Kiwicon

Kiwicon is an all-ages computer security conference (Hacker con) organised by members of the hacker and computer security community of New Zealand.

Kiwicon is back for 2008 and will be held on the 27th and 28th of September, once again at Victoria University of Wellington.

Kiwicon 2k7 was held during the weekend of 17-18th November 2007 at Victoria University of Wellington. Approximately 200 people attended the two-day event in 2007, many traveling from near and far to attend. Kiwicon provides a venue for hackers and computer security professionals as well as other interested parties to get together and share knowledge, war stories and to consume alcohol. In the spirits of DEF CON and Ruxcon, Kiwicon intends to bring together the best and brightest from academia, the computer security industry, the hacker underground, those who manage critical infrastructure and law enforcement.

2007 Seminars

aturday

* Peter Gutmann: Bugs in the Wetware: The Psychology of Computer Insecurity (Keynote presentation)
* Bogan: Bugs = Leverage
* Flagg: Busting your IDS/IPS
* hntr: Here be dragons: Busting non-IP networks
* Tmasky: Crackstation (Playstation 3/Cell running Linux for password cracking)
* oddy: What Pwnd All Datas? (wpad)
* Brett Moore: A Bag Full of 0day

unday

* Graeme Neilson: ScanBerry: Advanced Attacks via a Trojaned Blackberry
* Nick Von Dadelszen: Cracking a Fat: Breaking Thick Client Software
* Joshua: Information Warfare and New Perspectives for Smaller Nations
* Cartel: Out of the loop: Plausible Deniability in the Age of Mandatory Key Disclosure
* thoth: Hypervisor Malware [http://www.cse.unsw.edu.au/~fdavies/ The Flying Spaghetti Hypervisor]
* Mark Keegan: Better than the regular Script Kiddie: [http://w3af.sourceforge.net w3af]
* Narcosis: How Secret is SECRET?
* Delf: Your Kiosk, My Kiosk (vulnerabilities in public Internet kiosks)
* metlstorm: Old School is Good School: Busting Carrier Grade Ethernet Networks

Lightning Talks

* metlstorm: SSH-Jack Redux: And Jack0rs For All...
* shammah: Dark Elevator Tool Release
* Joshua: Advances in anti-forensics: in-memory distributed hidden storage
* alhazred: One Fat Fuck vs Foucault: Game theoretic approaches to gaming social networks

Media Coverage

On August 29th 2007, persons associated with kiwicon appeared to change the NZ herald site with a simple XSS attack. No actual pages on the server were altered. This event was reported on the [http://www.stuff.co.nz/4182914a28.html rival newspaper site stuff.co.nz]

More Media Coverage

Beau Butler (Oddy)'s wpad talk garnered extensive media coverage due to its public disclosure of a years-old supposedly-fixed security flaw in major browsers and operating systems:
* [http://computerworld.co.nz/news.nsf/scrt/198C4FC55E80E896CC25739F001ABBAD Kiwicon demo exposes serious Microsoft security flaw]
* [http://www.techtree.com/India/News/Microsoft_Fixing_Fixed_Flaw/551-84735-582.html Microsoft Fixing "Fixed" Flaw]
* [http://www.virusbtn.com/news/2007/11_26.xml Five-year-old design flaw found in all Windows versions]
* [http://www.stuff.co.nz/4288700a28.html Ethical Hacker Keeps Microsoft Busy]
* [http://www.smh.com.au/news/technology/flaw-leaves-microsoft-looking-like-a-turkey/2007/11/23/1195975914416.html Flaw leaves Microsoft looking like a turkey]
* [http://www.securitypronews.com/news/securitynews/spn-45-20071126KiwiFindsRipeFlawInWindows.html Kiwi Finds Ripe Flaw In Windows]
* [http://www.theinquirer.net/gb/inquirer/news/2007/11/26/five-old-windows-bug-resurfaces Five year old Windows bug resurfaces]

Nick Breese's Crackstation talk on Playstation 3 password cracking also generated extensive media coverage:
* [http://news.bbc.co.uk/1/hi/technology/7118997.stm PlayStation speeds password probe]
* [http://www.pcworld.com/printable/article/id,140064/printable.html Hacker Uses Sony PlayStation 3 to Crack Passwords]

External links

* [http://www.kiwicon.org Official website]
* [http://searchsecurity.techtarget.com.au/topics/article.asp?DocID=6100986 Article about kiwicon in techtarget]
* [http://www.smh.com.au/news/security/hackers-do-the-haka/2007/08/20/1187462175403.html Kiwicon article in Sydney Morning Herald]