ShmooCon 2006
Pedram Amini (pedram) <pedramaminigmailcom> Monday, January 16 2006 11:31.22 CST


Recently got back from the very enjoyable ShmooCon 2006. I really like the setting and crowd of this con. Got to catch up with some OpenRCE regulars / admins including Chris Eagle, Peter Silberman, Joe Stewart, Greg Hoglund, Jamie Butler and the like.

Of the various talks I caught I especially enjoyed Adrian Marinescu's on the security / performance enhancements of the Windows Vista Heap. Adrian is a Microsoft Windows kernel group development lead. It's an interesting move to me that Microsoft would proactively share such low level information. A smart move in my opinion as if they don't, someone (like Matt Conover & Oded Horovitz) will at some point anyway. I was especially impressed by the fact that Adrian credited Conover for learning a new windows heap exploit vector from him (the Lookaside technique, which has since been resolved).

For those of you who caught Chris Eagle and I's BoF on reverse engineering. The (brief) slide-set we used is available here:

ShmooCon 2005 Amini-Eagle.pdf

Many thanks to Dan Moniz and Greg Hoglund for their active participation and help "breaking the ice".

Comments
Posted: Wednesday, December 31 1969 18:00.00 CST