Dennis Yurichev.

E-Mail: dennis(a)conus.info

Phone: +380-68-3539765

LinkedIn page: http://www.linkedin.com/in/dennisyurichev

My blog about Oracle RDBMS et cetera: http://blogs.conus.info/

Date of birth: 11-October-1979.

Citizenship: Ukrainian.

Gender: male.

Marital status: married.

Children: absent.

Languages: Russian, English, Ukrainian.

Employment history: 

2008 - present: 

              Freelancer.
              I discovered several previously unknown vulnerabilities in Oracle RDBMS.

              CVE-2009-0991 in CPUapr2009 (CVSS 5.0):
              http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2009.html
              http://blogs.conus.info/node/18

              Four vulnerabilities patched in CPUjul2009:
              http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2009.html
              CVE-2009-1970 (CVSS 5.0):
              http://blogs.conus.info/node/26

              CVE-2009-1963 (CVSS 7.5)
              http://blogs.conus.info/node/25

              CVE-2009-1019 (CVSS 7.5)
              http://blogs.conus.info/node/24

              CVE-2009-1020 (CVSS 9.0)
              http://blogs.conus.info/node/23

              CVE-2009-1979 in CPUoct2009 (CVSS 10.0)
              http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2009.html
              http://blogs.conus.info/node/28

              CVE-2010-0071 in CPUjan2010 (CVSS 10.0)
              http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2010.html
              http://blogs.conus.info/node/38

              I discovered two DoS vulnerabilities in IBM DB2 9.5.
              CVE-2009-0172
              CVE-2009-0173
              http://www-01.ibm.com/support/docview.wss?uid=swg1IZ36534
              http://www-01.ibm.com/support/docview.wss?uid=swg1IZ39373
              http://blogs.conus.info/node/17

              I discovered one DoS vulnerability in binkd FidoNet mailer:
              http://binkd2.grumbler.org/viewcvs/HISTORY?root=binkd&view=co

              I made two FPGA brute-force crackers.
              First was related to specific dongle crypto algorithm. Using Altera EP2S60 
              FPGA device, I made a hardware system which able to find crypto key extremely
              fast compared to modern Wintel systems.
              Second project was a cracker of Oracle RDBMS passwords (pre-11g, based on
              DES algorithm).
              While most fast software brute-force attacker running on Intel Core Duo 2 able
              to check 1.5M passwords per second, a hardware system built by me able
              to check about Oracle RDBMS 110M passwords per second: it was built on Altera
              EP2SGX90 FPGA chip. It is now easy to check all possible 8-symbol passwords
              spending only 9 hours.
              Here is it connected to Internet on 24h basis:
              http://conus.info/ops/
              Short article about it:
              http://conus.info/ops/ops.html

2005 - 2008: "Blue Lane" (now part of VMware, Inc) (www.bluelane.com): 
              reverse engineer and security researcher. 
              My duty was to compare original and patched binary 
              versions of some well-known software products, investigate 
              differences, understand the nature of security vulnerability, 
              finding a way how malicious (for these specific vulnerabilities) 
              packets can be blocked at the network level.
              I developed my own x86 code tracer for navigating in such large
              software as Oracle RDBMS.
              My specialization was primarily Oracle RDBMS, so I collected a lot
              of information related to Oracle RDBMS internals.

1999 - 2005:  Freelancer in areas of software copy protection, reverse 
              engineering, web-scripting and programming.
              My old website about reverse engineering services: 
              http://conus.info/old2/
              Also, I was involved in making dongle clones (in the sense of 
              software protection) as it is described at:
              http://en.wikipedia.org/wiki/Dongle

1998 - 1999:  "Beckets-Service" (Kiev, Ukraine): 
              Linux system administrator, CGI-scripts programmer, 
              C/C++ programmer.
              Last project I made at, was company-specific Voicemail
              system working with cheap voice modems.

1996 - 1998:  "Tandem-Plus" (Enakievo, Donetsk region, Ukraine): 
              various computers maintenance and repairing at the local
              computer seller and repairer.

Education: Donetsk National Technical University, drop out.

My perfect skills: reverse engineering, restoration of code into various 
high-level languages: C, C++, C#, Java, Pascal/Delphi.
Reverse engineering various proprietary network protocols.
Optimization of time-critical code parts.

My very good skills: C/C++/x86 assembler programming for Windows 98/NT,
Linux. Verilog coding (for FPGAs)

Just skills: drivers creation for any version of Windows, MS-DOS, OS/2, 
Linux programming.

I have knowledge of cryptography, major internet protocols, digital electronics, 
computer security, Oracle RDBMS basics, Oracle Net8.