|
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Polstra/DEFCON-20-Polstra-Bypassing-Endpoint-Security.pdf Exrtas:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Polstra/Philip Polstra.txt Bypassing Endpoint Security for $20 or Less Phil Polstra Computer Security Professor, University of Dubuque In ....
|
|
Jason Ostrom, Karl Feinauer, William Borskey - The End of the PSTN As You Know It
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Ostrom-Feinauer-Borskey/DEFCON-20-Ostrom-Feinauer-Borskey-The-End-of-the-PTSN.pdf The End of the PSTN As You Know It Jason Ostrom Security Researcher, VIPER Lab (Voice over IP Exploit Research), Avaya, Inc. Karl Feinauer Vulnerability Research Software Engineer, VIPER Lab William Borskey Senior Se....
|
|
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Pan/DEFCON-20-Pan-APK-File-Infection-on-Android-System.pdf APK File Infection on an Android System Bob Pan Mobile Security Research Engineer, TrendMicro Inc. This concept of APK file infection on Android is similar to the concept of PE file infection on Windows systems. As the performance of A....
|
|
Michael Perklin - Anti-Forensics and Anti-Anti-Forensics: Attacks and Mitigating Techniques for Digital-Forensic Investigations
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Perklin/DEFCON-20-Perklin-AntiForensics.pdf Anti-Forensics and Anti-Anti-Forensics: Attacks and Mitigating Techniques for Digital-Forensic Investigations Michael Perklin Digital investigations may be conducted differently by various labs (law enforcement agencies, private firms, enterprise corpor....
|
|
Dan "AltF4" Petro - Network Anti-Reconnaissance: Messing with Nmap Through Smoke and Mirrors
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Petro/DEFCON-20-Petro-Messing-with-Nmap.pdf Network Anti-Reconnaissance: Messing with Nmap Through Smoke and Mirrors Dan "AltF4" Petro Security Researcher, DataSoft Corp Reconnaissance on a network has been an attacker's game for far too long, where's the defense? Nmap routinely evades firewalls,....
|
|
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Polstra/DEFCON-20-Polstra-Bypassing-Endpoint-Security.pdf Exrtas:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Polstra/Philip Polstra.txt Bypassing Endpoint Security for $20 or Less Phil Polstra Computer Security Professor, University of Dubuque In ....
|
Hacker + Airplanes = No Good Can Come Of This RenderMan Chief Researcher What happens when a hacker gets bored and starts looking at an aircraft tracking systems? This talk will look at ADS-B (Automatic Dependent Surveillance-Broadcast), a common technology installed or being installed on a vast majority of commercial airliners that involves an unencrypted and unauthenticated radio broadcast. This technology has some interesting feat....
|
|
Jim Rennie, Jennifer Granick - MegaUpload: Guilty or Not Guilty
-
www.defcon.org
-
13 years ago
-
eng
MegaUpload: Guilty or Not Guilty? Jim Rennie Attorney Jennifer Granick Attorney On January 19, 2012, Kim DotCom was arrested in a dramatic raid after being indicted on federal criminal charges that he knew that his website, MegaUpload, was a haven of piracy and counterfeiting. In the days that followed, the media commented on the presumed guilt of MegaUpload. In this debate, Jim argues that the law and evidence clearly point to Meg....
|
|
Ryan Reynolds and Jonathan Claudius - Stamp Out Hash Corruption! Crack All The Things!
-
www.defcon.org
-
13 years ago
-
eng
Stamp Out Hash Corruption! Crack All The Things! Ryan Reynolds Manager, Security and Privacy at Crowe Horwath LLP Jonathan Claudius Security Researcher, Spiderlabs Research, Trustwave The precursor to cracking any password is getting the right hash. In this talk we are going to cover how we discovered that Cain and Able, Creddump, Metasploit and other hash extraction tools regularly yield corrupt hashes that cannot be cracked. We w....
|
|
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Renderman/DEFCON-20-RenderMan-Hackers-plus-Airplanes.pdf Hacker + Airplanes = No Good Can Come Of This RenderMan Chief Researcher What happens when a hacker gets bored and starts looking at an aircraft tracking systems? This talk will look at ADS-B (Automatic Dependent Surveillance-Broadcast), a comm....
|
|
Jim Rennie, Jennifer Granick - MegaUpload: Guilty or Not Guilty
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Rennie-Grannick/DEFCON-20-Rennie-Grannick-Megaupload-Indictment.pdf MegaUpload: Guilty or Not Guilty? Jim Rennie Attorney Jennifer Granick Attorney On January 19, 2012, Kim DotCom was arrested in a dramatic raid after being indicted on federal criminal charges that he knew that his website, Meg....
|
|
Ryan Reynolds and Jonathan Claudius - Stamp Out Hash Corruption! Crack All The Things!
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Reynolds/DEFCON-20-Reynolds-Stamp-Out-Hash-Extraction.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Reynolds/DEFCON-20-Reynolds-Stamp-Out-Hash-Extraction-WP.pdf Extras:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/pr....
|
|
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Renderman/DEFCON-20-RenderMan-Hackers-plus-Airplanes.pdf Hacker + Airplanes = No Good Can Come Of This RenderMan Chief Researcher What happens when a hacker gets bored and starts looking at an aircraft tracking systems? This talk will look at ADS-B (Automatic Dependent Surveillance-Broadcast), a comm....
|
|
Jim Rennie, Jennifer Granick - MegaUpload: Guilty or Not Guilty
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Rennie-Grannick/DEFCON-20-Rennie-Grannick-Megaupload-Indictment.pdf MegaUpload: Guilty or Not Guilty? Jim Rennie Attorney Jennifer Granick Attorney On January 19, 2012, Kim DotCom was arrested in a dramatic raid after being indicted on federal criminal charges that he knew that his website, Meg....
|
|
Ryan Reynolds and Jonathan Claudius - Stamp Out Hash Corruption! Crack All The Things!
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Reynolds/DEFCON-20-Reynolds-Stamp-Out-Hash-Extraction.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Reynolds/DEFCON-20-Reynolds-Stamp-Out-Hash-Extraction-WP.pdf Extras:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/pr....
|
|
Copy of the slides for this talk are here: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Renderman/DEFCON-20-RenderMan-Hackers-plus-Airplanes.pdf Hacker + Airplanes = No Good Can Come Of This RenderMan Chief Researcher What happens when a hacker gets bored and starts looking at an aircraft tracking systems? This talk will look at ADS-B (Automatic Dependent Surveillance-Broadcast), a comm....
|
|
Jim Rennie, Jennifer Granick - MegaUpload: Guilty or Not Guilty
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Rennie-Grannick/DEFCON-20-Rennie-Grannick-Megaupload-Indictment.pdf MegaUpload: Guilty or Not Guilty? Jim Rennie Attorney Jennifer Granick Attorney On January 19, 2012, Kim DotCom was arrested in a dramatic raid after being indicted on federal criminal charges that he knew that his website, Meg....
|
|
Ryan Reynolds and Jonathan Claudius - Stamp Out Hash Corruption! Crack All The Things!
-
www.defcon.org
-
13 years ago
-
eng
Copy of the slides for this talk are here:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Reynolds/DEFCON-20-Reynolds-Stamp-Out-Hash-Extraction.pdf Whitepaper: http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/presentations/Reynolds/DEFCON-20-Reynolds-Stamp-Out-Hash-Extraction-WP.pdf Extras:http://m6rqq6kocsyugo2laitup5nn32bwm3lh677chuodjfmggczoafzwfcad.onion/dc-20/pr....
|
|
Welcome with The Dark Tangent and The Making of the Badge with l0sT
-
www.defcon.org
-
13 years ago
-
eng
|
|
Welcome with The Dark Tangent and The Making of the Badge with l0sT
-
www.defcon.org
-
13 years ago
-
eng
|
|
Welcome with The Dark Tangent and The Making of the Badge with LosT
-
www.defcon.org
-
13 years ago
-
eng
|
|
Just over a week ago we had our first internal hackathon at SoundCloud. You can read (and listen!) about it on our community blog or read…
|
|
This is a story of how we adapted our architecture over time to accomodate growth. Scaling is a luxury problem and surprisingly has more to…
|
|
Just over a week ago we had our first internal hackathon at SoundCloud. You can read (and listen!) about it on our community blog or read…
|
|
This is a story of how we adapted our architecture over time to accomodate growth. Scaling is a luxury problem and surprisingly has more to…
|
|
I served as lead developer on this award-winning crowdsourcing platform at the University of Iowa Libraries. The code has been made freely available on Github and has been used by over 20 research libraries and archives around the world, including Yale University, Oxford University Museum of Natural History, The Newberry Library, University College Dublin Archives, […]
|
|
I have been watching a lot of video conferences on security and I'm wondering what will happen in the next couple of years.
|
|
Prefix notation I’m a big fan of the prefix notation. It makes everything appear the same (if-statements, function calls , etc). I like how it removes the need for operator precedence rules. All the parentheses Once you get into learning Clojure and you have written a small application, you don’t really see the parens anymore. Sure, sometimes you still get the Unbalanced parens error but those are easy to spot. If you are afraid of....
|
|
Prefix notation I’m a big fan of the prefix notation. It makes everything appear the same (if-statements, function calls , etc). I like how it removes the need for operator precedence rules. All the parentheses Once you get into learning Clojure and you have written a small application, you don’t really see the parens anymore. Sure, sometimes you still get the Unbalanced parens error but those are easy to spot. If you are afraid of....
|
|
The Recipe for Classification One important task in machine learning is to classify data into one of a fixed number of classes. For instance, one might want to discriminate between useful email and unsolicited spam. Or one might wish to determine the species of a beetle based on its physical attributes, such as weight, color, and mandible length. These “attributes” are often called “features” in the world of machine learning, and they often..
|
|
The Recipe for Classification One important task in machine learning is to classify data into one of a fixed number of classes. For instance, one might want to discriminate between useful email and unsolicited spam. Or one might wish to determine the species of a beetle based on its physical attributes, such as weight, color, and mandible length. These “attributes” are often called “features” in the world of machine learning, and they often..
|
|
The Recipe for Classification One important task in machine learning is to classify data into one of a fixed number of classes. For instance, one might want to discriminate between useful email and unsolicited spam. Or one might wish to determine the species of a beetle based on its physical attributes, such as weight, color, and mandible length. These “attributes” are often called “features” in the world of machine learning, and they often..
|
|
The Blessing of Distance We have often mentioned the idea of a “metric” on this blog, and we briefly described a formal definition for it. Colloquially, a metric is simply the mathematical notion of a distance function, with certain well-behaved properties. Since we’re now starting to cover a few more metrics (and things which are distinctly not metrics) in the context of machine learning algorithms, we find it pertinent to lay out the defi..
|
|
The Blessing of Distance We have often mentioned the idea of a “metric” on this blog, and we briefly described a formal definition for it. Colloquially, a metric is simply the mathematical notion of a distance function, with certain well-behaved properties. Since we’re now starting to cover a few more metrics (and things which are distinctly not metrics) in the context of machine learning algorithms, we find it pertinent to lay out the defi..
|
|
The Blessing of Distance We have often mentioned the idea of a “metric” on this blog, and we briefly described a formal definition for it. Colloquially, a metric is simply the mathematical notion of a distance function, with certain well-behaved properties. Since we’re now starting to cover a few more metrics (and things which are distinctly not metrics) in the context of machine learning algorithms, we find it pertinent to lay out the defi..
|
|
I like the idea of Android home screen widgets. I like to visualize information, to get it quickly and perform common tasks in a single tap. Even though Android market is flooded with useful and not-so-useful widgets of any type and price, I was looking for a geeky way to make my own widgets. why? Normally, I need either very simple widgets (like clock, calendar, weather, battery level) or very specific ones (say, a calendar that draws a da..
|
|
What did you actually learn in college? I’m not talking about what you learned while you were there, but what you learned in the part that you paid for – the…
|
|
I like the idea of Android home screen widgets. I like to visualize information, to get it quickly and perform common tasks in a single tap. Even though Android market is flooded with useful and not-so-useful widgets of any type and price, I was looking for a geeky way to make my own widgets. why? Normally, I need either very simple widgets (like clock, calendar, weather, battery level) or very specific ones (say, a calendar that draws a da..
|
|
How to avoid cluster race conditions or: How to implement a distributed lock manager in puppet
-
purpleidea.com
-
13 years ago
-
eng
I’ve been working on a puppet module for gluster. Both this, my puppet-gfs2 module, and other puppet clustering modules all share a common problem: How does one make sure that only certain operations happen on one node at a time? The inelegant solutions are simple: Specify manually (in puppet) which node the "master" is, and have it carry out all the special operations. Downside: Single point of failure for your distributed cluster, a....
|
|
How to avoid cluster race conditions or: How to implement a distributed lock manager in puppet
-
purpleidea.com
-
13 years ago
-
eng
I’ve been working on a puppet module for gluster. Both this, my puppet-gfs2 module, and other puppet clustering modules all share a common problem: How does one make sure that only certain operations happen on one node at a time? The inelegant solutions are simple: Specify manually (in puppet) which node the "master" is, and have it carry out all the special operations. Downside: Single point of failure for your distributed cluster, a....
|