Si pudieras reescribir la historia … ¿lo harías?

Nuestro querido amigo Dany Saadia (director de 3:19) está realizando una campaña de crowdfunding para poder llevar empezar su nuevo proyecto, una película de ciencia ficción sobre viajes en el tiempo (echa un vistazo al vídeo del post).

Necesitan financiación para:

Ya todos conocemos el magnífico proyecto dedicado a la seguridad de aplicaciones web OWASP (The Open Source Web Application Project). Si desarrollas aplicaciones web y no lo conoces o trabajas en el campo de seguridad y tienes que auditar aplicaciones web, ya estás tardando en añadirlo a tus favoritos.

De entre muchas de las páginas e información que nos ofrece este wiki, esta página en concreto contiene una serie de plantillas sobre temas muy específicos con los que nos vamos a encontrar mientras desarrollamos nuetra aplicación. Además también tienen un par de referencias sobre la seguridad en móviles, más algunas otras que no están aún terminadas.

Created by: www.OnlineGraduatePrograms.com

Android Security Evaluation Framework o ASEF es básicamente un dispositivo virtual de Android (AVD - Android Virtual Device) pre-configurado capaz de estudiar el comportamiento de una o varias aplicaciones Android. La idea es importar dentro de este una o varias aplicaciones de un dispositivo Android, ya sean éstas, pre-instaladas por nuestro proveedor o instaladas por nosotros mismos.

Este framework o marco de trabajo simula el ciclo completo de una aplicación y recoge toda la información que la aplicación maneja. Éste requiere intervención del usuario, es decir, el proceso sería instalar una aplicación dentro de este dispositivo virtual y jugar con dicha aplicación, ASEF monitorizará y guardará toda la actividad generada y luego basado en la colección de dichos datos aplica un serie de análisis cuyo objetivo es detectar comportamiento fuera de los normal, envío de datos personales: IMEI, IMSI, número de teléfono, etc.

Hace unos días ha visto la una nueva revista electrónica orientada al campo de la seguridad informática y dentro de éste, enfocado a la explotación de vulnerabilidades (exploits), su nombre: The Exploit Magazine.

En el primer número podemos encontrar sólo dos artículos, pero bastante extensos. Ambos tratan sobre Metasploit.

Los artículos son:

Metasploit Demystified – Introduction to the Metasploit Framework Metasploit: Part-I

Para descargarla tienes que registrarte. Aquí tienes los distintos planes de suscripción. Como ves tienes una versión gratuita, pero sólo tienes acceso a los artículos gratuitos.

Ya está disponible para descarga el DVD de la Defcon 20 celebrada el mes pasado en Las Vegas. El DVD contiene las diapositivas de las charlas, información del badge (identificación), fotos, historias, etc. Lo podéis descargar desde aquí.

También te puedes descargar el programa de este año desde este otro enlace (PDF)

Número 31 del mes de agosto ya disponible:

0x00 Tech Gyan - Malware Memory Forensics 0x01 Tool Gyan - Tamper Data 0x02 Mom's Guide - Apple iOS vulnerabilities 0x03 Legal Gyan - VARIOUS AUTHORITIES UNDER THE IT ACT 0x04 Matriux Vibhag - Matriux Ec-Centric 0x05 Poster - "Security by luck, not possible"

Fuente

NDC (Norwagian Developers Conference) 2012 se celebró el pasado mes de junio. Desde la página de la agenda puedes acceder a todas las charlas que se dieron. Las hay para todos los gustos:

Keynote: A Happy Grain of Sand Getting Agile with Scrum WebGL What? Inside Mono for Android Cut The Rope: from iOS to HTML5 to Windows 8 Decisions, decisions Ideas for efficient BDD with SpecFlow through examples Just cause it’s JavaScript, doesn’t give you a license to write rubbish Making an awesome Open-Source Project Tutorial: Enterprise development with NServiceBus Leading a Self-Organizing Team HTML5 Game Development Patterns of Mobile Application Development Windows 8 Apps with HTML5 and JavaScript: from zero to hero! MicroService Architecture Five Things You Didn’t Know About PostGresSQL Professional Software Development NuGet: Zero to DONE in no time. Tutorial: Enterprise development with NServiceBus Agile Estimating Real World NodeJS - Creating the Tekpub API Mobile, How Do I Develop Thee? Let Me Count the Ways Introduction to XAML in Windows 8/Metro Object Orientation Revisited. Simplicity and power with DCI. Roslyn… hmmmm… what? Building External DSLs for Fun and Profit Hacking .Net Applications: The Black Arts Tutorial: Enterprise development with NServiceBus Advanced Topics in Agile Planning The rise of server-side JavaScript One Service, Any Device, Any Experience: ASP.NET Web API, JSON, and Windows 8, Windows Phone, iOS, and Android Metro Design Principles Modeling Distributed Systems with NServiceBus Studio WCF Extensibility: Tapping into the calls Advances in Code Contracts for .NET Authentication & Authorization in .NET 4.5 - Claims & Tokens become the standard Model VIM for aspiring #ithipsters Scaling Agile to Work with a Distributed Team Learning to love HTML and CSS (for grumpy developers) Windows Phone 7.5 Background workers Bringing Wordfeud to WP7 and Windows 8 Crafting Wicked Domain Models Fakes, Isolating Unit Tests How we do language design at Microsoft: VB and C# Mind Control Your Computer In C#: Natural User Interfaces Through The Power Of Thought NServiceBus Hackathon User Stories for Agile Requirements The Outliers of HTML5 Not a Mobile Developer? Not a Developer! In and out in WinRT The Single Responsibility Principle. Nemerle Programming Language Continuous testing Social Clairvoyance - Data mining the social web When The Wheels Come Off Agile ASP.NET 4.5: What’s in the box? JavaScript All Over - Sticking Your Big Toe in Node.js Developing hybrid solutions with Windows Azure Service Bus, WF and BizTalk Server 2010 Clean Architecture Rediscovering JavaScript The Software Team Leader Manifesto The Process, Technology and Practice of Continuous Delivery Introduction to ASP.NET MVC with ASP.NET MVC 4 Embracing Uncertainty Microsoft’s Modern Web Stack, Starring ASP.NET Web API Learn how to build a modern browser applications using Backbone.js and Service Stack A WIF Of Security In SharePoint And Azure Design Patterns for .NET Programmers BDD: Busting the myths I Can’t Believe It’s Not Roslyn–Using Nemerle Macros to extend the C# Language Continuous Delivery story with FIFA Introduction to ASP.NET MVC with ASP.NET MVC 4 Scaling Agile Teams Securing ASP.NET Web APIs Interactive user experience: natural user interfaces Extending XAML To Overcome Pretty Much Any Limitation Commands, Queries, and Consistency Git and GitHub for Developers on Windows Reinventing software quality A Thousand deliveries a Day at AppHarbor CyberDojo - genuine coding practice Moving from Scrum to Kanban HTML5 WebSockets and Socket.IO Creating User Experiences: Unlocking the Invisible Cage Windows Azure Access Control - Outsourcing Security to the cloud What is OO? Where did it come from? Where is it going? Full-text search with Lucene and neat things you can do with it Dynamic .NET Demystified Six aspects of successful software delivery CyberDojo - genuine coding practice The surprising science behind agile leadership CSS in the 4th dimension: Not your daddy’s CSS animations Designing for Touch on Any Platform Cloud Computing: More Than Just Hosting RavenDB data modeling walkthrough Introduction to Rx Branch-per-Feature in the realm of Agile and .NET development Patterns of Effective Delivery You’re in production. Now what? Mind-blowing Apps with HTML5 Canvas ASP.NET MVC and jQuery Mobile How to think cost when programming Cloud Computing apps? Dealing with Dynamically-Typed Legacy Code Git More Done A Better Way To Learn Refactoring Ten Web Performance Tuning Tricks in 60 Minutes Script your phone on your phone with touchdevelop. How to get productive in a project in 24h Dataflow networks in .NET 4.5 .NET Rocks! Panel - The State of Agile And The Road Ahead The Cloud Security Rules Deep Design Lessons Debugging the Web with Fiddler Revealing the SQL Server Magic SignalR: Awesome in Real-Time with ASP.NET Developers: The Prima Donnas of the 21st Century Hybrid Applications with MongoDB and RDBMS MVVM Applied: From Silverlight to Windows Phone to Windows 8 What’s New in Windows Azure: 10,000 Meter Edition An architecture remake Gamifying testing by accident with pex4fun. Thinking in Functional Style using F# and (some) C# What?!? C# Could Do That?!? GOAL - Game Oriented Agile Learning Agile, Lean, and the Space Between HTML5 and CSS3: does now really mean now? Xamarin - State of the Union Hell has frozen over: writing Node.js apps for Windows Azure Beyond the compiler - going up to 11 with conventions in a statically typed language RabbitMQ Hands On F# in action: playing functional Conway’s game of life Gesture Recognition with Kinect for Windows GOAL - Game Oriented Agile Learning What Does Self-Organizing Team Really Mean? How to Destroy the Web MonoTouch - C# + iOS = Good Times Making your Application Cloud-ready Neo4j in a .NET world Evolution of the Entity Framework NDC 2012 Cage Match: NodeJS vs. ASP.NET How GitHub Works GOAL - Game Oriented Agile Learning Programmer Anarchy Accessibility doesn’t exist! Creating UX with Story Boarding Make Windows Phone games! .NET On a Diet Introduction to OWIN and Gate Clojure for the Web Async Part 1 – new feature in Visual Studio 11 for responsive programming. 10 things you can do to better lead your agile team Responsive Web Design SharePoint, Office 365, JavaScript And Azure Big time: introducing Hadoop on Azure The era of tiny REST with ASP.NET MVC Pure JavaScript Async Part 2 – deep dive into the new language feature of VB/C# You had me at Halo Metaprogramming with Nemerle From Zero to Hero - Get Social With Facebook Using Amazon S3 & CloudFront for Scalable and Secure Distribution Caring about Code Quality No more magical webservices feat. ServiceStack .NET in the physical and meta-physical world Continuous integration - char by char