Black Hat 2008: The Zen of Xen

[re21b]

Te amo..

[hck112]

I love how Youtubers are so pervert...

[hck112]

However she wants her project to profit for her own good, which is right and wrong. Those guys that hosted Black Hat con wants to debunk her project but she want to get profit back if they are failed to do so.

Well the debunk never happened because none agreed to each other. Which is sad...

[BXhjuUfK2p]

NEW;'`IPAD2';;ＦＲＥＥ:''SITES``;;­;`

ＷＷＷ.ＹＥＳＩＰＡＤ２Ｓ.ＴＫ

COPY SITE & PASTE

[Alternativerealm]

This guy acts as if hes talking to the pope. Lighten up.

[ciatechfrias]

She is simply a genius, great capability for one single person. Very interesting.

[sumcrazydood]

I think I'm in love.

[maqsad1]

I'm stunned to hear her claim that virtualization does not increase security on servers.

[hck112]

@maqsad1 wow are you living in the 80s?

[maqsad1]

@hck112 No, why do you say that?

[hck112]

@maqsad1 It's foolish to believe that virtualization increase security. Anyone can run a backdoor on your main system off the hook of your virtual system that you wouldn't even notice. In fact virtualization makes security harder to manage and detect malware.

Joanna says this in a possible way because she is the pioneer in this kind of security. In fact her Blue Pill backdoor is an example, or you want wiser example? Look at worms like Conficker and Code Red.

[maqsad1]

@hck112 Anybody can run the same backdoor on a non virtualized system which makes that argument nill. Malware detection is many times easier with virtualized systems because you can transfer VMs back and forth. Also you can make snapshots and revert back and forth to snapshots. Also, VM snapshots are extremely useful for analyzing malware.

She was probably only referring to the VT-X extensions in the CPU which could hide rootkits but that's a hardware issue not a virtualization issue.

[maqsad1]

@maqsad1 at 6:20 she even admits that it's more secure to use a VM for online banking. You really have no idea what she is talking about and not that much more about what you are talking about either.

[hck112]

@maqsad1 I love how you look at the big picture of computer security without doing research or even work with the subject matters.

[TheProphetCrew]

He is a guy!!!!!!!!!!

[nopcbinfishoilplz]

Thanks for posting this video.

[KernelThread]

Joanna is impressive, but the other two researchers with her now at ITL (Alex and Rafel) are just incredibly good researchers.. They contributed a lot lately.

[iHateToRegister]

IM SO IN LOVE!

[ProiektKarton]

@BigFatCode

The reason she's not smiling is that she isn't a native speaker so, she have to concentrate on talking in foreign language.

Just search movie of her speaking polish.

[CHICKENMAN1313]

@ProiektKarton THAT'S NOT THE REASON...SHE GARGLED A HUGE LOAD OF JIZZ BEFORE THE INTERVIEW..POLISH SASUAGE

[cyberbobpl]

how old is she? anyone knows

[nawkwan]

@cyberbobpl

I was gonna ask the same thing. She looks like she's in her late 20s/early 30s.

[BigFatCode]

Thats her,...the ultimate hacker on earth,..., i am pretty speechless, she looks so cold,...no smile, just a implied smirk. Compared to the others Russinovich, etc. she is a rock hard block of ice.

[Janspotting]

love her!

[linuxoid70]

Vietse Wenema wrote a good article a while back in 90s - you have to know how to break into your system in accordance to protect it. You need both sides of a coin in your knowledge, otherwise if you don't know how it's done one day you'll lose.

As simple as that.

[fivecougarsoz]

Marry me Joanna!

[dmix09]

holy crap i didn't expect her voice to sound like that lmao

[Peppergon]

hahaa Dr.House xD

[kleanchap]

She is very cute! However, all the tools she creates is how to break into systems. With reasonable training anyone idiot can break systems. Building and securing systems is really an art.

[wdcapl]

Unfortunatelly, YOU ARE WRONG.

Haveing such a imagination as Joanna is a really BIG GIFT!!!. Imagination is a MUST for finding bugs, blackholes and so on.....

Both creators and hackers, are the made of art ;]

[kleanchap]

Yeah right. A guy who can hotwire a car is not an automotive engineer. He is thief. He cannot build a transmission or calculate the oil viscosity for the engine.

Same rule applies for hackers. Please don't say breaking in is a BIG GIFT.

[wdcapl]

Following the binary code is as mach as difficult as creating it.

Try to play, and you see that.....

[c0rt3x86]

Really the smartest as well as cutest girl a hacker can dream of! I think i've fallen in love with her ;-)

[2ftpmarco]

@c0rt3x86 then you are old and fatt

[pantozolpantozol]

it's a trap!

[Handlr]

its a guy :D

[hmjgriffon]

I can't understand a damn thing she is saying, but then, I don't need to.

[wegwegwge]

why are you even watching these videos? do you even know what Xen is? bluepill?

[hmjgriffon]

Xen is a virtual machine monitor for IA-32 (x86, x86-64), IA-64 and PowerPC 970 architectures. Now suck my cock, everyone knows niggers like you don't know how to use computers.

[wegwegwge]

Lol you don't even know what the difference between IA-64 and IA-32 is. You copy / pasted. Now stop trolling sec conference videos!

[hmjgriffon]

32 bit processor, 64 bit processor, your a really annoying asshole you know that. I have a ton of certs and a college degree, what do you have dipshit, I don't have to prove anything to you.

[wegwegwge]

i doubt that

[ammon4photoshop]

:-) lol

[ffrreeaakk]

Now i know!

[holusion]

Damn, hot and super smart!

[oCzaRo]

I'd bang er