Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Networks
Languages
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1477 1478 1479 1480 1481 1508 1562 1599 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
Crypto and the Cops: the Law of Key Disclosure and Forced Decryption Marcia Hofmann Senior Staff Attorney, Electronic Frontier Foundation Can the government force you to turn over your encryption passphrase or decrypt your data? The law surrounding police attempts to force decryption is developing at breakneck speed, with two major court decisions this year alone. This talk will start off with an in-depth explanation of the Fifth A....
How to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country. It can be extrapolated to any other country. We will show how to get full access to the entire transport network. Manipulating parameters to get free tickets, getting control of the ticket machines, getting clients CC dumps, hooking internal processes to get the cli....
How to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country. It can be extrapolated to any other country. We will show how to get full access to the entire transport network. Manipulating parameters to get free tickets, getting control of the ticket machines, getting clients CC dumps, hooking internal processes to get the cli....
How to Hack All the Transport Networks of a Country Alberto García Illera The presentation is about a real black hacking act against the transport network of a country. It can be extrapolated to any other country. We will show how to get full access to the entire transport network. Manipulating parameters to get free tickets, getting control of the ticket machines, getting clients CC dumps, hooking internal processes to get the cli....
Bigger Monster, Weaker Chains: The National Security Agency and the Constitution Jameel Jaffer Deputy Legal Director, American Civil Liberties Union William Binney Former Official, National Security Agency James Bamford Investigative Journalist Alex Abdo Staff Attorney, American Civil Liberties Union The National Security Agency, the largest, most powerful spy agency in the world, has taken in an estimated 15 to 20 trillio....
Bigger Monster, Weaker Chains: The National Security Agency and the Constitution Jameel Jaffer Deputy Legal Director, American Civil Liberties Union William Binney Former Official, National Security Agency James Bamford Investigative Journalist Alex Abdo Staff Attorney, American Civil Liberties Union The National Security Agency, the largest, most powerful spy agency in the world, has taken in an estimated 15 to 20 trillio....
Bigger Monster, Weaker Chains: The National Security Agency and the Constitution Jameel Jaffer Deputy Legal Director, American Civil Liberties Union William Binney Former Official, National Security Agency James Bamford Investigative Journalist Alex Abdo Staff Attorney, American Civil Liberties Union The National Security Agency, the largest, most powerful spy agency in the world, has taken in an estimated 15 to 20 trillio....
Owning One to Rule Them All Dave Kennedy Chief Security Officer Dave DeSimone Manager, Information Security As penetration testers, we often try to impact an organization as efficient and effective as we can to simulate an attack on an organization. What if you could own one system to own them all? That's it, one system. It's all you need, it's in every company, and as soon as you compromise it, the rest fall (no not a domain co....
Owning One to Rule Them All Dave Kennedy Chief Security Officer Dave DeSimone Manager, Information Security As penetration testers, we often try to impact an organization as efficient and effective as we can to simulate an attack on an organization. What if you could own one system to own them all? That's it, one system. It's all you need, it's in every company, and as soon as you compromise it, the rest fall (no not a domain co....
Owning One to Rule Them All Dave Kennedy Chief Security Officer Dave DeSimone Manager, Information Security As penetration testers, we often try to impact an organization as efficient and effective as we can to simulate an attack on an organization. What if you could own one system to own them all? That's it, one system. It's all you need, it's in every company, and as soon as you compromise it, the rest fall (no not a domain co....
Robots: You're Doing It Wrong 2 Katy Levinson Director of Development, Hacker Dojo By popular demand, Defcon's angry little roboticist is back with more stories of robot designs gone awry that make practical lessons on making better robots. Drinking will happen: vodka-absconding scoundrels are not invited. This talk will cover material assuming the average audience member is a relatively intelligent coder with a high-school p....
Robots: You're Doing It Wrong 2 Katy Levinson Director of Development, Hacker Dojo By popular demand, Defcon's angry little roboticist is back with more stories of robot designs gone awry that make practical lessons on making better robots. Drinking will happen: vodka-absconding scoundrels are not invited. This talk will cover material assuming the average audience member is a relatively intelligent coder with a high-school p....
Robots: You're Doing It Wrong 2 Katy Levinson Director of Development, Hacker Dojo By popular demand, Defcon's angry little roboticist is back with more stories of robot designs gone awry that make practical lessons on making better robots. Drinking will happen: vodka-absconding scoundrels are not invited. This talk will cover material assuming the average audience member is a relatively intelligent coder with a high-school p....
Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2 Moxie Marlinspike David Hulton Marsh Ray MS-CHAPv2 is an authentication and key negotiation protocol that, while old and battered, is still unfortunately deployed quite widely. It underpins almost all PPTP VPN services, and is relied upon by many WPA2 Enterprise wireless deployments. We will release tools that definitively break the protocol, allowing anyone to affordably....
Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2 Moxie Marlinspike David Hulton Marsh Ray MS-CHAPv2 is an authentication and key negotiation protocol that, while old and battered, is still unfortunately deployed quite widely. It underpins almost all PPTP VPN services, and is relied upon by many WPA2 Enterprise wireless deployments. We will release tools that definitively break the protocol, allowing anyone to affordably....
Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2 Moxie Marlinspike David Hulton Marsh Ray MS-CHAPv2 is an authentication and key negotiation protocol that, while old and battered, is still unfortunately deployed quite widely. It underpins almost all PPTP VPN services, and is relied upon by many WPA2 Enterprise wireless deployments. We will release tools that definitively break the protocol, allowing anyone to affordably....
SCADA HMI and Microsoft Bob: Modern Authentication Flaws With a 90's Flavor Wesley McGrew Research Associate and Lecturer Critical Infrastructure Protection Center, National Forensics Training Center, Mississippi State University SCADA HMI software provides a "control panel" interface to SCADA/ICS systems, allowing system operators and engineers the capability to visually monitor and make changes to parameters in the system. Man....
SCADA HMI and Microsoft Bob: Modern Authentication Flaws With a 90's Flavor Wesley McGrew Research Associate and Lecturer Critical Infrastructure Protection Center, National Forensics Training Center, Mississippi State University SCADA HMI software provides a "control panel" interface to SCADA/ICS systems, allowing system operators and engineers the capability to visually monitor and make changes to parameters in the system. Man....
SCADA HMI and Microsoft Bob: Modern Authentication Flaws With a 90's Flavor Wesley McGrew Research Associate and Lecturer Critical Infrastructure Protection Center, National Forensics Training Center, Mississippi State University SCADA HMI software provides a "control panel" interface to SCADA/ICS systems, allowing system operators and engineers the capability to visually monitor and make changes to parameters in the system. Man....
Making Sense of Static - New Tools for Hacking GPS Fergus Noble Colin Beighley GPS receivers are a part of everyday life, you probably own several already and use them everyday, in your phone or in your car. Its really pretty amazing that you can find your position anywhere on Earth with just a small device you can fit in your pocket, but how does it actually work? In this talk we would like to guide you through the amazing tech....
Making Sense of Static - New Tools for Hacking GPS Fergus Noble Colin Beighley GPS receivers are a part of everyday life, you probably own several already and use them everyday, in your phone or in your car. Its really pretty amazing that you can find your position anywhere on Earth with just a small device you can fit in your pocket, but how does it actually work? In this talk we would like to guide you through the amazing tech....
Making Sense of Static - New Tools for Hacking GPS Fergus Noble Colin Beighley GPS receivers are a part of everyday life, you probably own several already and use them everyday, in your phone or in your car. Its really pretty amazing that you can find your position anywhere on Earth with just a small device you can fit in your pocket, but how does it actually work? In this talk we would like to guide you through the amazing tech....
Panel: The Making of DEF CON 20 Have you ever wondered what it takes to put DEF CON together, Well now is your chance to find out. DEF CON is broken down into 10 departments: Security, Networking, Press, Speaker Ops, Contests, Vendors, Swag Booth, Registration, Quarter Master, and Operations. Each of the department heads (aka the DEF CON Planning Staff) will be part of this panel and will give an overview of what we do the other 361 d..
Panel: The Making of DEF CON 20 Have you ever wondered what it takes to put DEF CON together, Well now is your chance to find out. DEF CON is broken down into 10 departments: Security, Networking, Press, Speaker Ops, Contests, Vendors, Swag Booth, Registration, Quarter Master, and Operations. Each of the department heads (aka the DEF CON Planning Staff) will be part of this panel and will give an overview of what we do the other 361 d..
Panel: The Making of DEF CON 20 Have you ever wondered what it takes to put DEF CON together, Well now is your chance to find out. DEF CON is broken down into 10 departments: Security, Networking, Press, Speaker Ops, Contests, Vendors, Swag Booth, Registration, Quarter Master, and Operations. Each of the department heads (aka the DEF CON Planning Staff) will be part of this panel and will give an overview of what we do the other 361 d..
Creating an A1 Security Kernel in the 1980s (Using "Stone Knives and Bear Skins") Tom Perrine Sr Enterprise Architect, Sr Manager IT Infrastructure This is a retrospective of computer security research and the process of building a secure operating system for the US government 1983-1990. The paper presents the case study of Kernelized Secure Operating System (KSOS), an A1 security-kernel operating system. KSOS was written to protec....
The Safety Dance - Wardriving the Public Safety Band Robert Portvliet Foundstone Brad Antoniewicz Foundstone The 4.9Ghz Public Safety Band has been deployed to a town near you! Police, Emergency Medical, and even Critical Infrastructure (power plants, etc.) maintain wireless networks on this seemingly ‘hidden’ band ... but what’s actually there? How can you identify and monitor these networks? Stop by and find out the answers to..
Creating an A1 Security Kernel in the 1980s (Using "Stone Knives and Bear Skins") Tom Perrine Sr Enterprise Architect, Sr Manager IT Infrastructure This is a retrospective of computer security research and the process of building a secure operating system for the US government 1983-1990. The paper presents the case study of Kernelized Secure Operating System (KSOS), an A1 security-kernel operating system. KSOS was written to protec....
The Safety Dance - Wardriving the Public Safety Band Robert Portvliet Foundstone Brad Antoniewicz Foundstone The 4.9Ghz Public Safety Band has been deployed to a town near you! Police, Emergency Medical, and even Critical Infrastructure (power plants, etc.) maintain wireless networks on this seemingly ‘hidden’ band ... but what’s actually there? How can you identify and monitor these networks? Stop by and find out the answers to..
Creating an A1 Security Kernel in the 1980s (Using "Stone Knives and Bear Skins") Tom Perrine Sr Enterprise Architect, Sr Manager IT Infrastructure This is a retrospective of computer security research and the process of building a secure operating system for the US government 1983-1990. The paper presents the case study of Kernelized Secure Operating System (KSOS), an A1 security-kernel operating system. KSOS was written to protec....
The Safety Dance - Wardriving the Public Safety Band Robert Portvliet Foundstone Brad Antoniewicz Foundstone The 4.9Ghz Public Safety Band has been deployed to a town near you! Police, Emergency Medical, and even Critical Infrastructure (power plants, etc.) maintain wireless networks on this seemingly ‘hidden’ band ... but what’s actually there? How can you identify and monitor these networks? Stop by and find out the answers to..
Attacking TPM Part 2: A Look at the ST19WP18 TPM Device Chris Tarnovsky Flylogic, Inc. The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are. Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and spec..
Attacking TPM Part 2: A Look at the ST19WP18 TPM Device Chris Tarnovsky Flylogic, Inc. The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are. Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and spec..
Attacking TPM Part 2: A Look at the ST19WP18 TPM Device Chris Tarnovsky Flylogic, Inc. The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are. Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and spec..
Twenty Years Back, Twenty Years Ahead: The Arc of DEF CON Past and Future Richard Thieme, ThiemeWorks Thieme's keynote at DEF CON 4 for a few hundred people was "Hacking as Practice for Trans-planetary Life in the 21st Century." Mudge recently said, "Some of us knew what you meant, and some of us thought you were nuts." That's likely to be the response to this talk too. Thieme addresses what he said 17 cons ago, why it was true, and ....
Twenty Years Back, Twenty Years Ahead: The Arc of DEF CON Past and Future Richard Thieme, ThiemeWorks Thieme's keynote at DEF CON 4 for a few hundred people was "Hacking as Practice for Trans-planetary Life in the 21st Century." Mudge recently said, "Some of us knew what you meant, and some of us thought you were nuts." That's likely to be the response to this talk too. Thieme addresses what he said 17 cons ago, why it was true, and ....
Twenty Years Back, Twenty Years Ahead: The Arc of DEF CON Past and Future Richard Thieme, ThiemeWorks Thieme's keynote at DEF CON 4 for a few hundred people was "Hacking as Practice for Trans-planetary Life in the 21st Century." Mudge recently said, "Some of us knew what you meant, and some of us thought you were nuts." That's likely to be the response to this talk too. Thieme addresses what he said 17 cons ago, why it was true, and ....
Socialized Data: Using Social Media as a Cyber Mule Thor (Hammer of God) Chief Deity, Hammer of God I don't wear hats. But if I did, even though I'm in an underground bunker in the dark, it would be kind of "off-whitish-grey." Like many, many of us in this industry I don't do anything "bad" even though I can. That's because I choose not to. I think "Freedom" is doing what you want to do - as a corollary, I think "Liberty" is the degr....
Socialized Data: Using Social Media as a Cyber Mule Thor (Hammer of God) Chief Deity, Hammer of God I don't wear hats. But if I did, even though I'm in an underground bunker in the dark, it would be kind of "off-whitish-grey." Like many, many of us in this industry I don't do anything "bad" even though I can. That's because I choose not to. I think "Freedom" is doing what you want to do - as a corollary, I think "Liberty" is the degr....
Socialized Data: Using Social Media as a Cyber Mule Thor (Hammer of God) Chief Deity, Hammer of God I don't wear hats. But if I did, even though I'm in an underground bunker in the dark, it would be kind of "off-whitish-grey." Like many, many of us in this industry I don't do anything "bad" even though I can. That's because I choose not to. I think "Freedom" is doing what you want to do - as a corollary, I think "Liberty" is the degr....
The DCWG Debriefing - How the FBI Grabbed a Bot and Saved the Internet Paul Vixie Chairman and Founder, Internet Systems Consortium Andrew Fried Senior Consultant, Cutter Consortium's Business Technology Strategies and Government & Public Sector Practices In November of 2011 a multinational force of feds and wizards took down Rove Digital's on-line infrastructure including the DNS Changer name servers. Under contract to the FBI, ....
The DCWG Debriefing - How the FBI Grabbed a Bot and Saved the Internet Paul Vixie Chairman and Founder, Internet Systems Consortium Andrew Fried Senior Consultant, Cutter Consortium's Business Technology Strategies and Government & Public Sector Practices In November of 2011 a multinational force of feds and wizards took down Rove Digital's on-line infrastructure including the DNS Changer name servers. Under contract to the FBI, ....
The DCWG Debriefing - How the FBI Grabbed a Bot and Saved the Internet Paul Vixie Chairman and Founder, Internet Systems Consortium Andrew Fried Senior Consultant, Cutter Consortium's Business Technology Strategies and Government & Public Sector Practices In November of 2011 a multinational force of feds and wizards took down Rove Digital's on-line infrastructure including the DNS Changer name servers. Under contract to the FBI, ....
The Christopher Columbus Rule and DHS Mark Weatherford Deputy Undersecretary for Cybersecurity for the National Protection and Programs Directorate (NPPD) at the United States Department of Homeland Security. "Never fail to distinguish what's new, from what's new to you." This rule applies to a lot people when they think about innovation and technology in the government. At the U.S. Department of Homeland Security, in addition to r....
1 2 3 5 8 11 17 25 37 54 79 116 170 249 365 532 534 783 895 1144 1146 1313 1429 1477 1478 1479 1480 1481 1508 1562 1599 1624 1641 1653 1661 1667 1670 1673 1675 1676 1677 1678 ▲ ▼
126 visitors online