PODCAST

DEF CON 24 [Video and Slides] Speeches from the Hacker Convention

The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences are available on our new media server at: https://media.defcon.org

technology software how-to

All Episodes

Panel - Meet the Feds

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/26

Meet the Feds Jonathan Mayer Chief Technologist, Enforcement Bureau, Federal Communications Commission Lorrie Cranor Chief Technologist, Federal Trade Commission Ed Felten Deputy United States Chief Technology Officer, White House Office of Science and Technology Policy The federal government is increasingly addressing policy issues that intersect with technology--especially security and privacy. This session explains how the government is responding, including technology leaders from the Federal

Linuz & Medic - Sticky Keys To The Kingdom: Pre-auth...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/26

Materials:https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Maldonado-Mcguffin-Sticky-Keys-To-The-Kingdom.pdf Sticky Keys To The Kingdom: Pre-auth RCE Is More Common Than You Think Dennis Maldonado (AKA Linuz) Security Consultant - LARES Consulting Medic (Tim McGuffin) Security Consultant - LARES Consulting With minimal to no effort, we can gain SYSTEM level access to hundreds, if not, thousands of machines on the internet [remotely]. No, this is not a new super 1337 exploit

Lucas Lundgren & Neal Hindocha - Light-Weight...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Lucas-Lundgren-Extras https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Lucas-Lundgren-Light-Weight Protocol-Critical-Implications.pdf Light-Weight Protocol! Serious Equipment! Critical Implications! Lucas Lundgren Senior Security Consultant, FortConsult (Part of NCC Group) Neal Hindocha Principal Consultant, FortConsult (Part of NCC Group) The presentation will begin by discussing the protocol

James Loureiro & Georgi Geshev - Platform agnostic...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Platform agnostic kernel fuzzing James Loureiro Researcher, MWR InfoSecurity Georgi Geshev Security Researcher, MWR InfoSecurity A number of toolsets have been around for a while which propose methods for identifying vulnerabilities in kernels, in particular POSIX kernels. However, none of these identified a method for generic fuzzing across Windows and POSIX kernels and have not been updated for some time.  This presentation will outline the research which has occurred in order to find exploitable

Jianhao Liu, Chen Yan & Wenyuan Xu - Can You Trust...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Liu-Yan-Xu-Can-You-Trust-Autonomous-Vehicles-WP.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Liu-Yan-Xu-Can-You-Trust-Autonomous-Vehicles.pdf Can You Trust Autonomous Vehicles: Contactless Attacks against Sensors of Self-driving Vehicle Jianhao Liu Director of ADLAB, Qihoo 360 Chen Yan PhD student, Zhejiang University Wenyuan Xu Professor, Electrical Engineering, Zhejiang University To

Ricky ‘HeadlessZeke’ Lawshae - Let’s Get Physical:...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Ricky-Lawshae-Lets-Get-Physical.pdf Let’s Get Physical: Network Attacks Against Physical Security Systems Ricky ‘HeadlessZeke’ Lawshae Hacker With the rise of the Internet of Things, the line between the physical and the digital is growing ever more hazy. Devices that once only existed in the tangible world are now accessible by anyone with a network connection. Even physical security systems, a significant part of

Ladar Levison - Compelled Decryption - State of the...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Ladar-Levison-Compelled-Decryption.pdf Compelled Decryption - State of the Art in Doctrinal Perversions Ladar Levison Founder, Lavabit, LLC. Get mirandized for an encrypted world. This talk will cover the legal doctrines and statues our government is perverting to compel individuals into decrypting their data, or conscript technology companies into subverting the security of their own products. We’ll survey the

LosT - Hacker Fundamentals and Cutting Through...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Hacker Fundamentals and Cutting Through Abstraction LosT Continuing the series of hacker foundational skills, YbfG jvyy nqqerff shaqnzragny fxvyyf gung rirel unpxre fubhyq xabj. Whfg sbe sha jr jvyy nyfb tb sebz gur guerr onfvp ybtvp tngrf gb n shapgvbany cebprffbe juvyr enpvat n pybpx. Qb lbh xabj ubj n cebprffbe ernyyl jbexf? Jul qb lbh pner? Pbzr svaq bhg. Bu, naq pelcgb. Ryan "1o57" Clarke self-identifies as a hacker. Formerly a member of the Advanced Programs Group (APG) at Intel, he

Jake Kouns - 'Cyber' Who Done It?! Attribution...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Jake-Kouns-Lee-Johnstone-Cyber-who-done-it-UPDATED.pdf 'Cyber' Who Done It?! Attribution Analysis Through Arrest History Jake Kouns CISO, Risk Based Security There have been over 20,000 data breaches disclosed exposing over 4.8 billion records, with over 4,000 breaches in 2015 alone. It is clear there is no slowdown at all and the state of security is embarrassing. The total cybercrime cost estimates have been

Tom Kopchak - 101 Sentient Storage - Do SSDs Have a...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Tom-Kopchak-Sentient-Storage.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Tom-Kopchak-SSD-Forensics-Research-WP.pdf 101 Sentient Storage - Do SSDs Have a Mind of Their Own? Tom Kopchak Director of Technical Operations, Hurricane Labs Solid state drives drives are fundamentally changing the landscape of the digital forensics industry, primarily due to the manner in which they respond to

Yonathan Klijnsma & Dan Tentler - Stargate: Pivoting...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Klijnsma-Tentler-Stargate-Pivoting-Through-VNC.pdf Stargate: Pivoting Through VNC to Own Internal Networks Yonathan Klijnsma Senior Threat Intelligence Analyst, Fox-IT Dan Tentler (Viss) Founder, Phobos Group VNC is a great tool to use if you need to get to a box you're not physically near. The trouble with VNC is that it was invented 15+ years ago and hasn't been improved upon in any significant way. Besides the

Jake Kambic - Cunning with CNG: Soliciting Secrets...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Jkambic-Cunning-With-Cng-Soliciting-Secrets-From-Schannel-UPDATED.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Jkambic-Cunning-With-Cng-Soliciting-Secrets-From-Schannel-WP.pdf Cunning with CNG: Soliciting Secrets from Schannel Jake Kambic Hacker Secure Channel (Schannel) is Microsoft's standard SSL/TLS Library underpinning services like RDP, Outlook, Internet Explorer, Windows Update, SQL

K2 - Blockfighting with a Hooker -- BlockfFghter2!

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Blockfighting with a Hooker -- BlockfFghter2! K2 Director, IOACTIVE What's your style of hooking? My hooking Style? It's like hooking without hookers.  The use cases for hooking code execution are abundant and this topic is very expansive. EhTracing (pronounced ATracing) is technique that allows monitoring/altering of code execution at a high rate with several distinct advantages. Full context (registers, stack & system state) hooking can be logged without needing to know a function prototype and

Jmaxxz - Backdooring the Frontdoor

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Jmaxxz-Backdooring-the-Frontdoor-Bypass-Cert-Pinning.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Jmaxxz-Backdooring-the-Frontdoor-Extracting-Secrets-From-Log.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Jmaxxz-Backdooring-the-Frontdoor-UPDATED.pdf Backdooring the Frontdoor Jmaxxz Hacker As our homes become smarter and more connected we come up with new ways

Przemek Jaroszewski - How to get good seats in the...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Przemek-Jaroszewski-How-To-Get-Good-Seats-In-The-Security-Theater-UPDATED.pdf How to get good seats in the security theater? Hacking boarding passes for fun and profit. Przemek Jaroszewski CERT Polska/NASK While traveling through airports, we usually don't give a second thought about why our boarding passes are scanned at various places. After all, it's all for the sake of passengers' security. Or is it? The fact

Int0x80 (of Dual Core) - Anti-Forensics AF

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Int0X80-Anti-Forensics-AF.pdf Anti-Forensics AF int0x80 (of Dual Core), Hacker This presentation is the screaming goat anti-forensics version of those ‘Stupid Pet Tricks’ segments on late night US talk shows. Nothing ground-breaking here, but we'll cover new (possibly) and trolly (definitely) techniques that forensic investigators haven't considered or encountered. Intended targets cover a variety of OS

Stephan Huber & Siegfried Rasthofer - How to Do it...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Huber-Rasthofer-Smartphone-Antivirus-And-Security-Applications-Under-Fire.pdf How to Do it Wrong: Smartphone Antivirus and Security Applications Under Fire Stephan Huber Fraunhofer SIT Siegfried Rasthofer Fraunhofer SIT & TU Darmstadt -Today’s evil often comes in the form of ransomware, keyloggers, or spyware, against which AntiVirus applications are usually an end user’s only means of protection. But current

Benjamin Holland - Developing Managed Code Rootkits...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Benjamin-Holland-Developing-Managed-Code-Rootkits-For-Java-Runtime-Extras-UPDATED.txt https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Benjamin-Holland-Developing-Managed-Code-Rootkits-For-Java-Runtime-UPDATED.pdf Developing Managed Code Rootkits for the Java Runtime Environment Benjamin Holland ISU Team, DARPA's Space/Time Analysis for Cybersecurity (STAC) Managed Code Rootkits (MCRs) are

Weston Hecker - Hacking Hotel Keys and Point of Sale...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Hecker-Hacking-Hotel-Keys-and-PoS-Systems-UPDATED.pdf Hacking Hotel Keys and Point of Sale Systems: Attacking Systems Using Magnetic Secure Transmission Weston Hecker Senior Security Engineer & Pentester, Rapid7 Take a look at weaknesses in Point of sale systems and the foundation of hotel key data and the Property management systems that manage the keys. Using a modified MST injection method Weston will demonstrate

Weston Hecker - Hacking Next-Gen ATM's From Capture...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/23

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Hecker-Hacking-Next-Gen-ATMS-UPDATED.pdf Hacking Next-Gen ATM's From Capture to Cashout Weston Hecker Senior Security Engineer & Pentester, Rapid7 MV (Chip & Pin) card ATM's are taking over the industry with the deadlines passed and approaching the industry rushes ATM's to the market. Are they more secure and hack proof? Over the past year I have worked at understanding and breaking the new methods that ATM

104 results

DEF CON 24 [Video and Slides] Speeches from the Hacker Convention

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs