This post was originally published in French only. We translated it in 2026 so the archive reads the same in both languages. Read the original →
Thanks to everyone who took part in the special anniversary HackerSpace on March 27, 2014. The room was almost full! Lots of you came out for this "Hacking Jam Session" (and not just for the pizza and cake, I hope).
The virtual Bitcoin heist and the MtGox hack
I used Immunity Debugger and Wireshark to do a fairly simple reverse of the malicious application that was hidden in the MtGox site leak (the TibanneBackOffice.exe application). The application is detected by 60% of antivirus products as Trojan/Win32.CoinStealer.
Is Immunity Debugger open source? No, but it is free (you need to register on the site to download it).
In conclusion, the takeaway is that cryptocurrencies attract a lot of greed as their value rises. Threats of technological failure or hacking are the main operational risk for these emerging currencies.
Cloud Hacking
Several articles came out on various blogs about the possibility of DDoSing any site using the external link features in Google Drive. As far as Google is concerned, it's neither a bug nor a security vulnerability.
How do you protect your website from this type of attack? The most effective solution is to use an .htaccess configuration
SetEnvIf User-Agent FeedFetcher-Google GoAway=1
Order allow,deny
Allow from all
Deny from env=GoAway For more details on "Cloud Hacking", here's a blog worth reading: http://www.agarri.fr/blog/
Forensic 101
Someone in the room asked what "Forensics" was: well, it's simply computer investigations (see the definition here). Through a concrete, topical example, we saw together that it's very easy to find the location (and a lot of technical information) from a simple photo uploaded to a forum.
RSA Conference Mobile App #fail
Here is the publisher of the application that exposed all the personal data: QuikMobile (you can see all the other applications from this same publisher on Google Play).