![DEFCON 14: [Video] Speeches from the hacker conventions podcast artwork](https://www.defcon.org/images/podcast/defcon-14-itunes-logo.jpg){kind=logo}
DEFCON 14: [Video] Speeches from the hacker conventions
by The Dark Tangent
The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences are available on our website at: https://www.defcon.org/html/links/dc-archives.html This RSS includes video from the speeches at DEF CON 14. Additional versions including: Audio, and music videos from the DEF CON DJ's will be uploaded separately. We hope you enjoy.
Episodes
-
Broward Horne: MEME Hacking
Broward Horne is a software developer with a diverse background, including several years as an electronic technician at Litton and Teradyne and as a sysadmin at a major University. Broward also has a business background, doing contract work for the United States Department of Transportation on...
-
Robert Clark: Legal Aspects of Internet & Computer Network Defense
Abstract: This presentation looks at several scenarios of aggressive self defense. It applies the law to each of the participants in various schemes to the aggressor and to the defender. We see where simple self defense options could actually result in prosecution to the aggressor; prosecution of...
-
Dark Tangent: Award Ceremonies
The Dark Tangent acknowledges those who made Defcon 14 possible, contest winners and the techniques that were used to win. As well as Plans and a Q&A for next year at the Riviera.
-
Phil Zimmerman:Turbo-Talk- Special Project VOIP Encryption Update
Philip R. Zimmermann is the creator of Pretty Good Privacy. For that, he was the target of a three-year criminal investigation, because the government held that US export restrictions for cryptographic software were violated when PGP spread all around the world following its 1991 publication as...
-
Joe Grand: Hardware Hacking
Bio: Joe Grand is an electrical engineer and prolific inventor with four pending patents and 19 commercially-available products. Involved in computers and electronics since the age of 7, Joe has had the fortune of being a former member of the legendary Boston-based hacker collective L0pht Heavy...
-
Thomas X. Grasso: Fighting Organized Cyber Crime: War Stories and Trends
Abstract: As one of the pioneers of partnerships for the FBI, Thomas X. Grasso, Jr. of the FBI's Cyber Division will outline how the FBI has taken this concept from rhetoric to reality over the past 5 years. This presentation will explore how the mantra "make it personal" has aided the FBI in...
-
Atlas: The Making of atlas: Kiddie to Hacker in 5 Sleepless Nights
Abstract: atlas was just a kiddie when asked to write his first exploit in order to qualify for dc13's capture-the-flag. After conquering his sense of inadaquacy, he went on to win the individual competitiion and finish third even among the teams. This presentation will introduce you to atlas, to...
-
Greg Conti: Googling: I'm Feeling (un)Lucky
Abstract: Birth, School, Work, Death. Imagine every web search you've ever done placed on a timeline of your life. Is there anything on that list you wouldn't want your mother (or employer) to know about? How about the aggregate web searches of your entire company? What if they fell into the…
more -
Paul Simmonds: The Jericho Forum and Challenge
Abstract: In the first half of this session, Paul Simmonds will present on behalf of the Jericho Forum taking participants through the initial problem statement and what people need to go away and start implementing. Topics will include: 1. De-perimeterization - the business imperative 2. From...
-
Matt Hargett: Remote Pair Programming and Test-driven Development Using Open Source
Abstract: Binary disassembling and manual analysis to find exploitable vulnerabilities is a cool topic. What's cooler? Saving yourself hours of time and brain rot by letting a program do the hard parts for you! In this talk, we will dissect a well-known exploitable vulnerability as well as an…
more -
Renderman: New Wireless Fun From the Church Of WiFi
Abstract: The Church of Wifi (reformed) has been busy coming up with new and wonderful wireless shenanigans. At Shmoocon we sped up WPA cracking 3 fold, at Layerone we made it even faster, now we take it even further, to places and sizes not dared before: WPA2! When we aren't breaking WPA or...
-
Richard Thieme: Beyond Social Engineering: Tools for Reinventing Yourself
Abstract: Managing multiple modular identities is not a trivial task. But that's what the technologies and politics of Now demand. These tools will enable you to create personas at a deep level, then link them into a seamless life. Bio: Richard Thieme is a business consultant, writer, and...
-
Panel: Panel: Internet Wars 2006
Abstract: In this panel session we will begin with a short introductory presentation from Gadi Evron on the latest technologies and operations by the Bad Guys and the Good Guys. What's going on with Internet operations, global routing, botnets, extortion, phishing and the annual revenue the mafia...
-
Rick Hill: WarRocketing :Network Stumbling 50 sq. miles in <60 sec.
WarRocketing : Network Stumbling 50 sq. miles in <60 sec. Rick Hill, Senior Scientist, Tenacity Solutions, Inc. Abstract: Network "stumbling" has taken many forms since Marcus Milner first released Netstumbler in May 2001. Historically, stumbling aficionados preferred data collection method has...
-
Bruce Potter: Trusted Computing: Could it be... SATAN?
Abstract: Trusted computing is not inherently evil. It sounds scary, but it's true. While the public perception of trusted computing is that content providers will use trusted computing to enforce their digital rights and take away our civil liberties (whew! a mouthful), the reality is that there...
-
Valsmith: Hacking Malware: Offense Is the New Defense
Abstract: The proliferation of malware is a serious problem, which grows in sophistication and complexity every day, but with this growth, comes a price. The price that malware pays for advanced features and sophistication is increased vulnerability to attack. Malware is a system, just like an OS...
-
Collin Mulliner: Advanced Attacks Against PocketPC Phones
Abstract: Smart phones are the new favorite target of many attackers. Also most current attacks are harmless, since these mostly rely on user mistake or lack of better knowledge. Current attacks are mostly based on logic errors rather then code inject and often are only found by accident. The…
more -
Greg White: The National Collegiate Cyber Defense Competition
Abstract: Security competitions have been of interest to many individuals for a number of years. The popularity of the annual DEFCON competition demonstrates the level of interest in these events. This talk will discuss the creation of the National Collegiate Cyber Defense Competition which was...
-
Scott Moulton: Rebuilding HARD DRIVES for Data Recovery; Anatomy of a Hard Drive
Abstract: Every hard drive will die a quick and sudden death sooner rather than later. What happens after that death can be very important to your data and become the deciding factor in its survival. We will display the inner workings of a hard drive in a beautiful animation and discuss the...
-
Major Malfunction: Old Skewl Hacking: Magstripe Madness
Abstract: It's been a year since Major Mal gave his talk on hotel IR systems, and things haven't got any better...In fact, they've got worse. No, wait a minute...that's not right...They've *stayed* worse!! Having plumbed the depths of the IR in his room, and finding himself with little else to…
more -
Thomas Holt: Exploring the Changing Nature of DEFCON over the Past 14 Years
Abstract: DEFCON began in 1993 as an "orgy of information exchange, viewpoints, speeches, education, enlightenment...and most of all sheer, unchecked PARTYING."(DEFCON 1 Announcement, 1993). Fourteen years later, the convention is one of the most established hacker conventions, and is defined as...
-
Johnny Long: Death By 1000 cuts
Abstract: In this day and age, forensics evidence lurks everywhere. The task presented to modern forensics investigators is a daunting one. During this talk, you'll slip into the shoes of an uber-agent hot on the trail of the illustrious Knuth from the Stealing the Network series. Haven't read…
more -
Strom Carlson: Hacking FedEx Kinko's: How Not To Implement Stored-Value Card Systems
"ExpressPay is a stored-value cash card system which utilizes the Infineon SLE4442 chip; it was developed by enTrac Technologies of Toronto, Ontario, and its largest application is as the pre-paid cash card system in use at FedEx Kinko's. Analysis of a few dozen cards reveals that the data stored...
-
Robert Clark: Legal Aspects of Internet & Computer Network Defense - A Year in Review Computer and Internet Security Law 2005-2006
Abstract: This presentation looks at computer network defense and the legal cases of the last year that affect internet and computer security. This presentation clearly and simply explains (in non-legal terms) the legal foundations available to users and service providers to defend their…
more -
Amber Schroader: Cyber-crime Foiled Once Again? Help prove the innocence or guilt of Jack Grove
Abstract: Jack Grove tries to stop his racing heart as he slips into a dark dingy alley. His paranoia is getting the best of him as he looks behind him. No one is following him, but he senses they are coming. He is afraid. The hack hadn't gone down as planned. Damn it, he was supposed to have…
more -
EFF: Panel: Ask EFF: The Year in Digital Civil Liberties
Abstract: Get the latest information about how the law is racing to catch up with technological change from staffers at the Electronic Frontier Foundation, the nation?s premiere digital civil liberties group fighting for freedom and privacy in the computer age. This session will include updates…
more -
Chris Paget: US-VISIT: Raping Personal Privacy Since 2004
Abstract: In 2004, the Department of Homeland Security began the deployment of US-VISIT?a system for tracking visitors to the United States. Since that time, the capabilities of US-VISIT have increased dramatically; US-VISIT now incorporates a number of controversial technologies which violate…
more -
Scott Miller: A New Bioinformatics-Inspired and Binary Analysis: Coding Style/Motif Identification
Abstract: Security analysis is severely complicated by the size and abundance of executable code. Existing concepts and code can be combined, obfuscated, packed, and hidden toward the ends of evading detection and frustrating analysis. Is that patch fixing the problem it claims to fix? Have you...
-
Teli Brown: Phishing, it starts with "Ph" for a reason.'Some best practices to detect and prevent for some new point of attack methods
"Phishing, it starts with 'Ph' for a reason. Some best practices to detect and prevent for some new point of attack methods. When banks and other financial institutions tell their customers to only give personal information (e.g.: Credit Card, Social Security Number, ETC) via the telephone…
more -
Timothy M O'Neill: 'What has the NSA done for me lately?'
Abstract: In 2002 the President issued an Executive Order authorizing the National Security Agency (NSA) to wiretap phone and email communications involving United States persons within the U.S., without obtaining a warrant or court order pursuant to the Foreign Intelligence Surveillance Act of...
-
Charles Edge: 10 Ways To Not Get Caught Hacking On Your Mac
Abstract: It's hard to prosecute someone if you can't prove what they did. In this session, we will quickly cover 10 easy ways to cover your tracks using Mac OS X. The features of Mac OS X at the GUI level were in a lot of ways designed to cater to the paranoid (eg. Steve Jobs). Underneath the...
-
Melanie Rieback: A Hacker's Guide to RFID Spoofing and Jamming
Abstract: Radio Frequency Identification (RFID) tags are remotely-powered data carriers that augment physical objects with wireless computing abilities. This allows us to create smart homes and offices, optimize our supply chains, and keep a watchful eye on our pets, livestock, and kids. But...
-
James Christy: PANEL: Meet the Feds: 'OODA Loop and the Science of Security
Abstract: The OODA Loop theory was conceived by Col John Boyd, AF fighter pilot. He believed that a pilot in a lethal engagement that could Observe, Orient, Decide, and Act (OODA) before his adversary had a better chance to survive. He considered air combat an art rather than a science. John Boyd...
-
Jay Beale: Discovering Mac OS X Weaknesses and Fixing Them with the New Bastille OS X Port
Abstract: The Mac OS X operating system is beautiful, but it?s not as secure as you think. It?s mostly Unix under that shiny GUI and while we?ve come to expect a very locked down system from recent Unix/Linux releases, that expectation isn?t entirely realistic when it comes to OS X. For instance,...
-
Lukas Grunwald: First We Break Your Tag, Then We Break Your Systems Attacks to Rfid Systems
Abstract: This talk provides an overview of new RFID Technologie used for Dual-Interfaces Cards (Credit cards, Ticketing and Passports), and RFID Tags with encryption and security features. Problems and attacks to these security features are discussed and attacks to these features are presented....
-
Irby Thompson: Advanced File System Hiding and Detection
Abstract: The ability to both conceal and detect hidden data on the hard drive of a compromised computer represents an important arms-race between hackers and forensic analysts. While rootkits and other kernel manipulation tools make hiding on live systems fairly easy, the trick of hiding data…
more -
Charles Edge: Mac OS X Security Tools
Abstract: Apple claims not to care about the enterprise market, but there is no doubt that Apple networks are growing. The number of Apple systems in enterprise networks are growing as well. For security purposes it is becoming more and more important to manage these systems in the same way that…
more -
Strom Carlson: SOCIAL MESSAGE RELAY: Using existing social networks to transmit covert messages in public
Abstract: In the age of NSA phone taps, mandatory data retention, CALEA, the PATRIOT Act, and national firewalls, establishing a truly covert communications channel without leaving a trail is becoming almost impossible. Even when strong encryption is used to protect the message, Government…
more -
Raffael Marty: Visual Log Analysis - The Beauty of Graphs
Abstract: Event and Log Analysis is becoming one of the main tools for security analysts to investigate and comprehend the state of their networks, hosts, and applications. Recent developments, such as regulatory compliance requirements and an increased focus on insider threat has increased the...
-
Kenneth Geers: Ipv6 World Update: High Diplomacy & Monster Trucks
Abstract: Governments around the world are investing serious time, effort, and money into the next gen Internet, based on IP version 6. With important mandatory and remarkably close deadlines looming for v6 deployment, much yet remains to be understood about its security and socio-economic...
-
tommEE pickles: 802.1x Networking
Abstract: tommEE pickles (http://tommEE.net) presents an explanation of 802.1x networking. Exploring what 802.1x is and why we would use it. He explains how 802.1x might be used in a corporate environment, wireless or wired. Giving an explanation on how you can start 802.1x network and get your...
-
Alexander Kornbrust: Oracle Rootkits 2.0
Abstract: In 2006 thousands of people will create applications based on the free Oracle 10g Express Edition. Even if this version of Oracle (based on Oracle 10g Rel. 2) is the most secure database from Oracle out of the box so far, there is still room for improvements. This presentation shows...
-
Yuan Fan: MatriXay-When Web App & Database Security Pen-Test/Audit Is a Joy
"This topic will present a new web-app/DB pen-test tool. This tool supports both proxy (passive) mode as well as direct URL targeting. It is a mixed Web App SQL Injection systematic pen-test and WebApp/Database scanner/auditing-style tool and supports most popular databases used by web…
more -
Damon McCoy: Zulu a Command Line Wireless Frame Generator
Abstract: Zulu is a light weight 802.11 wireless frame generation tool to enable fast and easy debugging and probing of 802.11 networks. It has an intuitive command line interface and operates with the unmodified madwifi-ng and partially with prism based Linux network drivers. Individual fields…
more -
Dan kaminsky: Black Ops 2006
Abstract: The known topics for this year include: 1. The Worldwide SSL Analysis?There's a major flaw in the way many, many SSL devices operate. I'll discuss how widespread this flaw is, as well as announce results from this worldwide SSL scan. 2. Syntax Highlighting...on Hexdumps. Reverse...
-
Jared DeMott: The Evolving Art of Fuzzing
Abstract: The Evolving Art of Fuzzing will be a technical talk detailing the current state of fuzzing and describing cutting edge techniques. Fuzzer types, metrics, and future research will be presented. Also, three of ASI's private fuzzer tools will be discussed. They will be released on the...
-
dr.kaos: SAMAEL (Secure, Anonymous, Megalomaniacal, Autonomous, Encrypting Linux) and NARC (Network Analysis Reporting Console)
Abstract: From the 1337 hax0rs that brought you Anonym.OS, kaos.theory/security.research presents SAMAEL (Secure, Anonymous, Megalomaniacal, Autonomous, Encrypting Linux), the natural evolution of our secure, automagicically anonymizing operating system, Anonym.OS into a kick-ass anonymizing...
-
Isaac Levy (.ike): Hacking UNIX with FreeBSD Jail(8), Secure Virtual Servers
" Today, as more punch gets packed into 1u than ever, server resources can be further consolidated and abstracted to securely separate complex and sophisticated services in the same hardware server, by running secure virtual UNIX machines. Who wants jails? System Administrators who need to…
more -
Luis Miras: Bridging the Gap Between Static and Dynamic Reversing
Abstract: Reverse engineering continues to evolve, or rather REvolve. The reverse engineering toolset primarily consists of disconnected disassemblers and debuggers. Without symbol information or data acquired from disassembly, the use of a debugger can be blind and tedious. Reverse engineering…
more
About this show
The DEF CON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. Video, audio and supporting materials from past conferences are available on our website at: https://www.defcon.org/html/links/dc-archives.html This RSS includes video from the speeches at DEF CON 14. Additional versions including: Audio, and music videos from the DEF CON DJ's will be uploaded separately. We hope you enjoy.
Hosted by
The Dark Tangent
Categories