Articles about ruxcon

HP Enterprise Consulting Services managing principal Stephen Kho. Image: Darren Puali / The Register

Got Ancient exploit but nowhere to use it? Try the horrid GRX network

Ruxcon They've been warned for years, but scores of telcos are still making bone-headed configuration mistakes in their GPRS Global Roaming Exchange (GRX) networks, leaving mail and FTP servers vulnerable. The international phone routing system is used for passing and billing calls between providers, using encryption to funnel data …
Darren Pauli, 26 Oct 2016
Gerhard Klostermeier. Image: Darren Pauli, The Register.

Hackers pop top 'secure' wireless keyboard and mouse kits, gain RCE

Ruxcon Wireless keyboard and mouse manufacturers including Microsoft, Fujitsu, and Logitech have been forced to fix borked encryption in peripherals that allow physical attackers to hijack computers. Researchers and phDs Gerhard Klostermeier and Matthias Deeg with Germany-based security firm SySS tested five devices badged as secure …
Darren Pauli, 24 Oct 2016
Wanqiao Zhang. Image: Darren Pauli, The Register.

Every LTE call, text, can be intercepted, blacked out, hacker finds

Ruxcon Hacker Wanqiao Zhang of Chinese security house Qihoo 360 has blown holes in 4G LTE networks by detailing how to intercept and make calls, send text messages and even force phones offline. The still-live vulnerabilities were documented and discussed at the Ruxcon hacking confab in Melbourne, Australia, this weekend, including a …
Darren Pauli, 23 Oct 2016

The battle of Cupertino: Jailbreakers do it for freedom, not cash

Ruxcon A team of seven Chinese hackers are forgoing big bucks and instead pursuing their effort to open Apple to the security research field and thereby allow users to modify their devices. The group of brilliant independent security boffins known as Pangu Team are among the top researchers in the iDevice jailbreaking scene, where …
Darren Pauli, 27 Oct 2015

Mostly Harmless: Google Project Zero man's verdict on Windows 10

Ruxcon Accomplished Google hacker James Forshaw has given Windows 10 a slight security tick of approval, badging the platform as two-steps-forward, one-step-back affair when compared to version 8.1. The Project Zero vulnerability man praised Redmond for making some inroads to hardening in its latest Windows iteration, but scolded …
Darren Pauli, 26 Oct 2015

Telstra's bush broadband boxes bugged, bashed, botted

Update Telstra has patched a vulnerability that could have seen regional Australians suffer interception of their internet connections through a remotely-exploitable vulnerability in a series of wireless terminals the nation's dominant telco deploys under its universal service obligation. Melbourne security researcher Tim Noise (@ …
Darren Pauli, 3 Aug 2015

Hackers now popping Cisco VPN portals

Crackers are popping customised Cisco virtual private networks, stealing credentials and spraying malware using a flaw reported by Aussie hacker Alec Stuart-Muirk, the company warns. Organisations running the Cisco Clientless SSL VPN portal in customised configurations risk attack if they do not update to versions released 8 …
Darren Pauli, 20 Feb 2015

Pagers shout data center creds, pop star airport arrivals

Anyone wanting to know the time world leaders arrive in Australia for the coming G20 summit need only listen to broadcasts from Aussie airports, researcher Ed Farrell has claimed at the Ruxcon conference. News of VIP airport arrivals are just one of the interesting pieces of information the Sydney security consultant monitored …
Darren Pauli, 22 Oct 2014
Brute Force

Visual voicemail hack makes your messages a snack

Ruxcon Sydney penetration tester Shubham 'Shubs' Shah has urged US and European researchers to probe their telco's voicemail security after he found accounts held by local telcos Vodafone and Optus were open to attack. The two telcos were vulnerable because design flaws mean neither limited the number of password guessing attempts in …
Darren Pauli, 20 Oct 2014

Heistmeisters crack cost of safecrackers with $150 widget

A pair of Melbourne security professionals have developed a $150 auto-dialer safe cracker that replicates a machine worth tens of thousands of dollars and sold only to military customers. The unit launches automatic brute force attacks against group two combination locks used in high-security environments like ATMs and gun …
Darren Pauli, 13 Oct 2014

Aussie builds contactless card cloner app, shops at Woolies with fake card

Money hacker Peter Fillmore has created an Android app that can clone some of Australia's most popular contactless credit cards. In attacks that slipped beneath banks' and credit card providers' radars, the Aussie boffin probed the protocols behind Visa and Mastercard payment cards and proved the viability of an attack by …
Darren Pauli, 7 Oct 2014
78rpm records

Aussie bloke hacks way to top of music charts with MIDI-based tunes

A security engineer has successfully hacked his way to the top of the music charts in Australia with songs whose quality can only be enjoyed while on Class A drugs, apparently. Peter Fillmore told SC Magazine that his fake artist account had gobbled up nearly one million hits before it was taken offline. The Melbourne-based …
Kelly Fiveash, 5 Nov 2013

Create a news alert about ruxcon, or find more stories about ruxcon.

Biting the hand that feeds IT © 1998–2018