Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Look up keyword or section
Like this
2Activity
P. 1
DMK BO2K8

DMK BO2K8

Ratings: (0)|Views: 127 |Likes:
Published by dan@doxpara.com

More info:

Published by: dan@doxpara.com on Sep 05, 2008
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PPT, PDF, TXT or read online from Scribd
See more
See less

10/15/2011

pdf

text

original

 
copyright IOActive, Inc. 2006, all rightsreserved.
Black Ops 2008:It’s The End Of The CacheAs We Know It
Or: “64K Should Be Good Enough For Anyone”Dan KaminskyDirector of Penetration TestingIOActive, Inc.
 
Introduction
Hi! I’m Dan Kaminsky –This is my 9
th
talk here at Black Hat –I look for interesting design elements – new ways to manipulateold systems,old ways to manipulate new systems –Career thus far spent in Fortune 500Consulting now –I found a really bad bug a while ago.You might have heard about it.There was a rather coordinated patching effort.I went out on a very shaky limb, to try to keep the detailsquiet –Asked people not to publicly speculate»Totally unreasonable request»Had to try. –Said they’d be congratulated here
 
Thanks to the community
First finders: Pieter de Boer andPeter van Dijk –51 hours later Best Paper  –Bernard Mueller, sec-consult.com –Five days later, but had fullinfo/reproInteresting thinking (got close,kept off lists) –Andre Ludwig –Nicholas Weaver  –“Max”/@skst (got really
really 
close) –Zeev Rabinovich –Michael Gersten –Mike ChristianLeft the lists –Paul Schmehl –Troy XYZ –Others
Thanks –Jen Grannick (she contacted
me)
 –DNSStuff (they taught meLDNS, and reimplementedmy code better) –Everyone else (people knowwho they are, and know I owethem a beer).

Activity (2)

You've already reviewed this. Edit your review.
1 thousand reads
1 hundred reads

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->