nohl

In multiple instances Nohl and his team found misconfigured containers that allowed them to do just this.

Remember, this was in the same year Karsten Nohl gave his BlackHat presentation on cracking A5/1.

Didn't Karsten Nohl give a presentation about cracking A5/1?

Not sure where Nohl is getting his estimations from.

For anyone interested in the subject I recommend watching the presentation [1] by by Karsten Nohl and Jakob Lell at Black Hat USA 2014.

Karsten Nohl has a great CCC talk all about this [1] (I'll just copy their explanation of the talk) Becoming a secret travel agent.

With that signature and using a well known cryptographic method called rainbow tables, Nohl was able to crack the encryption key on the SIM card in about one minute.

Its nice that Chris Tarnovsky and Karsten Nohl are really awesome people, but what does that have to do with the article, other than that they work at the same place?

I think the one everyone here is familiar with but might not know is really ancient is the travel booking systems for your plane tickets and accommodations, dating back to the 1960s: Karsten Nohl - Where in the World Is Carmen Sandiego?

What I'm curious about is what Nohl meant when he said that it would take six months from the time of his presentation at Black Hat for crackers to develop working exploits based on his findings.

If you're interested in that kind of stuff I highly reccomend watching Karsten Nohl's "Reviving smart card analysis" talk from Chaos Communication Camp 2011 [0].

“These problems can’t be patched,” says Nohl, who will join Lell in presenting the research at the Black Hat security conference in Las Vegas.

From the article: "Karsten Nohl and Thomas Roth, of Security Research Labs, say that they have been in touch with VeriFone for six months and have provided technical aid to the company and a German government agency.

Having said that, I take issue with almost every point you made: * Both Chris Tarnovsky and Karsten Nohl have, supported so far as I know by none of the resources of a major university, given security conference talks on processes for "Turning silicon into machine-readable form".

One brave network engineer even came forward to complete that list (2/4 -> 4/4) after the talk of Karsten Nohl.

I remember Karsten Nohl's presentation about this at 33c3 and not much seems to have improved.

Nohl actually has an open source package to help do it.