Uploaded December 2024 | Updated September 2026, 1 week ago
Our October 2024 special hack::soho featured a talk, 'Lost in Translation: Challenges of Internationalisation,' from Colin Cassidy, IOActive Principal Security Consultant. The abstract of the talk is below!
hack::soho is a monthly event hosted at our London, UK office for the cybersecurity and hacking community to discuss all things security over food and refreshments. We welcome you to invite others in your circle to extend our collective network.
ABSTRACT:
Come and see Thrilling Terrors from Turkey, Magnificent Mongolian Monsters AND more dogs that YOU can possibly count.
This talk is an archaeological treasure hunt and collection of issues found whilst delving into obscure parts of internationalisation and Unicode. We will explore interesting characters, numbers, and language rules that take internationalisation attack move beyond traditional homoglyph attacks used as part of social engineering attacks.
A number of interesting and unusual input validation attacks, filtering bypass techniques that are available when we think beyond ASCII.
We will also cover a interesting supply chain attack, and method of hiding malicious source code within innocent looking code, and how this code can be deployed globally in a manner making it very difficult to identify.
The learned audience may use this new-found knowledge to identify new and interesting attack vectors, finding themselves thinking "I remember that presentation where that bloke went on about the Mongolian vowel separators, I think I might be able to use that here!"
Learn more by visiting our website: ioactive.com
Our October 2024 special hack::soho featured a talk, 'Lost in Translation: Challenges of Internationalisation,' from Colin Cassidy, IOActive Principal Security Consultant. The abstract of the talk is below!
hack::soho is a monthly event hosted at our London, UK office for the cybersecurity and hacking community to discuss all things security over food and refreshments. We welcome you to invite others in your circle to extend our collective network.
ABSTRACT:
Come and see Thrilling Terrors from Turkey, Magnificent Mongolian Monsters AND more dogs that YOU can possibly count.
This talk is an archaeological treasure hunt and collection of issues found whilst delving into obscure parts of internationalisation and Unicode. We will explore interesting characters, numbers, and language rules that take internationalisation attack move beyond traditional homoglyph attacks used as part of social engineering attacks.
A number of interesting and unusual input validation attacks, filtering bypass techniques that are available when we think beyond ASCII.
We will also cover a interesting supply chain attack, and method of hiding malicious source code within innocent looking code, and how this code can be deployed globally in a manner making it very difficult to identify.
The learned audience may use this new-found knowledge to identify new and interesting attack vectors, finding themselves thinking "I remember that presentation where that bloke went on about the Mongolian vowel separators, I think I might be able to use that here!"
Learn more by visiting our website: ioactive.com
