/tmp/lab

Hackito Ergo Sum 2010 – Call For Paper – HES2010 CFP
http://hackitoergosum.org

Hackito Ergo Sum conference will be held from April 8th to 10th 2010 in Paris, France.
It is part of the series of conference “Hacker Space Fest” taking place since 2008 in France and all over Europe.

HES2010 will focus on hardcore computer security, insecurity, vulnerability analysis, reverse engineering, research and hacking.

INTRO
The goal of this conference is to promote security research, broaden public awareness and create an open forum so that communication between the researcher, the security industry, the experts and the public can happen.

A recent decision of justice in France has convicted a security researcher for disclosing vulnerabilities and exploits. These laws (similar to the one in Germany), descending from USA’s DMCA law, are orienting freedom of research and knowledge into a situation where “illegal knowledge” can happen, restricted to the only ones blessed by governmental silent approval and military. Scientific research and public information cannot be made into another monopoly of state, where “some” can study and publish and “some others” cannot.
Such approach just show how misinformed some politics are and how little understanding they get of the struggle they are acting in.

Not understanding that the best way to improve security is to attack it shows the lack of maturity of some stakeholder by being cut out of independent information sources.
This is where our ethics and responsibility is to say “No, we have a right for free information and true independence in research”, and this responsibility is the one of anybody, not just the responsibility of academically blessed scientists.

This conference will try to take in account all voices in order to reach a balanced position regarding research and security, inviting businesses, governmental actors, researchers, professionals and general public to share concerns, approaches and interests during.
During three days, research conferences, solutions presentations, panels and debates will aim at finding synthetic and balanced solutions to the current situation.

CONTENT

> Research Track:
We are expecting submissions in english or french, english preferred.
The format will be 45 mn presentation + 10mn Q&A.

For the research track, preference will be given for offensive, innovative and highly technical proposals covering (but not restricted to) the topics below:

Attacking Software
* Vulnerability discovery (and automating it!)
* Non-x86 exploitation
* Fuzzing with SMT and its limits
* New classes of software vulnerabilities and new methods to detect software bugs (source or binary based)
* Reverse Engineering tools and techniques
* Static analysis (source or binary, Lattices to blind analysis, new languages and targets strongly encouraged)
* Unpacking
* Current exploitation on Gnu/Linux WITH GRsecurity / SElinux / OpenWall / SSP and other current protection methods
* Kernel land exploits (new architectures or remote only)
* New advances in Attack frameworks and automation

Attacking Infrastructures
* Exotic Network Attacks
* Telecom (from VoIP to SS7 to GSM & 3G RF hacks)
* Financial and Banking institutions
* SCADA and the industrial world, applied.
* Governmental firewall and their limits (Australia, French’s HADOPI, China, Iran, Danemark, Germany, …)
* Satellites, Military, Intelligence data collection backbones (“I hacked Echelon and I would like to share”)
* Non-IP (SNA, ISO, make us dream…)
* Red-light and other public utilities control networks
* M2M

Attacking Hardware
* Hardware reverse engineering (and exploitation + backdooring)
* Femto-cell hacking (3G, LTE, …)
* Microchip grinding, opening, imaging and reverse engineering
* BIOS and otherwise low-level exploitation vectors
* Real-world SMM usage! We know it’s vulnerable, now let’s do something
* WiFi drivers and System on Chip (SoC) overflow, exploitation and backdooring.
* Gnu Radio hacking applied to new domains
* Toll-booth and fast-lane payment systems

Attacking Crypto
* Practical crypto attacks from the hackers perspective (RCE, bruteforce, …)
* SAT-solver applied to cryptanalysis
* Algorithm strength modeling and evaluation metrics
* Hashing functions pre-image attacks
* Crypto where you wouldn’t think there is

We highly encourage any other presentation topic that we may not even imagine.

Required informations:
* Presenter’s name
* Bio
* Presentation Title
* Description
* Demo?
* Needs: Internet? Others?
* Company (name) or Independent?
* Address
* Phone
* Email

Send your submission to:
hes2010-cfp __AT__ lists.hackitoergosum.org

> Business & Society Track:
Format:
20 minutes slots to present a tool, an innovative product, a solution (commercial, open source, free); a customer experience or open research domain; a society issue or a subject of public interest.

Demos are mandatory for tool, product or solutions presentations.
Pure-marketing presentation will be moderated (i.e. interrupted).
Follow-up with private group can be arranged for in-depth demo or analysis.

Submission needs to be sent to:
hes2010-cfp __AT__ lists.hackitoergosum.org

> Other interests
If you want to organize a Capture The Flag, Reverse Engineering contest, Lockpicking contest or any other activity during the conference, you are most welcome. Please contact us at: hes2010-orga@lists.hackitoergosum.org

DATES
2010-01-18    Call for Paper
2010-03-01    Submission Deadline
2010-04-08    Start of conference
2010-04-10    End of conference

PROGRAMMING COMMITTEE
The submissions will be reviewed by the following programming committee:
* Sebastien Bourdeauducq (Milkymist, /tmp/lab, BEC)
* Rodrigo Branco “BSDaemon” (Coseinc)
* Jonathan Brossard (P1 Code Security, DNSlab)
* Emmanuel Gadaix (TSTF)
* Laurent Gaffié (Stratsec)
* Thomas Garnier (Microsoft)
* The Grugq (PSP)
* Dhillon Kannabhiran (HITB)
* Kostya Kortchinsky (Immunity)
* Itzik Kotler (Radware)
* Philippe Langlois (P1 Telecom Security, PSP, TSTF, /tmp/lab)
* Moxie Marlinspike (Institute for Disruptive Studies)
* Karsten Nohl (deGate, Reflextor)
* Nicolas Thill (OpenWRT, /tmp/lab)
* Julien Tinnes (Google)
* Nicolas Ruff (EADS, Security Labs)
* Carlos Sarraute (CORE Security Technologies)
* Matthieu Suiche (Sandman, win32dd)
* Fyodor Yarochkin (TSTF, o0o.nu)

FEES
Business-ticket                                                 120 EUR
Public entrance                                                  80 EUR
Reduction for Students below 26                                  40 EUR
Reduction for CVE publisher or exploit publisher in 2009/2010    40 EUR

Entrance fees and sponsors fees will be used to fund international speakers travel costs.

VOLUNTEERS
Volunteers who sign up before 2010-03-01 get free access and will need to be present onsite two days before (2010-04-06) if no further arrangement is made with the organization.

SPONSORS
Sponsors are welcome to contact us to receive the Partnership Kit at:
hes2010-orga __AT__ lists.hackitoergosum.org

LOCATION
Paris, France.

CONTACT
hes2010-orga __AT__ lists.hackitoergosum.org

Hackito Ergo Sum 2010 conference – http://hackitoergosum.org

Hacker Space Festival – http://www.hackerspace.net

Ce jeudi soir au /tmp/lab on se fera un petit point sur Hackito Ergo Sum, conference qui aura lieu du 8 au 10 Avril pour semble t’il ouvrir la saison des HSF qui comportera pas mal d’épisodes (Rennes, Toulouse, Contorsions Technologiques @ LSL,  Alpes de haute provence avec Estive Numerique version HSF camp/nature *YAY!*, Istanbul etc…).

Hackito Ergo Sum 2010
Cette conférence sera plus orientée technique que les HSF précédents, avec par exemple Estive Numérique qui sera plus orientée Autonomie Connectée / Art / BioEco / Wireless …

On a un début de CFP que l’on doit envoyer pour le 15, et déja des speakers internationaux qui montrent leur envie de venir. (d’ou necessité de trouver du funding pour cela).

On va discuter de l’orga (vous pouvez demander a participer), des speakers potentiels a inviter (CFP pour tous), des eventuels sponsors, des lieux, …

NET
Sinon on aura aussi une petite discussion sur la refonte du reseau du tmplab.

PROJECTIONS
Et une projections des talks du 26C3 pendant la nuit.

ISLANDE 2010
Wikileaks et l’Islande? Le reve deviendrait réalité?
On en parle ce jeudi apres la projection de la conférence Wikileaks.

Disturbing, this is the most appropriate word. It feels like the 80s again. When the hackers were the big bad people in politician’s, media’s, general public’s… and police officers’ heads. A swedish hackerspace was raided last week, for no apparent valid reason (illegal bar investigation in a punk concert next door, and they came with IT experts and seized computers..). Is swedish administration so retarded that it didn’t evolve and understand the importance of coders and open source gurus that are constituting hacker spaces everywhere in the world? We’re at least expecting some explanation from sweden but it doesn’t seem to be coming… (more details and french version available below)

(more…)

Chaque fin d’année apporte avec elle son lot de fêtes, la principale étant bien sur Noël^Wle Nouvel An^W^WChaos Communication Congress. Respectant la tradition, le /tmp/lab y sera, et fort bien accompagné car depuis l’an dernier, d’autres hackerspaces se sont montés sur Paris. Une page est donc apparue dans le wiki afin de préparer l’expédition parisienne au coeur des étendues hostiles et glacées de la Teutonnie. Gageons que le passage de nos vaillants aventuriers marquera la mémoire des générations présentes et à venir …

N’oubliez pas que Berlin est un haut lieu de la teuf de ouf guedin malade, et que les hotels se remplissent très vite. Donc courrez vite vous inscrire !

This week, HostileWRT is going to be presented during Hack.lu in Luxembourg. Eugene Parkinson and Philippe Langlois will be presenting on Thursday 29.10.2009 their new development on their “Fully-Automated Wireless Security Audit Platform on Embedded Hardware” and will release HostileWRT version 0.5.0 for the conference.

There will be a round table during the first instance of Open World Forum in Paris with one of /tmp/lab member (Philippe Langlois) on Thursday 1st of October 2009.
The theme of the roundtable is “Internet 3: new era of freedom, or a totalitarian nightmare? Virtual worlds and multiple identities: are we heading for digital schizophrenia? Data protection, individual liberties and a private life, traceability… What are the technological implications? New directions for Open Source? “.

Mate Soos gave us a great workshop on SAT Solver Cryptanalysis and his project about Distributed SAT Solving. As soon as I’m back from ekoparty (Buenos Aires, Argentina), I will try what he posted on the /tmp/lab mailing list.

In the meantime, life is blooming in Paris with now 5 hacker spaces starting or alive and kicking!
(La Suite Logique : http://www.lasuitelogique.org/, La porte logique, Free Fermentology Foundation : http://kefir.wikidot.com/, Digital Non-Sense, et /tmp/lab bien sur).

Vous voulez avoir un stage intéressant? Travailler sur de l’Open Source? Ne pas bosser pour des prunes pour Google? Bosser avec des gens venant d’horizon variés et possédant une vraie passion et une vraie expertise technique (wow, ca commence a ressembler a une pauvre annonce de RH toute naze hehe), eh bien maintenant c’est possible car on ouvre les stages au /tmp/lab. Contactez nous si ca vous interesse.

Want to have a cool internship working on open source software? Don’t want to work for peanuts for Google? Want to have your own agenda? Join the /tmp/lab and make your internship into a unique experience. French or English speaking welcome.

Plus de détail sur les sujets possibles / More details on possible subjects:
http://dev.tmplab.org/issues/show/97

Some of the proposed projects:

• Streamster2: Easy to use, Advanced TOR-like network
• HostileWRT: Shell, C or Lua code on WiFi, security, audit, embedded platforms.
• RubySCTP: Ruby SCTP stack with the same API as pySCTP (based on lksctp / SCTP socket API)
• FasterJasperRb: Ruby Jasper Reports accelerated report server (as suggested in http://wiki.rubyonrails.org/rails/pages/HowtoIntegrateJasperReports)
• Redmine improved interface to manage bugs and edit Wiki
• Input engine for Redmine Wiki (to make it accept Trac wiki syntax, Mediawiki syntax, …)
• BrokenTV key: Linux-based USB key for journalism in censored/hostile territories
• BrokenTV platform: Free and Open source platform for Open / Mutable Web TV broadcasting
• Anti-MitM: Detect and block Man in the Middle attacks with forged SSL certificates
• …

if you have a project you’d like to propose, please tell us, we are also welcoming outside student / research projects.

Jeudi 04 Juin, c’est à dire dans moins de 1 semaine, le /tmp/lab sera hors les murs. Invité au Palais de Tokyo pour un workshop de 19h30 à …, vous etes TOUS invité, mais il faut s’enregistrer un ptit coup. (oui, c’est gratuit, ouvert à tous, pas de niveau technique requis, juste un intéret. Venez avec votre laptop, vos livres, vidéos, idées, projets, questions, on sera tous ensemble pour explorer, jouer et créer)

Acces / Informations pratiques

========================================================================
== Hacker Space Festival #2: Program for 26-30 June 2009, Vitry/Seine ==
========================================================================

mailto:hsf-talk-subscribe@lists.tmplab.org

“Si les députés et sociétés commerciales pro-HADOPI avaient appliqué leur logique lors du développement d’Internet, Internet n’existerait pas”, ai-je répété plusieurs fois. Mais, bien sur, avec le pouvoir d’une majorité qui n’écoute pas les citoyens, la loi HADOPI est passée.

Pas de panique, il ya des antidotes anti-HADOPI et heureusement, la lutte contre cette loi n’est pas terminée: HADOPI parait tellement anti-constitutionnelle qu’il est étonnant qu’elle soit déjà passée. Les amitiés sont fortes en ces temps.

Cette situation me rappelle la situation de Atlas Shrugged de Ayn Rand, mais renversée, ou les “looters” (pilleurs) sont plus du coté des grosses sociétés devenues obsolètes (société de diffusion physique de la musique et des films) qui protègent leur intéret par du lobbying politique et des relation publiques.

Le comité de programmation pour HSF2009[0] a repoussé la date butoir de remise des propositions pour le Hacker Space Festival[1] qui se tiendra le mois prochain.

Nos amis hackers sont invités à envoyer leurs propositions de conférences et d’ateliers jusqu’au 12 mai (la semaine prochaine). Après cette date, l’appel sera définitivement clos.

Pour les propositions tardives :

• Relisez l’appel à projets[2]
• Assurez-vous au préalable de pouvoir venir
• Utilisez les champs fournis dans l’appel à la section “proposer

Pour mémoire :

• Il s’agit d’un événement autour du hack
• Il s’agit d’une opération auto-organisée
• Nous ne pouvons couvrir aucune dépense (visa, voyage, etc.)
• Nous pouvons fournir un couchage de fortune sur place (apportez votre matériel de camping)
• Nous pouvons fournir de la nourriture pas chère (mais bonne)

Les participants déjà sélectionnés seront informés à partir de demain, comme prévu.

[0] http://hackerspace.net/committee
[1] http://hackerspace.net/
[2] http://hackerspace.net/cfp

HSF2009 Programming Committee

The HSF2009 Programming Committee[0] has extended the deadline for proposals to the upcoming Hacker Space Festival[1] next month.

Fellow hackers can send conferences and workshops proposals until May 12 (next week). After this date, the CFP will be closed for good.

For late proposals:

• Re-read the Call For Proposals[2]
• Make sure you can come in the first place
• Do use the provided fields from the CFP

As a reminder:

• this is a hacker event
• this is a self-organized operation
• we can’t cover any expenses (travel, visa, etc.)
• we can provide free accomodation on site (bring camping gear)
• we can provide cheap (but good) food

Speakers already selected will be notified starting tomorrow, as scheduled.

[0] http://hackerspace.net/committee
[1] http://hackerspace.net/
[2] http://hackerspace.net/cfp

HSF2009 Programming Committee

All I can say is that I will NEVER forget the HSF disco night and the most heart baring confession I took being the Pope of the Church of Security. The guys just blew me away for life! When the HSF is on, I can’t be anywhere else in the world now. I just gotta be there. I’m so totally hooked!

-- Marcos El Ruptor, (http://enrupt.com/)

An “hackerspace” festival is about a bunch of freaky geniuses
hacking day and night until falling aligned in sleeping bags on the
ground.

-- Denis "Jaromil" Roio

We wrote to the European Patent Office to indicate our concern about patents being granted:

“Paris, 30th of April 2009

Contribution to the Referral G03/08

Dear members of the Enlarged Board of Appeals,
together with a majority of software experts and parliaments in Europe we see no role for patents for software and business methods. So we are surprised to find out that some die-hards in the European Patent Organization (EPO) still do. We apologize in advance for the unbalanced tone of this Amicus Curiae Brief, however we intend to transmit our opinion through content and form. We hope with this to help the members of the board, among other issues, to understand how outrageous the question of software patents is seen by many and what answers are considered correct.

Where is the law on which legal base you grant for us in Munich patents on software, eCommerce and business methods? In our country we believe that laws have some importance for a referral on points of law, so let us remind you of the relevant legal base:
European Patent Convention Article 52 Patentable inventions
(more…)