Hacker News new | ask | show | jobs
by ImpulseGuided 1477 days ago
>I've read some fun research in the past about infrared communications, magnetic strips, etc. Things that are all around us but we don't really think of as attack vectors.

Any particular source that you would recommend to start learning about these vectors?
1 comments
rickostuff 1477 days ago
The resources that come to mind are actually all videos of Defcon talks by the same person (Major Malfunction aka Adam Laurie). They are pretty old now, but still interesting.

Infrared Hacking: https://www.youtube.com/watch?v=61Fo-zg-DqI

Magstripe Hacking: https://www.youtube.com/watch?v=ITihB1c3dHw

Satellite Hacking: https://www.youtube.com/watch?v=PyXZX63etog

These all hit the sweet spot for me of technologies we use all the time but don't really consider the security implications.

link
ImpulseGuided 1477 days ago
Thank you very much for linking these.

By the way, did you catch yesterday's thread on the Hack-a-Sat(ellite) CTF?

>https://news.ycombinator.com/item?id=31559117

Also congratulations on passing the OSED. Reading your 5-part report it looks like you got your money's worth.

Did you study for the OSED full-time or did you manage to complete all studying and tasks after work?

link
rickostuff 1477 days ago
Thanks! I actually took three OffSec courses last year. The first one I did was the OSWP (wifi) as a sort of warm up because it's the easiest course they offer and I knew I could knock that out pretty quick. Then I took the OSEP course which was a ton of content. Finally I took the OSED which was another ton of content and the most technical of those three. My work gave me 40 hours of in-office time to last year for training. I can't recall if I used that 40 hours for the OSEP or OSED, but I know I used it for one of those two. However, I still put in a ton of hours on my own time too. It's just a lot of content to go through. 40 hours isn't enough time for either of those courses in my opinion. Having no children (and an understanding spouse) made it easier for me to dedicate a lot of personal time on the training. I love OffSec's stuff though and recommend it to anyone who is into offensive security and wants practical training.
link