Black Hat 2014 - Wait! Wait! Don't Pwn Me!
- 1. Wait, wait! Don’t pwn me! August 2014 Security News Headlines Q&A game
- 3. ONLINE NEWS RESOURCES Hacker News CSO CNN ars technica The Verge Threat Post NetworkWorld SANS Brian Krebs Pandodaily Forbes Tesla FBI.gov Star Tribune Errata Security
- 5. THE RULES Each correct answer to the initial question is worth 3 points A wrong answer subtracts 2 points A pass on the question loses 1 point If a question is answered incorrectly, the second response is worth 1 point A correct answer from an audience member gets allocated 2 points to panelist of choice The moderator may arbitrarily give or take away points at any time
- 6. SCORE KEEPER: WE NEED A VOLUNTEER!
- 8. Who is retiring as Executive Director of OWASP?
- 10. According to the project evaluation committee findings, what is the most active project in OWASP?
- 12. FOR THE PANEL: HACKS IN THE NEWS
- 13. In Sydney Australia, hackers turned an ATM into one, gigantic game player. What game to they did they put on the machine?
- 15. According to Karsten Nohl, what common portable device can be used in a new type of attack?
- 17. Microsoft was recently ordered by the United States government to turn over email that resided in what country’s servers?
- 19. Aircraft satellite communication systems can be hacked via what, according to Ruben Santamarta?
- 21. Feds’ Silk Road investigation broke “what”, defendant tells court?
- 23. Name one of two major applications that use a vulnerable version of Apache Cordova.
- 25. Visit the wrong website, and what government agency could end up in your computer?
- 27. Godzilla Hacker took down 43 major website of what government?
- 29. Anonymous Group took down whose website over the Gaza conflict?
- 31. The Russian government asked Apple to hand over what?
- 33. Attackers breached Tor’s system to reveal what?
- 35. What scam did a 24 year old many use to steal $309,768 from Apple?
- 38. BY THE NUMBERS
- 39. Within 100,000, how many passwords did a Russian criminal group lift from 420,000 websites?
- 41. Credit Card Breach Confirmed At 33 restaurant locations. Which restaurant chain was it?
- 43. What popular developer network accidently exposed thousands of developers emails and password?
- 45. On average, how many vulnerabilities did researchers find per Internet of Things device?
- 47. Within 5%, what percent of employees xpose critical corporate data by mistake?
- 49. Within 5%, how many Critical Infrastructure Providers were breached last year?
- 52. EZ-Pass was hit with what kind of scheme to defraud users?
- 54. A warrant authorized the FBI to Track and do what to people’s computers?
- 56. Android malware SandroRAT disguises itself as what?
- 58. Scientists reconstruct “what” by watching a bag of potato chips?
- 61. Google fixed what security hole in Android?
- 63. What should be of high concern for travelers using business centers at the hotel?
- 65. LIGHTNING ROUND NOTHING BUT OWASP
- 66. Within 5000, how many listens has the OWASP 24/7 Podcast had within the past 9 months?
- 68. Within 10, how many projects are currently under evaluation by the Johanna and the evaluation committee?
- 69. 141 Projects
- 70. In the OWASP Top 10, what does section A9 cover?
- 72. What very popular project does Colin Watson run?
- 74. How many days until AppSec USA 2014?
- 76. TALLY THE SCORE: WHO WON?
- 77. THANK YOU TO THE PANEL
- 78. A NEW OWASP PROJECT: THE WAIT WAIT GAME Mark.Miller@OWASP.org
- 79. Wait, wait! Don’t pwn me! August 2014 Security News Headlines Q&A game
Editor's Notes
- #4: The resources used for selection of the news events.
- #6: The rules… which may change at any time, even during the game.
- #11: Podcasts for DevOps admins http://thepracticalsysadmin.com/podcasts-for-devops-admins/ In my experience I have found that podcasts are one of the absolute best ways to consume information, whether it be on a morning commute or viewing the show live, good podcasts are one of the best learning tools around. So for today’s post, I have compiled a list of some good shows related to DevOps that I hope others find to be useful.
- #15: http://mashable.com/2014/07/28/hackers-atm-doom/
- #17: http://articles.economictimes.indiatimes.com/2014-07-31/news/52285103_1_usb-chips-software
- #19: http://www.bbc.com/news/technology-28601788
- #21: http://www.itpro.co.uk/security/22828/aircraft-satellite-comms-systems-can-be-hacked-via-in-flight-wi-fi-claims-researcher#ixzz39dnITM7W
- #25: http://www.securityweek.com/apache-cordova-vulnerabilities-expose-android-apps Amazon or Skype
- #27: http://www.wired.com/2014/08/operation_torpedo/
- #29: http://thehackernews.com/2014/08/godzilla-hacker-takes-down-several_1.html
- #31: http://thehackernews.com/2014/07/anonymous-group-takes-down-mossads_31.html
- #33: http://thehackernews.com/2014/07/russian-government-asks-apple-to-hand_30.html
- #35: http://pando.com/2014/07/30/attackers-have-breached-tors-system-to-reveal-the-identities-of-its-users/
- #38: http://www.forbes.com/sites/jaymcgregor/2014/07/29/a-24-year-old-man-stole-309768-from-apple-with-an-unbelievably-simple-scam/?ss=Security
- #41: http://venturebeat.com/2014/08/05/russian-gangs-take-1-2b-passwords-500m-email-addresses-in-biggest-web-heist-ever/
- #43: http://www.forbes.com/sites/katevinton/2014/08/06/data-breach-bulletin-credit-card-breach-confirmed-at-33-p-f-changs-locations/?ss=Security
- #45: http://thehackernews.com/2014/08/thousands-of-mozilla-developers-emails_3.html
- #47: http://blogs.computerworld.com/cybercrime-and-hacking/24215/researchers-find-about-25-security-vulnerabilities-internet-things-device
- #49: http://www.esecurityplanet.com/network-security/68-percent-of-employees-expose-critical-corporate-data-by-mistake.html
- #51: http://www.esecurityplanet.com/network-security/67-percent-of-critical-infrastructure-providers-were-breached-last-year.html
- #56: http://thehackernews.com/2014/08/warrant-authorized-fbi-to-track-and_16.html
- #58: http://www.scmagazine.com/android-malware-sandrorat-disguised-as-mobile-security-app/article/364455/
- #63: http://www.zdnet.com/google-fixes-androids-fake-id-security-hole-7000032108/
- #65: http://krebsonsecurity.com/2014/07/beware-keyloggers-at-hotel-business-centers/
- #68: https://soundcloud.com/owasp-podcast