James Pavur

Security Researcher

[James Pavur @JamesPavur]

Can't make any guarantees as to uptime or how long I can keep this up: challenge is back up on https://t.co/KvCQtsOcw7 for the next few days. No prize. Treat server as if toxic / use at own risk.

Confirmed that @killa 's POC replicates here. It may take a few tries.

[James Pavur @JamesPavur]

@Coins There is something up and it's my fault!

The winner got the key several hours before and the reached out to me over email to let me know I gave the key for the parent wallet instead of the sub-wallet with the funds as the flag :(

[James Pavur @JamesPavur]

@killa Tested the POC on the server (which will be back online for people to play around with soon) and it works like a charm:

[James Pavur @JamesPavur]

Congrats to @killa who solved https://t.co/a4rI7FPsln hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF).

Check out their awesome writeup here: https://t.co/vnui8sJ5mj

[James Pavur @JamesPavur]

@killa Full CTF source code here: https://t.co/ZwkNWwi5yU

Definitely wasn't prepared for this level of attention, but appreciate folks' patience with uptime/reliability/exploitability etc.

Looking forward to hosting another sometime!

[James Pavur @JamesPavur]

Also, shoutout to @LiveOverflow who helped @killa get in touch with me with the flag.

[James Pavur @JamesPavur]

Thanks for the fun weekend everyone and keep an eye out on the domain! Now that I have it I might put up something new there from time to time :)

[James Pavur @JamesPavur]

Sounds like someone has solved https://t.co/a4rI7FQ0aV! More info soon :)

[James Pavur @JamesPavur]

@SDNsmartcity Yep! It's me. Can post proof later :)

[Johannes Willbold @jwillbold]

Deadline Extension for @SpaceSecNDSS! We are extending the submission deadline to * Jan 13 (firm) *! Only 1 week left to submit your paper on the security/privacy of space and satellite systems!

Join us at @NDSSSymposium in San Diego with our keynote speaker @JamesPavur!

[James Pavur @JamesPavur]

The video from my DC30 brief on satellite radio attacks has just been released! You can check it out here if you weren't able to make it in person but are interested in space cyber stuff:

https://t.co/3Wdnali01Y

[James Pavur @JamesPavur]

Excited to share that I'll be giving a brief at @defcon next month: "Space Jam: Exploring Radio Frequency Attacks in Outer Space", Track 1, 2PM. After that, I'll be hanging around the @SecureAerospace village with @DefenseDigital - stop by to say hi!

https://t.co/8CAx4ZRmn5

[James Pavur @JamesPavur]

@popo_junior20 Great question! The short answer is that I could never get the Wireshark dissector to work on the low-quality stream captures from my DVB-S2 card. I think someone better at Lua might be able to close that loop though!

[James Pavur @JamesPavur]

Excited to share that our survey paper "Building a launchpad for satellite cyber-security research: lessons from 60 years of spaceflight" has been published in @OUPAcademic 's Journal of Cybersecurity. Check it out here:

https://t.co/GfA1GJGCxK

[James Pavur @JamesPavur]

@francoisquiquet For sure! Perhaps I'll make a blog post when I get the chance. The very short answer is that I'm using (https://t.co/19SXLNetYK) to simulate a DVB-S2 signal and tsduck (https://t.co/v1LO2KhsSA) + ffmpeg to craft MPEG-TS streams to go inside it.

[James Pavur @JamesPavur]

Thanks to everyone who came to the Arsenal Lab on SATCOMs hacking at Black Hat EU today! I'm running the lab once more tomorrow starting at 2PM. If you've come to my Twitter looking for a copy of the lab handouts, you can find them here: https://t.co/2JWtUI3BH8

[James Pavur @JamesPavur]

Excited to share that my PhD. thesis "Securing New Space: On Satellite Cyber-Security" has been deposited in the Oxford Research Archive. Check it out here if you're interested: https://t.co/Oe0SaFwSio

[James Pavur @JamesPavur]

Looking forward to running some Arsenal Lab sessions at Black Hat Europe next month. If you'll be there and want some hands-on experience messing with satellite radio signals, definitely swing by: https://t.co/MKU6LV1kC8

#blackhat #BHEU @BlackHatEvents

[James Pavur @JamesPavur]

Looking forward to presenting (remotely) at @defcon 29's Aerospace Village (@SecureAerospace) next month. My talk's all about modeling what an evil CubeSat might try to do during launch vehicle separation. Full event schedule here: https://t.co/JrYNcesMiI

[James Pavur @JamesPavur]

A copy of the paper, "On Detecting Deception in Space Situational Awareness" should be available through Oxford's institutional archive (in addition to the ACM repository) shortly after the conference: https://t.co/Cya41RKubL

[James Pavur @JamesPavur]

If someone tells you a spy satellite is a piece of space debris, and you can't afford a space surveillance system, how might you catch them? Looking forward to presenting our paper exploring questions like this at #acm #asiaccs next week: https://t.co/hz9mc70wkB