Archive for July 17, 2017

Hack in Paris 2017 Wrap-up

Posted in Commentary with tags on July 17, 2017 by itnerd
Hack in Paris 7th edition at the Hotel Newport Bay Club Convention Center just finished. In this amazing place, the event has been driven by three days of trainings and two days of talks in English.

Dedicated to IT security and hacking experts, this yearly “Rendez-vous” brought 600 people together, a new record for Hack in Paris.

From June 19th to 21st, six international experts taught attendees some of their theoretical & practical knowledge:

  • Corelan Advanced, with Peter Van Eeckhoutte
  • Offensive Mobile Application Exploitation, with Prateek Gianchandani
  • Practical IoT Hacking, with Aseem Jakhar
  • Developing Burp Suite Extensions, with Luca Carettoni
  • Practical SAP Netweaver ABAP Pentest, with Yvan Genuer
  • Smart Lockpicking, Hands-on exploiting IoT devices, with Slawomir Jasek

The talks took place on June 22nd and 23rd. Jayson E. Street started the show, introducing physical pentesting and international IT security. Then, speakers followed him during 15 conferences. Some dealt with technical presentations, exposing IoT (Internet of Things) failures, or how to secure as much as possible different networks, web apps, databases… Some other chose to talk about the social aspects of hacking & hackers in our present world.

Once again, Winn Schwartau ran a debate, this time dealing with Hackers role facing the Media, Truth, Trust and Alternative facts. Michael Masucci, Hollywood producer, Deral Heiland, IT researcher, Annie Machon British whistleblower and Winn Schwartau involved the public and debated on this subject two hours long.

The week ended with La Nuit du Hack on June 24th, confunded by Sysdream and HZV. This event was a great success too, recording more than 2 000 participants for its 15th edition.

Now that the event is closed, Hack in Paris team wants to thank all of the participants, trainers, speakers and the Convention Center’s staff who made of this event a unique and rewarding experience for everyone. Sysdream also thanks its sponsors : EC-Council, Checkmarx, Yes We Hack and Beyond Security.

If you did not attend the event or want to access the talks replays, check out our Youtube playlist: goo.gl/X8FfnF

The slides are also available at www.hackinparis.com

Leave a comment »

Concur Makes Three Announcements At GBTA 2017

Posted in Commentary with tags on July 17, 2017 by itnerd

This weekend Concur announced a number of new offerings to improve corporate travel at the annual GBTA Convention 2017. Here is a short summary of announcements:

  • Concur announced an expanded partnership with Airbnb. Corporate travellers will be able to search for and book Airbnb listings embedded within the Concur Travel platform. Itineraries and e-receipts will also sync with Concur Expense.  This is the first time Airbnb listings will appear on a corporate travel partner’s platform.
  • Concur announced the availability of Concur Locate and Active Monitoring, which gives businesses the tools they need fulfill their duty of care and find, inform and communicate vital information with employees who are travelling in minutes during times of crisis and uncertainty.
  • Concur Travel has new features that reduce time and costs associated with booking and managing travel. The features include new TripLink supplier connections and increased adoption, virtual cards for hotel bookings and branded fares to offer low-cost airfares bundled with select travel perks.

Concur Locate and Active Monitoring is available now. The Airbnb offerings and new Concur Travel features will become available in the coming months.

Leave a comment »

#Fail: Ashley Madison Victims Get Lame Offer To Make Data Breach Issues Go Away

Posted in Commentary with tags on July 17, 2017 by itnerd

The Ashley Madison hack and data breach was a huge story in 2015. A total of 37 million people were outed as cheaters and lawsuits started to fly. Not to mention the damage to careers and relationships. Now Ruby Corp who owns Ashley Madison is serving up $11.8 million to make this go away. But let’s do some math here. There are 37 million victims and there’s a pot of $11.8 in play. That works out to about $2 a person.

#Fail

Now to be fair, victims who have suffered what the company terms a “valid loss” will be eligible for a compensation payout of up to $3,500. But let’s think about this. Considering that this company’s beyond half-assed IT security literally ruined lives, these dollar amounts seem incredibly lame to me.

Seeing that according to the press release that I linked to above that a court has to sign off on this, I for one am hoping that this deal is not approved by said court and people affected by said half-assed IT security are able to make this company pay and pay big time. It won’t fix what happened in their lives, but it will send a message that companies of all stripes need to be completely and totally responsible for customer data or very bad things will happen to them.

 

Leave a comment »