![DEFCON 13: [Audio] Speakers from the hacking convention. podcast artwork](https://www.defcon.org/podcast/dc-logo-masthead-rss.jpg){kind=logo}
DEFCON 13: [Audio] Speakers from the hacking convention.
by The Dark Tangent
Past speeches and talks from DEF CON hacking conferences in a friendly mp3 cbr audio format.The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event.If you didn't make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!
Episodes
-
Defcon 13: Dan Kaminsky, Black Ops of TCP 2005
Another year, another batch of packet related stunts. A preview: A Temporal Attack against IP It is commonly said that IP is a stateless protocol. This is not entirely true. We will discuss a mechanism by which IP's limited stateful mechanisms can be exploited to fingerprint operating systems and...
-
Defcon 13: Christian Grothoff, Lost In Translation
This presentation describes the possibilities of steganographically embedding information in the "noise" created by automatic translation of natural language documents. An automated natural language translation system is ideal for steganographic applications, since natural language translation...
-
Defcon 13: Keynote: Dr. Linton Wells
Dr. Linton Wells II, Assistant Secretary of Defense for Networks and Information Integration / CIO Dr. Linton Wells, II was named Principal Deputy Assistant Secretary of Defense for Command, Control, Communications and Intelligence (C3I) on August 20, 1998, and serves in that capacity in the C3I...
-
Defcon 13: Fyodor, Hacking Nmap
While many security practitioners use Nmap, few understand its full power. Nmap deserves part of the blame for being too helpful. A simple command such as "nmap scanme.insecure.org" leaves Nmap to choose the scan type, timing details, target ports, output format, source ports and addresses, and...
-
Defcon 13: Paul Vixie, The Internets March of Folly
In this lecture we will begin with a brief introduction on a couple of the common or not so common threats that exist to the Internet and Internet infrastructure today, provide with some statistics and discuss the harm rather than potential risks. We will then proceed to discuss problems we face...
-
Defcon 13: Wesley Tanner and Nick Lane-Smith: End-to-End Voice Encryption over GSM: A Different Approach
Where is end-to-end voice privacy over cellular? What efforts are underway to bring this necessity to the consumer? This discussion will distill for you the options available today, and focus on current research directions in technologies for the near future. Cellular encryption products today…
more -
Defcon 13: Robert E. Lee & Jack C. Louis:Introducing Unicornscan - Riding the Unicorn
Unicornscan is an open source (GPL) tool designed to assist with information gathering and security auditing. This talk will contrast the real world problems we've experienced using other tools and methods while demonstrating the solutions that Unicornscan can provide. We will use Unicornscan to...
-
Defcon 13: Ofir Arkin, A New Hybrid Approach for Infrastructure Discovery, Monitoring and Control
An enterprise IT infrastructure is a complex and a dynamic environment that is generally described as a black hole by its IT managers. The knowledge about an enterprise network's layout (topology), resources (availability and usage), elements residing on the network (devices, applications, their...
-
Defcon 13: Ofir Arkin, On the Current State of Remote Active OS Fingerprinting
Active operating system fingerprinting is a technology, which uses stimulus (sends packets) in order to provoke a reaction from network elements. The implementations of active scanning will monitor the network for a response to be, or not, received from probed targeted network elements, and...
-
Defcon 13: Jay Beale, Introducing the Bastille Hardening Assessment Tool
Bastille has been re-released as an assessment and hardening tool. With the help of the US Government's TSWG, we've added full hardening assessment capabilities, complete with scoring. This allows Bastille to measure and score an individual system's security settings against user-provided...
-
Defcon 13: Marshall Beddoe, Reverse Engineering Network Protocols using Bioinformatics
Network protocol analysis is currently performed by hand using only intuition and a protocol analyzer tool such as tcpdump or Ethereal. This talk presents Protocol Informatics, a method for automating network protocol reverse engineering by utilizing algorithms found in the bioinformatics field.…
more -
Defcon 13: Wes Brown & Scott Dunlop, Mosquito - Secure Remote Code Execution Framework
Mosquito is a lightweight framework to deploy and run code remotely and securely in the context of penetration tests. It makes a best effort to ensure that the communications are secure. Special care is taken to ensure that deployed code is not stored outside of process memory space, making it...
-
Defcon 13: Daniel Burroughs, Auto-adapting Stealth Communication Channels
Intrusion detection systems and firewalls generally follow one of two methods of attack detection, signature or anomaly. Signature detection detects known attacks and anomaly detection covers unusual activity (with the hope that it will discover new attacks). Often what is detected by the IDS or...
-
Defcon 13: Daniel Burroughs, Development of An Undergraduate Security Program
At the University of Central Florida, an undergraduate program in security is currently being developed. This program will offer students a bachelor's degree through the College of Engineering. It is intended to be an interdisciplinary degree combining coursework from the School of Engineering…
more -
Defcon 13: Strom Carlson & Black Ratchet, Be Your Own Telephone Company... With Asterisk
Since the invention of the step-by-step switching office by Almon B. Strowger in 1889, telephone switching technology has constantly become more efficient, more complex and easier to manage. Today, anyone with a computer, a telephone and some spare time can assemble a homebrew telephone switching...
-
Defcon 13: Greg Conti, Countering Denial of Information Attacks
We are besieged with information every day, our inboxes overflow with spam and our search queries return a great deal of irrelevant information. In most cases there is no malicious intent, just simply too much information. However, if we consider active malicious entities, the picture darkens....
-
Defcon 13: Ian Clarke & Oskar Sandberg, Routing in the Dark: Scalable Searches in Dark P2P Networks
Ian Clarke, Project Coordinator, FreenetProject Inc. Oskar Sandberg, Department of Mathematical Sciences, Chalmers Technical University, Sweden With peer to peer networks under fire by organizations using the legal system to attack participants, it seems that the only sustainable future is for...
-
Defcon 13: CISO Q&A with Dark Tangent
The Dark Tangent, founder of DEFCON, invites Chief Information Security Officers from global corporations to join him on stage for a unique set of questions and answers. What do CISOs think of David Litchfield, Dan Kaminsky, Joe Grand, Metasploit, Black Hat, and DEFCON? How many years before...
-
Defcon 13: Deviant Ollam, Introduction to Lockpicking and Physical Security
Physical security isn't just a concern of the IT world. Besides securing server rooms, locks of all sizes and styles are scattered throughout our lives. However, much of the general public is unaware of the insecurities present in many lock designs. Through discussion and direct example, Deviant...
-
Defcon 13: Steve Dunker Esq, The Hacker's Guide to Search and Arrest
Have you ever been pulled over by the Cops? Do you worry about your home being searched by the Feds? The Hacker's Guide to Search and Arrest is presented in a down and dirty fast pace. You won't hear a single boring case citation here. Instead you get information you can use in every day life,...
-
Defcon 13: Leonard Gallion, A Safecracking Double Feature: Dial "B" For BackDialing and Spike the Wonder Safe
This presentation will introduce two powerful, non-destructive safe opening techniques. The first "Dial B For BackDialing," will trace the history of back dialing all the way from Richard Feynman working on the atomic bomb (and opening safes) in the 1940's, to today. This presentation will show…
more -
Defcon 13: Kristofer Erickson, The Power to Map: How Cyberspace Is Imagined Through Cartography
An ongoing project for scholars in Geography has been to explore how power and cartography are mutually implicated. Geographers have traditionally been concerned with making maps of the earth, but until recently we have seldom reflected on how particular forms of knowledge and power are…
more -
Defcon 13: Kenneth Geers, Hacking in a Foreign Language: A Network Security Guide to Russia (and Beyond)
Has your network ever been hacked, and all you have to show for your investigative efforts is an IP address belonging to an ISP in Irkutsk? Are you tired of receiving e-mails from Citibank that resolve to Muscovite IP addresses? Would you like to hack the Kremlin? Or do you think that the Kremlin...
-
Defcon 13: Michael Glasser & Deviant Ollam, Intro to High Security Locks and Safes
This "Talk" will focus on the next step beyond basic locks and lock picking. You will NOT learn about basic cylinders. You will not learn how to shim a padlock. You will learn about Medeco side bars and how they've been beaten. You will learn about mul-t-lock pin-in-pin cylinders and how they've...
-
Defcon 13: Paul Graham, Inequality and Risk
Previous attempts to hack the connection between wealth and power have aimed mainly at eliminating economic inequality. They've all ended in disaster, because economic inequality is closely related to risk: you can't eliminate inequality without eliminating startups, and with them growth. So if…
more -
Defcon 13: Jennifer Granick, Top Ten Legal Issues in Computer Security
This will be a practical and theoretical tutorial on legal issues related to computer security practices. In advance of the talk, Granick will unscientifically determine the "Top Ten Legal Questions About Computer Security" that Defcon attendees have and will answer them as clearly as the…
more -
Defcon 13: Julian Grizzard, Surgical Recovery from Kernel-Level Rootkit Installations
Conventional wisdom states that once a system has been compromised, it can no longer be trusted and the only solution is to wipe the system clean and reinstall. This talk goes against the grain of conventional wisdom and asks are there more efficient ways to repair a system other than complete...
-
Defcon 13: Deral Heiland, The Insecure Workstation II "Bob Reloaded"
The insecure workstation II "Bob Reloaded". Exploring attack vectors within Microsoft desktop systems. A close look at third party applications that still suffer from api call vulnerabilities and how attackers can use these vulnerabilities to escalate there rights to system level . Also will be...
-
Defcon 13: Thomas J. Holt, No Women Allowed? Exploring Gender Differences In Hacking
The President of Harvard University, Lawrence H. Summers, recently suggested the lack of women in the sciences is due to innate differences between men and women. He speculated a variety of reasons for this including genetics and social factors, and his comments created a stir among academics and...
-
Defcon 13: Johnny Long, Death of a Thousand cuts - Forensics
In this day and age, forensics evidence lurks everywhere. This talk takes attendees on a brisk walk through the modern technological landscape in search of hidden digital data. Some hiding places are more obvious than others, but far too many devices are overlooked in a modern forensics...
-
Defcon 13: Johnny Long, Google Hacking for Penetration Testers
Google Hacking returns for more guaranteed fun this year at Defcon 13! If you haven't caught one of Johnny's Google talks, you definitely should. Come and witness all the new and amazing things that can be done with Google. All new for Defcon 13, Johnny reveals basic and advanced search…
more -
Defcon 13: Jonathan Levin, The Dark Side of Winsock
The Winsock SPI, or Service Provider Interface, has been a part of Winsock since the advent of version 2.0. It enables providers to extend the Winsock API transparently, by installing their own hooks and chains to application API calls. However, its formidable capabilities are not put to…
more -
Defcon 13: Ben Kurtz, A Linguistic Platform for Threat Development
Sick of hand-coding each and every exploit? The past few years have seen the rise of some generalized frameworks for the exploitation of vulnerabilities, but none of them are general-purpose enough to accommodate arbitrary hardware and network protocols. By applying programming language theory to...
-
Defcon 13: jives, Passive Host Auditing
Traditionally, IDS systems such as snort have been used to monitor attacks against or within a network. This talk will give the outline for turning those tools around and instead using them to audit networks. We will discuss how to identify OS, tell who is patching, what services are being…
more -
Defcon 13: Robert "hackajar" Imhoff-Dousharm,Credit Cards: Everything You have Ever Wanted to Know
Identity theft is at an all time high. With businesses, universities and banks being compromised the threat is real right now. The media covers these area's but miss one important location that your most suseptiable to fraud, everywhere you swipe your credit card. We will pull out all the stops…
more -
Defcon 13: David Hulton, The Next Generation of Cryptanalytic Hardware
Encryption is simply the act of obfuscating something to the point that it would take too much time or money for an attacker to recover it. Many algorithms have time after time failed due to Moore's law or large budgets or resources (e.g. distributed.net). There have been many articles published…
more -
Defcon 13: Broward Horne, Meme Mining for Fun and Profit
Technology trends are treacherous. Should you learn java or visual basic? Pay for Windows or download Linux? Will that investment in Bluetooth pay off? Or will you get suckered by a faddish book written by a fading technology guru? You can't know the future (yet), but you can make educated…
more -
Defcon 13: Tony Howlett, GeoIP Blocking, A Controversial But (Sometimes) Effective Approach
What if I told you, than in a few minutes and at no extra cost, you could be blocking up to 30% of all malware headed for your network? Sound to good to be true? Well it doesn't work for everyone and there are a lot of caveats, but it can be an effective way to eliminate a large portion of the...
-
Defcon 13: Kevin McCarthy, The Six Year Old Hacker: No More Script Kiddies
Computer use in elementary schools is problematic. Seldom are computers well integrated into the general curriculum. Often, they are used merely as instructional surrogates to "drill" skills. Particularly disturbing is the lack of exploration of the computer itself, and the culture of technology....
-
Defcon 13: Jim Christy and various other Feds, Meet the Fed
A unique opportunity to surrender and confess all of your crimes to law enforcement agents from multiple federal and possibly international agencies. The "Meet the Fed" Panel is again chaired by Special Agent Jim Christy, Director of the Department of Defense Cyber Crime Institute. Jim will have…
more -
Defcon 13: Metalstorm, Trust Transience: Post Intrusion SSH Hijacking
Trust Transience: Post Intrusion SSH Hijacking explores the issues of transient trust relationships between hosts, and how to exploit them. Applying technique from anti-forensics, linux VXers, and some good-ole-fashioned blackhat creativity, a concrete example is presented in the form of a...
-
Defcon 13: Mystic, Hacking the Mind (Influence and NLP)
Do you ever find your self wondering if good social engineers and highly influential people are just born that way? Well, you might be surprised to find out that any human skill can be duplicated including being a master at influence. This is what forms the basis for a field of study known as NLP...
-
Defcon 13: Dean Pierce, Brandon Edwards & Anthony Lineberry, Bypassing Authenticated Wireless Networks
As the demand for mobile internet access increases, more and more public wireless access points are becoming available for general usage. Unfortunately, as awareness of these access points increases, some companies have been capitalizing on the idea, charging monthly and hourly rates. This talk...
-
Defcon 13: Roberto Preatoni & Fabio Ghioni, Assymetric Digital Warfare
Roberto Preatoni (aka Sys64738), Fabio Ghioni The speech will be intended to let the attendees understand where and how the digital conflicts are conducted today but we will dig deeply into the future. We will take as example the US Army program F.C.S. (Future Combat System) as the perfect…
more -
Defcon 13: Raven, Pen-testing the Backbone
Despite its crucial importance, the network backbone is often ignored or exempted from security testing. This talk will cover how to sanely and effectively perform a pen-test against routers, switches, and similar network infrastructure equipment. Avenues of attack will range from the physical to...
-
Defcon 13: San, Hacking Windows CE
Security threats to PDAs and mobiles become more and more serious. This presentation will show a buffer overflow exploitation example in Windows CE. It will cover some knowledge about ARM architecture and memory management, the features of processes and threads of Windows CE. It alse show how to...
-
Defcon 13: Shmoo Group, Shmoo-Fu: Hacker Goo, Goofs, and Gear with the Shmoo
Bruce Potter, Beetle, CowboyM, Dan Moniz, Rodney Thayer, 3ricj, Pablos all speaking on behalf of the Shmoo Group Last Summer, they dared to make a Wi-Fi sniper rifle that fried their eyeballs and scared the crap out of UPS. They built a robot that owned your Mom's access point and showed you the...
-
Defcon 13: Jason Scott, Why Tech Documentaries are Impossible (And why we have to do them anyway.)
Documentaries have a place in telling the history and story of many different cultures and events, but documentaries about technical subjects tend to run into common problems: too light, too wrong, too hated. Is the patient terminal? Can you create a film that is both informative and of interest…
more -
Defcon 13: Sensepost, Automation - Deus ex Machina or Rube Goldberg Machine?
How far can automation be taken? How much intelligence can be embodied in code? How generic can automated IT security assessment tools really be? This presentation will attempt to show which areas of attacks lend themselves to automation and which aspects should best be left for manual human...
-
Defcon 13: RS, Forensic Data Acquisition Tools
Proper recovery of evidence can be critical to a successful investigation or prosecution. This talk focuses on the different tools and techniques that are used by US Law Enforcement to get an uncontaminated copy of digital evidence from a suspect machine. The goal of this presentation is to teach...
About this show
Past speeches and talks from DEF CON hacking conferences in a friendly mp3 cbr audio format.The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event.If you didn't make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!
Hosted by
The Dark Tangent
Categories