Re:Teen Becomes First Hacker to Earn $1M Through Bug Bounties
by mettamage on Sunday March 03, 2019 @01:47AM
(#19293130)
I followed a couple of courses at the VU University Amsterdam. I'll tell you what I've learned about security, it gives you a couple of terms to type into a search engine at least.
There are 3 courses they give for it:
1) Computer & Network Security
2) Binary and Malware Analysis
3) Hardware Security
The lower level it gets, the better they are at it. Each course costs 1200 euro's for non-EU students. I recommend it.
I learned about (in random order):
- Rowhammer (I hope memory vendors will fix this)
- Cache attacks (I hope Intel will fix this)
- Stack smashing
- String buffer trickery in C
- Spoofing IPs
- DNS cache poisoning
- Using machine learning to fingerprint things
- Dictionary attacks for password cracking
- Portscanning
- Cold boot attacks
- Spotting vulnerabilities in C code
- Reverse engineering binaries with IDA Pro and knowing x86 and x64 assembly
- Taint analysis
- Instrumenting binaries with PIN
- Using SMT solvers to crack passwords in binaries
There are 3 courses they give for it:
1) Computer & Network Security
2) Binary and Malware Analysis
3) Hardware Security
The lower level it gets, the better they are at it. Each course costs 1200 euro's for non-EU students. I recommend it.
I learned about (in random order):
- Rowhammer (I hope memory vendors will fix this)
- Cache attacks (I hope Intel will fix this)
- Stack smashing
- String buffer trickery in C
- Spoofing IPs
- DNS cache poisoning
- Using machine learning to fingerprint things
- Dictionary attacks for password cracking
- Portscanning
- Cold boot attacks
- Spotting vulnerabilities in C code
- Reverse engineering binaries with IDA Pro and knowing x86 and x64 assembly
- Taint analysis
- Instrumenting binaries with PIN
- Using SMT solvers to crack passwords in binaries