Legacy Crypto Never Dies
Explore legacy cryptography vulnerabilities and the crack.sh API for breaking DES-based protocols, with insights from David Hulton's research on widely used services still relying on outdated encryption.
Hacking Toshiba Laptops
Unveiling Toshiba laptop vulnerabilities: BIOS password recovery exploitation and EC firmware signing key extraction, enabling stealth rootkit implantation. Implications for newer models discussed.
Hackable Security Modules - Reversing and Exploiting a FIPS 140-2 Lvl 3 HSM Firmware
Exploring vulnerabilities in Hardware Security Modules (HSMs) through firmware analysis and reverse engineering of the TMS320C64x DSP architecture, with focus on the Utimaco SecurityServer.
The ROM Matrix Revolution - Unscrambling Bits
Explore ROM encryption vulnerabilities and decryption techniques using visual analysis and software tools, with insights applicable to various chip families.
SiliVaccine - North Korea's Weapon of Mass Detection
Explore North Korea's SiliVaccine, a secretive national antivirus solution. Uncover its architecture, origins, and peculiarities through reverse engineering, revealing insights into DPRK's closed digital landscape.
Everything Is Quantum
Explore quantum computing's impact on security with Jaya Baloo, CISO at Avast. Learn about emerging threats and opportunities in this cutting-edge field of technology.
Badkeys - Finding Weak Cryptographic Keys At Scale
Discover how to detect weak cryptographic keys at scale using the badkeys tool and service. Learn about past vulnerabilities and new findings in TLS certificates and IoT devices.
GPG Memory Forensics
Techniques for retrieving passphrases and encryption keys from memory dumps of GPG processes, including Volatility3 plugins for key material extraction and potential defensive applications against ransomware.
GNU Anastasis - Privacy-Preserving Key Backup And Recovery
Explore GNU Anastasis, a privacy-focused key backup and recovery system. Learn about its cryptographic design, system architecture, and integration possibilities for enhanced digital security and self-custody solutions.
Career Opportunities in Information Security
Explore diverse career paths in information security with insights from a seasoned professional. Learn about key roles, skills, and opportunities in this rapidly evolving field.
Insecurity of E-Voting in Brazil
Análisis de vulnerabilidades en el sistema de voto electrónico brasileño, escenarios de fraude electoral y propuestas para mejorar la seguridad. Incluye verificación crowdsourcing de resultados y perspectivas futuras.
Encryption out of LINE - Reverse Engineering End-to-End Encrypted Messaging
Análisis de ingeniería inversa del cifrado de extremo a extremo en la aplicación LINE, revelando su protocolo y explorando posibles vulnerabilidades en la función "Carta de sellado".
Attacking RSA Using a New Method of Integer Factorization
Nuevo método de factorización de enteros para atacar RSA, presentado por el matemático Hugo Scolnik. Explora avances en criptografía y seguridad informática.
Your Polyglot Belongs to Me - Steganography in Modern APTs
Explore steganography in modern APTs and polyglots for hidden information in cyberattacks. Learn about attack and defense strategies using the speaker's tool, powerglot, with real-world examples.
Criptografía Post-Cuántica Integrada en HTTPS
Explora la integración de criptografía post-cuántica en HTTPS, abordando conceptos teóricos, algoritmos candidatos, proyectos de código abierto y resultados de pruebas de concepto para intercambio de claves y autenticación.
The Silent Partners
Exploración del Quantum Fourier Transform, componente clave en algoritmos cuánticos como Shor. Profundiza en computación cuántica, sus aplicaciones y su impacto en criptografía convencional.
Do not drink and wardrive
Recorrido en trencito para mapear redes Wi-Fi urbanas, analizando su demografía, encriptación y protocolos. Monitoreo pasivo para estudiar la evolución de la seguridad inalámbrica.
Do not drink and wardrive - Pt2
Recorrido en tren para mapear redes Wi-Fi urbanas, analizando su demografía, encriptación y protocolos. Permite evaluar la evolución de la seguridad inalámbrica a lo largo del tiempo.
Unlimited Results - Breaking Firmware Encryption of ESP32-V3
Unveiling vulnerabilities in ESP32-V3 microcontrollers through hardware security evaluation, focusing on extracting firmware encryption keys to decrypt flash content containing potential secret data.
Musical Steganography - Hiding Things in Music
Explore techniques for concealing messages in music, from Bach's compositions to modern digital methods. Learn to apply steganographic principles using TidalCycles and Haskell.
Making Webapps Collaborative with Composable CRDTs
Learn to create collaborative webapps using Compoventuals, a TypeScript library of CRDTs. Discover how to maintain data structure and type safety while enabling offline work, server-free collaboration, and end-to-end encryption.