{
 "id": 36997,
 "slug": "2019-09-27_bishita-un-konferensia-internashonal-di-hacker",
 "url": "https://agents.willem.com/pap/posts/2019-09-27_bishita-un-konferensia-internashonal-di-hacker/",
 "source_url": "https://willem.com/pap/2019-09-27_bishita-un-konferensia-internashonal-di-hacker/",
 "language": "pap",
 "date": "2019-09-27",
 "published": "2019-09-27T00:00:00+02:00",
 "created": "2025-06-26T22:10:09.537000+02:00",
 "updated": "2026-10-20T09:22:29.973000+02:00",
 "title": "Bishita un konferensia internashonal di hacker",
 "subtitle": "OWASP Global AppSec Amsterdam",
 "summary": "Luna aki mi a tin e suerte di bai na Global AppSec Amsterdam, un konferensia internashonal pa hacker i spesialista di siguridat. Tabatin presentashon di ex-agente di inteligensia, kazador di bounty, akadémiko i bendedó di software. Mi a siña tokante algun di e téknikanan di hacking mas nobo, mi a topa hende interesante i mi a wega algun wega retro kool. Lesa mas aki bou.",
 "topics": [
  "Amsterdam",
  "Nintendo",
  "cyber-security",
  "data",
  "hacking",
  "people",
  "work"
 ],
 "author": {
  "name": "Willem L. Middelkoop",
  "url": "https://willem.com"
 },
 "provenance": {
  "kind": "model",
  "method": "Claude Sonnet, two passes (translation, then proofreading) against a glossary; Curaçao/Bonaire (FPI) spelling, no dictionary available",
  "date": "2026-10-20",
  "reviewed_by_native_reader": false,
  "language": "pap",
  "source_language": "en"
 },
 "translations": [
  {
   "language": "en",
   "title": "Visiting an international hackers conference",
   "url": "https://agents.willem.com/en/posts/2019-09-27_visiting-an-international-hackers-conference/",
   "source_url": "https://willem.com/en/2019-09-27_visiting-an-international-hackers-conference/"
  },
  {
   "language": "nl",
   "title": "Het bezoeken van een internationale hackersconferentie",
   "url": "https://agents.willem.com/nl/posts/2019-09-27_het-bezoeken-van-een-internationale-hackersconferentie/",
   "source_url": "https://willem.com/nl/2019-09-27_het-bezoeken-van-een-internationale-hackersconferentie/"
  },
  {
   "language": "de",
   "title": "Besuch einer internationalen Hackerkonferenz",
   "url": "https://agents.willem.com/de/posts/2019-09-27_besuch-einer-internationalen-hackerkonferenz/",
   "source_url": "https://willem.com/de/2019-09-27_besuch-einer-internationalen-hackerkonferenz/"
  },
  {
   "language": "es",
   "title": "Visita a una conferencia internacional de hackers",
   "url": "https://agents.willem.com/es/posts/2019-09-27_visita-a-una-conferencia-internacional-de-hackers/",
   "source_url": "https://willem.com/es/2019-09-27_visita-a-una-conferencia-internacional-de-hackers/"
  },
  {
   "language": "fr",
   "title": "Visite d'une conférence internationale de hackers",
   "url": "https://agents.willem.com/fr/posts/2019-09-27_visite-d-une-conference-internationale-de-hackers/",
   "source_url": "https://willem.com/fr/2019-09-27_visite-d-une-conference-internationale-de-hackers/"
  },
  {
   "language": "it",
   "title": "Visita a una conferenza internazionale di hacker",
   "url": "https://agents.willem.com/it/posts/2019-09-27_visita-a-una-conferenza-internazionale-di-hacker/",
   "source_url": "https://willem.com/it/2019-09-27_visita-a-una-conferenza-internazionale-di-hacker/"
  },
  {
   "language": "pt",
   "title": "Visitar uma conferência internacional de hackers",
   "url": "https://agents.willem.com/pt/posts/2019-09-27_visitar-uma-conferencia-internacional-de-hackers/",
   "source_url": "https://willem.com/pt/2019-09-27_visitar-uma-conferencia-internacional-de-hackers/"
  },
  {
   "language": "fy",
   "title": "In ynternasjonale hackerskonferinsje besykje",
   "url": "https://agents.willem.com/fy/posts/2019-09-27_in-ynternasjonale-hackerskonferinsje-besykje/",
   "source_url": "https://willem.com/fy/2019-09-27_in-ynternasjonale-hackerskonferinsje-besykje/"
  }
 ],
 "image": "https://willem.com/global/images/cb5ea75db8ba.webp",
 "image_width": 2560,
 "images": [
  {
   "url": "https://willem.com/global/images/403811a3464b.webp",
   "description": "Global AppSec-Amsterdam",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-1.jpg"
  },
  {
   "url": "https://willem.com/global/images/8d317a6e37bb.webp",
   "description": "Keynote pa e spesialista di guera sibernétiko Chris Kubecka",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-2.jpg"
  },
  {
   "url": "https://willem.com/global/images/ad3f0bba8321.webp",
   "description": "Leshon siñá di trata ku terorista",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-3.jpg"
  },
  {
   "url": "https://willem.com/global/images/86cc76d31a28.webp",
   "description": "Kòfi i PONG riba e konsola di video-sport ku monitor CRT",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-4.jpg"
  },
  {
   "url": "https://willem.com/global/images/3ebd793dd0c1.webp",
   "description": "DuckHunt ku un Nintendo zapper original",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-5.jpg"
  },
  {
   "url": "https://willem.com/global/images/5ac85970a721.webp",
   "description": "Rekordá e tempunan ku esaki tabata bo kompiuter normal - nota e teklado IBM model M... oh boy!",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-6.jpg"
  },
  {
   "url": "https://willem.com/global/images/f7a3c90be9d0.webp",
   "description": "Persistent Client-Side XSS ta un amenasa real - pa Marius Steffens i Ben Stock",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-7.jpg"
  },
  {
   "url": "https://willem.com/global/images/aa04e0114bcd.webp",
   "description": "James Kettle tokante hacking PayPal - e a gana $38.900 den bounty",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-8.jpg"
  },
  {
   "url": "https://willem.com/global/images/3c11c554de6f.webp",
   "description": "Hacking di rendimentu riba inbershon entre 100% na e banda abou i 150.000% na e banda haltu! (Pa Jarrod Overson)",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-9.jpg"
  },
  {
   "url": "https://willem.com/global/images/d039827bdd65.webp",
   "description": "Hacking Google - Kon mi por a robá bo potrèt for di Google (Gergö Turcsányi)",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-10.jpg"
  },
  {
   "url": "https://willem.com/global/images/1053cb217048.webp",
   "description": "Global AppSec Amsterdam",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-11.jpg"
  }
 ],
 "text": "OWASP Foundation i Global AppSec Amsterdam\nE OWASP Foundation ta un organisashon sin fin di lukro ku ta dediká na krea herment, dokumentashon, foro i konferensia tokante siguridat di software. OWASP ta spesial pasobra e ta liber di presion komersial, e no ta afiliá ku ningun kompania di teknologia. Nan ta aboga pa trata siguridat di aplikashon komo un problema di hende, proseso i teknologia, pasobra e manera mas efektivo pa siguridat di aplikashon ta inkluí mehoramentu den tur e áreanan aki. Bo por haña mas tokante OWASP riba https://www.owasp.org.\nE eventonan Global AppSec ta wòrdu organisá rònt mundu. Sèptèmber aki tabatin un evento asina den mi stad natal Amsterdam. Chèk nan_kalènder (https://www.owasp.org/index.php/OWASP_Events/upcoming_events) pa haña si OWASP ta bini na bo stad.\nOra siguridat sibernétiko ta bira real: Squashing Terrorists\nUnu di e historia mas impresionante a wòrdu kontá pa Chris_Kubecka (https://en.wikipedia.org/wiki/Chris_Kubecka), un muhé ku a traha pa e Air Force di Merka i United States Space Command. E ta investigadó di siguridat di kompiuter i spesialista den guera sibernétiko.\nE ta konta tokante su trabou na e Embahada Real di Arabia Saudita na Den Haag. Ta hopi interesante pa siña kon polis lokal, e Korpo Diplomátiko i agente spesial a wòrdu involukrá pa na final prevení un atake ku bom riba e Kurhaus_na_Scheveningen (https://en.wikipedia.org/wiki/Kurhaus_(Scheveningen). Ta ora bo tende e historianan aki ku bo realisá ku no tur kos ku pasa ta sali den e notisia!\nKòfi i wega\nDespues di e keynote tokante terorista, guera sibernétiko i atake ku bom, ora a yega pa un kòfi i algun wega. Wega wega retro ta un manera divertido pa konosé otro hacker na e konferensia, pasobra bo tin algu obvio na komun pa papia dje. Esei ta útil, pasobra mayoria di e ekspertonan di IT mester di un tiki yudansa pa kibra e yelo ora ta trata di sosialisá...\nTéknikanan di hacking\nDespues di kòfi tabatin diferente seshon ku bo por a bai na dje. Mi a skohe algun basá riba mi interes personal i mi trabou.\nPersistent Client-Side XSS\nUnu di e presentashonnan ku mi a asistí tabata tokante atake riba website ku ta usa Local Storage of cookie. Ku e nòmber apropiá \"Don't trust the locals\", e presentashon di Marius_Steffens (https://cispa.saarland/people/marius.steffens/) i Ben_Stock (https://cispa.saarland/people/ben.stock/) tabata hopi interesante. Nan investigashon akadémiko a revelá ku hopi website ta vulnerabel pa amenasa ku ta haña un posishon permanente!\nHacking PayPal ku un atake HTTP desync\nDen su presentashon brilante, James_Kettle (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn) ta deskribí su investigashon tokante un di e téknikanan di hacking mas peligroso, probabel riba e web moderno: HTTP_Request_Smuggling_dor_di_desinkronisá_petishon_HTTP (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn). E téknika aki ta usa vulnerabilidat ora un website ta usa un content delivery network (CDN), un web cache of un web application firewall (WAF). Ta sorprendente pa siña tokante esaki, pa komprendé e prinsipio ku ta bou di dje i pa siña kon defendé kontra e tipo di atake aki.\nEkonomia di hacking: kuantu ta vale un kuenta hackeá?\nDen un otro presentashon interesante Jarrod_Overson (https://jarrodoverson.com) ta splika e situashon di atake_di_credential_stuffing (https://jarrodoverson.com/post/no-2fa-does-not-stop-credential-stuffing-attacks-79de7476a80a/). E tipo di atake aki ta usa nòmber di kuenta i password ku a skapa, riba diferente website, loke ta hopi eksitoso (sorprendente), pasobra hopi hende ta usa e mes password riba diferente website. E ta splika kon_pa_evitá_CAPTCHA (https://jarrodoverson.com/post/bypassing-captchas-with-headless-chrome-93f294518337/) i kon hacker ta hasi nan malware imitá kondukta humano pa fraude. E ta konkluí ku fraude ta un problema humano, no téknico, impulsá pa ekonomia simpel: ta vale e pena pa hack!\nMentalidat di hacker\nDen su presentashon, Gergö_Turcsányi (https://twitter.com/gergoturcsanyi?lang=en) ta konta kon e a bira un kazador di bounty. E ta splika ku bo no mester ta un matemátiko hopi bon pa hasi esaki, tur loke bo mester ta un poko kreatividat i tempu pa hurga rònt di tempu na tempu. Na final esaki a hiba e pa hack Google ku éksito!\nKonklushon\nBishitá Global AppSec tabata fantástiko! Ta un privilegio pa konosé otro hacker, siña di nan i tende tokante kosnan ku mayoria di biaha bo no ta mira den e notisia.\nKiko ku bo tuma ku bo for di un konferensia, semper lo tin algu ku bo no tabata spera pa siña. Ta e siñamentu inesperá aki ku ta hasi bishitá konferensia vale e trabou hopi!",
 "word_count": 702,
 "markdown_url": "https://agents.willem.com/pap/posts/2019-09-27_bishita-un-konferensia-internashonal-di-hacker/post.md"
}