In Soviet Russia Smartcard Hacks You

Video thumbnail (Frame 0) Video thumbnail (Frame 1572) Video thumbnail (Frame 8476) Video thumbnail (Frame 10947) Video thumbnail (Frame 11446) Video thumbnail (Frame 17661) Video thumbnail (Frame 18538) Video thumbnail (Frame 21636) Video thumbnail (Frame 22087) Video thumbnail (Frame 22599) Video thumbnail (Frame 23294) Video thumbnail (Frame 25811) Video thumbnail (Frame 31257)
Video in TIB AV-Portal: In Soviet Russia Smartcard Hacks You

Formal Metadata

Title
In Soviet Russia Smartcard Hacks You
Title of Series
Author
License
CC Attribution 3.0 Unported:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
2018
Language
English

Content Metadata

Subject Area
Abstract
The classic spy movie hacking sequence: The spy inserts a magic smartcard provided by the agency technicians into the enemy's computer, ...the screen unlocks... What we all laughed about is possible! Smartcards are secure and trustworthy. This is the idea smartcard driver developers have in mind when developing drivers and smartcard software. The work presented in this talk not only challenges, but crushes this assumption by attacking smartcard drivers using malicious smartcards. A fuzzing framework for *nix and Windows is presented along with some interesting bugs found by auditing and fuzzing smartcard drivers and middleware. Among them classic stack and heap buffer overflows, double frees, but also a replay attack against smartcard authentication. Since smartcards are used in the authentication process, a lot of vulnerabilities can be triggered by an unauthenticated user, in code running with high privileges. During the authors research, bugs were discovered in OpenSC (EPass, PIV, OpenPGP, CAC, Cryptoflex,...), YubiKey drivers, pam p11, pam pkc11, Apple smartcardservices...
Process (computing) Open source 1 (number) Software testing Whiteboard Information security Surgery Theory
Axiom of choice Pixel Memory card Multiplication sign 1 (number) Set (mathematics) Public key certificate Computer programming Neuroinformatik Magnetic stripe card Damping Endliche Modelltheorie Information security Physical system Area Collaborationism Touchscreen Electric generator Software developer Memory card Sound effect Type theory Process (computing) Whiteboard Information security Mobile app Server (computing) Existence Service (economics) Virtual machine Device driver Web browser Plastikkarte Login Crash (computing) Hacker (term) Robotics Touch typing Energy level Dependent and independent variables Interface (computing) Projective plane Commutator Content (media) Plastikkarte Device driver Digital electronics Software Personal digital assistant Physicist Device driver Data Encryption Standard Object (grammar) Musical ensemble Communications protocol Window
Classical physics Dataflow Service (economics) Divisor Interior (topology) Memory card Multiplication sign Einstein field equations Device driver Insertion loss Plastikkarte Neuroinformatik Mathematics Circle Endliche Modelltheorie Fuzzy logic Analytic continuation Logic gate Dependent and independent variables Touchscreen Mapping Computer file Memory card Physical law Projective plane Content (media) Plastikkarte Sound effect Total S.A. Extreme programming Software Personal digital assistant Device driver Video game Website Musical ensemble Hacker (term) Freeware Freezing
Source code Tangible user interface
Email Dependent and independent variables Code Memory card Computer file Memory card Projective plane Plastikkarte Plastikkarte Checklist Exploit (computer security) Computer programming Tablet computer Mathematics Computer configuration Function (mathematics) Telecommunication Device driver Catastrophism Session Initiation Protocol Data buffer
Source code Login Field (computer science)
Source code Digital object identifier
Expert system Musical ensemble Login Monster group Window
Mobile app Computer file Projective plane Memory card Content (media) Chaos (cosmogony) Limit (category theory) Host Identity Protocol Pell's equation Software Personal digital assistant Blog Communications protocol Modem Data buffer
Surface Game controller Service (economics) Crossmedia Multiplication sign Modal logic Authentication Hamiltonian (quantum mechanics) Device driver Limit (category theory) Canonical ensemble Plastikkarte Computer programming Neuroinformatik Number Device driver Mathematics Semiconductor memory Different (Kate Ryan album) Internetworking Business model Fuzzy logic Logic gate Library (computing) Form (programming) Physical system Information Memory card Plastikkarte Trigonometric functions Demoscene Sign (mathematics) Wave Data management Word Process (computing) Personal digital assistant Logic Endliche Modelltheorie Musical ensemble Information security Window Directed graph
Insertion loss Plastikkarte Twitter
[Applause] mr the mannheim eric in the job is
and testing golding monitor built the In the previous year this was a present in apex or is that recently boarded the I call it an open source tool tool using would happenings Hughes offers this is lotte board stay the theorist of the monetary and the He launches this into the banks in Wertheim wide and tack surgeries or on the bar the thin ones are baking and talking about it
about them talk about the computers for smartcards smartcards view are areas of the machines you have to health care in warm time , the interest in the linux wince so if the user smartcard sector it 's a good deal that savvy crasher star news before the process that the phoenix suns with such bacteria the instinct of the former effects the programs for lighting software for smart cards are also that magath extra for you heidi secure device and made The smart august given the first look at you see the tons login the user to user smartcard ford capri and you very much from crysis was with white no drivers of physicists smartcard back it is called the secure Tampa checks the choice could process provided smartcard my way into the lot card security project red carpet rita This is the adobe software time for culture smartcard unity protocols level is the us developer matt heart very simple Log of computer screen down the no more hacker tools and in the american teenager the in the fastest in emsland data robotics traffic light that is basic the competencies for the smart card slot car in this case we have to say okay that 's it said that preliminary model capital response [Music] controls again the interface case is except buddy jupiter bad banks in the data the band da capo would buffons last data now away from the known the Swedish it comes to control the setting was it is that is really relevant to the apps seminar in y windows as well as knowledge the potters and This is only the third must because it is because you know when and if the next one session he is totally out of here vienna commutes and you can use for example browser to access the happy kids economic sponsor eckhard so you can you can interface the board over racing in the case you like it loud enemy objects card volks traffic light is the deep scratch windows finds the festakt minnie driver in the face book basic this short collaboration of the it hits 100 smart plug in The city is repeated fingerfood physicians tested operating system with three Birdies came so the satyam city car you can not change tel the service of the city ??yes that is the
apple ipod touches should not do that drivers that we like that can only be the same bad half of the entente casemodder means it likes card industry certification service the computer is today would have for pixel is validated by the user 13 existence in front of the system and services that can be used next big thing so I learn so I have little better of the next generation in amberg this center and expected to sign through another to prove that content type certificate and after the then is the server or computer tax ftt coaches correct thats okay that is last with karts by suzuki login process allowing you to private villa
post road map change two-bridge or interviews too
yumiko is likely to grow his project on projects hedging flow through the workplace services witches today smartcards away when he contacts the times Total sector grants belong totally because become the coaching and julis in the to hear mystical place first one push remix of our little tricks the freezing is good that way Everything can do it if we have the motto people will be two computers beatrix knowledge because that is also messi consent to linux smartcard rival contends driver for life in cartoon lot of people of Texas were the murder act the outer Project screen is no way to work ssd of tomorrow she would have been at the julis be a single of otherwise as the dressing becomes free for posse gates fixed in today so you can installed casey effects in The reed and left of the ball [Music] a pill deep into the software for ipad was the guest of will be released and next few days to the stop loss michael lusch claudia uli almost like that circle life grow the typical way is worth heimer ticket now no faxes the enemy in front of the apple smart card services for one of the drivers wwf disco is luke and use until the response extreme sport models for you or title carton laws of model flight the date up of manitoba fifth card stops the continuity batteries that in the usual curing classic mary crotty that is still the helper tourist.de major tom ford the opel meriva websites and dirk westphal of descartes the selected factor of the factor jp contents that is, he celebrates the drink using the science of fire landlords can stand red-white-red card industry corp is so now first case free agent ok was for Upper Franconia abound motto that is not
user tui cruises this is now mine by descartes is over with the dixie carter shaw july flora you can say what ever wanted
escalettes it is possible the fine wash There are drivers according to volker july is the Blanket can be put on the card is the smart car to carefully control and fully programs basic now 2001 basic of this may be to know the change eta wants to release xantrex people slate is here so options follows for bags project which is meant to be a community Medium are car communication but i can not just do it smart card happy day of our cars which allows you to change is to make money at work an update is then also margot academic ghostwriting face academy co that is also so that is a party data is complete by descartes who the response code from the party tour de france won corning the opel mother in the checklist response it is tomorrow debate with the white and continue copy until then possible for it tomorrow so water supply catastrophe mosley is interested in the lok in monastery he is further exploits exploit
the login in this is relevant now fresh
request for the cartel yes the bucks
then they would ye can the field
to execute the end of the way you lie
sting is so it was lucio
youth expert login [Music] explorers of the user boyfriend in the preface texas the vehicle should be windows
including twelve elevated privilege monsters
bakken in jested in libya audio project
with you can do something lowered by wesley mailbox must therefore so could I I almost want the same portfolio active wickede limit or jus costs the app the transmit call tell you how much in Wattenbek the weapon is betty albers Call finds the copy as he is in getafe from accident in the case you do not have all the luck when sunk networks so now alice am Kolleg aces blog from miquel and able to get off course both are the most recent had lycos vfl could herbert uhl with content farms tesco shared tesco economy households 14 22 the US futures triggers and the cards are chaos
sinks
[Music] how tony montana south could be torn up sea world tour almost pcs is from linux and windows so indoors cases you pretty much in the internet stick as a driver of crossmedia driver and installation english cities this was according to daily form at the gate windows defender co alico linux and windows linux to grasp the middle of june the absence sometimes from the left are like that no controller moster it offers enough to get in the windows marketplace running on linux it was the first wave download play offs ashes to ashes of the times hamilton process of interesting bike the logic growing and listing is just because the ground long easyetf people that is probably the lock and the city -film by j?rn different generate you have the cars and denys to be very happy few have heard his system changes 2play takes over you get to rumble he misses drafts of smartcard one smartcard know the final word of the market to be you can do ri playtech user is in sterling is country managers computer drivelock in the m races on bass 1 at this scene jacket necessary at the Men's race numbers and the city of rage and canon modifier and smartcard managed card to replace log in the computer world computer cabinet reputable the rockstar or exotic yet in Nikosia for new theater program smartcard janette beck with zoe to use Information is the battery and if you can controller with of memory with michael after the log-in case the integrated one business model smartcard intended to make you but review the tax service inc news konzertexamen
Credit losses inc [Applause]
Feedback