Los Angeles Previous Presentations 2009, 2010 - Revision history

Kelly FitzGerald: moved Los Angeles Previous Presentations Mega Archive to Los Angeles Previous Presentations 2009, 2010

2011-03-08T22:13:13Z

moved Los Angeles Previous Presentations Mega Archive to Los Angeles Previous Presentations 2009, 2010

Kelly FitzGerald: moved Los Angeles Previous Presentations to Los Angeles Previous Presentations Mega Archive: Breaking this down by year(i.e. 2009, 2010, 2011) due to the OWASP Wiki's lack of ability to deal with pages over 32 megs

2011-03-08T22:12:12Z

moved Los Angeles Previous Presentations to Los Angeles Previous Presentations Mega Archive: Breaking this down by year(i.e. 2009, 2010, 2011) due to the OWASP Wiki's lack of ability to deal with pages over 32 megs

Kelly FitzGerald: Adding Rational as the Dinner sponser.

2011-02-18T20:25:27Z

Adding Rational as the Dinner sponser.

Kelly FitzGerald: Adding the January talk. The wiki editor is having major problems with the size of this file. We need to find a better way to reduce page size.

2011-02-18T20:23:19Z

Adding the January talk. The wiki editor is having major problems with the size of this file. We need to find a better way to reduce page size.

Kelly FitzGerald: Adding Samy to the list of archives

2010-08-10T19:03:44Z

Adding Samy to the list of archives

Show changes

Kelly FitzGerald: Adding last months presentation to the archive

2010-06-30T16:48:14Z

Adding last months presentation to the archive

Show changes

Tin Zaw: /* Wednesday, April 21st, 2010 7:30PM */

2010-05-12T04:40:52Z

‎Wednesday, April 21st, 2010 7:30PM

Tin Zaw: /* Wednesday, April 21st, 2010 7:30PM */

2010-05-12T04:40:28Z

‎Wednesday, April 21st, 2010 7:30PM

Tin Zaw: /* Previous Presentations */

2010-05-12T04:40:00Z

‎Previous Presentations

Tin Zaw: /* Wednesday, March 17th, 2010 7:30PM */

2010-04-07T20:42:19Z

‎Wednesday, March 17th, 2010 7:30PM

@@ Line 15: / Line 15: @@
 Evercookie accomplishes this by storing the cookie data in several types of storage mechanisms that are available on the local browser. Additionally, if evercookie has found the user has removed any of the types of cookies in question, it recreates them using each mechanism available.
-You can read more about Samy and Evercookie at[http://samy.pl/evercookie '''http://samy.pl/evercookie/''']
+You can read more about Samy and Evercookie at [http://samy.pl/evercookie '''http://samy.pl/evercookie/''']
-'''Speaker: <br>'''Samy Kamkar is best known for the Samy worm, the first XSS worm, infecting over one million users on MySpace in less than 24 hours. A co-founder of Fonality, Inc., an IP PBX company, Samy previously led the development of all toplevel domain name server software and systems for Global Domains International (.ws), and worked for Penn State University developing AI-based psychometric personality assessment software. In the past 10 years, Samy has focused on evolutionary and genetic algorithmic software development, Voice over IP software development, automated security and vulnerability research in network security, reverse engineering, and network gaming. When not strapped behind the Matrix, Samy can be found stunt driving, getting involved in local community service projects, and continuing his focus on staying out of jail. <br><br><br><br>
+'''Speaker: <br>'''Samy Kamkar is best known for the Samy worm, the first XSS worm, infecting over one million users on MySpace in less than 24 hours. A co-founder of Fonality, Inc., an IP PBX company, Samy previously led the development of all toplevel domain name server software and systems for Global Domains International (.ws), and worked for Penn State University developing AI-based psychometric personality assessment software. In the past 10 years, Samy has focused on evolutionary and genetic algorithmic software development, Voice over IP software development, automated security and vulnerability research in network security, reverse engineering, and network gaming. When not strapped behind the Matrix, Samy can be found stunt driving, getting involved in local community service projects, and continuing his focus on staying out of jail. <br><br>'''Sponser:<br>'''IBM&nbsp;Rational Software<br>http://www-01.ibm.com/software/rational/<br><br>
 == <span style="display: none" id="1298059442687S">&nbsp;</span>'''Wednesday, July 21, 2011 7:00 PM'''<br> ==

@@ Line 1: / Line 1: @@
 = &nbsp;Previous Presentations  =
-== '''Wednesday, July 21, 2010 7:30PM'''  ==
+== <span style="display: none" id="1298059442687S">&nbsp;</span>'''Wednesday, January 26, 2011 7:00 PM'''  ==
-*'''<span style="display: none" id="1281462225310S">&nbsp;</span>How I Met Your Girlfriend: Entirely New Classes of Web Attacks'''
+*'''Evercookie: The Persistent Cookie'''
-<pre>'''Meeting Location
 Symantec Corporation
 Corporate Pointe
 Culver City, CA 90230</pre>
-'''Description:<br>'''This includes using HTML5 client-side XSS (without XSS hitting the server!), and my newly discovered attacks on PHP session hijacking and random numbers (accurately guessing PHP session cookies), browser protocol confusion (turning a browser into an SMTP server), firewall and NAT penetration via Javascript (turning your router against you), remote iPhone Google Maps hijacking (iPhone penetration combined with HTTP man-in-the-middle), extracting extremely accurate geolocation information from a web browser (not using IP geolocation), and more.
+Description:<br>This includes using HTML5 client-side XSS (without XSS hitting the server!), and my newly discovered attacks on PHP session hijacking and random numbers (accurately guessing PHP session cookies), browser protocol confusion (turning a browser into an SMTP server), firewall and NAT penetration via Javascript (turning your router against you), remote iPhone Google Maps hijacking (iPhone penetration combined with HTTP man-in-the-middle), extracting extremely accurate geolocation information from a web browser (not using IP geolocation), and more.
 <br>
-'''Speaker: '''Samy Kamkar is best known for the Samy worm, the first XSS worm, infecting over one million users on MySpace in less than 24 hours. A co-founder of Fonality, Inc., an IP PBX company, Samy previously led the development of all top-level domain name server software and systems for Global Domains International (.ws), and worked for Penn State University developing AI-based psychometric personality assessment software.
+Speaker: Samy Kamkar is best known for the Samy worm, the first XSS worm, infecting over one million users on MySpace in less than 24 hours. A co-founder of Fonality, Inc., an IP PBX company, Samy previously led the development of all top-level domain name server software and systems for Global Domains International (.ws), and worked for Penn State University developing AI-based psychometric personality assessment software.
 &nbsp;In the past 10 years, Samy has focused on evolutionary and genetic algorithmic software development, Voice over IP software development, automated security and vulnerability research in network security, reverse engineering, and network gaming. When not strapped behind the Matrix, Samy can be found stunt driving, getting involved in local community service projects, and continuing his focus on staying out of jail.
@@ Line 20: / Line 38: @@
 <br>Dinner Sponser: Citrix Systems<br>[[Image:Citrix Picture.jpg|80x80px|http://lacitrix.com]]<br>
-== '''&nbsp; Wednesday, June 09, 2010 7:30PM'''<br> ==
+== &nbsp; Wednesday, June 09, 2010 7:30PM<br> ==
 *Security Assertion Markup Language (SAML), Shibboleth Single SignOn System, and Shibboleth's role at University of Southern California
@@ Line 34: / Line 52: @@
 NOTE: We are having this month meeting on the second Wednesday, instead of the regular third Wednesday, to avoid conflict with ISSA Summit scheduled on June 16. You can still register for the summit at the ISSA LA website (http://www.issa-la.org/Default.aspx?id=1088). <br>
-== '''Wednesday, April 21st, 2010 7:30PM''' ==
+== Wednesday, April 21st, 2010 7:30PM  ==
 *The intersection of social and technical attacks in Web 2.0 applications by Mike Bailey and Mike Murray
@@ Line 53: / Line 71: @@
 Mike Murray has spent his entire career in information security and currently leads the delivery arm of MAD Security (MADSecInc.com). Mike is a co-founder of InfoSecLeaders.com where he writes and talks about the skills and strategies for building a long-term career in information security. Mike's on security careers have been seen at major conferences like RSA and Defcon.
-== '''Wednesday, March 17th, 2010 7:30PM''' ==
+== Wednesday, March 17th, 2010 7:30PM  ==
 *Mike Schrenk, author of "Webbots, Spiders, and Screen Scrapers"
@@ Line 74: / Line 92: @@
 Last August, Mike made his fourth speaking appearance at the DEFCON computer hacking conference. Mike lives in sunny Las Vegas, Nevada (USA). You can contact him at http://www.schrenk.com or follow him on Twitter [http://twitter.com/mgschrenk @mgschrenk].
-== '''&nbsp; Wednesday, February 24th, 2010 7:00PM''' ==
+== &nbsp; Wednesday, February 24th, 2010 7:00PM  ==
 *Cloud Computing Security: Raining on the Trendy New Parade
@@ Line 95: / Line 113: @@
 He holds a BS in Electrical Engineering and Computer Science from the University of California, Berkeley.
-== &nbsp; '''Wednesday, January 20th, 2010 7:30PM''' ==
+== &nbsp; Wednesday, January 20th, 2010 7:30PM  ==
 *Do VLANs allow for good application security?
@@ Line 115: / Line 133: @@
 He is also an active participant in the local Minneapolis security groups both as a board member of OWASP MSP and DC612. His roots and experience come from working for a large enterprise banks, designing and managing enterprise security systems. In the more recent years he has been working as an Information Security Consultant to review the security and architecture of information computing environments.
-== '''&nbsp; Wednesday, December 16th, 2009 7:30PM''' ==
+== &nbsp; Wednesday, December 16th, 2009 7:30PM  ==
 *[http://www.owasp.org/images/b/bc/Sutton_-_Pulling_The_Plug-Security_Risks_in_Next_Generation_Offline_Web_Apps_-_OWASP_LA_OC.pdf Pulling the Plug: Security Risks in the Next Generation of Offline Web Applications]
@@ Line 129: / Line 147: @@
 <br>
-== '''&nbsp; Wednesday, November 18th, 2009 7:30PM''' ==
+== &nbsp; Wednesday, November 18th, 2009 7:30PM  ==
 *[http://www.owasp.org/images/b/bc/Watching_software_run_11.18.09.pptx Watching Software Run with Brian Chess, Fortify Founder and Chief Scientist]

@@ Line 8: / Line 8: @@
     Culver City, CA 90230
 <br>
 <b>Topic: The intersection of social and technical attacks in Web 2.0 applications

@@ Line 8: / Line 8: @@
     Culver City, CA 90230
 <br>
-   <b>Please RSVP via [http://owaspla.eventbrite.com Eventbrite].</b>
 <b>Topic: The intersection of social and technical attacks in Web 2.0 applications

@@ Line 1: / Line 1: @@
 = Previous Presentations =
 == Wednesday, March 17th, 2010 7:30PM ==
 * <b>Mike Schrenk, author of "Webbots, Spiders, and Screen Scrapers"</b>

← Older revision	Revision as of 22:13, 8 March 2011
(No difference)

← Older revision	Revision as of 22:12, 8 March 2011
(No difference)