I was in a conversation with a friend of mine after fiddling with Gbridge…
Every time one accesses the cloud in any way, there are tracks. The question is really, who do you want to trust to guard your data? Everything is moving to the cloud (or already moved) and you have to trust somebody, Right?
Then another question emerges. How secure is the language of trust in the first place?
Well, that is a question with a long answer, but the work has been done for you.
Mark Dowd, David Dewey and Ryan Smith made an illuminating discussion out of it in previous years in the media and on the circuit of conventions. I, for one, look forward to what they have to say about the situation this year.
Right click and save target (or link) as, here.
Unfortunately, as expected, they killed that link.
See: HustleLabs Attacking Interoperability : The Language of Trust,
Mark Dowd : Attacking Interoperability
Here is a killbit bypass example from Hustle Labs.
Again I say this is an ecosystem that has been/is evolving and the attack surface is vast and dynamic. Probably faster than you update or patch.
No Comments