-
The Hacker Congress looks like one big party,
-
but is one of the largest specialist meetings in the world.
-
This is where IT experts exchange ideas
-
about digital security and surveillance.
-
This year EVERYTHING has come into focus.
-
Millions of people use EVERYTHING every day
-
for communication, for organizing everyday life
-
and share the most intimate secrets with EVERYTHING.
-
Jane Hacker is a cyber security specialist.
-
She took a closer look at EVERYTHING.
-
It can be attacked about social engineering attacks and
-
via unauthenticated API calls to the backend.
-
The attack vector is a cross site request forgery.
-
With a timing side-channel attack
-
attack complexity can be reduced from 2^257 to 2^-2.
-
The rest is trivial.
-
EVERYTHING does not check requests properly,
-
so it opens the door to attackers.
-
Accessing data of EVERYTHING is possible
-
using a simple script.
-
Thanks to insecure software and modern computers,
-
making attacks possible in seconds.
-
The Chaos Computer Club spokesman is concerned.
-
EVERYTHING stores sensitive data of everyone
-
we were able to show that it is
-
a piece of cake to access EVERYTHING.
-
Have hackers spied dates, photos and conversations?
-
The spokesman for EVERYTHING rejects that.
-
EVERYTHING is working fine.
-
Our companies are ISO 9001 certified.
-
We follow the most modern security standards.
-
I stick to it: EVERYTHING is safe.
-
The hackers' criticism is not heard.
-
The digital world has become vulnerable to abuse.
-
How those responsible deal with it cause concern.
-
We have been warning for years:
-
EVERYTHING is developed without
-
considering minimal security standards.
-
We fall on deaf ears in economics and politics.
-
In summary: EVERYTHING is broken!
-
The scene meets for four days each year
-
between Christmas and New Years Eve.
-
Helping to shape the digital future and making it more secure:
-
the theme of the Chaos Communication Congress.
