Bridging the Gap Between Hackers and Academics

Tal Garfinkel writes "There has long been a disconnect between academic computer security and underground forums like Black Hat and Phrack. A new USENIX-sponsored workshop called WOOT (Workshop On Offensive Technologies) is looking to bridge that gap by providing a high-quality, peer-reviewed forum for attack papers, with top reviewers from the academic, open source, commercial IT, and information warfare communities. Got a great attack paper? See if it makes the cut at WOOT."

WOOT?

I'm sure the WOOT conference would have been happy to publish "How to 0wn the Internet in Your Spare Time [icir.org]," which, incidentally, has to be the best academic paper title ever.

Re:

Shouldn't that be 'How to Pwn the Internet in Your Spare Time'?

Re:WOOT?

This was 2002, before the P took the place of zero.

But I agree, if it were to be published today, that would be the "proper" title.

Re:

I just want to know what an "information warfare community" is.

Also, I'd like to know where I sign up for membership, because it _sounds_ bad-ass.

The name!

I was making fun of the name, not trying to be interesting! Mod me funny dammit! ;-)

I'm sure academics

can learn a lot from script kitties.

Kiddies

Read up [wikipedia.org].

Re:

you missed the joke, me thinks.

Creating...

...the Hackademic. Ba-dum-bum. I'm here all week.

Re:

Ackadacker.

Re:

> Ackadacker.

"It's a HONEYPOT!" [elitemrp.net]

A gap?

There has long been a disconnect between academic computer security and underground forums like Black Hat and Phrack.

Just because "academics" don't introduce themselves as such to the script kiddies, doesn't mean that we're not around.

--saint

A lot about hacking, not so much about bandwidth

Apparently the disconnect may have to do with how bandwidth works, because that site is slashdotted all to hell now! Either that, or during that long delay, they were hacking into my PC. Anyone else get the jitters when they go to a website about hacking and it just sits there and grinds in the browser?

Re:A lot about hacking, not so much about bandwidt

Wouldn't open for me either . . . I actually kept waiting for the site to come up blocked by freakin' websense. Who knew posting this on /. would just about kill their site.

Information warfare communities...

I bet they'd be interested in my design for a chair cannon.

One more exclamation down

Damn it! Now whenever I get a good drop and yell "Woot!", people will think I'm a hacker.

academics ? oh come on now.

do you think those black hatties, phrakkers etc need academics or "peer review" ? peers need to get themselves reviewed by the other.

Whats the point?

If it is so cutting edge why the hell is the conference "by invitation only, with preference given to the authors of accepted position papers/presentations". If it suppose to be academic the people with papers probably know this stuff already. Shouldn't it be for everyone? This way no one learns.

Re:Whats the point?

Contrary to what my receptionist believes "Computers" is not one skill. While one person might be especially good at manipulating Wi-Fi networks, another person might be talented at writing kernel-mode rootkits for unix. Still another person might be exceptionally experienced with IBM as400 mainframes and have written papers on the topic. It is by invitation only so that they don't get 2000 fresh out of puberty "hackers" who have never written an application in their life constantly asking them how to hack into pr0n sites and hotmail.

it is exactly the same as if a bunch of physicists got together for an invitation only conference. Its for academics.

Re:

it is exactly the same as if a bunch of physicists got together for an invitation only conference. Its for academics.

Except that academic conferences usually are not invitation only. The general public is kept out by the admission fee (which for academic

Re:

Calm down. It's sponsored by Usenix, so the accepted papers will be published online, freely accessible by everyone. Also, academic conferences exist to provide a forum for new research, that is, ideas and results that no one save the authors have seen bef

Re:

Maybe security by obscurity is still considered valid by USENIX conference organizers? :)

Yes, that is a joke. It's probably due to space limitations, or they don't want it to take on a Black Hat '07 ambiance or something.

I'd be amazed if at least the best

Re:

maybe the acdam^wacadamics want 2 keep out teh n00b lamerz coz they wunt 2 stay l33t.

its like irc. all teh good chans like #fbi-internal make u hack in, kick teh lamerz. only then do the l33t hackorz delurk an teell u teh new scripts.

hold on, therez a load

There's your problem.

This doesn't seem to have anything to do with hackers at all.

You want crackers. Two doors down.

English is not a programming language - context!

Eric S. Raymond and others like him (and you) like to pretend that there is one "right" word for people who engage technology creatively, "hackers", and another word for people who engage technology destructively, "crackers". This doesn't make you a bad p

Re:English is not a programming language - context

Besides, I can see how "hackers" would have a problem with this inevitable conversation:
[Prospective mate]/[Peer to be impress]: What do you do for a living?
'Hacker': I'm a cracker.

Re:

Human language is context-sensitive.

I agree 99 and 44/100%. My post was not meant to be flamish or trollish or, FSM-forbid, ESRish.

My post was meant to express, when I read the headline, I thought the article was about the academic, theoretical imple

Re:

I don't think I've been criticized for that before. WTF is 'Joe Sixpack' doing here anyway? Trying to find out how to empty his recycle bin?

Some academics have always been crackers

Help DDOS the next generation. Become a lecturer.

Supposedly...

If you submit to WOOT and are rejected, they will state "Paper Was Not Designated Useful"

My paper wuz rejected.

My paper, "How to Pwn n00b Sys Admins" wuz turned down by teh pier reveiw commitee bcuz they sed i had bad grammer.
teh suxors im l33t
-m

Other publications to follow suit

That's not the only party of IRC seeking academic legitimacy. Expect the following in the near future:

- Proceedings of the National Association for the Advancement of Kiddie Porn

- Transactions in Piracy

- Nigerian Finance Quarterly

- Kawaii! Anime of journal from translate poorly, for sure yes or else!

- Trends in Russian Credit Card Management

- Journal of Interactive Marketing
  Oh, wait, this already exists.

Sorry but Woot is taken

The name Woot is already taken by http://www.woot.com/ [woot.com]

Re:

Yeah, I was getting all excited about a magic box that gaps divides between over-schooled, under-experienced weenies and under-aged, over-caffeinated workers in the trenches being on sale real cheap from midnight until sell-out!

Then I found out they just $

Author is also a WOOT Program Chairs

Anyone else catch that the person posting the article is also one of the Program Chairs for the event. Guess if you want free advertising /. is the way to go! Can't wait to see when Ron J. posts the article for P0rncon here!

And may it ever be.

There has long been a disconnect between academic computer security and underground forums like Black Hat and Phrack.

And you know what?

Thank fucking God.

Thank fucking God.

Although I do think it's stretching it to call Black Hat "Underground".

- Jason Scott

The success is in the mix

Hire hackers and you have a veritable unmanageable subverted subculture working in your IT department that can well work against you instad of for (depending on how "ethic" your company is in the eyes of your hackers).

Hire academics and you'll have pseudos

Connection reset...

"There has long been a disconnect between academic computer security and underground forums..."

So in other words...connection reset by peer review?

Hi

Dear Mr. Academic,

Why is it that you have more years of education than me, yet can't get anything accomplished without calling my help desk at least twice? No, I will not teach you how to use your computer no matter how incompetent you pretend to be. The o

university

When I was in school, the CS profs played basketball and soccer tournaments with the undergrads. I guess it's good that the faculty is spending some time with the grad students playing their favorite extracurricular activies.

Seriously, it always seemed

It didn't say...

When I first read the article I thought it said UNISEX, not USENIX. Guess I found out where my mind has been for the past few days.