|
Rod Beckstrom - Beckstroms Law A Model for Valuing Networks and Security - Slides
-
www.defcon.org
-
16 years ago
-
eng
Beckstrom's Law - A Model for Valuing Networks and Security Rod Beckstrom Beckstrom's Law is a new model or theorem of economics formulated by Rod Beckstrom. It purports to answer 'the decades old question of "how valuable is a network." It is granular and transactions based and can be used to value any network. It applies to any network: social networks, electronic networks, support groups and even the Internet as a whole. To read a....
|
|
i’m sure that i won’t be able to tell you anything revolutionary which can’t be found out by reading the manual , but i thought i would clarify it, and by showing you a specific example which i needed. subprocess.Popen accepts a bunch or args, one of which is the shell argument, which is False by default. If you specify shell=True then the first argument of popen should be a string which is what gets parsed by the shell and then ..
|
|
i’m sure that i won’t be able to tell you anything revolutionary which can’t be found out by reading the manual , but i thought i would clarify it, and by showing you a specific example which i needed. subprocess.Popen accepts a bunch or args, one of which is the shell argument, which is False by default. If you specify shell=True then the first argument of popen should be a string which is what gets parsed by the shell and then ..
|
|
Roger Dingledine - Why Tor is Slow and What We Are Doing About It
-
www.defcon.org
-
16 years ago
-
eng
Why Tor is Slow, and What We're Doing About It Roger Dingledine Many of you have probably tried Tor, and then stopped because you found it too slow. Now that Tor has several hundred thousand users, our original design decisions are showing their age. We need to figure out and deploy some major changes if we want the Tor network to scale up to the million-user mark. Problem #1 is that Tor's congestion control does not work well. ....
|
|
Roger Dingledine - Why Tor is Slow and What We Are Doing About It - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Why Tor is Slow, and What We're Doing About It Roger Dingledine Many of you have probably tried Tor, and then stopped because you found it too slow. Now that Tor has several hundred thousand users, our original design decisions are showing their age. We need to figure out and deploy some major changes if we want the Tor network to scale up to the million-user mark. Problem #1 is that Tor's congestion control does not work well. ....
|
|
Roger Dingledine - Why Tor is Slow and What We Are Doing About It - Slides
-
www.defcon.org
-
16 years ago
-
eng
Why Tor is Slow, and What We're Doing About It Roger Dingledine Many of you have probably tried Tor, and then stopped because you found it too slow. Now that Tor has several hundred thousand users, our original design decisions are showing their age. We need to figure out and deploy some major changes if we want the Tor network to scale up to the million-user mark. Problem #1 is that Tor's congestion control does not work well. ....
|
|
Hackerspaces: The Legal Bases Nicolle Neulist "RogueClown" Hacker communities in many cities are becoming interested in starting hackerspaces. Getting together a core of talented, inquisitive, and creative people is an integral part of it, but it is also important to address the legal questions that arise. The goal of this presentation is to make anyone interested in hackerspaces aware of the most likely legal issues to arise, and to....
|
|
Hackerspaces: The Legal Bases Nicolle Neulist "RogueClown" Hacker communities in many cities are becoming interested in starting hackerspaces. Getting together a core of talented, inquisitive, and creative people is an integral part of it, but it is also important to address the legal questions that arise. The goal of this presentation is to make anyone interested in hackerspaces aware of the most likely legal issues to arise, and to....
|
|
Hackerspaces: The Legal Bases Nicolle Neulist "RogueClown" Hacker communities in many cities are becoming interested in starting hackerspaces. Getting together a core of talented, inquisitive, and creative people is an integral part of it, but it is also important to address the legal questions that arise. The goal of this presentation is to make anyone interested in hackerspaces aware of the most likely legal issues to arise, and to....
|
|
Sam Bowne - Hijacking Web 2.0 Sites with SSLstrip Hands on Training
-
www.defcon.org
-
16 years ago
-
eng
Hijacking Web 2.0 Sites with SSLstrip--Hands-on Training Sam Bowne Instructor, City College San Francisco, Computer Networking and Information Technology Department Many Websites mix secure and insecure content on the same page, like Facebook. This makes it possible to steal all the data entered on such a page easily, using Moxie Marlinspike's new SSLstrip tool. First I will give a brief explanation and demonstration of the technique....
|
|
Sam Bowne - Hijacking Web 2.0 Sites with SSLstrip Hands on Training - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Hijacking Web 2.0 Sites with SSLstrip--Hands-on Training Sam Bowne Instructor, City College San Francisco, Computer Networking and Information Technology Department Many Websites mix secure and insecure content on the same page, like Facebook. This makes it possible to steal all the data entered on such a page easily, using Moxie Marlinspike's new SSLstrip tool. First I will give a brief explanation and demonstration of the technique....
|
|
Sam Bowne - Hijacking Web 2.0 Sites with SSLstrip Hands on Training - Slides
-
www.defcon.org
-
16 years ago
-
eng
Hijacking Web 2.0 Sites with SSLstrip--Hands-on Training Sam Bowne Instructor, City College San Francisco, Computer Networking and Information Technology Department Many Websites mix secure and insecure content on the same page, like Facebook. This makes it possible to steal all the data entered on such a page easily, using Moxie Marlinspike's new SSLstrip tool. First I will give a brief explanation and demonstration of the technique....
|
|
Sandy Mouse Clark and Edw0rd -De Gustibus or Hacking your Tastebuds
-
www.defcon.org
-
16 years ago
-
eng
De Gustibus, or Hacking your Tastebuds Sandy Clark "Mouse" University of Pennsylvania Do you geek out over food? Do you rave over a particular vintage? Do you get into fights about relative merits of belgain vs. swiss chocolatiers? Know the difference between a Gourmet and a Gourmand? Ever done a real chocolate tasting? Wondered what's the big deal with food/wine parings? Ever tried Miracle Fruit? Like any other electrical/chemical m....
|
|
Sandy Mouse Clark and Edw0rd -De Gustibus or Hacking your Tastebuds - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
De Gustibus, or Hacking your Tastebuds Sandy Clark "Mouse" University of Pennsylvania Do you geek out over food? Do you rave over a particular vintage? Do you get into fights about relative merits of belgain vs. swiss chocolatiers? Know the difference between a Gourmet and a Gourmand? Ever done a real chocolate tasting? Wondered what's the big deal with food/wine parings? Ever tried Miracle Fruit? Like any other electrical/chemical m....
|
|
Sandy Mouse Clark and Edw0rd -De Gustibus or Hacking your Tastebuds - Slides
-
www.defcon.org
-
16 years ago
-
eng
De Gustibus, or Hacking your Tastebuds Sandy Clark "Mouse" University of Pennsylvania Do you geek out over food? Do you rave over a particular vintage? Do you get into fights about relative merits of belgain vs. swiss chocolatiers? Know the difference between a Gourmet and a Gourmand? Ever done a real chocolate tasting? Wondered what's the big deal with food/wine parings? Ever tried Miracle Fruit? Like any other electrical/chemical m....
|
|
Scott Moulton - RAID Recovery Recover Your PORN By Sight and Sound
-
www.defcon.org
-
16 years ago
-
eng
RAID Recovery: Recover your PORN by Sight and Sound Scott Moulton Forensic Strategy Services, LLC. / System Specialist This talk will focus on RAID reassembly. In both Forensics and Data Recovery it is common for there to be PORN not only in Pictures but also in Sound Files and Video Files. The goal is $100 or less, figure out how to reconstruct RAID 0 and RAID 5 arrays using the PORN on the array to help identify the correct order o..
|
|
Scott Moulton - RAID Recovery Recover Your PORN By Sight and Sound - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
RAID Recovery: Recover your PORN by Sight and Sound Scott Moulton Forensic Strategy Services, LLC. / System Specialist This talk will focus on RAID reassembly. In both Forensics and Data Recovery it is common for there to be PORN not only in Pictures but also in Sound Files and Video Files. The goal is $100 or less, figure out how to reconstruct RAID 0 and RAID 5 arrays using the PORN on the array to help identify the correct order o..
|
|
Scott Moulton - RAID Recovery Recover Your PORN By Sight and Sound - Slides
-
www.defcon.org
-
16 years ago
-
eng
RAID Recovery: Recover your PORN by Sight and Sound Scott Moulton Forensic Strategy Services, LLC. / System Specialist This talk will focus on RAID reassembly. In both Forensics and Data Recovery it is common for there to be PORN not only in Pictures but also in Sound Files and Video Files. The goal is $100 or less, figure out how to reconstruct RAID 0 and RAID 5 arrays using the PORN on the array to help identify the correct order o..
|
|
Sean Boyce - Design and Implementation of a Quantum True number Generator
-
www.defcon.org
-
16 years ago
-
eng
Design and Implementation of a Quantum True Random Number Generator Sean Boyce Security Researcher The problem of generating "reasonable" approximations to random numbers has been solved quite some time ago... but this talk is not for reasonable people. Generating true random numbers with a deterministic system is impossible; and so we must drink deeply from the raw, godless chaos of quantum physics. This talk will cover the var....
|
|
Sean Boyce - Design and Implementation of a Quantum True number Generator - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Design and Implementation of a Quantum True Random Number Generator Sean Boyce Security Researcher The problem of generating "reasonable" approximations to random numbers has been solved quite some time ago... but this talk is not for reasonable people. Generating true random numbers with a deterministic system is impossible; and so we must drink deeply from the raw, godless chaos of quantum physics. This talk will cover the var....
|
|
Sean Boyce - Design and Implementation of a Quantum True number Generator - Slides
-
www.defcon.org
-
16 years ago
-
eng
Design and Implementation of a Quantum True Random Number Generator Sean Boyce Security Researcher The problem of generating "reasonable" approximations to random numbers has been solved quite some time ago... but this talk is not for reasonable people. Generating true random numbers with a deterministic system is impossible; and so we must drink deeply from the raw, godless chaos of quantum physics. This talk will cover the var....
|
|
Sean Taylor - Binary Obfuscation from the Top Down Obfuscating Executables Without Writing Assembly
-
www.defcon.org
-
16 years ago
-
eng
Binary Obfuscation from the Top-Down: Obfuscating Executables Without Writing Assembly Sean "Frank^2" Taylor Security Engineer, Rapid7 Binary obfuscation is commonly applied in malware and by software vendors in order to frustrate the efforts of reverse engineers to understand the underlying code. A common misconception is one must be a master of assembly in order to properly obfuscate a binary. However, with knowledge of compiler op....
|
|
Sean Taylor - Binary Obfuscation from the Top Down Obfuscating Executables Without Writing Assembly - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Binary Obfuscation from the Top-Down: Obfuscating Executables Without Writing Assembly Sean "Frank^2" Taylor Security Engineer, Rapid7 Binary obfuscation is commonly applied in malware and by software vendors in order to frustrate the efforts of reverse engineers to understand the underlying code. A common misconception is one must be a master of assembly in order to properly obfuscate a binary. However, with knowledge of compiler op....
|
|
Sean Taylor - Binary Obfuscation from the Top Down Obfuscating Executables Without Writing Assembly - Slides
-
www.defcon.org
-
16 years ago
-
eng
Binary Obfuscation from the Top-Down: Obfuscating Executables Without Writing Assembly Sean "Frank^2" Taylor Security Engineer, Rapid7 Binary obfuscation is commonly applied in malware and by software vendors in order to frustrate the efforts of reverse engineers to understand the underlying code. A common misconception is one must be a master of assembly in order to properly obfuscate a binary. However, with knowledge of compiler op....
|
|
Shawn Moyer and Nathan Hamiel - Weaponizing the Web New Attacks on User Generated Content
-
www.defcon.org
-
16 years ago
-
eng
Weaponizing the Web: New Attacks on User-generated Content Shawn Moyer Nathan Hamiel Ultimately, basing the value proposition of your site on user-generated and external content is a kind of variant on Russian Roulette, where in every turn the gun is pointed at your head, regardless of the number of players. You may win most of the time, but eventually a bullet is going to find its way into the chamber with your name on it. We....
|
|
Shawn Moyer and Nathan Hamiel - Weaponizing the Web New Attacks on User Generated Content - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Weaponizing the Web: New Attacks on User-generated Content Shawn Moyer Nathan Hamiel Ultimately, basing the value proposition of your site on user-generated and external content is a kind of variant on Russian Roulette, where in every turn the gun is pointed at your head, regardless of the number of players. You may win most of the time, but eventually a bullet is going to find its way into the chamber with your name on it. We....
|
|
Shawn Moyer and Nathan Hamiel - Weaponizing the Web New Attacks on User Generated Content - Slides
-
www.defcon.org
-
16 years ago
-
eng
Weaponizing the Web: New Attacks on User-generated Content Shawn Moyer Nathan Hamiel Ultimately, basing the value proposition of your site on user-generated and external content is a kind of variant on Russian Roulette, where in every turn the gun is pointed at your head, regardless of the number of players. You may win most of the time, but eventually a bullet is going to find its way into the chamber with your name on it. We....
|
|
Death of Anonymous Travel Sherri Davidoff Philosecurity Worldwide, people who use cars, buses, trains, and carry cell phones are tracked in increasingly centralized corporate and government databases. This capability is still in its infancy, and has been facilitated by payment systems which are linked to identification and refer to centralized electronic databases. Mass tracking and surveillance capabilities have arisen organica....
|
|
Sherri Davidoff - Death of Anonymous Travel - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Death of Anonymous Travel Sherri Davidoff Philosecurity Worldwide, people who use cars, buses, trains, and carry cell phones are tracked in increasingly centralized corporate and government databases. This capability is still in its infancy, and has been facilitated by payment systems which are linked to identification and refer to centralized electronic databases. Mass tracking and surveillance capabilities have arisen organica....
|
|
Death of Anonymous Travel Sherri Davidoff Philosecurity Worldwide, people who use cars, buses, trains, and carry cell phones are tracked in increasingly centralized corporate and government databases. This capability is still in its infancy, and has been facilitated by payment systems which are linked to identification and refer to centralized electronic databases. Mass tracking and surveillance capabilities have arisen organica....
|
|
FOE -- Feeding Controversial News to Censored Countries (Without Using Proxy Servers) Sho Ho Software Engineer, Broadcasting Board of Governors Certain countries are banning their Internet users from accessing websites that are deemed inappropriate by their officials. News organizations' websites are commonly blocked by these countries, and there are little these organizations can do to reach their audience inside those countries. FO....
|
|
Sho Ho - FOE Feeding Controversial News to Censored Countries - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
FOE -- Feeding Controversial News to Censored Countries (Without Using Proxy Servers) Sho Ho Software Engineer, Broadcasting Board of Governors Certain countries are banning their Internet users from accessing websites that are deemed inappropriate by their officials. News organizations' websites are commonly blocked by these countries, and there are little these organizations can do to reach their audience inside those countries. FO....
|
|
Sho Ho - FOE Feeding Controversial News to Censored Countries - Slides
-
www.defcon.org
-
16 years ago
-
eng
FOE -- Feeding Controversial News to Censored Countries (Without Using Proxy Servers) Sho Ho Software Engineer, Broadcasting Board of Governors Certain countries are banning their Internet users from accessing websites that are deemed inappropriate by their officials. News organizations' websites are commonly blocked by these countries, and there are little these organizations can do to reach their audience inside those countries. FO....
|
|
Stephen Afterburn Janansky and Nick Waite - Hardware Trojans Infiltrating the Faraday Cage
-
www.defcon.org
-
16 years ago
-
eng
Hardware Trojans: Infiltrating the Faraday Cage Stephen 'afterburn' Janansky CVORG, University of Delaware Nick Waite CVORG, University of Delaware Last year we presented some hardware trojans as a proof of concept for side-channel data exfiltration attack. Pretty blinking lights are sweet, but this time we wanted to give the hungry crowd something more crunchy to bite into. Namely, that age-old problem of how to get data in and ou....
|
|
Stephen Afterburn Janansky and Nick Waite - Hardware Trojans Infiltrating the Faraday Cage - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Hardware Trojans: Infiltrating the Faraday Cage Stephen 'afterburn' Janansky CVORG, University of Delaware Nick Waite CVORG, University of Delaware Last year we presented some hardware trojans as a proof of concept for side-channel data exfiltration attack. Pretty blinking lights are sweet, but this time we wanted to give the hungry crowd something more crunchy to bite into. Namely, that age-old problem of how to get data in and ou....
|
|
Stephen Afterburn Janansky and Nick Waite - Hardware Trojans Infiltrating the Faraday Cage - Slides
-
www.defcon.org
-
16 years ago
-
eng
Hardware Trojans: Infiltrating the Faraday Cage Stephen 'afterburn' Janansky CVORG, University of Delaware Nick Waite CVORG, University of Delaware Last year we presented some hardware trojans as a proof of concept for side-channel data exfiltration attack. Pretty blinking lights are sweet, but this time we wanted to give the hungry crowd something more crunchy to bite into. Namely, that age-old problem of how to get data in and ou....
|
|
Personal Survival Preparedness Steve Dunker Associate Professor, Northeastern State University Kristie Dunker The Swag Assistant When the sewage hits the oscillating blades of death, will you be ready? A Las Vegas Survival Scenario will be presented to the audience at the start of the lecture. This talk will concentrate on disaster preparedness at the individual and/or family level. General overall preparedness will be covered as w..
|
|
Steve and Kristie Dunker - Personal Disaster Prepardness - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Personal Survival Preparedness Steve Dunker Associate Professor, Northeastern State University Kristie Dunker The Swag Assistant When the sewage hits the oscillating blades of death, will you be ready? A Las Vegas Survival Scenario will be presented to the audience at the start of the lecture. This talk will concentrate on disaster preparedness at the individual and/or family level. General overall preparedness will be covered as w..
|
|
Steve and Kristie Dunker - Personal Disaster Prepardness - Slides
-
www.defcon.org
-
16 years ago
-
eng
Personal Survival Preparedness Steve Dunker Associate Professor, Northeastern State University Kristie Dunker The Swag Assistant When the sewage hits the oscillating blades of death, will you be ready? A Las Vegas Survival Scenario will be presented to the audience at the start of the lecture. This talk will concentrate on disaster preparedness at the individual and/or family level. General overall preparedness will be covered as w..
|
|
Summit Siddharth - The Making of the Second SQL Injection Worm
-
www.defcon.org
-
16 years ago
-
eng
The Making of the second SQL injection Worm Sumit Siddharth IT Security Consultant The "turbo" talk will focus on exploiting SQL injections in web applications with oracle back-end. Mostly exploiting Oracle sql injections in web applications is considered to be restricted to extraction of data only. Oracle database does not offer hacker friendly functionalities such as openrowset or xp_cmdshell for privilege escalation and O.S code e....
|
|
Summit Siddharth - The Making of the Second SQL Injection Worm - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
The Making of the second SQL injection Worm Sumit Siddharth IT Security Consultant The "turbo" talk will focus on exploiting SQL injections in web applications with oracle back-end. Mostly exploiting Oracle sql injections in web applications is considered to be restricted to extraction of data only. Oracle database does not offer hacker friendly functionalities such as openrowset or xp_cmdshell for privilege escalation and O.S code e....
|
|
Summit Siddharth - The Making of the Second SQL Injection Worm - Slides
-
www.defcon.org
-
16 years ago
-
eng
The Making of the second SQL injection Worm Sumit Siddharth IT Security Consultant The "turbo" talk will focus on exploiting SQL injections in web applications with oracle back-end. Mostly exploiting Oracle sql injections in web applications is considered to be restricted to extraction of data only. Oracle database does not offer hacker friendly functionalities such as openrowset or xp_cmdshell for privilege escalation and O.S code e....
|
|
Thomas Holt and Panel - Identifying Exploring and Predicting Threats in the Russian Hacker Community
-
www.defcon.org
-
16 years ago
-
eng
Identifying, Exploring, and Predicting Threats in the Russian Hacker Community Dr. Thomas J. Holt Assistant Professor, School of Criminal Justice, Michigan State University Dr. Max Kilger The Honeynet Project Dr. Debora Strumsky The University of North Carolina at Charlotte Dr. Olga Smirnova The University of North Carolina at Charlotte A great deal of research has focused on the malicious software and attack tools generated by....
|
|
Thomas Holt and Panel - Identifying Exploring and Predicting Threats in the Russian Hacker Community - Video and Slides
-
www.defcon.org
-
16 years ago
-
eng
Identifying, Exploring, and Predicting Threats in the Russian Hacker Community Dr. Thomas J. Holt Assistant Professor, School of Criminal Justice, Michigan State University Dr. Max Kilger The Honeynet Project Dr. Debora Strumsky The University of North Carolina at Charlotte Dr. Olga Smirnova The University of North Carolina at Charlotte A great deal of research has focused on the malicious software and attack tools generated by....
|