The Cycling Tour - Java's Fraught Relationship with Cyclic Object Graphs
Explore Java's challenges with cyclic object graphs, understanding failures, limitations, and effective techniques for representing cycles while avoiding common pitfalls.
Java's Cyclic Object Graphs Challenges
Explore Java's complex relationship with cyclic object graphs, their challenges, and effective techniques to represent cycles while avoiding common pitfalls in Java programming.
Stack Overflow: A Story of Two Security Tales - Enhancing Software Security
Exploring Stack Overflow's dual impact on software security: potential vulnerabilities and effective solutions. Highlights research findings and proposes design tweaks to enhance secure development practices.
The Second Oldest Bug in Ruby - Fixing Large Argument Handling
Explore the history and resolution of a long-standing Ruby bug involving large argument lists, delving into stacks, heaps, and method dispatch improvements from Ruby 1.9 to 3.3.
Overflowing the Kernel Stack with BPF - Security Implications and Mitigations
Exploring vulnerabilities in eBPF's kernel stack usage, demonstrating overflow scenarios through program attachment and nesting, and discussing mitigation strategies for runtime environment assumptions.
Abusing Normality - Data Exfiltration in Plain Site
Explore stealthy data exfiltration techniques using everyday system objects and processes. Learn to identify and defend against sophisticated attacks that leverage normal-looking channels for malicious purposes.
Breaking and Protecting Linux Kernel Stack
Explore Linux kernel stack vulnerabilities, existing protections, and potential improvements like RANDOMIZE_KSTACK_OFFSET. Gain insights into security measures and performance implications.
Towards Discovering Remote Code Execution Vulnerabilities in Apple FaceTime
Explore FaceTime's vulnerabilities through reverse engineering, focusing on call initialization, connection processes, and potential attack surfaces for remote code execution.
Don't Ruck Us Too Hard - Owning All of Ruckus AP Devices
Explore vulnerabilities in Ruckus AP devices, including pre-authentication remote code execution exploits. Learn about research methods, discovered CVEs, and a framework for cross-architecture analysis.
Exploitation of a Modern Smartphone Baseband
Explore smartphone baseband security, learn to find and exploit memory corruption bugs in modern devices. Gain insights into design, countermeasures, and practical hacking techniques.
Advanced Buffer Overflow Techniques
Explore advanced buffer overflow techniques, including stack injection, heap exploitation, and protection bypassing. Learn about payload crafting, injection vectors, and dynamic function loading.
The Return of Stack Overflows in the Linux Kernel
Exploiting Linux kernel vulnerabilities: techniques for bypassing security controls, leveraging nftables bugs, and achieving code execution. Includes mitigation strategies and a novel per-softirq stack randomization implementation.
The Info Leak Era on Software Exploitation
Explore advanced techniques for exploiting software vulnerabilities through information leaks, focusing on defeating ASLR and converting various vulnerabilities into effective info leaks.
Analogue Evolution, Digital Revolution - Tipping Points in Technology
Explore technological tipping points and their impact on society, from digital cameras to AI. Gain insights into past innovations and future trends in this thought-provoking talk on digital revolution.
Binary Defense Without Privilege
Learn techniques for implementing binary defense without privileged access, covering code patching, stack overflow prevention, sandboxing, and network filtering.
Joel on Software
Joel Spolsky shares insights on building Stack Overflow, offering humorous anecdotes and valuable lessons for developers. Learn about the platform's growth, best practices, and its impact on the software industry.
Fireside Chat with Joel Spolsky & Stefan Doerner
Insightful discussion between Joel Spolsky and Stefan Doerner on Stack Overflow's business model, user engagement, and the evolving landscape of programming languages and IT recruitment.
Coding the Future
Explore how developers shape our future through software's pervasive influence, from emotional contagion to revolutionary tools like VisiCalc and Node.
Two Nice C# People
Live discussion with C# experts Jon Skeet and Bill Wagner, exploring language design, feature requests, open source, and keeping C# relevant. Insights on Stack Overflow, Google Cloud Platform, and Microsoft MVP program included.
Ghosts and Gadgets - Common Buffer Overflows That Still Haunt Our Networks
Explore common buffer overflow vulnerabilities in network systems, their detection methods, and practical mitigation strategies for securing modern networks.
Demonstrating Binary Exploitation
Explore binary exploitation through live demonstrations, including a Sudo vulnerability exploit. Learn to detect and prevent memory corruption vulnerabilities in software.