:::::::::::: :: .: ... ::: .,-:::::/ .,-::::: :::::::.. ... .:: . .::::::::::-. ;;;;;;;;'''',;; ;;, ;; ;;;,;;-'````' ,;;;'````' ;;;;``;;;; .;;;;;;;. ';;, ;; ;;;' ;;, `';, [[ ,[[[,,,[[[ [[' [[[[[[ [[[[[[/[[[ [[[,/[[[' ,[[ \[[,'[[, [[, [[' `[[ [[ $$ "$$$"""$$$ $$ $$$"$$c. "$$ $$$ $$$$$$c $$$, $$$ Y$c$$$c$P $$, $$ 88, 888 "88o88 .d888 `Y8bo,,,o88o`88bo,__,o, 888b "88bo,"888,_ _,88P "88"888 888_,o8P' MMM MMM YMM "YmmMMMM"" `'YMUP"YMM "YUMMMMMP"MMMM "W" "YMMMMMP" "M "M" MMMMP"` ██████████████████████████████████████████████████████████████████████████████████████████████ 20180424 ███ ╭────── News ────────────────────────────────────────────────────────────────────────────────────────────── │ ┽── Teen Who Hacked Ex-CIA Director John Brennan Gets Sentenced to 2 Years of Prison │ Link │ ┽── Hijack of Amazon’s internet domain service used to reroute web traffic for two hours unnoticed │ Link │ ┽── Car-theft kit for sale on Amazon: How web giants are 'helping criminals' buy devices that can be used to │ steal vehicles for as little as £100 │ Link │ ┽── Chinese web giant finds Windows zero-day, stays schtum on specifics │ Link │ ┽── FDA Wants Medical Devices to Have Mandatory Built-In Update Mechanisms │ Link │ ┽── Orangeworm Hackers Infect X-Ray and MRI Machines In Their Quest for Patient Data │ Link │ ┽── IoT Inspector: Princeton releases a tool to snoop on home IoT devices and figure out what they're doing │ Link │ Link │ ╰── Fails of the Week: Two Lovely Medical Leaks ─ Newborn-care website leaves database of medics wide open Link ─ Transcription Service Leaked Medical Records Link ███████████████████████████████████████████████████████████████████████████████████████████████████████████ ╭────── Topic: IoT Security ─────────────────────────────────────────────────────────────────────────────── │ ┽── What are some of the major security fails you've found in IoT? │ ┽── What are some of the challenges to IoT security as a whole? │ - Supply chain │ - End user error │ - Updating / Patching │ ┽── What are some ways that IoT vendors can address these issues and have a meaningful effect on security? │ ┽── Links ──── │ ┽── Chaining together IoT bugs │ Link │ ┽── Trackmageddon - Backdoored Chinese Spy hardware │ Link │ ┽── From 1zioup in Twitch Chat - Hardware Hacking with Bus Pirate │ Link │ ╰── In the future, we will have more hardware security chats :3 For now... .___________. | | +---------------------------------------------------+ ___________. | | /~\ | | import shodan | / __ __ /| | _ _ |_| | | api = shodan.Shodan(SHODAN_API_KEY) | / /:/ /:/ / | !________|__! | try: | / /:/ /:/ / | | | results = api.search('scada') | / /:/ /:/ / |____________! | print('Results found: %s' % results['total']) | / /:/ /:/ / | | for result in results['matches']: --+ / /:/ /:/ / | | print('IP: %s' % result['ip_str']) \ / ~~ ~~ / | | print(result['data']) ___\ |~~~~~~~~~~| | | print('') +-----------+ | :: | / | except(shodan.APIError, e): | | == | / | print('Error: %s' % e) | | :: | / +----------------------------------+ | :: | / | :: @ | / !__________!/ PREV || NEXT