Site uses cookies to provide basic functionality.
Javascript rendering is set to off by default when visiting the site via .onion and .i2p domains. It can be enabled back again in user's settings section. Javascript rendering set to off means, that you can disable javascript in your browser now and the site will remain functional.
There is also IRC server now available via native IRC clients or non javascript web based one.
Fonts can be adjusted in user's settings section as well.
Check FAQ for more.

OK

Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..

Cloud Security in Map/Reduce Jason Schlesinger Security Researcher This presentation is an overview of the operations principles of Map/Reduce and Hadoop with examples of typical implementation in a business environment. It points out significant security issues that now exist and others that will certainly arise. The presentation also offers suggestions for improving security in existing installations, and presents improvements to p..

That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....

That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....

That Awesome Time I Was Sued For Two Billion Dollars Jason Scott Textfiles.com In a world where scams are now considered as commonplace as functioning websites and cell phones, it's sometimes too easy to forget the insidiousness and complicated preparation that can go into a well-honed misleading attempt to gain financially from unknowing people. It also helps if you're this side of crazy. For over a decade, Jason Scott (and a group ....

The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....

The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....

The Middler 2.0: It's Not Just for Web Apps Anymore Jay Beale Co-Founder, InGuardians, Inc. Justin Searle Sr. Security Analyst, InGuardians The Middler is a next-generation man-in-the-middle tool that takes the focus beyond the raw mechanics of the protocol on to the application itself. New for Def Con, it now can man in the middle Voice over IP (VoIP), producing the opportunity to interactively redirect calls, join them, or take t....

I Am Walking Through a City Made of Glass and I Have a Bag Full of Rocks" (Dispelling the Myths and Discussing the Facts of Global Cyber-Warfare) Jayson E. Street CIO Stratagem 1 Solutions There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualti....

I Am Walking Through a City Made of Glass and I Have a Bag Full of Rocks" (Dispelling the Myths and Discussing the Facts of Global Cyber-Warfare) Jayson E. Street CIO Stratagem 1 Solutions There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualti....

I Am Walking Through a City Made of Glass and I Have a Bag Full of Rocks" (Dispelling the Myths and Discussing the Facts of Global Cyber-Warfare) Jayson E. Street CIO Stratagem 1 Solutions There is a war being raged right now. It is being fought in your living room, in your dorm room even in your board room. The weapons are your network and computers and even though it is bytes not bullets whizzing by that does not make the casualti....

Cross Site Scripting Anonymous Browser 2.0 Jeff Yestrumskas Security Researcher Matt Flick Principal at FYRM Associates Cross Site Scripting Anonymous Browser, Version 2.0 Earlier this year, the Cross-site Scripting Anonymous Browser ("XAB") was presented as a new perspective on how we could extend the functionality of browser technologies, form dynamic botnets for browsing, and create an unpronounceable acronym all at once. We con....

Cross Site Scripting Anonymous Browser 2.0 Jeff Yestrumskas Security Researcher Matt Flick Principal at FYRM Associates Cross Site Scripting Anonymous Browser, Version 2.0 Earlier this year, the Cross-site Scripting Anonymous Browser ("XAB") was presented as a new perspective on how we could extend the functionality of browser technologies, form dynamic botnets for browsing, and create an unpronounceable acronym all at once. We con....

Cross Site Scripting Anonymous Browser 2.0 Jeff Yestrumskas Security Researcher Matt Flick Principal at FYRM Associates Cross Site Scripting Anonymous Browser, Version 2.0 Earlier this year, the Cross-site Scripting Anonymous Browser ("XAB") was presented as a new perspective on how we could extend the functionality of browser technologies, form dynamic botnets for browsing, and create an unpronounceable acronym all at once. We con....

The Year In Computer Crime Cases Jennifer Granick Civil Liberties Director, EFF Its been a booming year for computer crime cases as cops and civil litigants have pushed the envelope to go after people using fake names on social networking sites (the MySpace suicide case), researchers giving talks at DEFCON (MBTA v. Anderson), and students sending email to other students (the Calixte/Boston College case). The Electronic Frontier Found....

The Year In Computer Crime Cases Jennifer Granick Civil Liberties Director, EFF Its been a booming year for computer crime cases as cops and civil litigants have pushed the envelope to go after people using fake names on social networking sites (the MySpace suicide case), researchers giving talks at DEFCON (MBTA v. Anderson), and students sending email to other students (the Calixte/Boston College case). The Electronic Frontier Found....

The Year In Computer Crime Cases Jennifer Granick Civil Liberties Director, EFF Its been a booming year for computer crime cases as cops and civil litigants have pushed the envelope to go after people using fake names on social networking sites (the MySpace suicide case), researchers giving talks at DEFCON (MBTA v. Anderson), and students sending email to other students (the Calixte/Boston College case). The Electronic Frontier Found....

Catching DNS Tunnels with AI - A Talk About Artificial Intelligence, Geometry and Malicious Network Traffic jhind Security Researcher The in-depth explanation, demonstration and release of a working adaptive solution for data mining DNS tunnels from network traffic. jhind has shared a passion for security inside government, academia and industry for well over a decade. He has countless hours of sleep-deprived research and teachi..

Catching DNS Tunnels with AI - A Talk About Artificial Intelligence, Geometry and Malicious Network Traffic jhind Security Researcher The in-depth explanation, demonstration and release of a working adaptive solution for data mining DNS tunnels from network traffic. jhind has shared a passion for security inside government, academia and industry for well over a decade. He has countless hours of sleep-deprived research and teachi..

Catching DNS Tunnels with AI - A Talk About Artificial Intelligence, Geometry and Malicious Network Traffic jhind Security Researcher The in-depth explanation, demonstration and release of a working adaptive solution for data mining DNS tunnels from network traffic. jhind has shared a passion for security inside government, academia and industry for well over a decade. He has countless hours of sleep-deprived research and teachi..

he Projects of "Prototype This!" Joe Grand (Kingpin) Zoz Designing and building projects is hard. Designing and building projects of things that have never been done before is harder. Designing and building projects of things that have never been done before with the financial and time constraints of TV is ridiculous. For 18 months, Joe Grand and Zoz were co-hosts of Prototype This! on Discovery Channel, an engineering enterta....

he Projects of "Prototype This!" Joe Grand (Kingpin) Zoz Designing and building projects is hard. Designing and building projects of things that have never been done before is harder. Designing and building projects of things that have never been done before with the financial and time constraints of TV is ridiculous. For 18 months, Joe Grand and Zoz were co-hosts of Prototype This! on Discovery Channel, an engineering enterta....

he Projects of "Prototype This!" Joe Grand (Kingpin) Zoz Designing and building projects is hard. Designing and building projects of things that have never been done before is harder. Designing and building projects of things that have never been done before with the financial and time constraints of TV is ridiculous. For 18 months, Joe Grand and Zoz were co-hosts of Prototype This! on Discovery Channel, an engineering enterta....

Smart" Parking Meter Implementations, Globalism, and You (aka Meter Maids Eat Their Young) Joe "Kingpin" Grand Jake Appelbaum Chris Tarnovsky Throughout the United States, cities are deploying "smart" electronic fare collection infrastructures that have been commonplace in European countries for many years. In 2003, San Francisco launched a $35 million pilot program to replace approximately 23,000 mechanical parking meters with....

Smart" Parking Meter Implementations, Globalism, and You (aka Meter Maids Eat Their Young) Joe "Kingpin" Grand Jake Appelbaum Chris Tarnovsky Throughout the United States, cities are deploying "smart" electronic fare collection infrastructures that have been commonplace in European countries for many years. In 2003, San Francisco launched a $35 million pilot program to replace approximately 23,000 mechanical parking meters with....

Smart" Parking Meter Implementations, Globalism, and You (aka Meter Maids Eat Their Young) Joe "Kingpin" Grand Jake Appelbaum Chris Tarnovsky Throughout the United States, cities are deploying "smart" electronic fare collection infrastructures that have been commonplace in European countries for many years. In 2003, San Francisco launched a $35 million pilot program to replace approximately 23,000 mechanical parking meters with....

Hadoop: Apache's Open Source Implementation of Google's MapReduce Framework Joey Calca Hacked Existence Team Ryan Anguiano Hacked Existence Team This presentation will begin with a brief overview of Google's Map/Reduce Framework. Map/Reduce is built to analyze extremely large datasets. We will first look at what a Mapper and Reducer are, the inputs they take and the outputs they generate. From there, we will look at the open source....

Hadoop: Apache's Open Source Implementation of Google's MapReduce Framework Joey Calca Hacked Existence Team Ryan Anguiano Hacked Existence Team This presentation will begin with a brief overview of Google's Map/Reduce Framework. Map/Reduce is built to analyze extremely large datasets. We will first look at what a Mapper and Reducer are, the inputs they take and the outputs they generate. From there, we will look at the open source....

three point Oh. Johnny Long Co-Pilot, Hackers For Charity, Inc From scrubby C64 pirate to professional hacker to reluctant "Internet rockstar", the past five years of Johnny's journey have been interesting. The last few months, however, have been straight-up bizarre. While many strain to maintain and others scrape and scratch at the ladder, Johnny's jumped off the top rung. This is a story of what it takes to make it in thi..

three point Oh. Johnny Long Co-Pilot, Hackers For Charity, Inc From scrubby C64 pirate to professional hacker to reluctant "Internet rockstar", the past five years of Johnny's journey have been interesting. The last few months, however, have been straight-up bizarre. While many strain to maintain and others scrape and scratch at the ladder, Johnny's jumped off the top rung. This is a story of what it takes to make it in thi..

three point Oh. Johnny Long Co-Pilot, Hackers For Charity, Inc From scrubby C64 pirate to professional hacker to reluctant "Internet rockstar", the past five years of Johnny's journey have been interesting. The last few months, however, have been straight-up bizarre. While many strain to maintain and others scrape and scratch at the ladder, Johnny's jumped off the top rung. This is a story of what it takes to make it in thi..

Hack The Textbook Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Mike Cooper Senior Security Engineer, IPC Systems Hack the Textbook: Introducing The Textbook Security Project Why do we have so many software security problems? Clearly, a large proportion are caused by poorly written code. Why is our code so badly written? There are many reasons, not the least of which is that writing secure....

Hack The Textbook Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Mike Cooper Senior Security Engineer, IPC Systems Hack the Textbook: Introducing The Textbook Security Project Why do we have so many software security problems? Clearly, a large proportion are caused by poorly written code. Why is our code so badly written? There are many reasons, not the least of which is that writing secure....

Hack The Textbook Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Mike Cooper Senior Security Engineer, IPC Systems Hack the Textbook: Introducing The Textbook Security Project Why do we have so many software security problems? Clearly, a large proportion are caused by poorly written code. Why is our code so badly written? There are many reasons, not the least of which is that writing secure....

Deblaze - A Remote Method Enumeration Tool for Flex Servers Jon Rose Trustwave This talk will provide a basic overview of Flash remoting and cover some of the security issues found in real-world flash applications and demonstrate a new tool for testing flash applications. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and....

Deblaze - A Remote Method Enumeration Tool for Flex Servers Jon Rose Trustwave This talk will provide a basic overview of Flash remoting and cover some of the security issues found in real-world flash applications and demonstrate a new tool for testing flash applications. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and....

Deblaze - A Remote Method Enumeration Tool for Flex Servers Jon Rose Trustwave This talk will provide a basic overview of Flash remoting and cover some of the security issues found in real-world flash applications and demonstrate a new tool for testing flash applications. Flash applications can make request to a remote server to call server side functions, such as looking up accounts, retrieving additional data and graphics, and....

Advanced SQL Injection Joseph McCray Founder of Learn Security Online SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must pro....

Advanced SQL Injection Joseph McCray Founder of Learn Security Online SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must pro....

Advanced SQL Injection Joseph McCray Founder of Learn Security Online SQL Injection is a vulnerability that is often missed by web application security scanners, and it's a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploited. Advanced SQL Injection is a presentation geared toward showing security professionals advanced exploitation techniques for situations when you must pro....

Hacking the Wiimote and Wii Fit to Help the Disabled Josh Marks Rob Rehrig Larry Aiello People like Johnny Chung Lee have shown us that the Wiimote can be used as a bluetooth IR camera that tracks the spatial location of up to four IR LEDs. Applying this work to a new application, we have adapted the Wiimote and the Wii Fit into a low cost system to help disabled individuals to interface with a computer. By combining the movement....

Hacking the Wiimote and Wii Fit to Help the Disabled Josh Marks Rob Rehrig Larry Aiello People like Johnny Chung Lee have shown us that the Wiimote can be used as a bluetooth IR camera that tracks the spatial location of up to four IR LEDs. Applying this work to a new application, we have adapted the Wiimote and the Wii Fit into a low cost system to help disabled individuals to interface with a computer. By combining the movement....

Hacking the Wiimote and Wii Fit to Help the Disabled Josh Marks Rob Rehrig Larry Aiello People like Johnny Chung Lee have shown us that the Wiimote can be used as a bluetooth IR camera that tracks the spatial location of up to four IR LEDs. Applying this work to a new application, we have adapted the Wiimote and the Wii Fit into a low cost system to help disabled individuals to interface with a computer. By combining the movement....

Unmasking You Joshua "Jabra" Abraham Security Expert at Rapid7 Robert "RSnake" Hansen CEO, Founder of SecTheory Many people and organizations depend upon proxies and numerous other privacy techniques to mask their true identity. The problem is there are often flaws within these technologies. This talk will demonstrate several of these flaws and as well as weaknesses in well known implementations. There will be several new anti-priv....

3 visitors online