s7ephen

Browsing Archives of Author »Stephen Ridley«

Upcoming for 2013

April 26, 2013

We haven’t done posts in a while. We’ve had quite few in the magazine for some time now, but have done a poor job of doing updates. We’ve been really busy lately but wanted to let folks know what we plan to do for more of 2013. So far this year we taught ARM Exploitation […]

ARM Exploitation Tokyo: Hacking in the Land of the Rising Sun

February 3, 2013

In mid 2012 we received an email from several folks in Japan asking us if we intended to bring our “ARM Exploitation” course from Blackhat Las Vegas 2012 to Asia. We had originally planned to do our class elsewhere in Asia but our work schedules conflicted pretty dramatically and we were unable to make it happen. But Japan in the New Year […]

A day trip to Source Seattle 2012

September 13, 2012

About a month ago we gave a high-level talk about the threats to mobile devices at Source Seattle 2012. We talked (in the “Business Track”) about our experience developing the Practical ARM Exploitation course and also spoke anecdotally about our experiences reverse engineering and exploiting software on mobile devices and embedded systems. The talk was […]

BlackHat Las Vegas 2012

August 11, 2012

“The sky above Las Vegas was the color of television, tuned to a dead channel…“ Ok it wasn’t. In fact it was bright, beautiful, sunny and hot as sh*t. Neal Stephenson did the keynote at BlackHat this year, so we felt we should sling the obligatory cyberpunk reference into this post….and because I (Ridley) am writing […]

Teaming Up With Trail of Bits

August 8, 2012

Following our Blackhat 2012 training and talk we received a bunch of emails, tweets, and IMs asking one thing: “When are you going to offer this to the public again? I couldn’t make it to the BlackHat course.” With the exception of CanSecWest and BlackHat we’ve mostly been giving this (and customized versions of similar […]

Beans on NPR

July 28, 2012

Following our talk at Blackhat 2012 entitled “Practical ARM Exploitation”, we were honored to be asked to participate in a BlackHat press conference. After getting briefed by the Media Coordinator and Vincenzo Iozzo we summarized our talk and training in the simplest of terms to a room of reporters and journalists. After the press conference […]

SecuInside 2012 (Seoul Korea)

July 9, 2012

Uhm….so apparently CTFs have REALLY blown up! As a founding member of Kenshoto, I remember how we pushed the envelope for CTFs (building automatic scoring systems, *actual* challenges, etc.) I was also the VJ for our first two years running, lugging my 500 DVDs with me to play my favorite little esoteric cyberpunk clips from […]

Bustication Everywhere: A CanSecWest 2012 Retrospective

March 11, 2012

Another conference has come and gone. Sometimes it seems that the annual conference schedule is the metronome to which the Infosec world paces itself. The coming and going of conferences is the only consistency in this idiosyncratic industry full of neurosis and theatrics. This year’s CanSecWest held true to form and was the stage for […]

A Lackluster ‘Hack Cluster’: ARM Exploitation Lab Preview

March 1, 2012

As we have announced in other blogposts we’ve been researching mobile platforms quite a bit (specifically those that use the ARM microprocessor). We compiled all of our notes on ARM reverse engineering and ARM exploitation and built a course called “Practical ARM Exploitation” that we will be publicly debuting this coming week at CanSecWest. The […]

Practical ARM Exploitation: A New Training

January 12, 2012

So….we heard Dino & Alex and Aaron & Zef were doing some blingin new trainings. So we felt we had to keep up with the rest of the New York Krew and do one….Ok, not really. We (the two Stephens) have spent a bunch of head-down time recently doing embedded research (as we mentioned in the […]