Friday, July 26, 2013

Cloudy Scribe Went All Delphi On Us

Not too long ago in the greater scheme of things, we wrote a little story for DefCon21. You can find it here.

[TL;DR -- Set in 2034,"In Too Deep" follows Georgia Tech student Anthony Frederickson (who'd really rather you call him 3-d33p) on an ill-fated trip to DefCon42, the world's most (in)famous hacker convention... No spoilers, but a few months before heading out to Las Vegas, Anthony discovers that his nifty new blazer not only changes colors and images in time with music and its environment, but it can also activate an 0day hack, just by being in the room with a camera...]

All three of us worked on "In Too Deep," but -- as with so many of our stories -- this really is Cloudy's baby. And it's a pretty cool idea, right? He comes up with a lot of those, and we do a lot to turn them into stories y'all wanna read... Well, it turns out Cloudy's not just prolific, he's prescient, too! Check out this article about a (now-fixed) flaw in Google Glass. When Tasky saw it, he said, "Wow, dude. You're like the Oracle of Delphi... Except, not sexy." Haters gonna hate.

But, seriously, y'all. Check this out:

Google glass' camera scans all photos it takes for QR codes so that it can make Wi-Fi and Bluetooth connections to a phone for internet access. So...

"Whenever the Glass software detects a QR code, it decodes it to see if it names a Wi-Fi network to connect to. It will do this even if the code does not occupy the whole of the frame - so a hacker could get a Glass owner to hack their own device just by standing near a printout of special QR code.

'We created a QR code that told Glass to connect to a Wi-Fi network of my choosing and started sending data to that,' Marc Rogers, principal security analyst at Lookout, told the Guardian. 'We could become the middleman, and if we needed to strip out the encryption on the connection. Then we could see the pictures or video that it's uploading. We could also direct it to a site on the web which exploits a known vulnerability in Android 4.0.4' - used by Glass - 'which hacked Glass at it browsed the page.'"
Sound familiar? Sound like something a particular Scribe might have come up with? Let's get down to brass tacks:
"Both the vulnerablity, and the way it was delivered, are unique to Glass - a consequence of it being connected," Rogers said. "I don't think anyone's hacked a device with an image before."

At least no one had done it in real life. Just another reason you might wanna keep an eye on us. ESP: Fiction or Premonition?


Thursday, July 18, 2013

Spelly Goes to the Movies: PACIFIC RIM


In a recent interview with Vanity Fair, Guillermo Del Toro said,

"If you see my movies, I celebrate imperfection. I celebrate us being incomplete. I celebrate the fact that if we want to be complete, we need each other. In every movie I make, that is the prevalent message; the message that fragility is good, imperfection is good. And I think that you learn very little from perfection in life, and you learn so much from imperfection. And monsters are the patron saints of imperfection."

Thirty seconds after watching Pacific Rim, Spelly Scribe* said (out loud, to no one in particular), "That was EXACTLY what I needed it to be. Perfect!"

If you haven't seen it yet, go. You owe it to yourself. Del Toro considers this film his baby. In the same Vanity Fair interview, he says it's a very young film. At 48, he wrote it for himself at 12 years old. He wrote it for young boys and girls, to give them role models who do great things together. That theme of incompletion and imperfection? It’s everywhere, and it’s absolutely beautiful.