<\/p>\n
For everyone that works in cybersecurity or follows the theme, BSides Lisbon is a mandatory event. The reason is simple: it is the major conference in Portugal about technical information security. Organized by the cybersecurity community, it is an intense event with discussions, workshops and a high interaction of the participants. So, it is easy to understand why it was a sold-out event. <\/span><\/p>\n It is a unique opportunity to know more about the latest trends and technologies, to present security related topics, share findings, collaborate and discuss the next big thing, learn with case studies and, mostly, do some networking. <\/span><\/p>\n In a new format, a two-day event, BSides Lisbon presented both International and Portuguese speakers, which clearly shows that we have a very talented pool of hackers\/security and researchers\/consultants in Portugal. They are also represented in larger security conferences in the world (i.e. DEFCON, Blackhat briefings, Chaos Communication Congress, HOPE, Summercon, etc) and they have won awards there. <\/span><\/p>\n With several interesting presentations, it was difficult to choose the best ones. After a careful analysis, I have selected two: \u201cAbusing Android In-app Billing feature thanks to a misunderstood integration\u201d, from J\u00e9r\u00e9my Matos (<\/span>https:\/\/www.bsideslisbon.org\/speakers\/#j%C3%A9r%C3%A9mymatosTalk<\/span><\/a>) and \u201cHardware Basics \u2013 why and how to break hardware\u201d, from Kieran Roberts (<\/span>https:\/\/www.bsideslisbon.org\/speakers\/#kieranrobertsTalk<\/span><\/a>).<\/span><\/p>\n J\u00e9r\u00e9my Matos shows us that is very easy to manipulate an android application with “in-app purchases” allowing free shopping. A practical demonstration with an Android game, that allows to buy credits inside the game, revealed the fragility on the payment architecture of the Android system. The worst thing is that is very difficult to prevent this type of hack. <\/span><\/p>\n Kieran Roberts chose to focus on different methods of hardware hacking. A still new kind of hack, but a growing one, considering the number of electronics that everyone buys this days. As it is a subject that needs some electrotechnology knowledge, many people give up, and several errors on this small applications, are not repaired or reported by the users. <\/span><\/p>\n Also interesting was the CTF (Capture the Flag), a computer security competition with several formats possible. The format chosen was a jeopardy-style competition involving multiple categories of problems\/questions (i.e.Reverse-engineering, network sniffing, system administration, programming, cryptanalysis, general knowledge topics, etc.). Each problem\/question has different points and difficulties. Teams attempt to earn the most points in the competition’s time frame but do not directly attack each other. The quantity of correct submissions determines the winner of the competition. On the closing ceremony, the winning team was announced and every problem was analyzed and answered, which was a great opportunity to the general audience to learn and also allowed some laughing moments. <\/span><\/p>\n <\/p>\n Additional information about the event:<\/span><\/p>\n Main page of the event:\u00a0<\/span>https:\/\/www.bsideslisbon.org\/<\/span><\/a><\/p>\n Youtube channel:\u00a0<\/span>https:\/\/www.youtube.com\/channel\/UC_M0dk4dvcBr_rFgi710D4Q\/feed<\/span><\/a><\/p>\n Facebook page:\u00a0<\/span>https:\/\/www.facebook.com\/Bsideslisbon\/<\/span><\/a><\/p>\n BSides Wiki:\u00a0<\/span>http:\/\/www.securitybsides.com\/w\/page\/12194156\/FrontPage<\/span><\/a><\/p>\n \u00a0<\/span><\/p>\n Other security conferences (next year):<\/span><\/p>\n European Security Conference (EuropeanSeC)\u00a0which is the European extension of the Annual Security Conference that has been held in Las Vegas (USA) for over a decade. Although this event is targeted at security in general (i.e. fire-fighting, workplace security, self-defence, etc) it also has some panels on IT security.<\/span><\/p>\n Talks organized by Confraria SI\/AP2SI:\u00a0<\/span>https:\/\/confraria.ap2si.org\/<\/span><\/a><\/p>\n <\/p>\n If you have any questions please send an email to\u00a0<\/span>tiago.alcobia@cross-join.com<\/span><\/a>\u00a0or\u00a0<\/span>carlos.correia@cross-join.com<\/span><\/a>“<\/span><\/p>","protected":false},"excerpt":{"rendered":" For everyone that works in cybersecurity or follows the theme, BSides Lisbon is a mandatory event. The reason is simple: it is the major conference [\u2026]<\/span><\/p>\n","protected":false},"author":2,"featured_media":959,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"rs_blank_template":"","rs_page_bg_color":"","slide_template_v7":"","footnotes":""},"categories":[53],"tags":[],"class_list":["post-958","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crossjoin"],"acf":[],"_links":{"self":[{"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/posts\/958","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/comments?post=958"}],"version-history":[{"count":0,"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/posts\/958\/revisions"}],"wp:attachment":[{"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/media?parent=958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/categories?post=958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crossjoin.com\/pt\/wp-json\/wp\/v2\/tags?post=958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}