Is the NSA Still Listening to Your Phone Calls? - A Surveillance Debate
Debate on NSA surveillance practices, focusing on Section 215 of the Patriot Act and recent reforms. Explores impact on privacy, national security, and the effectiveness of congressional oversight.
How the Wassenaar Arrangement's Export Control of "Intrusion Software" Affects Industry
Experts discuss implications of Wassenaar Arrangement's export control on "intrusion software" for cybersecurity industry, research, and privacy, drawing parallels to 1990s crypto wars.
Remote Physical Damage 101 - Bread and Butter Attacks
Explore cyber-physical attacks on industrial systems, including generic "bread and butter" techniques and mitigation strategies beyond network security.
Graphic Content Ahead - Towards Automated Scalable Analysis of Graphical Images Embedded in Malware
Explores automated analysis of images in malware, focusing on identifying visually similar samples and classifying images into categories to enhance malware triage and reveal attacker patterns.
Optimized Fuzzing IOKit in iOS
Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.
Adventures in Femtoland - 350 Yuan for Invaluable Fun
Explore vulnerabilities in 3G/4G networks using femtocells. Learn to intercept data and exploit weaknesses in UMTS infrastructure, from unboxing to proof-of-concept demonstrations.
Internet Plumbing for Security Professionals - The State of BGP Security
Explore BGP security, its vulnerabilities, and practical countermeasures to build trust in the Internet's foundation. Learn about routing leaks, hijacking risks, and implementation strategies for a more secure network infrastructure.
Abusing XSLT for Practical Attacks
Explore XSLT vulnerabilities and practical attacks on XML systems, including arithmetic manipulation, code logic failure, and compromising user confidentiality in web browsers.
When IoT Attacks - Hacking a Linux-Powered Rifle
Explore the security vulnerabilities of a Linux-powered precision rifle, including reverse engineering, attack surfaces, and implications of network-connected firearms.
Forging the USB Armory - An Open Source Secure Flash-Drive-Sized Computer
Explore the creation of a secure, open-source computer the size of a flash drive. Learn about innovative hardware design and advanced security features for portable computing.
Breaking Access Controls With BLEKey
Explore vulnerabilities in RFID access control systems and learn how to exploit them using open-source hardware. Discover techniques for circumventing security, logging access, and cloning cards.
Web Timing Attacks Made Practical
Explore practical web timing attacks, improving data collection and statistical analysis for more effective penetration testing. Learn adaptive techniques and open-source tools for identifying cryptographic vulnerabilities.
CrackLord - Maximizing Password Cracking Boxes
Explore distributed password cracking with CrackLord, a scalable system for load balancing GPU and CPU resources across multiple hardware systems, enhancing efficiency and accessibility.
Subverting Satellite Receivers for Botnet and Profit
Exploiting vulnerabilities in satellite receivers to build botnets, highlighting risks in DVB-CA encryption, custom plugins, and CCCAM protocol. Demonstrates potential for large-scale network compromise and unauthorized access.
Faux Disk Encryption - Realities of Secure Storage on Mobile Devices
Explore mobile device data security challenges, debunk full-disk encryption myths, and learn sophisticated secure storage techniques for iOS and Android, addressing real-world application vulnerabilities.
Compromising the Windows Enterprise Via Windows Update
Exploración de vulnerabilidades en Windows Update y WSUS, demostrando cómo comprometer sistemas empresariales mediante actualizaciones maliciosas y controladores de dispositivos USB.
Data-Driven Threat Intelligence - Metrics on Indicator Dissemination and Sharing
Análisis basado en datos de indicadores de inteligencia de amenazas y comunidades de intercambio, explorando eficiencia, calidad y superposición de fuentes durante más de un año.
Breaking HTTPS With BGP Hijacking
Explore BGP hijacking's impact on HTTPS security, revealing vulnerabilities in Internet routing and SSL/TLS PKI. Learn about potential exploits and prevention strategies.
How to Hack Government - Technologists as Policy Makers
Explore how technologists can influence policy-making, focusing on the FTC's role in protecting online privacy and data security through enforcement, research, and consumer protection initiatives.
Hidden Risks of Biometric Identifiers and How to Avoid Them
Explore cutting-edge biometric technologies, their advantages, and potential risks. Learn to evaluate security, reliability, privacy, and ethical concerns for informed implementation of future identification systems.
ThunderStrike 2 - Sith Strike
Explore firmware vulnerabilities in Mac systems, demonstrating software-only attacks and showcasing the potential of Mac firmware malware. Learn about shared vulnerabilities and case studies.