It Takes a Village
Strategies for building diverse security teams, addressing hiring challenges, and fostering talent through mentorship and professional development in the rapidly evolving cybersecurity landscape.
A Market Solution for Product Safety and Corporate Governance
Exploring innovative approaches to monetize vulnerabilities and address product security issues through cybersecurity-backed short positions in financial markets.
Virtual Terminals, POS Security and Becoming a Merchant
Explore virtual terminals, POS security, and payment fraud techniques. Learn about transaction vulnerabilities, card exploitation, and merchant-side risks in electronic payment systems.
Security Through Design
Explore security through design principles, examining real-world examples and innovative approaches to create safer digital environments and user interactions.
Security Model Bedfellows
Explore how integrating security, legal, and procurement can enhance software security from the start, reducing vulnerabilities and improving vendor accountability in the development process.
The Project of Prototype This
Hackers Joe Grand and Zoz share behind-the-scenes insights from their TV show "Prototype This," revealing challenges and innovative solutions in creating unique prototypes under tight constraints.
Uncovering SAP Vulnerabilities - Dissecting and Breaking the Diag Protocol
Dissecting SAP Diag protocol to uncover vulnerabilities, explore attack vectors, and enhance security in SAP Netweaver systems through novel tools and techniques for protocol analysis and exploitation.
Can the Fight Against Disinformation Really Scale?
Exploring challenges in scaling disinformation countermeasures, questioning assumptions about trust, and proposing human-centric approaches to combat misinformation effectively.
The Security Team at the Top - The Board of Directors
Explore how CISOs can effectively engage with boards of directors, build credibility, and leverage this powerful security team to enhance organizational cybersecurity strategies.
The State of 0-Day in-the-Wild Exploitation
Comprehensive analysis of 0-day exploits from 2020, offering insights on vulnerabilities, exploitation methods, and strategies to enhance cybersecurity and protect users from unknown threats.
Designing Verifiable Health Solutions for Global Pandemic
Exploration of verifiable health solutions for pandemic response, addressing public safety and privacy concerns through attestation, test results, and vaccination history tracking.
Hardware - A Double-Edged Sword for Security
Explore hardware's dual role in security: as a trust anchor and potential vulnerability. Learn about system-level threats, real-world examples, and promising solutions for detecting and preventing hardware vulnerabilities.
All Security Is Good(s)- Design Guidance for Economics - L Jean Camp - USENIX Enigma Conference - 2020
Explore economic aspects of security adoption failures, incentive-aligned design, and the balance between information sharing and privacy, with real-world examples and research insights.
User Agent 2.0 - What Can the Browser Do for the User? - Ben Livshits - USENIX Enigma Conference - 2019
Explores browser evolution as a user agent, advocating for smarter security mechanisms and informed decision-making to enhance user privacy and content monetization on the web.
Cryptocurrency: Burn It With Fire - Nicholas Weaver - USENIX Enigma Conference - 2019
Exposé critique des cryptomonnaies et blockchains, soulignant leurs failles fondamentales, leur incompatibilité avec la finance moderne et leurs vulnérabilités exploitables, tout en proposant des pistes pour les contrer.
Hacking the Law- Are Bug Bounties a True Safe Harbor? - USENIX Enigma Conference - 2018
Exploring legal risks in bug bounties, advocating for hacker rights, and proposing standardized terms to create safe harbors for ethical hackers participating in vulnerability disclosure programs.
Lluvia de riesgos y amenazas ▪ Paola Rodrigues & Janice Ricco ▪ Ekoparty 2021: BlueSpace
Exploración de componentes y enfoques de análisis de riesgos en seguridad informática desde la perspectiva de Mercado Libre, presentada por dos líderes de equipo.
From Zero to Trello - Gabriel Tarsia - Ekoparty 2021: Bug Bounty Space
Aprende a utilizar Trello para optimizar tu trabajo en Bug Bounty. Descubre técnicas de búsqueda, acceso a tableros y recomendaciones para mejorar tu eficiencia como cazador de vulnerabilidades.
Improve Your Security Posture with CIS Controls and Awareness - Sheila Perez - Ekoparty Security Conference
Guía práctica para mejorar la seguridad utilizando controles CIS y herramientas económicas. Aprende a cerrar brechas de seguridad sin grandes presupuestos.
Facebook Files Explained
Exclusive insights into leaked Facebook documents, revealing internal debates on hate speech, teen safety, and growth rates. Explores whistleblower Frances Haugen's revelations and their implications.
Überwachung, Social Media und Repression am Beispiel von Belarus
Einblick in die systematische Nutzung moderner Überwachungstechnologien zur Unterdrückung politischer Bewegungen in Belarus unter dem autoritären Regime von Alexander Lukaschenko.