Cyber@UC Meeting 88 GHIDRA
If You’re New! ● Join our Slack: cyberatuc.slack.com Check out our website: cyberatuc.org ● Organization Resources on our Wiki: wiki.cyberatuc.org ● ● SIGN IN! (Slackbot will post the link in #general every Wed@6:30) ● Feel free to get involved with one of our committees: Content Finance Public Affairs Outreach Recruitment Lab Ongoing work in our research lab! ●
Announcements ● Bi-weekly lab events! Socket Programming! ○ ● Executive meeting Sunday, all are welcome Dodgeball Thursday ● Shirts! ● ● Loveland High School Outreach Success
Weekly News
Prototype iPhone Security ● Developer iPhones are “pre-jailbroken” by factory Secure Enclave Processor (SEP) ● unprotected on prototypes ● Recently gaining popularity with vulnerability researchers looking to break iPhone security https://nakedsecurity.sophos.com/2019/03/08/for-sale-gray-ma rket-iphones-that-yield-secrets-to-encryption/
US College Data Ransom ● Oberlin College (OH), Grinnell College (IA), Hamilton College (NY) impacted ● Ransom price at one bitcoin ○ (cur. ~$3800) Data being ransomed is the ● “entire admission file” for all applicants http://fortune.com/2019/03/08/college-applicant-ransomware-h ack/
IoT Security Bill Proposed ● The IoT Cybersecurity Improvement Act, originally introduced in Aug. 2017 ● Aims to add NIST recommendations as basic standards of IoT products ● Only covers devices marketed to the U.S. Government https://www.beckershospitalreview.com/cybersecurity/congres s-re-introduces-bill-to-enhance-iot-cybersecurity-4-notes.html
Protect Our Universities Act ● Aims to ban Kaspersky, Huawei, and ZTE products from college research projects of National Security Interest ● All companies proposed to ban are suspected of being used by foreign governments for various purposes ● All companies already banned from U.S. gov use at some level https://www.washingtonpost.com/news/powerpost/paloma/the- cybersecurity-202/2019/03/13/the-cybersecurity-202-republica ns-want-kaspersky-huawei-banned-from-sensitive-university-r esearch-projects/5c884bd91b326b0f7f38f152/?noredirect=on &utm_term=.57effc0b7ad3
GHIDRA ● NSA Developed Software Reverse Engineering (SRE) tool ● Basically blows out of the water IDA/r2/BinaryNinja ● Free and Open Source gitlab.com/cyberatuc/ghidra
Recommend
More recommend