Drag Us to Wonder Bad - A Tale of How to Be Good People by Capturing Credentials and 2FA
Explore social engineering techniques for capturing credentials and 2FA from popular email clients, presented through an Alice in Wonderland-inspired narrative by a cybersecurity expert.
Breaking Firmware Trust From Pre-EFI - Exploiting Early Boot Phases
Exploración de vulnerabilidades en fases tempranas de arranque, evolución de mitigaciones de firmware y nuevos ataques en módulos de evaluación de plataformas Intel desde una perspectiva ofensiva.
Entrega de premios - Ekoparty 2022
Ceremonia de premiación destacando logros en seguridad informática, incluyendo mejor charla, workshop, desafío y CTF. Reconocimiento a la excelencia y innovación en la comunidad de ciberseguridad.
eBPF ELFs JMPing Through the Windows
Análisis pionero de vulnerabilidades en eBPF para Windows, explorando su diseño, superficie de ataque y descubrimiento de fallos mediante fuzzing y ingeniería inversa automatizada.
Turning My Phone into a Scamming Device
Exploración de vulnerabilidades en dispositivos de cobro móviles y métodos para convertir smartphones en herramientas de estafa, incluyendo inyección de datos y manipulación de tráfico. Se presentan casos reales y soluciones.
Análisis Global de la Privacidad en Tráfico Celular
Análisis global de la privacidad en tráfico celular, revelando riesgos de vigilancia a través de aplicaciones móviles que envían datos personales sin seguridad ni consentimiento. Concientiza sobre la importancia de encriptar y verificar comunicaciones.
ELFPack - ELF Binary Section Docking in Stageless Payload Delivery
Explore ELF binary construction and section docking for payload delivery. Learn about innovative techniques for payload hosting, retrieval, and loading in offensive operations.
Not Yet Another Fuzzer
Explore NYAF, a multi-platform fuzzer using emulation and Generation Search algorithm for improved analysis of IOT devices, embedded systems, and firmware. Learn about its advantages in scalability and efficiency.
Keynote Speaker
Ingeniera de seguridad y privacidad comparte su experiencia en roles de liderazgo en Notion, Lyft, Apple y Microsoft, abordando desafíos y tendencias en la industria tecnológica.
Exploring the Hidden Attack Surface of OEM Routers
Descubre vulnerabilidades críticas en routers OEM y sus implicaciones para la seguridad. Análisis detallado de un caso de estudio que revela fallos en la cadena de suministro y prácticas de seguridad deficientes.
Haciendo acrobacias con satélites espaciales
Explora el fascinante mundo del control de satélites espaciales utilizando Python, abordando desafíos técnicos y aplicaciones prácticas en la industria aeroespacial moderna.
The Making of an Ultra Low Latency Trading System with Go and Java
Insights into building ultra-low latency trading systems using Go and Java, covering language runtimes, threading models, RAFT implementations, and system optimizations for sub-50 microsecond latency.
Implementing SRE in a Regulated Environment
Insights on implementing Site Reliability Engineering practices in regulated environments, focusing on root cause analysis, chaos testing, and trend analysis while meeting regulatory expectations.
Beacon - Intelligent Latency-Aware and Load Shedding Service Routing
Explore Beacon, an intelligent framework for service routing in large-scale organizations, addressing challenges of database replication delays and ensuring up-to-date information delivery to customers.
Adaptive Concurrency Control for Mixed Analytical Workloads
Explore adaptive concurrency control for real-time analytics, addressing timeouts in mixed workloads. Learn iterative improvements for better user experience in query services.
Seeing the Invisible - Two Years at Wikipedia with W3C's Network Error Logging
Discover how Wikipedia uses W3C's Network Error Logging to detect user-facing outages in real-time. Learn about implementation strategies and case studies of outages missed by traditional monitoring methods.
Watering the Roots of Resilience - Learning from Failure with Decision Trees
Explore how SREs can align mental models with system reality using resilience stress testing and decision trees. Learn practical tools for documenting, visualizing, and improving complex software systems.
Lessons Learned from 7 Years of Running Developer Platforms
Insights on platform engineering best practices, including product management, developer retention, trust-building, and re-skilling ops staff, drawn from diverse organizations' experiences over the past decade.
Hell Is Other Platforms
Explore the pitfalls of blindly adopting others' platform strategies. Learn to retain agency, identify needs, and avoid common mistakes in platform engineering for your unique business context.
On the Wings of SREs - J.P. Morgan's Journey into the Cloud
Explore J.P. Morgan's transition to public cloud, focusing on SRE's role in overcoming regulatory, technical, and organizational challenges while ensuring stability and reliability.
Scaling Telemetry Systems with Streaming
Explore the evolution of Honeycomb's Kafka cluster and telemetry systems, covering scaling strategies, infrastructure choices, and best practices for handling 10x data volume growth.