Hello, welcome to the Monday, November 6th, 2017 edition of the Sansonet Storms and as Stormcast. My name is Johannes Ulrich and the name is Johnnard. I'm recording from Jacksonville, Florida.

Militious PDFs are certainly still quite common and it is important to be able to quickly triage these PDFs to figure out what they are about.

Now, DDA posted two diaries with updates to his PDF parser Python script.

The script now allows you to extract URLs that may be listed in the PDF. It also allows you to retrieve

the text part, which gives you an idea what the content of the PDF is if you would have

opened it in a PDF reader. And this weekend, we also had another edition of the Pohn to Own contest,

again at Paxack West. Now in the past

the name Pone to Own came from the attacker being allowed to essentially keep a device that

they're hacking. Since then some substantial bounties were added to the contest. The final result, well, all devices being offered for this contest have been compromised.

The Samsung Galaxy S8 was sort of the loan holdout for a while there, but eventually, yes, it was preached as well.

It took a total of 11 different bucks in six different applications to actually be able to execute code on the device, leak sensitive data, and also gain persistency after a reboot.

Apple was represented with an iPhone 7, which fell on the first day.

The iPhone 8 and 10 wasn't available early enough, I believe, in order to be part of this contest.

And OpenSSL released an update on Friday it fixes one moderate and one low severity vulnerability.

The moderate vulnerability essentially leads to a weakening of RSA and DSA private keys.

So it would essentially take less resources than it should to prudeforce these keys. So it would essentially take less resources than it should to prude for us

these keys, but according to the advisory, it still does take substantial resources that are

typically not readily available unless you're up against state-sponsored actors.

This vulnerability only affects a certain more recent Intel processor as well as AMD

Risen processors that are equipped with the BMI 1, BMI 2 and ADX extensions, which are

used by OpenSL to improve performance.

So moderate seems to be the right classification for these vulnerabilities and I don't think

...