PODCAST

DEF CON 24 [Video and Slides] Speeches from the Hacker Convention

The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences are available on our new media server at: https://media.defcon.org

technology software how-to

All Episodes

18:17

3AlarmLampScooter - DIY Nukeproofing: A New Dig at...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/10/11

Materials Available here: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-3alarmlampscoot-DIY-Nukeproofing.pdf DIY Nukeproofing: A New Dig at 'Datamining' 3AlarmLampScooter Hacker Does the thought of nuclear war wiping out your data keep you up at night? Don't trust third party data centers? Few grand burning a hole in your pocket and looking for a new Sunday project to keep you occupied through the fall? If you answered yes to at least two out of three of these questions,

Bigezy & saci - An Introduction to Pinworm: Man in...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Bigezy-Saci-Pinworm-MITM-for-Metadata.pdf An Introduction to Pinworm: Man in the Middle for your Metadata bigezy Hacker saci Hacker What is the root cause of memory and network traffic bloat? Our current research using tools we previously released Badger at Black Hat in 2014 and the Kobra released at BsidesLV 2015 shows a 40 percent increase in outside unique IP traffic destinations and a 400 percent increase in data

Kai Zhong & Kenneth Lee - 411: A framework for...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Zhong-Lee-411-A-Framework-For-Managing-Security-Alerts-UPDATED.pdf 411: A framework for managing security alerts Kai Zhong Application Security Engineer, Etsy Kenneth Lee Senior Security Engineer, Etsy Modern web applications generate a ton of logs. Suites like ELK (Elasticsearch, Logstash, Kibana) exist to help manage these logs, and more people are turning to them for their log analysis needs. These logs contain a

Zero_Chaos & Granolocks - Realtime Bluetooth Device...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials; https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Granolocks-Zero-Chaos-Bluehydra-Realtime-Blutetooth-Detection-UPDATED.pdf Realtime Bluetooth Device Detection with Blue Hydra Zero_Chaos Director of Research and Development, Pwnie Express Granolocks All the Things, Pwnie Express We are releasing a new tool for discovering bluetooth devices and automatically probing them for information. Effectively we have created a new tool with an airodump-ng like display for

Mudge Zatko & Sarah Zatko - Project CITL

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Project CITL Mudge Zatko Director, CITL Sarah Zatko CHief Scientist, CITL Many industries, provide consumers with data about the quality, content, and cost of ownership of products, but the software industry leaves consumers with very little data to act upon. In fact when it comes to how secure or weak a product is from a security perspective, there is no meaningful consumer facing data. There has long been a call for the establishment of an independent organization to address this need. Last year,

Bryant Zadegan & Ryan Lester - Abusing Bleeding Edge...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Bryant-Zadegan-Ryan-Lester-Abusing-Bleeding-Edge-Web-Standards-For-Appsec-Glory-UPDATED.pdf Abusing Bleeding Edge Web Standards for AppSec Glory Bryant Zadegan Application Security Advisor & Mentor, Mach37 Ryan Lester CEO & Chief Software Architect, Cyph Through cooperation between browser vendors and standards bodies in the recent past, numerous standards have been created to enforce stronger client-side control for

Luke Young - Attacking Network Infrastructure to...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Luke-Young-The-4TbS-Ddos-For-5-bucks.pdf Attacking Network Infrastructure to Generate a 4 Tb/s DDoS for $5 Luke Young Information Security Engineer, Hydrant Labs LLC As bandwidth, computing power, and software advancements have improved over the years, we've begun to see larger and larger DDoS attacks against organizations. Often times these attacks employ techniques such as DNS Amplification to take advantage of

Brad Woodberg - Malware Command and Control Channels:...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Brad-Woodberg-Malware-Command-And-Control-Channels-A-Journey-Into-Darkness-UPDATED.pdf Malware Command and Control Channels: A journey into darkness Brad Woodberg Group Product Manager - Emerging Threats, Proofpoint,Inc. Much of the time and attention dedicated to modern network security focuses on detecting the contemporary vulnerabilities and exploits which power the breaches that make the headlines. With almost

Patrick Wardle - I've got 99 Problems, but Little...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Patrick-Wardle-99-Problems-Little-Snitch-UPDATED.pdf I've got 99 Problems, but Little Snitch ain't one Patrick Wardle Director of Research, Synack Security products should make our computers more secure, not less. Little Snitch is the de facto personal firewall for OS X that aims to secure a Mac by blocking unauthorized network traffic. Unfortunately bypassing this firewall's network monitoring mechanisms is

Terrell McSweeny & Lorrie Cranor - Research on the...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Mcsweeny-Cranor-Research-On-The-Machines-UPDATED.pdf Research on the Machines: Help the FTC Protect Privacy & Security Terrell McSweeny Commissioner, Federal Trade Commission Lorrie Cranor Chief Technologist, Federal Trade Commission Machines are getting smarter – so consumer protection enforcers like the Federal Trade Commission need to get smarter too. The FTC is the lead federal agency for protecting the privacy

Elie Bursztein & Celine Bursztein - Cheating at...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Bursztein-Picod-Cheating-at-Poker-James-Bond-Style-UPDATED.pdf Cheating at Poker. Ripping Off People at Poker, James Bond Style Elie Bursztein Celine Bursztein Ever dreamed of cleaning up at poker, but afraid that you are not good enough to do it on your own? Fear not! The chinese underground got you covered with high-tech concealed cheating devices that automatically read marked cards and whisper them in your ear

JusticeBeaver (Eric Escobar) - Discovering and...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Eric-Escobar-Rogue-Cell-Towers-UPDATED.pdf Discovering and Triangulating Rogue Cell Towers JusticeBeaver (Eric Escobar) Security Engineer, Barracuda Networks Inc The number of IMSI-catchers (rogue cell towers) has been steadily increasing in use by hackers and governments around the world. Rogue cell towers, which can be as small as your home router, pose a large security risk to anyone with a phone. If in range,

Mike Walker & Dr. Arati - DARPA Cyber Grand Challenge...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

DARPA Cyber Grand Challenge Award Ceremony Mike Walker DARPA Program Manager Dr. Arati Prabhakar DARPA Director On Friday morning, August 5th, DARPA will announce the prize winners and recognize the parties responsible for building and competing in the Cyber Grand Challenge (CGC), the world's first all-machine hacking tournament, which was completed August 4th. Seven high performance computers will have completed an all-machine Capture the Flag contest, reverse engineering unknown binary software,

Dr. Phil - Mouse Jiggler Offense and Defense

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Dr-Phil-Polstra-Mouse-Jigglers.pdf Mouse Jiggler Offense and Defense Dr. PhilProfessor, Bloomsburg University of Pennsylvania A group of highly-armed individuals has just stormed into your office. They are looking to pull data from your computers which are protected with full disk encryption. In order to prevent your screen saver from activating they will likely immediately insert a mouse jiggler to prevent your

Dr. Paul Vixie - Frontrunning the Frontrunners

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Paul-Vixie-Frontrunning-the-Frontrunners-UPDATED.pdf Frontrunning the Frontrunners Dr. Paul Vixie CEO and Co-founder, Farsight Security, Inc. -While some domainers allegedly brainstorm ideas for new domains to register while taking a shower, the more successful domain portfolio managers, working at scale, are believed to be ‘data driven.’ DNS queries are a material source of intelligence about domainer opportunities

Javier Vazquez & Ferdinand Noelscher - CAN i haz car...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Javier-Vazquez-You-CAN-haz-car-Secretz-UPDATED.pdf CAN i haz car secret plz? Javier Vazquez Vidal Hardware Security Specialist at Code White Gmbh Ferdinand Noelscher Information Security Specialist at Code White Gmbh The CAN bus is really mainstream, and every now and then there are new tools coming out to deal with it. Everyone wants to control vehicles and already knows that you can make the horn honk by replaying

Richard Thieme - Playing Through the Pain? - The...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Playing Through the Pain? - The Impact of Secrets and Dark Knowledge on Security and Intelligence Professionals Richard Thieme ThiemeWorks Dismissing or laughing off concerns about what it does to a person to know critical secrets does not lessen the impact when those secrets build a different map of reality than "normals" use and one has to calibrate narratives to what another believes. The cognitive dissonance that inevitably causes is managed by some with denial who live as if refusing to feel

Tamas Szakaly - Help, I've got ANTs!!!

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Tamas-Szakaly-Help-I-got-ANTS.pdf Help, I've got ANTs!!! Tamas Szakaly Lead Security Researcher, PR-Audit Ltd., Hungary As stated in my bio, besides computer security I also love fligh simulators and mountain biking. Last year I gave a talk about hacking a flight simulator (among other games), it was only fitting to research something related to my other hobby too. Old day's bike speedometers have evolved quite a

Shane Steiger - Maelstrom - Are You Playing with a...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Shane-Steiger-Maelstrom-Are-You-Playing-With-A-Full-Deck-UPDATED.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Shane-Steiger-Maelstrom-Are-You-Playing-With-A-Full-Deck-V14-Back.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-Shane-Steiger-Maelstrom-Rules-V10.pdf Maelstrom - Are You Playing with a Full Deck? : Using a Newly Developed Attack Life Cycle Game to

Six_Volts & Haystack - Cheap Tools for Hacking Heavy...

DEF CON 24 [Video and Slides] Speeches from the... ·

2016/09/30

Materials: https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-SixVolts-and-Haystack-Cheap-Tools-For-Hacking-Heavy-Trucks.pdf https://media.defcon.org/DEF CON 24/DEF CON 24 presentations/DEFCON-24-SixVolts-and-Haystack-Extras Cheap Tools for Hacking Heavy Trucks Six_Volts Research Mercenary Haystack Vehicle Data Ninja There has been much buzz about car hacking, but what about the larger heavy-duty brother, the big rig? Heavy trucks are increasingly networked, connected and

104 results

DEF CON 24 [Video and Slides] Speeches from the Hacker Convention

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs