2600 Australia

"Hack to learn, not learn to hack"



Seminars - Introduction

Between April 2001 and September 2002, 2600 Australia held a number of seminars in Sydney, Australia to open up some of the experiences, talents, knowledge and research of people in the IT industry.

Seminars - Sponsors

The seminars received support from UTS, who supplied us with the room gratis. Thanks!

Seminars - Archive

September 2002
Jonno - Australian Electronic Funds Transfer networks.
Every day, bits and bytes representing billions of dollars are sent around the world. This talk looks at some of the networks and protocols used for electronic funds transfer in Australia, especially the ATM/EFTPOS/Credit Card networks and the Bulk Electronic Clearing Stream, used for direct debits and direct deposits.

Technion - Israfel: Study of a Cryptographic Application.
Technion discusses his 'lite' encryption package, along with its underlying cryptographic algorithms and a person's best hope at cracking them.

February 2002
Daniel Lewkovitz - AS/NZS 17799:2001 - The Australian Standard for Information Security.
Why it's important and why it's effective. A discussion on a standardised approach to infosec in Australian organisations and how it deals with contemporary threats.

Rendrag - Packet Radio demonstration (UTS is the Sydney PR hub)
Demonstrating and discussing the many facets of Packet radio, including AX.25 routing, BBS's, wormholes, and APRS - the amateur position reporting system, a GPS/Packet radio hybrid.

November 2001
Umar Goldeli, A 30 minute crash-course on BGP
If you're an admin of a small-medium sized TCP/IP network, you probably don't use the Border Gateway Protocol at the moment, but what if your network begins to grow and you find yourself having to deal with multiple network links between autonomous systems, some potentially costing more than others? This crash-course will give you some idea of what you're up against.

RiVaL, Data tape recovery theory
Adam has covered the topic of data recovery on fixed media such as hard drives in previous seminars, but how do the tools and practices differ when we are working with tape-based media?

larpy, An introduction to packet radio
With industry and recreational experience in this and related fields, larpy will give an introduction to packet radio communications, discussing licensing, limitations, equipment and other relevant details.

October 2001
doe, TCP and IP - Poking them where it feels good
If you're interested in TCP/IP and some of the things you can do with it using packet capture and packet construction tools such as libpcap and libnet, this session is for you. doe will introduce, discuss and demonstrate a tool he has created that, as he says "pokes TCP and IP where they feel good"

RiVaL, The Coroners Toolkit & Forensic Analysis of Unix Systems
Following up on a previous seminar that gave an overview of forensic data recovery techniques, RiVaL will introduce, discuss and demonstrate The Coroners Toolkit and related software in the contents of forensic analysis of Unix systems.

sh00ter, The internals of software on Unix (gdb, *trace, objdump etc)
The veteran of 2 previous seminars (see below), Shaun will cover the topic of working out what programs are doing when you don't (readily) have access to the source. He will demonstrate several tools that are useful for this, including strings, nm, objdump, readelf, strace, ltrace and gdb.

July 2001
Umar Goldeli, A technical introduction to Checkpoint Firewall-1 (Part 1)

Umar Goldeli, A technical introduction to Checkpoint Firewall-1 (Part 2)

Kevin Littlejohn, An overview of ISP billing systems

June 2001
Satyricon & Technion, Tripwire - filesystem integrity IDS

doe, Stephanie, Hardening OpenBSD For Multiuser Environments

RiVaL, An overview of data recovery techniques

May 2001
Satyricon, SCO Openserver and DataFlex

Technion, Linux and migration to the 2.4 kernel, with all new bells and whistles

Shaun, Up close and personal with GDB

April 2001
black-hand, Web Application Security
black-hand's talk on Web Application Security focuses on short comings of modern e-commerce sites and environments. Secure web development is often overlooked becuase of budget and time constraints, leaving holes open and exposing new avenues of exploitation.

kayjay, HP-9000 and HP-UX architecture overview
Kayjay gives an overview of HP PA-RISC (Hewlett Packard) architecture and related hardware from the old and the small, to the latest and the biggest.

Shaun, Buffer overflows from the ground up
Ever since the first use of buffer overflows to exploit systems with the Morris worms, they have been a major point of software weakness and common programmer mispractice. Shaun explains the details behind buffer overflows, what they are and how they can be used to exploit a program to escalate privileges.