x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

DEFCON 15 [Audio] Speeches from the hacker conventions

The Dark Tangent

Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn"t make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and

technology software how-to

All Episodes

28:55

Terrence "king tuna" Gareau: Hacking EvDO

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Come and spend 50 minutes with the King, not Elvis, but King Tuna. He is going to give you a peak into EvDo and some of the goodies it has to offer. After a very brief overview of what EvDo is he is going to go into detail about the different hardware options you have, and most importantly, how EvDo cards can be hacked and the advantages of delving into the insides of the card. Can ESN's be moved? Can EvDo be used in monitor mode? Bring a bag because there will be treats for 100 people with a patch

en

46:58

Ganesh Devarajan: Unraveling SCADA Protocols: Using...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Firstly, I will be covering the basics of SCADA networks and give a general overview of the SCADA protocols namely Modbus, DNP3, ICCP and IEC standards. North America mainly uses Modbus, DNP3 and to an extent ICCP, the European countries use the IEC standards. After the basics I will be getting into the finer details of the protocols as to what function code, internal indication flags does what and how that can be used to attack or take down the SCADA system. I shall as well discuss and demonstrate

en

1:02:02

Vitaliy Kamlyuk: Fighting Malware on your own.

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

There is always a possibility to get infected by some malware, i.e. by surfing the web and catching the malware that uses some new exploit in your browser. What should you do then? Do you know what is available on Windows system to fight malware? The problem of fighting malware on Windows is the limitation of basically available tools. I am going to show you some tricks that will let you do some complicated actions using ONLY components of Windows system and NO 3rd party tools. I have been working

en

39:22

Patrik Karlsson: SQL injection and out-of-band...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Patrik Karlsson is the founder of the security related website cqure.net, where he publishes some of his security related work. He is also a partner at Inspect it, a Swedish based information security consultancy. His work has been mentioned in a number of articles and books and used for education and security testing. For the last couple of years he has specialized in web application security, databases and his family.

en

1:46:54

Roger Dingledine: Tor and blocking-resistance

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Tor project, an anonymous communication system for the Internet that has been funded by both the US Navy and the Electronic Frontier Foundation. Roger Dingledine is a security and privacy researcher. While at MIT he developed Free Haven, one of the early peer-to-peer systems that emphasized resource management while retaining anonymity for its users. He is best known for leading the Tor project, an anonymous communication system for the Internet that has been funded by both the US Navy and the

en

20:11

Janne Lindquist: IPV6 Is bad for your privacy.

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

If you're going to buy an application security tool, which one will it be? Every vendor likes to talk about how their tools are the best. "We are the market leader!" they all say. But not everyone can lead all the time. I will show how I took half a dozen "leading" application security tools (both static and dynamic) and compared them head-to-head against the same open source application. All of the tools found something, but no two tools find the same thing! I will break down the different

en

58:54

Johhny Long: No-tech Hacking

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Johnny Long was a relative forensics newbie who was faced with the challenge of hunting down the amazingly agile and paranoid "Knuth" from the best-selling Syngress 'stealing the Network? book series. In the story, Knuth melted down his hard drive platters and USB sticks before leaving the country, leaving any investigator next to no digital evidence. Fortunately for the good guys, Knuth left behind some oft-neglected hardware that left him open to a "death by a thousand cuts". As a result of the

en

48:47

Marce Luck & Tom Stracener: Hacking the EULA: Reverse...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Each year thousands of work hours are lost by security practitioners as time is spent sorting through web application security reports and separating out erroneous vulnerability data. Individuals must currently work through this process in a vacuum, as there is no publicly available information that is helpful. Restrictive EULAs (End User License Agreements) prohibit examining a signature code-base for common errors or signature flaws. Due to the latter point, a chilling effect and

en

50:26

Nick Mathewson: SOCIAL ATTACKS ON ANONYMITY NETWORKS

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Any attacker can scam one or two users into revealing themselves, but do you know how to talk an entire community of smart hackers into weakening its anonymity? In spite of progress in traffic analysis, social engineering attacks remain the most effective way to break users' anonymity and one of the best force multipliers for traditional traffic analysis attacks. Why bother doing traffic analysis when you can trick users into isolating themselves using nothing more than an IRC client? I'll discuss

en

50:03

Nick Mathewson: TECHNICAL CHANGES SINCE YOU LAST...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

There hasn't been a talk from the developers of Tor (the popular anonymity network) at Defcon since 2004. Since then, we've revised the protocols, added piles of new features to the software, tightened security, integrated more helper tools, made hard strategic decisions, and suffered growing pains. There have been new attacks, new defenses, new research, and new ideas. In this talk, I'll present the most important technical changes and developments since you last heard about Tor at Defcon. Time

en

47:44

Sean M. Bodmer: Analyzing Intrusions & Intruders

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Intrusion Analysis has been primarily reserved for network junkies and bit biters. However, due to the advances in network systems automation we now have time to pay more attention to subtle observations left by attackers at the scene of the incident. Century old sciences have enabled criminal investigators the ability attribute attacks to specific individuals or groups. Sean M. Bodmer is an active developer and deployer of intrusion detection systems. Sean is also an active Honeynet Researcher,

en

49:29

Haroon Meer & Marco Slaviero: It's All About the Timing

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Timing attacks have been exploited in the wild for ages. In recent times timing attacks have largely been relegated to use only by cryptographers and cryptanalysts. In this presentation SensePost analysts will show that timing attacks are still very much alive and kicking on the Internet and fairly prevalent in web applications (if only we were looking for them). The talk will cover SensePost-aTime (our new SQL Injection tool that operates purely on timing differences to extract data from injectable

en

18:29

Charlie Miller: How smart is Intelligent Fuzzing - or...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Dynamic analysis, or fuzzing, is a popular method of finding security vulnerabilities in software. Fuzzing may be used by a developer to find potential problems as part of the quality-assurance process or may be used to find potential exploits in an existing software application. Fuzzing has grown in popularity because it is much easier (and often more effective) to generate and run arbitrary inputs than it is to perform a manual code audit or use software reverse engineering. However, the quality

en

41:47

Doug Mohney: The Next Wireless Frontier - TV White...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

More unlicensed bandwidth from TV!?! A long-term push to free up more wireless spectrum is expected to come to fruition this year as the FCC will open up unused TV channels ? dubbed ?white spaces? ? for unlicensed broadband use this fall, with full-blown availability in 2008 once the DTV transition takes place. Dell, Google, HP, Intel, Microsoft and Philips have joined together in the ?White Spaces Coalition? to lobby for a spectrum sensing technology to find open TV channels while Motorola

en

46:46

HD Moore & Valsmith: Tactical Exploitation

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Penetration testing often focuses on individual vulnerabilities and services. This talk introduces a tactical approach that does not rely on exploiting known vulnerabilities. Using combination of new tools and obscure techniques, I will walk through the process of compromising an organization without the use of normal exploit code. Many of the tools will be made available as new modules for the Metasploit Framework. HD Moore is the director of security research at BreakingPoint Systems, where he

en

51:44

Dark Tangent Moss: CiscoGate

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Dark Tangent never speaks at DEF CON because he thinks it is cheating.. but not for the 15th anniversary! Come listen to a behind the scenes account of what really happened during the "Cisco/ISS Gate" fiasco from 2005. Throughout the talk the audience will be asked what they would have done at key points and then learn what I chose to do. A cautionary and comical tale of what happens when communication breaks down. The Dark Tangent started DEF CON 15 years ago when his $2,000 1gig hard drive let

en

50:12

Alexander Muentz: Protecting your IT infrastructure...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

You think your systems and data are safe from any attack. You fear no script kiddie. You get a +5 against social engineering. Yet a single subpoena can crack your junk open wide. A search warrant might leave you with an empty server room. The law might be the biggest threat to your users, systems and you. Learn how to plan for and react to search warrants, subpoenas and wiretaps. I?m going to speak about the law in an IT context, make it accessible and relevant. If you manage other people's

en

57:02

Shawn Moyer: (un)Smashing the Stack: Overflows,...

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

As of today, Vista, XP, 2K03, OS X, every major Linux distro, and each of the BSD's either contain some facet of (stack|buffer|heap) protection, or have one available that's relatively trivial to implement/enable. So, this should mean the end of memory corruption-based attacks as we know it, right? Sorry, thanks for playing. The fact remains that many (though not all) implementations are incomplete at best, and at worst are simply bullet points in marketing documents that provide a false sense of

en

1:07:00

Ofir Arkin: kNAC!

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Network admission control (NAC), network access protection (NAP), network access control (NAC), and many other acronyms refer to a technology which aim to provide with access control verification before (and after) allowing an element to access the network. Unfortunately due to the lack of standardization, and the diversity of solutions, many (if not must) NAC solutions suffer form a multitude of weaknesses impacting the deployment, implementation and the overall protection they provide. The

en

46:14

David Byrne: Intranet Invasion With Anti-DNS Pinning

DEFCON 15 [Audio] Speeches from the hacker conventions ·

2006/01/09

Cross Site Scripting has received much attention over the last several years, although some of its more ominous implications have not received much attention. Anti-DNS pinning is a relatively new threat that, while not well understood by most security professionals, is far from theoretical. This presentation will focus on a live demonstration of anti-DNS pinning techniques. A victim web browser will be used to execute arbitrary, interactive HTTP requests to any server, completely

en

122 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs