Skip to content
PodParley
DEFCON 15 [Audio] Speeches from the hacker conventions podcast artwork

PODCAST · technology

DEFCON 15 [Audio] Speeches from the hacker conventions

by The Dark Tangent

Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn't make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!

Publisher-supplied feed metadata · PodParley refreshed May 12, 2022 · Source feed

Subscribe · 0 Bookmark

Episodes

  1. Panel: Disclosure Panel

    David Mortman, Moderator CSO-in-Residence, Echelon One Paul Proctor, Moderator VP, Gartner Window Snyder, Vendor Director of Ecosystem Development, Mozilla Corporation Ian Robertson CSO, RIM David Maynor CTO, Errata Security Dave Goldsmith Concerns about ethics for security professionals has been...

  2. Panel: Meet the VCs

    2007 held numerous watershed events for the security industry. Innovation is needed and the money is there. Come to this session and meet the VCs actively investing in security, web, and mobile applications. Learn how VCs see the future, what they are looking for, and how best to utilize them to...

  3. Panel: Meet the Fed

    This year we will have so many feds representing their federal agencies that we will have to break it up into two separate panels: IA Panel: Information Assurance, CERTS, first responder's organizations from agencies including DC3, DHS, SOCOM, NSA, OSD, NDU, and GAO. LE Panel: and Law…

    more

  4. Luke Jennings:One Token to Rule Them All: Post-Exploitation Fun in Windows Environments

    The defense techniques employed by large software manufacturers are getting better. This is particularly true of Microsoft who have improved the security of the software they make tremendously since their Trustworthy Computing initiative. Gone are the days of being able to penetrate any Microsoft...

  5. Lukas Grunwald: Security by Politics - Why it will never work

    Lukas Grunwald CTO of DN-Systems Enterprise Internet Solutions GmbH This talk will show what happens if security is driven by politics and compromise, also I will cover additional security risks by the new generation of electronic passports. It will show why it could be possible to produce fake...

  6. Fred Doyle & Matt Richard: "Beyond Vulnerability Scanning - Extrusion and Exploitability Scanning

    With this presentation we will demonstrate a new tool called eescan that automates extrusion and exploitability scanning using a client/server approach. Eescan will be released under the GPL and utilizes python to create an extensible framework for testing extrusion and exploit defenses. All...

  7. Iftach Ian Amit: The Inherent Insecurity of Widgets and Gadgets

    Widgets (or Gadgets) are small applications, which usually provide some kind of visual information or access to a frequently used function. Because widgets are in fact applications, they too can include malicious code. Furthermore, due to the simplicity of legitimate widgets, such as calculators...

  8. Ofir Arkin: kNAC!

    Network admission control (NAC), network access protection (NAP), network access control (NAC), and many other acronyms refer to a technology which aim to provide with access control verification before (and after) allowing an element to access the network. Unfortunately due to the lack of...

  9. Ask EFF: The Year in Digital Civil Liberties

    Get the latest information about how the law is racing to catch up with technological change from staffers at the Electronic Frontier Foundation, the nation's premiere digital civil liberties group fighting for freedom and privacy in the computer age. This session will include updates on current...

  10. Atlas: Remedial Heap Overflows: dlmalloc style

    Sometimes even the top dudes need a refresher course. Remedial Heap Overflows is not so much a lesson to the lame, but a refresher for the leet. One day the speaker was approached (in a subway, of course) by a top-notch dude (who has his own posse) and asked how they work. Clearly not even the…

    more

  11. Andrea Barisani & Daniele Bianco: Injecting RDS-TMC Traffic Information Signals a.k.a. How to freak out your Satellite Navigation.

    RDS-TMC is a standard based on RDS (Radio Data System) for communicating over FM radio Traffic Information for Satellite Navigation Systems. All modern in-car Satellite Navigation systems sold in Europe use RDS-TMC to receive broadcasts containing up to date information about traffic conditions...

  12. Geoffrey Bennett: The Completion Backward Principle

    If you're responsible for the burglar alarm at your facility, do you understand how it's being monitored by the "Data Monitoring Group" flunkees? Are all those alarm conditions real? The Completion Backward Principle covers issues arising from Internet-enabled monitoring of burglar alarm systems,...

  13. John "jur1st" Benson: Bridging the Gap Between Technology and the Law

    The recent case of Julie Amero has cast a bright spotlight on the difference in understanding between the worlds of technology and the law. We will examine adoption of technology within the legal profession, trial court decisions, as well as legislative and appellate decisions which may be...

  14. Peter Berghammer: A Journalist's Perspective on Security Research

    The presentation details the process whereby journalists select, discard, research and ultimately publish security related articles. It outlines the credibility necessary for security researchers to be taken seriously in the presentation of their findings and examines the "blowback" that criminal...

  15. Sean M. Bodmer: Analyzing Intrusions & Intruders

    Intrusion Analysis has been primarily reserved for network junkies and bit biters. However, due to the advances in network systems automation we now have time to pay more attention to subtle observations left by attackers at the scene of the incident. Century old sciences have enabled criminal...

  16. Sam Bowne: Teaching Hacking at College

    Last semester I taught a new course in "Ethical Hacking and Network Defense" at City College San Francisco. I had legal, ethical, and practical concerns about this class, so I took several precautions to prevent the students from one another, and others from them. The course was a success--it was...

  17. Sergey Bratus: Entropy-based data organization tricks for log and packet capture browsing.

    I will show how entropy, a measure of information content defined by Shannon in 1948, can provide useful ways of organizing and analyzing log data. In particular, we use entropy and mutual information heuristics to group syslog records and packet captures in such a way as to bring out anomalies…

    more

  18. Taylor Brinton & Brett Neilson: Being in the know... Listening to and understanding modern radio systems

    "Being in the know" is key to supporting or violating a security infrastructure. Whether you're taking over the Taco Bell drive through or listening in during a presidential visit, being armed with the right information could drastically affect your outcome and ultimately lead to your success.…

    more

  19. David Byrne: Intranet Invasion With Anti-DNS Pinning

    Cross Site Scripting has received much attention over the last several years, although some of its more ominous implications have not received much attention. Anti-DNS pinning is a relatively new threat that, while not well understood by most security professionals, is far from theoretical. This...

  20. D.J. Capelis: Virtualization: Enough holes to work Vegas

    Have you tried to firewall a machine from itself? Have you ever tried to protect a machine with a multi-personality disorder? These questions are brought to us by the wonderful technology of virtualization. Though the technology is clearly sexy, security has clearly been an afterthought. While...

  21. Anton Chuvakin & Mike Murray: The Science Of Social engineering: NLP

    Social engineering has traditionally been more of an art than a science, we try different things, and if they work, we continue to use them over and over again. Some of the best social engineers have developed excellent technique even without understanding why what they're doing works. Mike &…

    more

  22. Robert Clark: Computer and Internet Security Law?A Year in Review 2006?2007

    This presentation reviews the important prosecutions, precedents and legal opinions of the last year that affect internet and computer security. We will discuss the differences between legal decisions from criminal cases and civil lawsuits and what that means to the security professional....

  23. Greg Conti: Satellite Imagery Analysis

    Satellite imagery was once restricted to organizations like CTU, but now it is freely available to us all via powerful free online tools and commercial services. In this talk we will look at commercial collection platforms and capabilities, orbital mechanics and a variety of imagery analysis...

  24. Crispin Cowan: Securing Linux Applications With AppArmor

    The core of the security problem is that most software contains latent bugs, and many of these bug can be exploited by attackers to cause the software to do something undesirable to the victim's computer. To block this threat, one can either use only perfect software (of which there is a shortage...

  25. Lee Kushner & Mike Murray: Creating and Managing your Security Career

    Careers in information security are often difficult to navigate, with the industry changing more and more radically every year. We're going to talk about the important skills, traits and knowledge that a security pro needs, not just the usual stuff (like "go get a CISSP"), we're going to come…

    more

  26. Jesse 'x30n' D'Aguanno: LAN Protocol Attacks Part 1 - Arp Reloaded

    Ever wanted to hijack a connection between machines on a LAN, deny service between a host you're attacking and a log server or intrusion detection system, or maybe wanted to sniff traffic on a switched network? Now you can! Er, wait... You already could with the ARP attacks we all know and love....

  27. Rick Deacon: Hacking Social Lives: MySpace.com

    Hacking Social Lives: MySpace.com. This presentation will discuss how to hack MySpace.com using web application hacking methods implementing minimal tools outside of the internet, a text editor, and a cookie editor. How to find exploits will be discussed, as well as what to do with the exploits....

  28. Dead Addict: Picking up the Zero Day; An Everyones Guide to Unexpected Disclosures

    Security researchers around the world have been SLAPPed (strategic lawsuits against public participation) across the face by vulnerable software vendors. Bogus legal threats intended to intimidate and prevent public exposure of vulnerabilities are becoming increasingly common. If the software...

  29. Delchi & Valsmith: Malware Secrets

    What would you do if you had a massive collection of malware? What secrets could you uncover? This rapid fire presentation seeks to reveal some of these secrets based on the analysis of Offensive Computing's large malware collection. (Over 100,000 samples) What are malware author's commonly using...

  30. Jared DeMott & Panel: Revolutionizing the Field of Grey-box Attack Surface Testing with Evolutionary Fuzzing

    Runtime code coverage analysis is feasible and useful when application source code is not available. An evolutionary test tool receiving such statistics can use that information as fitness for pools of sessions to actively learn the interface protocol. We call this activity grey-box fuzzing. We...

  31. Ganesh Devarajan: Unraveling SCADA Protocols: Using Sulley Fuzzer

    Firstly, I will be covering the basics of SCADA networks and give a general overview of the SCADA protocols namely Modbus, DNP3, ICCP and IEC standards. North America mainly uses Modbus, DNP3 and to an extent ICCP, the European countries use the IEC standards. After the basics I will be getting...

  32. Roger Dingledine: Tor and blocking-resistance

    Tor project, an anonymous communication system for the Internet that has been funded by both the US Navy and the Electronic Frontier Foundation. Roger Dingledine is a security and privacy researcher. While at MIT he developed Free Haven, one of the early peer-to-peer systems that emphasized...

  33. Toralv Dirro & Dirk Kollberg: Trojans, A Reality Check

    Today there is a lot of hype around some new proof-of-concept technology or around politically motivated trojans, etc. This talk will deliver a reality check, give an idea what kind of malware the McAfee Research organisation is actually seeing to be used in the real world and show how the...

  34. Steve Dunker: Every thing you ever wanted to know about Police Procedure in 50 minutes.

    Ever wonder just what rules law enforcement must follow? When do the police have to read you the Miranda Warnings? Who is subject to a Stop and Frisk? When does Double Jeopardy apply. What does a cop actually have to know before they can legally stop you? What is the effect of an Invalid arrest?...

  35. Luiz Eduardo: The Hacker Society around the (corporate) world.

    I will talk about the evolution and differences of the hacking communities around the world. Why and how this affects the hackers being taken to the corporate life, motivations, or just why is it better to stay totally underground. How companies attract and manage hackers, and how the scare them...

  36. Joel Eriksson & Panel: Kernel Wars

    Kernel vulnerabilities are often deemed unexploitable or at least unlikely to be exploited reliably. Although it's true that kernel-mode exploitation often presents some new challenges for exploit developers, it still all boils down to "creative debugging" and knowledge about the target in...

  37. Nathan S. Evans & Christian Grothoff: Routing in The Dark: Pitch Black

    There is a pervasive dream about a free Internet which is robust, fully decentralized yet efficient, and which ensures privacy for all users. For seven years, the Freenet project has been the most visible embodiment of this vision. This talk will show that the recent 0.7 release of Freenet --...

  38. Gadi Evron: Estonia and Information Warefare

    Estonia is one of the most advanced countries in the world, and just now survived what has been referred to as "the first 'real' cyber conflict". What really happened there, and what does it mean to us? Gadi Evron works for the McLean, VA based vulnerability assessment solution vendor Beyond...

  39. Gadi Evron: Webserver Botnets and Hosting Farms as Attack Platforms

    The thousands of servers in collation centers and hosting farms are irresistible targets for bot-herders in the market for an ideal attack platform. Learn how ISPs are . with varying success . detecting and responding to bot-herders. frequent attempts to take control. Gadi Evron works for the...

  40. Matt Fiddler & Marc Weber Tobias: High Insecurity: Locks, Lies, and Liability

    Matt Fiddler leads a Threat Management Team for a Fortune 100 Organization. Mr. Fiddler's research into lock bypass techniques have resulted in many public and private disclosures of critical lock design flaws. Mr. Fiddler began his career as an Intelligence Analyst with the United States Marine...

  41. Zac Franken: Biometric and token based access control systems: Are you protected by two screws and a plastic cover?

    An overview and demonstration of common access control and biometric systems. This will include the key elements of their implementation and includes in-depth technical analysis of their common weakness. I will then demonstrate bespoke hardware developed to perform an attack that renders most...

  42. Terrence "king tuna" Gareau: Hacking EvDO

    Come and spend 50 minutes with the King, not Elvis, but King Tuna. He is going to give you a peak into EvDo and some of the goodies it has to offer. After a very brief overview of what EvDo is he is going to go into detail about the different hardware options you have, and most importantly, how...

  43. Kenneth Geers: Greetz from Room 101

    Imagine you are king for a day. Enemies are all around you, and they seem to be using the Internet to plot against you. Using real-world cyber war stories from the most tightly controlled nations on Earth, Greetz from Room 101 puts you in the shoes of a king who must defend the royal palace…

    more

  44. Damian Gomez: Intelligent debugging for vuln-dev

    Damian Gomez is a Security Researcher at Immunity, which he joined in February 2006, after five years as the Chief Security Officer at Informar Argentina S.A., where his responsibilities included internal security auditing, network design, and intellectual property management with watermarking...

  45. K N Gopinath: Multipot: A More Potent Variant of Evil Twin

    This presentation pertains to a discovery of a more potent variant of Evil Twin. We call it Multipot. Multipot consists of multiple APs which are configured with the same SSID and lure WiFi clients into connecting to them. The term Multipot is derived from multiple and honeypot. Multipot can…

    more

  46. Joe Grand: Making of the DEFCON 15 Badge

    Joe Grand is an electrical engineer, prominent speaker, and prolific inventor with multiple pending patents and over a dozen commercially available products. He is the President of Grand Idea Studio, a San Francisco-based product research, development, and licensing firm, where he specializes in...

  47. Jennifer Granick: Disclosure and Intellectual Property Law: Case Studies

    The simple decision by a researcher to tell what he or she has discovered about a software product or website can be very complicated both legally and ethically. The applicable legal rules are complicated, there isn't necessarily any precedent, and what rules there are may be in flux. In this...

  48. David Gustin "nonsequitor" & Abraham "AbEnd" Shultz: Hardware Hacking for Software Geeks

    .This presentation is an introduction to hardware design and reverse engineering, with an eye towards developing an individual laboratory for future exploration. We start by covering the basic tools and setting up a laboratory. In this section, we cover the basic tools, such as soldering tools,...

  49. Peter Gutmann: The Commercial Malware Industry

    Malware has come a long way since it consisted mostly of small-scale (if prolific) nuisances perpetrated by script kiddies. Today, it's increasingly being created by professional programmers and managed by international criminal organisations. This talk will look at the methods and technology...

  50. Nathan "Sysmin" Hamiel & Marklar: Creating Unreliable Systems "Attacking the Systems That Attack You"

    Sysmin The Hacker Pimps Marklar The Hacker Pimps This presentation focuses on analysis and strategies in dealing with systems that gather information, more specifically, personal information. This talk suggests that we need to start looking at the technology of the future through different a...

View all 122 episodes →

Type above to search every episode's transcript for a word or phrase. Matches are scoped to this podcast.

Searching…

We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.

No matches for "" in this podcast's transcripts.

Showing of matches

No topics indexed yet for this podcast.

Loading reviews...

ABOUT THIS SHOW

Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn't make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!

HOSTED BY

The Dark Tangent

CATEGORIES

technology how to news

Frequently Asked Questions

How many episodes does DEFCON 15 [Audio] Speeches from the hacker conventions have?

DEFCON 15 [Audio] Speeches from the hacker conventions currently has 122 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.

What is DEFCON 15 [Audio] Speeches from the hacker conventions about?

Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn't make it, or missed the speaker...

How often does DEFCON 15 [Audio] Speeches from the hacker conventions release new episodes?

DEFCON 15 [Audio] Speeches from the hacker conventions publishes regularly with 122 episodes available. Check the episode list for the typical release schedule.

Where can I listen to DEFCON 15 [Audio] Speeches from the hacker conventions?

You can listen to DEFCON 15 [Audio] Speeches from the hacker conventions on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.

Who hosts DEFCON 15 [Audio] Speeches from the hacker conventions?

DEFCON 15 [Audio] Speeches from the hacker conventions is created and hosted by The Dark Tangent.
URL copied to clipboard!