u00e1n\u00ed k\u00f3du (RCE); 4) mo\u017enost naru\u0161en\u00ed integrity souborov\u00e9ho syst\u00e9mu; 5) probl\u00e9my s autorizac\u00ed; a v n\u011bkter\u00fdch p\u0159\u00edpadech \u00fapln\u00e1 absence takov\u00e9; 6) slab\u00e1 kryptografie; 7) probl\u00e9my s aktualizac\u00ed firmwaru; 8) probl\u00e9my s ochranou soukrom\u00ed; 8) nedokumentovan\u00e9 funkce (tak\u00e9 n\u00e1chyln\u00e9 k RCE atd.); 9) slab\u00e1 v\u00fdchoz\u00ed konfigurace; 10) zraniteln\u00e9 open source \u201eframeworky pro \u0159\u00edzen\u00ed robot\u016f\u201c a softwarov\u00e9 knihovny.<\/p>\n<p><\/p>\n<p>Prezentuj\u00edc\u00ed p\u0159edv\u00e1d\u00ed \u017eiv\u00e9 uk\u00e1zky r\u016fznorod\u00fdch sc\u00e9n\u00e1\u0159\u016f hackov\u00e1n\u00ed souvisej\u00edc\u00edch s kybernetick\u00fdm \u0161pehov\u00e1n\u00edm, vnit\u0159n\u00edmi hrozbami, materi\u00e1ln\u00edmi \u0161kodami atd. P\u0159i popisu realistick\u00fdch sc\u00e9n\u00e1\u0159\u016f, kter\u00e9 lze pozorovat v p\u0159\u00edrod\u011b, prezentuj\u00edc\u00ed vysv\u011btluje, jak nezabezpe\u010denost modern\u00ed technologie robot\u016f m\u016f\u017ee v\u00e9st k hacknut\u00ed. Vysv\u011btluje, pro\u010d hacknut\u00e9 roboty jsou je\u0161t\u011b nebezpe\u010dn\u011bj\u0161\u00ed ne\u017e jak\u00e9koli jin\u00e9 kompromitovan\u00e9 technologie.<\/p>\n<p><\/p>\n<p>Prezentuj\u00edc\u00ed tak\u00e9 upozor\u0148uje na to, \u017ee surov\u00e9 v\u00fdzkumn\u00e9 projekty vstupuj\u00ed do v\u00fdroby d\u0159\u00edve, ne\u017e jsou vy\u0159e\u0161eny ot\u00e1zky bezpe\u010dnosti. Marketing op\u011btovn\u011b v\u00edt\u011bz\u00ed. Je urgentn\u011b t\u0159eba napravit tuto nezdravou situaci. Dokud Skynet nep\u0159i\u0161el. I kdy\u017e... N\u00e1sleduj\u00edc\u00ed prezentace nazna\u010duje, \u017ee Skynet u\u017e p\u0159ece jen p\u0159i\u0161el.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/4372ee830d07b5dcd0dd25f6ab2ab0e2.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a7\"><\/a><\/noindex><\/p>\n<h1 id=\"7-militarizaciya-mashinnogo-obucheniya\">7. Militarizace strojov\u00e9ho u\u010den\u00ed<\/h1>\n<p><\/p>\n<h2 id=\"damien-cauquil-weaponizing-machine-learning-humanity-was-overrated-anyway--def-con-2017httpsmediadefconorgdef20con2025def20con202520presentationsdefcon-25-damien-cauquil-weaponizing-the-bbc-microbit-updatedpdf\"><noindex><a rel=\"nofollow\" href=\"https:\/\/media.defcon.org\/DEF%20CON%2025\/DEF%20CON%2025%20presentations\/DEFCON-25-Damien-Cauquil-Weaponizing-the-BBC-MicroBit-UPDATED.pdf\">Damien Cauquil. Zbra\u0148ov\u00e9 strojov\u00e9 u\u010den\u00ed: Lidstvo bylo stejn\u011b p\u0159ece jen p\u0159ece\u0148ov\u00e1no \/\/\/ DEF CON 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>I kdy\u017e riskuje, \u017ee ho ozna\u010d\u00ed za bl\u00e1zniv\u00e9ho v\u011bdce, prezentuj\u00edc\u00ed se p\u0159ece jen raduje ze sv\u00e9ho \"nov\u00e9ho \u010f\u00e1belsk\u00e9ho d\u00edla\", s hrdost\u00ed p\u0159edstavuje DeepHack: hackerskou AI s open-source k\u00f3dem. Tento bot je samo\u010dinn\u011b se u\u010d\u00edc\u00ed hacker webov\u00fdch aplikac\u00ed. Je zalo\u017een na neuronov\u00e9 s\u00edti, kter\u00e1 se u\u010d\u00ed metodou \"zkou\u0161en\u00ed a omyl\u016f\". P\u0159itom k mo\u017en\u00fdm lidsk\u00fdm d\u016fsledk\u016fm sv\u00fdch pokus\u016f a omyl\u016f \u2013 DeepHack p\u0159istupuje s d\u011bsivou nez\u00e1jmem.<\/p>\n<p><\/p>\n<p>Pou\u017eit\u00edm pouze jednoho univerz\u00e1ln\u00edho algoritmu se u\u010d\u00ed vyu\u017e\u00edvat r\u016fzn\u00e9 typy zranitelnost\u00ed. DeepHack otev\u00edr\u00e1 dve\u0159e do \u0159\u00ed\u0161e hackersk\u00e9 AI, jej\u00ed\u017e mnoh\u00e9 p\u0159edstavitele ji\u017e brzy m\u016f\u017eeme o\u010dek\u00e1vat. V t\u00e9to souvislosti prezentuj\u00edc\u00ed hrd\u011b charakterizuje sv\u00e9ho bota jako \u201eza\u010d\u00e1tek konce\u201c.<\/p>\n<p><\/p>\n<p>Prezentuj\u00edc\u00ed v\u011b\u0159\u00ed, \u017ee hackersk\u00e9 n\u00e1stroje na b\u00e1zi AI, kter\u00e9 se brzy objev\u00ed po DeepHacku \u2013 to je principi\u00e1ln\u011b nov\u00e1 technologie, kterou budou muset kyberneti\u010dt\u00ed obr\u00e1nci a \u00fato\u010dn\u00edci teprve ovl\u00e1dnout. Prezentuj\u00edc\u00ed zaru\u010duje, \u017ee v p\u0159\u00ed\u0161t\u00edm roce ka\u017ed\u00fd z n\u00e1s bu\u010f bude s\u00e1m ps\u00e1t hackersk\u00e9 n\u00e1stroje s strojov\u00fdm u\u010den\u00edm, nebo se zoufale sna\u017eit se p\u0159ed nimi br\u00e1nit. Neexistuje t\u0159et\u00ed cesta.<\/p>\n<p><\/p>\n<p>Tak\u00e9, a\u0165 u\u017e \u017eertem nebo v\u00e1\u017en\u011b, prezentuj\u00edc\u00ed prohla\u0161uje: \u201eV\u00edce u\u017e nen\u00ed privilegium \u010f\u00e1belsk\u00fdch g\u00e9ni\u016f, nevyhnuteln\u00e1 dystopie AI, \u2013 je ji\u017e dnes dostupn\u00e1 ka\u017ed\u00e9mu. Tak se k n\u00e1m p\u0159idej a my ti uk\u00e1\u017eeme, jak m\u016f\u017ee\u0161 p\u0159isp\u011bt k vyhlazen\u00ed lidstva, prost\u0159ednictv\u00edm vytvo\u0159en\u00ed sv\u00e9ho vlastn\u00edho militarizovan\u00e9ho syst\u00e9mu strojov\u00e9ho u\u010den\u00ed. Samoz\u0159ejm\u011b, pokud n\u00e1m do toho nezas\u00e1hnou host\u00e9 z budoucnosti.\u201c<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/c7ab2da327fe74b9fd019878e7c2578d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a8\"><\/a><\/noindex><\/p>\n<h1 id=\"8-vspomnit-vsyo-implantaciya-paroley-v-kognitivnuyu-pamyat\">8. Vzpom\u00ednat na v\u0161echno: implantace hesel do kognitivn\u00ed pam\u011bti<\/h1>\n<p><\/p>\n<h2 id=\"tess-schrodinger-total-recall-implanting-passwords-in-cognitive-memory--def-con-2017httpswwwyoutubecomwatchvujsl7k2ga4a\"><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=UjsL7K2ga4A\">Tess Schrodinger. Total Recall: Implanting Passwords in Cognitive Memory \/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>Co je to kognitivn\u00ed pam\u011b\u0165? Jak tam lze \"implantovat\" heslo? A je to v\u016fbec bezpe\u010dn\u00e9? A k \u010demu vlastn\u011b takov\u00e9 finty? My\u0161lenka spo\u010d\u00edv\u00e1 v tom, \u017ee p\u0159i pou\u017eit\u00ed popsan\u00e9ho p\u0159\u00edstupu, nebudete moci prozradit sv\u00e9 hesla \u2013 ani pod n\u00e1tlakem; p\u0159i\u010dem\u017e si zachov\u00e1te mo\u017enost autorizace v syst\u00e9mu.<\/p>\n<p><\/p>\n<p>Prezentace za\u010d\u00edn\u00e1 vysv\u011btlen\u00edm, co je to kognitivn\u00ed pam\u011b\u0165. N\u00e1sledn\u011b se vysv\u011btluje, jak se li\u0161\u00ed explicitn\u00ed a implicitn\u00ed pam\u011b\u0165. D\u00e1le se objas\u0148uje pojem v\u011bdom\u00e9ho a nev\u011bdom\u00e9ho. A tak\u00e9 se vysv\u011btluje, co vlastn\u011b je takov\u00e1 podstatn\u00e1 entita \u2013 v\u011bdom\u00ed. Popisuje se, jak na\u0161e pam\u011b\u0165 k\u00f3duje, uchov\u00e1v\u00e1 a vybavuje informace. Jsou pops\u00e1na omezen\u00ed lidsk\u00e9 pam\u011bti. A tak\u00e9 to, jak se na\u0161e pam\u011b\u0165 u\u010d\u00ed. Prezentace pak kon\u010d\u00ed vypr\u00e1v\u011bn\u00edm o modern\u00edch v\u00fdzkumech kognitivn\u00ed pam\u011bti lid\u00ed v kontextu toho, jak do n\u00ed integrovat hesla.<\/p>\n<p><\/p>\n<p>Ambici\u00f3zn\u00ed tvrzen\u00ed uveden\u00e9 v n\u00e1zvu sv\u00e9 prezentace sice p\u0159edn\u00e1\u0161ej\u00edc\u00ed nedot\u00e1hl k \u00fapln\u00e9mu \u0159e\u0161en\u00ed, p\u0159esto p\u0159inesl n\u011bkolik zaj\u00edmav\u00fdch v\u00fdzkum\u016f, kter\u00e9 se nach\u00e1zej\u00ed na cest\u011b k vy\u0159e\u0161en\u00ed stanoven\u00e9ho \u00fakolu. Zejm\u00e9na v\u00fdzkum Stanfordsk\u00e9 univerzity, jeho\u017e p\u0159edm\u011btem je toto t\u00e9ma. A projekt na v\u00fdvoj \u010dlov\u011bko-strojov\u00e9ho rozhran\u00ed pro slabozrak\u00e9 osoby \u2013 s p\u0159\u00edm\u00fdm napojen\u00edm na mozek. P\u0159edn\u00e1\u0161ej\u00edc\u00ed tak\u00e9 odkazuje na v\u00fdzkum n\u011bmeck\u00fdch v\u011bdc\u016f, kter\u00fdm se poda\u0159ilo nav\u00e1zat algoritmick\u00fd vztah mezi elektrick\u00fdmi sign\u00e1ly mozku a slovn\u00edmi fr\u00e1zemi; jejich vyvinut\u00e9 za\u0159\u00edzen\u00ed umo\u017e\u0148uje ps\u00e1t text jen t\u00edm, \u017ee o n\u011bm mysl\u00edme. Dal\u0161\u00ed zaj\u00edmav\u00fd v\u00fdzkum, na kter\u00fd p\u0159edn\u00e1\u0161ej\u00edc\u00ed odkazuje, je neurotelefon, rozhran\u00ed mezi mozkem a mobiln\u00edm telefonem, prost\u0159ednictv\u00edm bezdr\u00e1tov\u00e9 EEG soupravy (Dartmouth College, USA).<\/p>\n<p><\/p>\n<p>Jak u\u017e bylo zm\u00edn\u011bno, ambici\u00f3zn\u00ed tvrzen\u00ed, kter\u00e9 bylo v n\u00e1zvu jeho prezentace, p\u0159edn\u00e1\u0161ej\u00edc\u00ed nedot\u00e1hl k \u00fapln\u00e9mu \u0159e\u0161en\u00ed. Nicm\u00e9n\u011b poznamen\u00e1v\u00e1, \u017ee p\u0159esto\u017ee technologie implantace hesla do kognitivn\u00ed pam\u011bti zat\u00edm neexistuje, malware, kter\u00fd se sna\u017e\u00ed jej odtud vyjmout \u2013 ji\u017e existuje.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/57264b0b6fda828787fb9c5e390040d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a9\"><\/a><\/noindex><\/p>\n<h1 id=\"9-i-sprosila-kroha-ty-pravda-dumaesh-chto-kiber-ataki-na-energoset-mogut-provodit-tolko-pravitelstvennye-hakery\">9. A mal\u00e1 hol\u010di\u010dka se zeptala: \"Opravdu si mysl\u00ed\u0161, \u017ee kybernetick\u00e9 \u00fatoky na energetickou s\u00ed\u0165 mohou prov\u00e1d\u011bt pouze vl\u00e1dn\u00ed hacke\u0159i?\"<\/h1>\n<p><\/p>\n<h2 id=\"anastasis-keliris-and-then-the-script-kiddie-said-let-there-be-no-light-are-cyber-attacks-on-the-power-grid-limited-to-nation-state-actors--blackhat-2017httpswwwblackhatcomdocsus-17thursdayus-17-keliris-and-then-the-script-kiddie-said-let-there-be-no-light-are-cyberattacks-on-the-power-grid-limited-to-nation-state-actors-wppdf\"><noindex><a rel=\"nofollow\" href=\"https:\/\/www.blackhat.com\/docs\/us-17\/thursday\/us-17-Keliris-And-Then-The-Script-Kiddie-Said-Let-There-Be-No-Light-Are-Cyberattacks-On-The-Power-Grid-Limited-To-Nation-State-Actors-wp.pdf\">Anastasis Keliris. A pak Script-Kiddie \u0159ekl: Nech\u0165 nen\u00ed sv\u011btlo. Jsou kybernetick\u00e9 \u00fatoky na energetickou s\u00ed\u0165 omezeny na akt\u00e9ry st\u00e1t\u016f? \/\/ BlackHat. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>Neru\u0161en\u00fd p\u0159\u00edstup k elektrick\u00e9 energii je v na\u0161em ka\u017edodenn\u00edm \u017eivot\u011b z\u00e1sadn\u00ed. Na\u0161e z\u00e1vislost na elekt\u0159in\u011b se st\u00e1v\u00e1 obzvl\u00e1\u0161\u0165 z\u0159ejmou, kdy\u017e dojde k jej\u00edmu v\u00fdpadku \u2013 i kdy\u017e jen na kr\u00e1tkou dobu. Dnes je pova\u017eov\u00e1no za samoz\u0159ejm\u00e9, \u017ee kybernetick\u00e9 \u00fatoky na energetick\u00e9 s\u00edt\u011b jsou extr\u00e9mn\u011b slo\u017eit\u00e9 a dostupn\u00e9 pouze pro vl\u00e1dn\u00ed hackery.<\/p>\n<p><\/p>\n<p>P\u0159edn\u00e1\u0161ej\u00edc\u00ed zpochyb\u0148uje tento ust\u00e1len\u00fd n\u00e1zor a p\u0159edkl\u00e1d\u00e1 podrobn\u00fd popis \u00fatoku na energetick\u00e9 s\u00edt\u011b, jeho\u017e n\u00e1klady jsou p\u0159ijateln\u00fdch i pro nevl\u00e1dn\u00ed hackery. Prezentuje shrom\u00e1\u017ed\u011bn\u00e9 informace z internetu, kter\u00e9 budou u\u017eite\u010dn\u00e9 pro modelov\u00e1n\u00ed a anal\u00fdzu c\u00edlov\u00fdch energetick\u00fdch s\u00edt\u00ed. Tak\u00e9 vysv\u011btluje, jak lze tyto informace vyu\u017e\u00edt \u2013 k modelov\u00e1n\u00ed \u00fatok\u016f na elektrick\u00e9 s\u00edt\u011b po cel\u00e9m sv\u011bt\u011b.<\/p>\n<p><\/p>\n<p>Ve zpr\u00e1v\u011b je tak\u00e9 demonstrov\u00e1na kritick\u00e1 zranitelnost, kterou p\u0159edn\u00e1\u0161ej\u00edc\u00ed objevil v produktech General Electric Multilin, kter\u00e9 se \u0161iroce pou\u017e\u00edvaj\u00ed v energetice. P\u0159edn\u00e1\u0161ej\u00edc\u00ed popisuje, jak pln\u011b kompromitoval algoritmus \u0161ifrov\u00e1n\u00ed pou\u017e\u00edvan\u00fd v t\u011bchto syst\u00e9mech. Tento algoritmus se pou\u017e\u00edv\u00e1 v produktech General Electric Multilin pro zabezpe\u010denou komunikaci mezi vnit\u0159n\u00edmi subsyst\u00e9my a pro \u0159\u00edzen\u00ed t\u011bchto subsyst\u00e9m\u016f. V\u010detn\u011b autorizace u\u017eivatel\u016f a zaji\u0161t\u011bn\u00ed p\u0159\u00edstupu k privilegovan\u00fdm operac\u00edm.<\/p>\n<p><\/p>\n<p>Zjistit p\u0159\u00edstupov\u00e9 k\u00f3dy (v d\u016fsledku kompromitace algoritmu \u0161ifrov\u00e1n\u00ed) umo\u017e\u0148uje \u00fato\u010dn\u00edkovi zcela vypnout za\u0159\u00edzen\u00ed a odpojit elekt\u0159inu v dan\u00fdch sektorech energetick\u00e9 s\u00edt\u011b; zablokovat oper\u00e1tory. Nav\u00edc p\u0159edn\u00e1\u0161ej\u00edc\u00ed demonstruje techniku vzd\u00e1len\u00e9ho \u010dten\u00ed digit\u00e1ln\u00edch stop, kter\u00e9 zanech\u00e1v\u00e1 zraniteln\u00fd objektiv k \u00fatoku.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"a10\"><\/a><\/noindex><\/p>\n<h1 id=\"10-internet-uzhe-znaet-chto-ya-beremenna\">10. Internet u\u017e v\u00ed, \u017ee jsem t\u011bhotn\u00e1<\/h1>\n<p><\/p>\n<h2 id=\"cooper-quintin-the-internet-already-knows-im-pregnant--def-con-2017httpsmediadefconorgdef20con2025def20con202520presentationscooper20quintin20and20kashmir20hill20-20updateddefcon-25-cooper-quintin-and-kashmir-hill-the-internet-already-knows-im-pregnant-updatedpdf\"><noindex><a rel=\"nofollow\" href=\"https:\/\/media.defcon.org\/DEF%20CON%2025\/DEF%20CON%2025%20presentations\/Cooper%20Quintin%20and%20Kashmir%20Hill%20-%20UPDATED\/DEFCON-25-Cooper-Quintin-and-Kashmir-Hill-The-Internet-Already-Knows-Im-Pregnant-UPDATED.pdf\">Cooper Quintin. Internet u\u017e v\u00ed, \u017ee jsem t\u011bhotn\u00e1 \/\/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n<p><\/p>\n<p>\u017densk\u00e9 zdrav\u00ed je velk\u00fd byznys. Na trhu existuje obrovsk\u00e9 mno\u017estv\u00ed aplikac\u00ed pro Android, kter\u00e9 \u017een\u00e1m pom\u00e1haj\u00ed sledovat jejich m\u011bs\u00ed\u010dn\u00ed cyklus, v\u011bd\u011bt, kdy je nejvy\u0161\u0161\u00ed pravd\u011bpodobnost po\u010det\u00ed, nebo sledovat pr\u016fb\u011bh t\u011bhotenstv\u00ed. Tyto aplikace povzbuzuj\u00ed \u017eeny, aby si zaznamen\u00e1valy ty nejintimn\u011bj\u0161\u00ed detaily sv\u00e9ho \u017eivota, jako jsou n\u00e1lady, sexu\u00e1ln\u00ed aktivita, fyzick\u00e1 aktivita, t\u011blesn\u00e9 symptomy, r\u016fst, v\u00e1ha a mnoh\u00e9 dal\u0161\u00ed.<\/p>\n<p><\/p>\n<p>Jak jsou na tom tato aplikace s d\u016fv\u011brnost\u00ed a bezpe\u010dnost\u00ed? Pokud aplikace uchov\u00e1v\u00e1 tak intimn\u00ed detaily o na\u0161em osobn\u00edm \u017eivot\u011b, bylo by hezk\u00e9, kdyby je nesd\u00edlela s nik\u00fdm jin\u00fdm, nap\u0159\u00edklad s p\u0159\u00e1telskou spole\u010dnost\u00ed (zab\u00fdvaj\u00edc\u00ed se c\u00edlenou reklamou a podobn\u011b) nebo se zl\u00fdm partnerem\/rodi\u010dem.<\/p>\n<p><\/p>\n<p>Prezentuj\u00edc\u00ed p\u0159edstavuje v\u00fdsledky sv\u00e9 anal\u00fdzy kybernetick\u00e9 bezpe\u010dnosti v\u00edce ne\u017e des\u00edtky aplikac\u00ed, kter\u00e9 p\u0159edpov\u00eddaj\u00ed pravd\u011bpodobnost po\u010det\u00ed a sleduj\u00ed pr\u016fb\u011bh t\u011bhotenstv\u00ed. Zjistil, \u017ee v\u011bt\u0161ina t\u011bchto aplikac\u00ed m\u00e1 v\u00e1\u017en\u00e9 probl\u00e9my s kybernetickou bezpe\u010dnost\u00ed obecn\u011b a s d\u016fv\u011brnost\u00ed zvl\u00e1\u0161\u0165.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"10 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed\" src=\"\/wp-content\/uploads\/2019\/08\/c5a20b8770a9907751381822c76fdad2.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/464391\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u042f \u0442\u0443\u0442 \u043f\u043e\u0434\u0443\u043c\u0430\u043b, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0434\u043e\u0440\u043e\u0432\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u0437\u043e\u0440\u0435, \u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u0430\u0445. \u041f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e \u0432\u0430\u0448\u0435\u043c\u0443 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0432\u0443\u044e \u0433\u043e\u0440\u044f\u0447\u0443\u044e \u0434\u0435\u0441\u044f\u0442\u043a\u0443. \u2013 \u0412 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0436\u043d\u043e\u0433\u043e \u0442\u0430\u043d\u0434\u0435\u043c\u0430 IoT-\u0430\u0442\u0430\u043a \u0438 \u0440\u0430\u043d\u0437\u043e\u043c\u0432\u0430\u0440\u0438 \u2013 \u00ab\u041e\u0442\u043a\u0440\u043e\u0439 \u0440\u043e\u0442, \u0441\u043a\u0430\u0436\u0438 0x41414141\u00bb: \u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u2013 \u0417\u0443\u0431\u0430\u0441\u0442\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u0442\u0440\u0438\u0435 \u0448\u0430\u043c\u043f\u0443\u0440\u0430 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28038,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37373","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u042f \u0442\u0443\u0442 \u043f\u043e\u0434\u0443\u043c\u0430\u043b, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0434\u043e\u0440\u043e\u0432\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u0437\u043e\u0440\u0435, \u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u0430\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4710 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u0432 \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u042f \u0442\u0443\u0442 \u043f\u043e\u0434\u0443\u043c\u0430\u043b, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0434\u043e\u0440\u043e\u0432\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u0437\u043e\u0440\u0435, \u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u0430\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:17:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:17:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4710 zaj\u00edmav\u00fdch p\u0159edn\u00e1\u0161ek z hackersk\u00fdch konferenc\u00ed | ProHoster","description":"Napadlo m\u011b, \u017ee by bylo skv\u011bl\u00e9 pokr\u00fdvat ud\u00e1losti z mezin\u00e1rodn\u00edch konferenc\u00ed. A to ne jenom v obecn\u00e9m p\u0159ehledu, ale i vypr\u00e1v\u011bt o nejzaj\u00edmav\u011bj\u0161\u00edch p\u0159edn\u00e1\u0161k\u00e1ch.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u0432 \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 | ProHoster","og:description":"\u042f \u0442\u0443\u0442 \u043f\u043e\u0434\u0443\u043c\u0430\u043b, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0434\u043e\u0440\u043e\u0432\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u0437\u043e\u0440\u0435, \u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u0430\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:17:16+00:00","article:modified_time":"2019-10-31T19:17:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37373","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 17:33:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:27:27","updated":"2026-01-23 17:33:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/37373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=37373"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/37373\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/28038"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=37373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=37373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=37373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}