{"id":37373,"date":"2019-10-31T22:17:16","date_gmt":"2019-10-31T19:17:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/10-interesnyh-dokladov-s-hakerskih-konferentsij\/"},"modified":"2019-10-31T22:17:16","modified_gmt":"2019-10-31T19:17:16","slug":"10-interesnyh-dokladov-s-hakerskih-konferentsij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij","title":{"rendered":"10 prezent\u0103ri interesante de la conferin\u021bele hackerilor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

M-am g\u00e2ndit c\u0103 ar fi grozav s\u0103 acoperim evenimente de la conferin\u021be interna\u021bionale. \u0218i nu doar o prezentare general\u0103, ci s\u0103 povestim despre cele mai interesante prezent\u0103ri. V\u0103 propun prima zece fierbinte.<\/p>\n

<\/p>\n

\u2013 \u00cen a\u0219teptarea unui tandem armonios de atacuri IoT \u0219i ransomware<\/a><\/noindex>
\n\u2013 \u201eDeschide gura, spune 0x41414141\u201d: Atac asupra infrastructurii cibernetice medicale<\/a><\/noindex>
\n\u2013 Exploit cu din\u021bi la v\u00e2rful \u021bepu\u0219ei publicit\u0103\u021bii contextuale<\/a><\/noindex>
\n\u2013 Cum se eschiveaz\u0103 hackeri adev\u0103ra\u021bi de publicitatea direc\u021bionat\u0103<\/a><\/noindex>
\n\u2013 20 de ani de hacking \u00een MMORPG: grafica este mai bun\u0103, exploiturile r\u0103m\u00e2n acelea\u0219i<\/a><\/noindex>
\n\u2013 S\u0103 hackuim robo\u021bii, \u00eenainte de a veni Skynet<\/a><\/noindex>
\n\u2013 Militarizarea \u00eenv\u0103\u021b\u0103rii automate<\/a><\/noindex>
\n\u2013 S\u0103 ne amintim totul: implantarea parolelor \u00een memoria cognitiv\u0103<\/a><\/noindex>
\n\u2013 \u0218i o micu\u021b\u0103 \u00eentreab\u0103: \u201eChiar crezi c\u0103 atacurile cibernetice asupra re\u021belelor electrice pot fi efectuate doar de hackeri guvernamentali?\u201d<\/a><\/noindex>
\n\u2013 Internetul \u0219tie deja c\u0103 sunt \u00eens\u0103rcinat\u0103<\/a><\/noindex><\/p>\n

<\/p>\n

\"10<\/p>\n

<\/a><\/noindex>
\n<\/a><\/noindex><\/p>\n

1. \u00cen a\u0219teptarea unui tandem armonios de atacuri IoT \u0219i ransomware<\/h1>\n

<\/p>\n

Christopher Elisan. Demistificarea amenin\u021b\u0103rii ransomware \u0219i IoT \/\/ ROOTCON. 2017<\/a><\/noindex><\/h2>\n

<\/p>\n

\u00cen 2016 am observat o cre\u0219tere rapid\u0103 a atacurilor ransomware. Nu ne-am recuperat \u00eenc\u0103 de la aceste atacuri, c\u00e2nd o nou\u0103 und\u0103 de atacuri DDoS, utiliz\u00e2nd IoT, ne-a lovit. \u00cen aceast\u0103 prezentare, autorul ofer\u0103 o descriere pas cu pas a modului \u00een care se desf\u0103\u0219oar\u0103 un atac ransomware. Cum func\u021bioneaz\u0103 ransomware-ul \u0219i ce ar trebui s\u0103 fac\u0103 un cercet\u0103tor \u00een fiecare etap\u0103 pentru a contracara ransomware-ul.<\/p>\n

<\/p>\n

Se bazeaz\u0103 pe metodologii bine cunoscute. Apoi, prezentatorul lumineaz\u0103 modul \u00een care IoT este implicat \u00een atacurile DDoS: explic\u0103 ce rol joac\u0103 malware-ul auxiliar (pentru a ajuta ulterior la desf\u0103\u0219urarea atacului DDoS cu armata IoT). De asemenea, discut\u0103 despre cum tandemul ransomware \u0219i atacurile IoT pot deveni o mare amenin\u021bare \u00een anii urm\u0103tori. Prezentatorul, autor al c\u0103r\u021bilor \u201eMalware, Rootkits & Botnets: a Beginner\u2019s Guide\u201d, \u201eAdvanced Malware Analysis\u201d, \u201eHacking Exposed: Malware & Rootkits Secrets & Solutions\u201d, ofer\u0103 astfel informa\u021bii bine fundamentate.<\/p>\n

<\/p>\n

\"10<\/p>\n

\n<\/a><\/noindex><\/p>\n

2. \u201eDeschide gura, spune 0x41414141\u201d: Atac asupra infrastructurii cibernetice medicale<\/h1>\n

<\/p>\n

Robert Portvliet. Deschide-te \u0219i spune 0x41414141: Atac\u00e2nd dispozitive medicale \/\/ ToorCon. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Echipamentele medicale conectate la Internet sunt o realitate clinic\u0103 r\u0103sp\u00e2ndit\u0103. Aceste echipamente sunt un ajutor valoros pentru personalul medical, deoarece automatizeaz\u0103 o parte semnificativ\u0103 din rutin\u0103. Cu toate acestea, aceste echipamente con\u021bin numeroase vulnerabilit\u0103\u021bi (at\u00e2t software, c\u00e2t \u0219i hardware) care ofer\u0103 oportunit\u0103\u021bi largi poten\u021bialilor atacatori. \u00cen prezentarea sa, speakerul \u00ee\u0219i \u00eemp\u0103rt\u0103\u0219e\u0219te experien\u021ba personal\u0103 \u00een desf\u0103\u0219urarea testelor de penetrare pentru infrastructura cibernetic\u0103 medical\u0103; de asemenea, explic\u0103 modul \u00een care atacatorii compromit echipamentele medicale.<\/p>\n

<\/p>\n

Speakerul descrie: 1) cum atacatorii exploateaz\u0103 protocoalele de comunicare proprietare, 2) cum identific\u0103 vulnerabilit\u0103\u021bile \u00een serviciile de re\u021bea, 3) cum compromit sistemele de suport vitale, 4) cum exploateaz\u0103 interfe\u021bele hardware de depanare \u0219i magistrala de date a sistemului; 5) cum atac\u0103 principalele interfe\u021be wireless \u0219i tehnologiile wireless proprietare specifice; 6) cum p\u0103trund \u00een sistemele informa\u021bionale medicale, \u0219i apoi citesc \u0219i modific\u0103: informa\u021biile personale despre s\u0103n\u0103tatea pacien\u021bilor; notele medicale de serviciu, ale c\u0103ror con\u021binuturi sunt \u00een mod normal ascunse chiar de pacien\u021bi; 7) cum perturb\u0103 sistemul de comunica\u021bie pe care echipamentele medicale \u00eel utilizeaz\u0103 pentru schimbul de informa\u021bii \u0219i comenzi de serviciu; 8) cum restric\u021bioneaz\u0103 accesul personalului medical la echipament; sau chiar \u00eel blocheaz\u0103 complet.<\/p>\n

<\/p>\n

\u00cen timpul testelor sale de penetrare, speakerul a descoperit numeroase probleme cu echipamentele medicale. Acestea includ: 1) criptografie slab\u0103, 2) posibilitatea manipul\u0103rii datelor; 3) posibilitatea \u00eenlocuirii de la distan\u021b\u0103 a echipamentelor; 3) vulnerabilit\u0103\u021bi \u00een protocoalele proprietare; 4) posibilitatea accesului neautorizat la baze de date; 5) loginuri\/parole hardcodate, imuabile. De asemenea, alte informa\u021bii sensibile sunt stocate fie \u00een firmware-ul echipamentului, fie \u00een binarele sistemului; 6) susceptibilitatea echipamentelor medicale la atacuri DoS de la distan\u021b\u0103.<\/p>\n

<\/p>\n

Dup\u0103 ce am ascultat prezentarea, devine clar c\u0103 securitatea cibernetic\u0103 \u00een sectorul medical este azi un caz clinic \u0219i necesit\u0103 terapie intensiv\u0103.<\/p>\n

<\/p>\n

\"10<\/p>\n

\n<\/a><\/noindex><\/p>\n

3. Exploitul dentat pe v\u00e2rful unui \u0219picul de publicitate contextual\u0103<\/h1>\n

<\/p>\n

Tyler Cook. Publicitate \u00cen\u0219el\u0103toare: Cum Platformele Moderne de Publicitate Pot Fi Folosite pentru Exploatare \u021ainti\u021bi \/\/ ToorCon. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

\u00cen fiecare zi, milioane de oameni acceseaz\u0103 re\u021belele sociale: pentru munc\u0103, pentru divertisment sau pur \u0219i simplu a\u0219a. \u00cen spatele re\u021belelor sociale se afl\u0103 platforme de publicitate invizibile pentru vizitatorii obi\u0219nui\u021bi, responsabile de livrarea de reclame contextuale relevante. Platformele de publicitate sunt u\u0219or de utilizat \u0219i foarte eficiente. De aceea, sunt foarte c\u0103utate de c\u0103tre anun\u021b\u0103tori.<\/p>\n

<\/p>\n

Pe l\u00e2ng\u0103 oportunitatea de a ajunge la o audien\u021b\u0103 larg\u0103, ceea ce este foarte profitabil pentru afaceri, platformele de publicitate permit \u0219i restr\u00e2ngerea \u021bintirii \u2013 p\u00e2n\u0103 la o singur\u0103 persoan\u0103. Mai mult, func\u021bionalitatea platformelor de publicitate moderne permite chiar \u0219i alegerea pe care dintre numeroasele gadgeturi ale acestei persoane s\u0103 fie afi\u0219at\u0103 reclama.<\/p>\n

<\/p>\n

Astfel, platformele de publicitate moderne permit anun\u021b\u0103torului s\u0103 ajung\u0103 la orice persoan\u0103, oriunde \u00een lume. Dar aceast\u0103 oportunitate poate fi folosit\u0103 \u0219i de c\u0103tre infractori, ca o poart\u0103 de acces \u00een re\u021beaua \u00een care \u00ee\u0219i desf\u0103\u0219oar\u0103 activitatea presupusa lor victim\u0103. Vorbitorul demonstreaz\u0103 cum un anun\u021b\u0103tor r\u0103u inten\u021bionat poate profita de platforma de publicitate, pentru a-\u0219i direc\u021biona cu precizie campania de phishing, desf\u0103\u0219urat\u0103 pentru a livra un exploit personalizat unei singure persoane.<\/p>\n

\n<\/a><\/noindex><\/p>\n

4. Cum hackerii reali evit\u0103 publicitatea \u021binti\u021b<\/h1>\n

<\/p>\n

Weston Hecker. Renun\u021b\u0103 sau Deautentificare \u00cencercat\u0103 !- Robo\u021bi Anti-Tracking, Radio \u0219i Injectare de Tast\u0103turi \/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Folosim multe servicii computerizate \u00een via\u021ba noastr\u0103 de zi cu zi. \u0218i ne este greu s\u0103 ne desp\u0103r\u021bim de ele, chiar \u0219i c\u00e2nd afl\u0103m brusc c\u0103 ne supravegheaz\u0103 total. At\u00e2t de total, \u00eenc\u00e2t ne urm\u0103resc fiecare mi\u0219care \u0219i fiecare atingere a tastelor.<\/p>\n

<\/p>\n

Vorbitorul explic\u0103 clar cum anali\u0219tii marketingului modern folosesc o gam\u0103 larg\u0103 de metode ezoterice de \u021bintire. Noi am scris recent<\/a><\/noindex> despre paranoia mobil\u0103, despre supravegherea total\u0103. \u0218i mul\u021bi cititori au perceput cele scrise ca pe o glum\u0103 inofensiv\u0103, dar din prezentarea f\u0103cut\u0103 reiese c\u0103 marketerii moderni folosesc deja aceste tehnologii pentru a ne urm\u0103ri.<\/p>\n

<\/p>\n

Ce s\u0103 facem? Industria publicit\u0103\u021bii online, care alimenteaz\u0103 acest control total, progreseaz\u0103 rapid. \u00centr-at\u00e2t \u00eenc\u00e2t platformele moderne de publicitate pot urm\u0103ri nu doar activitatea online a unei persoane (ap\u0103s\u0103rile de taste, mi\u0219c\u0103rile cursorului etc.), ci \u0219i tr\u0103s\u0103turile fiziologice (cum ap\u0103s\u0103m tastele \u0219i mi\u0219c\u0103m mouse-ul). Astfel, instrumentele moderne de urm\u0103rire ale platformelor de publicitate, \u00eencorporate \u00een serviciile f\u0103r\u0103 de care nu ne vedem via\u021ba, nu doar c\u0103 se strecoar\u0103 sub lenjerie, dar chiar ajung \u0219i sub piele. Dac\u0103 nu avem posibilitatea s\u0103 renun\u021b\u0103m la aceste servicii excesiv de observante, de ce s\u0103 nu \u00eencerc\u0103m m\u0103car s\u0103 le bombard\u0103m cu informa\u021bii inutile?<\/p>\n

<\/p>\n

\u00cen raport este demonstrat un dispozitiv inovator (un bot software-hardware) care permite: 1) injectarea de beacon-uri Bluetooth; 2) generarea de zgomot pentru datele colectate de senzorii auto; 3) falsificarea parametrilor de identificare ai telefonului mobil; 4) generarea de zgomot \u00een stilul de ap\u0103sare a degetelor (pe tastatur\u0103, mouse \u0219i senzor). Toate aceste informa\u021bii, dup\u0103 cum se \u0219tie, sunt folosite pentru targetarea publicit\u0103\u021bii pe gadget-uri mobile.<\/p>\n

<\/p>\n

\u00cen demonstra\u021bie se poate observa c\u0103, dup\u0103 activarea dispozitivului autorului, sistemul de urm\u0103rire devine haotic; informa\u021biile colectate de acesta devin at\u00e2t de zgomotoase \u0219i inexacte \u00eenc\u00e2t nu vor mai fi de niciun folos observatorilor no\u0219tri. C\u0103 o glum\u0103 bun\u0103, prezentatorul demonstreaz\u0103 cum, datorit\u0103 dispozitivului prezentat, \"sistemul de urm\u0103rire\" \u00eencepe s\u0103 perceap\u0103 un hacker de 32 de ani ca pe o feti\u021b\u0103 de 12 ani care ador\u0103 caii.<\/p>\n

<\/p>\n

\"10<\/p>\n

\n<\/a><\/noindex><\/p>\n

5. 20 de ani de hacking MMORPG: grafic\u0103 mai bun\u0103, acelea\u0219i exploate<\/h1>\n

<\/p>\n

Dou\u0103zeci de ani de hacking MMORPG: grafic\u0103 mai bun\u0103, acelea\u0219i exploate \/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Tema hacking-ului MMORPG este discutat\u0103 la DEF CON de 20 de ani. Cu ocazia jubileului, prezentatorul descrie cele mai semnificative momente din aceste discu\u021bii. De asemenea, poveste\u0219te aventurile sale \u00een domeniul braconajului \u00een jocurile online. \u00cencep\u00e2nd cu Ultima Online (\u00een 1997) \u0219i anii urm\u0103tori: Dark Age of Camelot, Anarchy Online, Asherons Call 2, ShadowBane, Lineage II, Final Fantasy XI\/XIV, World of Warcraft. Inclusiv c\u00e2\u021biva reprezentan\u021bi mai recenti: Guild Wars 2 \u0219i Elder Scrolls Online. \u0218i aceasta nu este pe deplin lista de realiz\u0103ri a prezentatorului!<\/p>\n

<\/p>\n

Raportul con\u021bine detalii tehnice despre crearea de exploate pentru MMORPG-uri, care ajut\u0103 la ob\u021binerea de bani virtuali \u0219i care sunt relevante pentru aproape fiecare MMORPG. Prezentatorul discut\u0103 pe scurt despre eterna confruntare \u00eentre braconieri (creatori de exploate) \u0219i \"paza pe\u0219te\"; \u0219i despre starea actual\u0103 a acestei curse a \u00eenarm\u0103rii.<\/p>\n

<\/p>\n

Explic\u0103 metodologia de analiz\u0103 detaliat\u0103 a pachetelor \u0219i cum s\u0103 configurezi exploatele pentru a nu fi detectate de partea serverului. De asemenea, prezint\u0103 un exploat recent care, \u00een momentul raportului, avea un avantaj asupra \"pazei pe\u0219te\", \u00een aceast\u0103 curs\u0103 a \u00eenarm\u0103rii.<\/p>\n

\n<\/a><\/noindex><\/p>\n

6. H\u0103cui\u021bi robo\u021bii \u00eenainte ca Skynet s\u0103 vin\u0103<\/h1>\n

<\/p>\n

Lucas Apa. Hacking Robots before Skynet \/\/ ROOTCON. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Robo\u021bii sunt acum \u00een vog\u0103. \u00cen viitorul apropiat, vor fi peste tot: \u00een misiuni militare, \u00een opera\u021bii chirurgicale, \u00een construc\u021bia de zg\u00e2rie-nori; asisten\u021bi de cump\u0103r\u0103turi \u00een magazine; personal de spital; asisten\u021bi de afaceri, parteneri sexuali; buc\u0103tari de acas\u0103 \u0219i membri cu drepturi depline ai familiei.<\/p>\n

<\/p>\n

Pe m\u0103sur\u0103 ce ecosistemul robo\u021bilor se extinde, iar influen\u021ba robo\u021bilor \u00een societatea \u0219i economia noastr\u0103 cre\u0219te rapid, ace\u0219tia \u00eencep s\u0103 reprezinte o amenin\u021bare semnificativ\u0103 pentru oameni, animale \u0219i afaceri. Prin natura lor, robo\u021bii sunt computere cu m\u00e2ini, picioare \u0219i ro\u021bi. Iar \u00een condi\u021biile actuale de securitate cibernetic\u0103, aceste computere sunt vulnerabile, av\u00e2nd m\u00e2ini, picioare \u0219i ro\u021bi.<\/p>\n

<\/p>\n

Vulnerabilit\u0103\u021bile software \u0219i hardware ale robo\u021bilor moderni permit atacatorilor s\u0103 utilizeze capacit\u0103\u021bile fizice ale robotului pentru a provoca daune materiale sau financiare; sau chiar s\u0103 creeze, accidental sau inten\u021bionat, o amenin\u021bare la adresa vie\u021bii umane. Amenin\u021b\u0103rile poten\u021biale pentru tot ce se afl\u0103 \u00een apropierea robo\u021bilor cresc exponen\u021bial \u00een timp. \u0218i cresc \u00een contexte pe care industria tradi\u021bional\u0103 a securit\u0103\u021bii cibernetice nu le-a mai \u00eent\u00e2lnit anterior.<\/p>\n

<\/p>\n

\u00cen cercet\u0103rile sale recente, prezentatorul a descoperit numeroase vulnerabilit\u0103\u021bi critice \u00een robo\u021bii domestici, corporativi \u0219i industriali, provenind de la produc\u0103tori bine-cunoscu\u021bi. \u00cen raport, el dezv\u0103luie detalii tehnice despre amenin\u021b\u0103rile actuale \u0219i explic\u0103 modul \u00een care atacatorii pot compromite diferite componente ale ecosistemului robotic. Cu demonstra\u021bii de exploat\u0103ri func\u021bionale.<\/p>\n

<\/p>\n

Printre problemele descoperite de prezentator \u00een ecosistemul robotic se num\u0103r\u0103: 1) comunica\u021bii nesigure; 2) posibilitatea de deteriorare a memoriei; 3) vulnerabilit\u0103\u021bi care permit executarea de cod de la distan\u021b\u0103 (RCE); 4) posibilitatea de a compromite integritatea sistemului de fi\u0219iere; 5) probleme cu autorizarea; \u00een unele cazuri, aceasta lipsind complet; 6) criptografie slab\u0103; 7) probleme cu actualizarea firmware-ului; 8) probleme cu asigurarea confiden\u021bialit\u0103\u021bii; 9) func\u021bii nedocumentate (de asemenea, vulnerabile la RCE etc.); 10) configura\u021bie nesigur\u0103 implicit\u0103; 11) framework-uri Open Source vulnerabile pentru managementul robo\u021bilor \u0219i biblioteci software.<\/p>\n

<\/p>\n

Prezentatorul ofer\u0103 demonstra\u021bii live ale diverselor scenarii de hacking legate de spionajul cibernetic, amenin\u021b\u0103ri interne, daune materiale etc. Descriind scenarii realiste observabile \u00een natur\u0103, prezentatorul arat\u0103 cum insecuritatea tehnologiei moderne a robo\u021bilor poate duce la hacking. Explic\u0103 de ce robo\u021bii compromiseaz\u0103 sunt chiar mai periculo\u0219i dec\u00e2t orice alte tehnologii compromise.<\/p>\n

<\/p>\n

De asemenea, prezentatorul subliniaz\u0103 c\u0103 proiectele de cercetare brute ajung \u00een produc\u021bie \u00eenainte de a fi rezolvate problemele de securitate. Marketingul c\u00e2\u0219tig\u0103 \u00eentotdeauna. Este necesar s\u0103 se coreze urgent aceast\u0103 situa\u021bie nes\u0103n\u0103toas\u0103. P\u00e2n\u0103 c\u00e2nd Skynet nu a venit. De\u0219i\u2026 urm\u0103torul raport sugereaz\u0103 c\u0103 Skynet a venit deja.<\/p>\n

<\/p>\n

\"10<\/p>\n

\n<\/a><\/noindex><\/p>\n

7. Militarizarea \u00eenv\u0103\u021b\u0103rii automate<\/h1>\n

<\/p>\n

Damien Cauquil. Armarea \u00eenv\u0103\u021b\u0103rii automate: umanitatea a fost supraevaluat\u0103 oricum \/\/\/ DEF CON 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Riscul\u00e2nd s\u0103 fie considerat un savant nebun, prezentatorul se arat\u0103, totu\u0219i, \u00eeng\u0103duitor cu \u201enoua sa crea\u021bie diabolic\u0103\u201d, prezent\u00e2nd cu m\u00e2ndrie DeepHack: un AI hacker cu cod surs\u0103 deschis. Acest bot este un hackeri auto-\u00eenv\u0103\u021bat de aplica\u021bii web. Se bazeaz\u0103 pe o re\u021bea neuronal\u0103 care \u00eenva\u021b\u0103 prin metoda \u201e\u00eencerc\u0103rilor \u0219i gre\u0219elilor\u201d. \u00cen acest context, DeepHack demonstreaz\u0103 o nepl\u0103cut\u0103 indiferen\u021b\u0103 fa\u021b\u0103 de posibilele consecin\u021be pentru oameni ale acestor \u00eencerc\u0103ri \u0219i gre\u0219eli.<\/p>\n

<\/p>\n

Folosind un singur algoritm universal, acesta \u00eenva\u021b\u0103 s\u0103 valorifice diverse tipuri de vulnerabilit\u0103\u021bi. DeepHack deschide u\u0219a c\u0103tre t\u0103r\u00e2mul AI hackerilor, numero\u0219i reprezentan\u021bi ai c\u0103rora se a\u0219teapt\u0103 \u00een viitorul apropiat. Astfel, prezentatorul \u00ee\u0219i caracterizeaz\u0103 cu m\u00e2ndrie botul ca \u201e\u00eenceputul sf\u00e2r\u0219itului\u201d.<\/p>\n

<\/p>\n

Prezentatorul consider\u0103 c\u0103 utilitarele hackerilor bazate pe AI, care vor ap\u0103rea \u00een cur\u00e2nd, dup\u0103 DeepHack \u2013 reprezint\u0103 o tehnologie fundamental nou\u0103, pe care at\u00e2t ap\u0103r\u0103torii cibernetici, c\u00e2t \u0219i atacatorii cibernetici abia urmeaz\u0103 s\u0103 o adopte. Acesta garanteaz\u0103 c\u0103 anul viitor fiecare dintre noi va scrie fie utilitare hacker cu \u00eenv\u0103\u021bare automat\u0103, fie va \u00eencerca disperat s\u0103 se apere de ele. Nu exist\u0103 o a treia op\u021biune.<\/p>\n

<\/p>\n

De asemenea, fie \u00een glum\u0103, fie serios, prezentatorul afirm\u0103: \u201eNu mai fiind prerogativa genii diabolice, distopia inevitabil\u0103 a AI este deja disponibil\u0103 pentru to\u021bi. A\u0219a c\u0103 al\u0103tur\u0103-te nou\u0103, \u0219i \u00ee\u021bi vom ar\u0103ta cum po\u021bi participa la distrugerea umanit\u0103\u021bii prin crearea propriului t\u0103u sistem militarizat de \u00eenv\u0103\u021bare automat\u0103. Desigur, dac\u0103 oaspe\u021bii din viitor nu ne vor \u00eempiedica s\u0103 facem acest lucru\u201d.<\/p>\n

<\/p>\n

\"10<\/p>\n

\n<\/a><\/noindex><\/p>\n

8. Aminte\u0219te-\u021bi tot: implantarea parolilor \u00een memoria cognitiv\u0103<\/h1>\n

<\/p>\n

Tess Schrodinger. Total Recall: Implanting Passwords in Cognitive Memory \/\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Ce este memoria cognitiv\u0103? Cum po\u021bi \u201eimplanta\u201d o parol\u0103 acolo? Este asta \u00een vreun fel sigur? \u0218i de ce ar fi necesare astfel de subtilit\u0103\u021bi? Ideea este c\u0103, folosind abordarea descris\u0103, nu vei putea tr\u0103da parolele tale, chiar \u0219i sub constr\u00e2ngere; p\u0103str\u00e2nd astfel capacitatea de a te autentifica \u00een sistem.<\/p>\n

<\/p>\n

Raportul \u00eencepe cu o explica\u021bie despre ce este memoria cognitiv\u0103. Apoi se explic\u0103 diferen\u021bele dintre memoria explicit\u0103 \u0219i cea implicit\u0103. Urmeaz\u0103 o analiz\u0103 a conceptelor de con\u0219tient \u0219i incon\u0219tient. De asemenea, se clarific\u0103 ce este aceast\u0103 entitate numit\u0103 con\u0219tiin\u021b\u0103. Se descrie cum \u00eenmagazin\u0103m, stoc\u0103m \u0219i extragem informa\u021bii \u00een memoria noastr\u0103. Se discut\u0103 despre limit\u0103rile memoriei umane. Precum \u0219i modul \u00een care memoria noastr\u0103 \u00eenva\u021b\u0103. Raportul se \u00eencheie cu o prezentare a cercet\u0103rilor contemporane privind memoria cognitiv\u0103 uman\u0103, \u00een contextul introducerii de parole \u00een aceasta.<\/p>\n

<\/p>\n

Declara\u021bia ambi\u021bioas\u0103, prezentat\u0103 \u00een titlul prezent\u0103rii, nu a fost dus\u0103 la final, dar s-au adus \u00een discu\u021bie c\u00e2teva cercet\u0103ri interesante care sunt pe calea de a solu\u021biona problema propus\u0103. \u00cen special, studiile Universit\u0103\u021bii Stanford, care se ocup\u0103 cu aceea\u0219i tem\u0103. De asemenea, un proiect pentru dezvoltarea unei interfe\u021be om-ma\u0219in\u0103 pentru persoanele cu deficien\u021be de vedere - conectate direct la creier. Prezentatorul face referire \u0219i la cercet\u0103rile unor oameni de \u0219tiin\u021b\u0103 germani care au reu\u0219it s\u0103 stabileasc\u0103 o leg\u0103tur\u0103 algoritmic\u0103 \u00eentre semnalele electrice ale creierului \u0219i frazele verbale; dispozitivul dezvoltat de ei permite redactarea textului doar prin g\u00e2ndire. O alt\u0103 cercetare interesant\u0103 men\u021bionat\u0103 de prezentator este neurotelefonul, o interfa\u021b\u0103 \u00eentre creier \u0219i telefonul mobil, printr-un set de urechi wireless EEG (Colegiul Dartmouth, SUA).<\/p>\n

<\/p>\n

A\u0219a cum s-a men\u021bionat, declara\u021bia ambi\u021bioas\u0103 din titlul prezent\u0103rii nu a fost dus\u0103 la cap\u0103t. Totu\u0219i, prezentatorul subliniaz\u0103 c\u0103, de\u0219i tehnologia de implantare a parolelor \u00een memoria cognitiv\u0103 nu exist\u0103 \u00eenc\u0103, malware-ul care \u00eencearc\u0103 s\u0103 le extrag\u0103 deja exist\u0103.<\/p>\n

<\/p>\n

\"10<\/p>\n

\n<\/a><\/noindex><\/p>\n

\u0218i a \u00eentrebat micul: \u201eCrezi cu adev\u0103rat c\u0103 atacurile cibernetice asupra re\u021belei electrice pot fi efectuate doar de hackeri guvernamentali?\u201d<\/h1>\n

<\/p>\n

Anastasis Keliris. \u0218i apoi Script-Kiddie a spus: S\u0103 nu fie lumin\u0103. Sunt atacurile cibernetice asupra re\u021belei electrice limitate la actori de stat-na\u021biune? \/\/ BlackHat. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

Func\u021bionarea fiabil\u0103 a energiei electrice este esen\u021bial\u0103 \u00een via\u021ba noastr\u0103 de zi cu zi. Dependen\u021ba noastr\u0103 de electricitate devine deosebit de evident\u0103 atunci c\u00e2nd aceasta este oprit\u0103, chiar \u0219i pentru o perioad\u0103 scurt\u0103 de timp. Ast\u0103zi, se consider\u0103 c\u0103 atacurile cibernetice asupra re\u021belelor de energie sunt extrem de complexe \u0219i sunt accesibile doar hackerilor guvernamentali.<\/p>\n

<\/p>\n

Prezentatorul contest\u0103 aceast\u0103 opinie general acceptat\u0103 \u0219i ofer\u0103 o descriere detaliat\u0103 a unui atac asupra re\u021belelor de energie, al c\u0103rui cost este acceptabil chiar \u0219i pentru hackerii non-guvernamentali. El demonstreaz\u0103 informa\u021biile colectate de pe Internet, care pot fi utile la modelarea \u0219i analiza unei re\u021bele electrice \u021bint\u0103. De asemenea, explic\u0103 cum aceste informa\u021bii pot fi utilizate pentru modelarea atacurilor asupra re\u021belelor electrice la nivel mondial.<\/p>\n

<\/p>\n

De asemenea, \u00een prezentare se demonstreaz\u0103 o vulnerabilitate critic\u0103 descoperit\u0103 de prezentator \u00een produsele General Electric Multilin, care sunt utilizate pe scar\u0103 larg\u0103 \u00een industrie. Prezentatorul descrie cum a compromis complet algoritmul de criptare utilizat \u00een aceste sisteme. Acest algoritm este aplicat \u00een produsele General Electric Multilin pentru comunicarea securizat\u0103 a subsistemelor interne \u0219i pentru gestionarea acestora. Inclusiv pentru autorizarea utilizatorilor \u0219i asigurarea accesului la opera\u021biuni privilegiate.<\/p>\n

<\/p>\n

Prin ob\u021binerea codurilor de acces (\u00een urma compromisului algoritmului de criptare), un atacator poate dezactiva complet dispozitivul \u0219i poate opri electricitatea \u00een sectoarele respective ale re\u021belei electrice; bloca operatorii. \u00cen plus, prezentatorul demonstreaz\u0103 tehnica de citire la distan\u021b\u0103 a urmelor digitale l\u0103sate de echipamentele vulnerabile la atacuri cibernetice.<\/p>\n

\n<\/a><\/noindex><\/p>\n

10. Internetul \u0219tie deja c\u0103 sunt \u00eens\u0103rcinat\u0103<\/h1>\n

<\/p>\n

Cooper Quintin. Internetul \u0219tie deja c\u0103 sunt \u00eens\u0103rcinat\u0103 \\\/\\\/ DEF CON. 2017.<\/a><\/noindex><\/h2>\n

<\/p>\n

S\u0103n\u0103tatea feminin\u0103 este o afacere de mari propor\u021bii. Pe pia\u021b\u0103 exist\u0103 o multitudine de aplica\u021bii Android care ajut\u0103 femeile s\u0103 \u00ee\u0219i urm\u0103reasc\u0103 ciclul lunar, s\u0103 \u0219tie c\u00e2nd este cea mai mare probabilitate de concep\u021bie sau s\u0103 \u00ee\u0219i monitorizeze starea de sarcin\u0103. Aceste aplica\u021bii \u00eencurajeaz\u0103 femeile s\u0103 noteze cele mai intime detalii ale vie\u021bii lor, precum starea de spirit, activitatea sexual\u0103, activitatea fizic\u0103, simptomele fizice, \u00een\u0103l\u021bimea, greutatea \u0219i multe altele.<\/p>\n

<\/p>\n

Dar c\u00e2t de confiden\u021biale \u0219i sigure sunt aceste aplica\u021bii? Dac\u0103 o aplica\u021bie stocheaz\u0103 informa\u021bii intime despre via\u021ba noastr\u0103 personal\u0103, ar fi bine s\u0103 nu \u00eemp\u0103rt\u0103\u0219easc\u0103 aceste date cu nimeni altcineva; de exemplu, cu o companie prietenoas\u0103 (care se ocup\u0103 de publicitate targetat\u0103 etc.) sau cu un partener\/p\u0103rinte r\u0103u inten\u021bionat.<\/p>\n

<\/p>\n

Prezentatorul \u00ee\u0219i prezint\u0103 rezultatele analizei sale de securitate cibernetic\u0103 pentru mai mult de unsprezece aplica\u021bii care prezic probabilitatea concep\u021biei \u0219i urm\u0103resc evolu\u021bia sarcinii. A descoperit c\u0103, \u00een majoritatea acestor aplica\u021bii, exist\u0103 probleme serioase de securitate cibernetic\u0103 \u00een general \u0219i de confiden\u021bialitate \u00een special.<\/p>\n

<\/p>\n

\"10<\/p>\n

Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042f \u0442\u0443\u0442 \u043f\u043e\u0434\u0443\u043c\u0430\u043b, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0434\u043e\u0440\u043e\u0432\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u0437\u043e\u0440\u0435, \u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u0430\u0445. \u041f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e \u0432\u0430\u0448\u0435\u043c\u0443 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0432\u0443\u044e \u0433\u043e\u0440\u044f\u0447\u0443\u044e \u0434\u0435\u0441\u044f\u0442\u043a\u0443. \u2013 \u0412 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0436\u043d\u043e\u0433\u043e \u0442\u0430\u043d\u0434\u0435\u043c\u0430 IoT-\u0430\u0442\u0430\u043a \u0438 \u0440\u0430\u043d\u0437\u043e\u043c\u0432\u0430\u0440\u0438 \u2013 \u00ab\u041e\u0442\u043a\u0440\u043e\u0439 \u0440\u043e\u0442, \u0441\u043a\u0430\u0436\u0438 0x41414141\u00bb: \u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u2013 \u0417\u0443\u0431\u0430\u0441\u0442\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u0442\u0440\u0438\u0435 \u0448\u0430\u043c\u043f\u0443\u0440\u0430 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28038,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37373","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4710 prezent\u0103ri interesante de la conferin\u021bele hackerilor | ProHoster","description":"M-am g\u00e2ndit c\u0103 ar fi minunat s\u0103 acoperim evenimentele de la conferin\u021bele interna\u021bionale. \u0218i nu doar printr-un rezumat general, ci s\u0103 vorbim despre cele mai interesante prezent\u0103ri.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4710 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u043e\u0432 \u0441 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 | ProHoster","og:description":"\u042f \u0442\u0443\u0442 \u043f\u043e\u0434\u0443\u043c\u0430\u043b, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0434\u043e\u0440\u043e\u0432\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u0442\u044c \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0441 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u0437\u043e\u0440\u0435, \u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043e \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u043b\u0430\u0434\u0430\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/10-interesnyh-dokladov-s-hakerskih-konferentsij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:17:16+00:00","article:modified_time":"2019-10-31T19:17:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37373","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 17:33:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:27:27","updated":"2026-01-23 17:33:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=37373"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37373\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/28038"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=37373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=37373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=37373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}