![DEFCON 16 [Video] Speeches from the Hacker Convention. podcast artwork](https://www.defcon.org/images/podcast/defcon-16-video-itunes-logo.png){kind=logo}
PODCAST · technology
DEFCON 16 [Video] Speeches from the Hacker Convention.
by The Dark Tangent
Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn't make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!
Episodes
-
Scott Moulton: Forensics is ONLY for Private Investigators
If the only requirement for you to become a Computer Forensic person is to be a Private Investigator, why would you ever take a certification again? You would never need to be a CCE (computer certified examiner), nor any other certification of any kind. You would be one of the only people in your...
-
Ben Feinstein: The Wide World of WAF's
With webapp protection now mandated by the PCI standard, web-application firewalls (WAFs) have received newfound interest from both consumers of security technologies, as well as from security researchers and potential attackers. Now that WAFs are a PCI-approved substitute for code reviews…
more -
Magnus Brading: Generic, Decentralized, Unstoppable Anonymity: The Phantom Protocol
Recent years, and especially this past year, have seen a notable upswing in developments toward anti online privacy around the world, primarily in the form of draconian surveillance and censorship laws (both passed and attempted) and ISPs being pressured into individually acting as both police…
more -
Adam Bregenzer: Buying Time- What is your Data Worth? ( A generalized Solution to distributed Brute Force attacks)
Brute Force attacks are often marginalized as a user issue or discounted as a non-issue because of sufficient password complexity. Because rainbow tables have provided a re-invigoration of this type of attack, maintaining password security is simply not enough. In this session, I will be…
more -
The Dark Tangent & Joe "Kingpin" Grand: Welcome & Making of the Badge Talk
The Dark Tangent welcomes the Defcon 16 attendees at the start of the conference. For the third year in a row, Kingpin has had the honor of designing the DEFCON Badge. No longer just a boring piece of passive material, the badge is now a full-featured, active electronic product. If you're up…
more -
Alexander Lash: Taking Back your Cellphone
This presentation will cover a variety of topics of interest to anyone on a cellphone network in the US. I'm going to cover how to use your own backends for MMS and WAP access, unlock Bluetooth tethering, and circumvent some of the more obnoxious carrier restrictions. Of course, the best part is...
-
Anton Kapela & Alex Pilosov: Stealing The Internet - A Routed, Wide-area, Man in the Middle Attack
In this presentation we're going to show Defcon how broken the Internet is, how helpless its users are without provider intervention, and how much apathy there is towards routing security. With the method described in this talk, an attacker is able to gain full control and visibility of all IP...
-
Anthony Martinez & Thomas Bowen : Toasterkit, a modular NetBSD rootkit.
NetBSD is a portable operating system for just about every architecture available. There is a notable lack of tools available for the penetration tester. In this talk we will present Toasterkit, a generic NetBSD rootkit. It has been tested on i386, Mac PPC, and VAX systems. Anthony Martinez is a...
-
Atlas: VulnCatcher: Fun with Vtrace and Programmatic Debugging
Countless hours are spent researching vulnerabilities in proprietary and open source software for each bug found. Many indicators of potential vulnerabilities are visible both in the disassembly and debugging, if you know what to look for. How much can be automated? VulnCatcher illustrates the...
-
Ben Feinstein: Snort Plug-in Development: Teaching an Old Pig New Tricks
Snort has become a standard component of many IT security environments. Snort is mature and widely deployed, and is no longer viewed as new or exciting by the industry. However, with such widespread deployment, enhancing Snort's capabilities offers the potential for a large and immediate impact....
-
Blake Self, Durandal & Bitemytaco: Free Anonymous Internet Using Modified Cable Modems
Using various modifications and techniques - it is possible to gain free and anonymous cable modem internet access. This talk will analyze and discuss the tools, techniques, and technology behind both hacking cable modems and attempting to catch the users who are hacking cable modems. Previously...
-
Brenno J.S.A.A.F. de Winter: Hacking Data Retention: Small Sister your digital privacy self defense.
Over the last couple of years a range of privacy threats have been in occurring. Europe is starting to look like the playing field of what is to come to the US: Storage of all e-mail traffic, online presence, phone calls, actual traveling throughout nations and filtering of content. Fortunately a...
-
Brenno J.S.A.A.F. de Winter:The Anatomy of a Subway Hack: Discussion
This talk was given by Brenno de Winter in place of the much talked about canceled talk : The Anatomy of a Subway Hack:Breaking Crypto RFID's and Magstripes of Ticketing Systems by the original authors: Zack Anderson,Student, MIT RJ Ryan,Student, MIT Alessandro Chiesa,Student, MIT Original…
more -
Brian K. Edwards & Silvio J. Flaim: Measuring and Integrating the Shadow Economy: A Sector-Specific Approach
Much literature has addressed the issue of the relative sizes of shadow economies in different countries. What is largely missing from this discussion is a more structured discussion on how to incorporate estimates of shadow economic activity into the national income accounting framework and a...
-
Bruce Potter: Malware Detection through Network Flow Analysis
Over the last several years, we've seen a decrease in effectiveness of "classical" security tools. The nature of the present day attacks is very different from what the security community has been used to in the past. Rather than wide-spread worms and viruses that cause general havoc, attackers…
more -
Cameron Hotchkies: Under the iHood
The market share for Apple devices has grown considerably over the past few years, but most reverse engineering topics still focus on Microsoft platforms. This talk will outline what is necessary to begin reversing software on OS X. This will include a rundown of the tools available to an apple...
-
Chema Alonso & Jose Parada: Time-Based Blind SQL Injection using heavy queries: A practical approach for MS SQL Server, MS Access, Oracle and MySQL databases and Marathon Tool
This presentation describes how attackers could take advantage of SQL Injection vulnerabilities using time-based blind SQL injection. The goal is to stress the importance of establishing secure development best practices for Web applications and not only to entrust the site security to the...
-
Chris Eagle & Tim Vidas: Next Generation Collaborative Reversing with Ida Pro and CollabREate
A major drawback with the use of most reverse engineering tools is that they were not designed with collaboration in mind. Numerous kludgy solutions exist from asynchronous use of the same data files to working on multiple copies of data files which quickly diverge leaving the differences to...
-
Christopher Tarnovsky: Inducing Momentary Faults Within Secure Smartcards / Microcontrollers
This presentation is intended for individuals with an understanding of the Intel 8051 and Motorola 6805 processor families from an Assembly language perspective. This will be an interactive presentation with the audience. Log files will be examined that have been taken from the targets…
more -
Clinton Wong: Web Privacy & Flash Local Shared Objects.
This talk discusses privacy issues concerning Adobe Flash Local Shared Objects. Adobe LSOs are similar to HTTP cookies, but not as easily controlled or configured using a standard web browser. Potential problems with Flash LSOs will be presented, as well as suggestions for increasing privacy…
more -
D.J. Capelis: Building a Real Session Layer
It's past time for a session layer. It's time to replace port knocking with a real authentication framework. It's time to do what DNS did with IP addresses to port numbers. It's time to run services over NATs, eliminate the need for vhosts in your webserver and provide optional transparent...
-
Dan Kaminsky: Black Ops 2008
DNS is at the heart of every network -- when a web site is browsed to, it says where the site is, and when an email is sent, DNS says where to. The answer is usually correct -- but not always. Six months ago, it became clear that there was an ancient design flaw, present in the original 1983...
-
David Byrne & Eric Duprey: Grendel-Scan: A new web application scanning tool
While commercial web application scanners have been available for quite a while, the selection of open source tools has been limited. Grendel-Scan is a new tool that aims to provide in-depth application assessment. Written entirely in Java and featuring an easy to use GUI, the tool is intended to...
-
David Maynor & Robert Graham: Bringing Sexy Back: Breaking in with Style
Security is getting better; there is no doubt about that. High value targets are increasing their security while buying into the buzzword hype with phrases like "defense in depth". Firewalls, IPS, AV, NAC, and a host of other technologies have done a lot to give the pointy hair bosses of the…
more -
David Scott Lewis: Fireside Chat
Fireside Chat With David Scott Lewis, IT & Green Tech Engineer, Model for Daidi Lightman
-
David Weston & Tiller Beauchamp : RE:Trace: The Reverse Engineer's Unexpected Swiss Army Knife
This presentation will detail the newest developments in RE:Trace, a reverse engineering framework based on Ruby and DTrace. We will discuss implementations for walking and searching the heap on OS X, tracing for kernel and driver vulnerabilities, pinpointing format string bugs and leveraging...
-
Don M. Blumenthal: What To Do When Your Data Winds Up Where It Shouldn't
Stories about the loss of sensitive data are becoming more common, and an untold number of others probably are not known because they were not covered by law or did not get the attention of regulators. A loss may happen when data is stolen or simply lost, or when a system is breached. Existing...
-
Don M. Blumenthal: Working with Law Enforcement
Security-related laws and regulations, with parallel privacy measures, are assuming an ever-expanding role in American society. As a result, the likelihood that an organization will receive a call, visit, subpoena, or letter from a law enforcement agency is constantly increasing. This program…
more -
Doug Farre: Identification Card Security
Come learn how identification cards have taken over our lives, how they can be manufactured at home, and how you can start a legal ID making business. Come learn all the tips and tricks about amateur id manufacturing and pickup the first ever Complete Amateur ID Making Guide. Also, come test your...
-
Eric Schmiedl: Advanced Physical Attacks: Going Beyond Social Engineering and Dumpster Diving, Or, Techniques of Industrial Espionage
Your stack is smash-proof. Your dumpster is fully alarmed. And your firewall is so secure that it has former Soviet officials green with envy. So why are the developers finding their undocumented features in competitors' products, or company executives on a constant hunt for leaks and traitors?...
-
Eric Smith & Dr. Shana Dardan: Medical Identity Theft
In less than an hour, during a scheduled pentest, our team was able to retrieve 3.2 million patient insurance records from a HIPAA-compliant medical facility. Using these records, we could have generated counterfeit insurance and prescription cards which would pass muster at any doctor's office…
more -
Fabian "Fabs" Yamaguchi & FX: New ideas for old practices - Port-Scanning improved
How fast a port-scan can be is largely dependent on the performance of the network in question. Nonetheless, it is clear that choosing the most efficient scanning-speed is only possible based on sufficient information on the network's performance. We have thus designed and implemented a...
-
Ferdinand Schober: Gaming - the next overlooked security hole
"Thanks to Web 2.0 and other over hyped BS, development has been moving farther and farther away from bare metal. Assuming you trust your libraries, this could even be called a good thing. If you're high." PC gaming, despite Microsoft's best efforts, is not dead. Yet. The modding community is…
more -
Fouad Kiamilev & Ryan Hoover: Demonstration of Hardware Trojans
Recent developments such as the FBI operation "Cisco Raider" that resulted in the discovery of 3,500 counterfeit Cisco network components show the growing concern of U.S. government about an electronic hardware equivalent of a "Trojan horse". In an electronic Trojan attack, extra circuitry is...
-
FX: Developments in Cisco IOS Forensics
Attacks on network infrastructure are not a new field. However, the increasing default protections in common operating systems, platforms and development environments increase interest in the less protected infrastructure sector. Today, performing in-depth crash analysis or digital forensics is...
-
FX: Toying with Barcodes
The talk focuses on 1D and 2D barcode applications with interference possibilities for the ordinary citizen. Ever wondered what is in these blocks of squares on postal packages, letters and tickets? Playing with them might have interesting effects, reaching from good old fun to theft and severe...
-
Fyodor: Nmap: Scanning the Internet
The Nmap Security Scanner was built to efficiently scan large networks, but Nmap's author Fyodor has taken this to a new level by scanning millions of Internet hosts as part of the Worldscan project. He will present the most interesting findings and empirical statistics from these scans, along…
more -
G. Mark Hardy: A Hacker Looks at 50
Take a trip back in time and discover what hacking was like in the pioneer days -- before the Internet, the PC, or even the Commodore 64 or TRS-80. The speaker started "exploring" computer systems in 1973, when the only law about hacking was the hacker ethic itself. Join a humorous reminiscence...
-
Greg Conti: Could Googling Take Down a President, a Prime Minister, or an Average Citizen?.
Every time we use the web, we disclosure tremendous amounts of information to ISPs, Internet backbone providers, and online companies; information that will be shared and data mined, but rarely discarded. Email addresses, phone numbers, aggregated search queries, cookies, IP addresses - any…
more -
Guy Martin: Sniffing Cable Modems
Cable modems are widely used these days for internet connections or other applications. This talk gives a detailed overview of this mean of communication with a focus on its security. DOCSIS (Data Over Cable Service Interface Specification) is currently the most used protocol around the world for...
-
Ian Angell: Digital Security, A Risky Business
In this talk Professor Angell will take the Devils advocate position, warning that computer technology is part of the problem as well as of the solution. The belief system at the core of computerization is positivist and/or statistical, and that itself leads to risk. The mixture of computers and...
-
Ian Clarke: Hacking Desire
What do you want? This is the question that almost every commercial organization on the planet thinks they have an answer to, but do they? Figuring out what people want is essentially a process of reverse engineering human needs, desire, and preference. It turns out that hackers are particularly...
-
Igor Muttik: Good Viruses. Evaluating the Risks.
This session will discuss the risks associated with creation of replicating code. A combination of wide availability of virus source code as well as the problem of control over replicating code make these experiments quite risky. To demonstrate these points we shall see how a computer virus was...
-
James Shewmaker: StegoFS
This talk will reintroduce classic steganographic techniques to use with serializing, watermarking, or stashing your data in the latest Internet meme. Why not let everyone who is forwarding yet another painful nut-shot AFHV clip store your data for you? We will create a simple filesystem that is...
-
Jan Newger: Anti-RE Techniques in DRM Code
In order to prevent music from being copied among consumers, content providers often use DRM systems to protect their music files. This talk describes the approach taken while analysing a DRM system (whose identity needs to be kept secret due to legal issues). It is shown what techniques were…
more -
Jason Scott: Making a Text Adventure Documentary
For the past 3 years, Jason Scott (creator of BBS: The Documentary) has been working on another project, telling the history and the legends of text adventure games. 80 interviews later, he comes to DEFCON to show footage, describe the process of making the film, why history of games is…
more -
Jay Beale: They're Hacking Our Clients! Introducing Free Client-side Intrusion Prevention.
In the face of far stronger firewall and IPS-protected perimeters,attackers are compromising far more systems by hacking our web browsers, e-mail clients, and office document tools. Unfortunately,vulnerability assessment practices still focus on checking listening services, even on workstations....
-
Jay Beale: Owning the Users with Agent in the Middle
This talk introduces a new open source, plugin-extensible attack tool for exploiting web applications that use cleartext HTTP, if only to redirect the user to the HTTPS site. We'll demonstrate attacks on online banking as well as Gmail, LinkedIn, LiveJournal and Facebook. We'll also compromise...
-
Jim O'Leary: Every Breath You Take
How much data do you generate in the process of living an ordinary day? This talk covers various ways to gather, persist and analyze the data stream that is your life. We'll cover a few of the approaches that are available today, some easy code you can whip up to persist anything you please, and...
-
Joe Cicero &Michael Vieau: Hacking E.S.P.
Have you gone to school? Are you going to school? Do you work at a school? How do you prove you went to a particular high school, college or university? FACT: Educational institutions MUST keep your personal/confidential information. Therefore, your personal/confidential information might be at...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn't make it, or missed the speaker you wanted to see here is you chance to download and watch the presentations when you want. Video, audio and supporting materials from past conferences will be posted here, starting with the newest and working our way back to the oldest with new content added as available!
HOSTED BY
The Dark Tangent
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does DEFCON 16 [Video] Speeches from the Hacker Convention. have?
DEFCON 16 [Video] Speeches from the Hacker Convention. currently has 121 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is DEFCON 16 [Video] Speeches from the Hacker Convention. about?
Past speeches and talks from DEF CON hacking conferences in an iTunes friendly Mp4 format. The DEFCON series of hacking conferences were started in 1993 to focus on both the technical and social trends in hacking, and has grown to be world known event. If you didn't make it, or missed the speaker...
How often does DEFCON 16 [Video] Speeches from the Hacker Convention. release new episodes?
DEFCON 16 [Video] Speeches from the Hacker Convention. publishes regularly with 121 episodes available. Check the episode list for the typical release schedule.
Where can I listen to DEFCON 16 [Video] Speeches from the Hacker Convention.?
You can listen to DEFCON 16 [Video] Speeches from the Hacker Convention. on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts DEFCON 16 [Video] Speeches from the Hacker Convention.?
DEFCON 16 [Video] Speeches from the Hacker Convention. is created and hosted by The Dark Tangent.
URL copied to clipboard!