36C3: Resource Exhaustion

Hacking an NFC toy with the ChameleonMini

• Security WikiPakaWG
• 13 min
• 2019-12-30
• 11.8k
• fptrs and ceres-c

15 Jahre deutsche Telematikinfrastruktur (TI)

Die Realität beim Arztbesuch nach 15 Jahren Entwicklung…

• Security Main
• 41 min
• 2019-12-29
• 4.3k
• Christoph Saatjohann

Hirne Hacken

Menschliche Faktoren der IT-Sicherheit

• Security Main
• 43 min
• 2019-12-29
• 50.8k
• Linus Neumann

Hacking (with) a TPM

Don't ask what you can do for TPMs, Ask what TPMs can do…

• Security Main
• 37 min
• 2019-12-29
• 3.4k
• Andreas Fuchs

The One Weird Trick SecureROM Hates

• Security Main
• 38 min
• 2019-12-29
• 4.0k
• qwertyoruiop

Boot2root

Auditing Boot Loaders by Example

• Security Main
• 62 min
• 2019-12-29
• 1.9k
• Ilja van Sprundel and Joseph Tartaro

High-assurance crypto software

• Security Main
• 61 min
• 2019-12-29
• 2.4k
• djb and Tanja Lange

No source, no problem! High speed binary fuzzing

• Security Main
• 59 min
• 2019-12-29
• 1.9k
• Nspace and gannimo

Email authentication for penetration testers

When SPF is not enough

• Security Main
• 61 min
• 2019-12-29
• 3.6k
• Andrew Konstantinov

Cryptography demystified

An introduction without maths

• Security Main
• 53 min
• 2019-12-29
• 3.4k
• oots

A systematic evaluation of OpenBSD's mitigations

• Security Main
• 53 min
• 2019-12-29
• 9.0k
• stein

Don't Ruck Us Too Hard - Owning Ruckus AP Devices

3 different RCE vulnerabilities on Ruckus Wireless access…

• Security Main
• 48 min
• 2019-12-28
• 909
• Gal Zror

ZombieLoad Attack

Leaking Your Recent Memory Operations on Intel CPUs

• Security Main
• 55 min
• 2019-12-28
• 1.5k
• Michael Schwarz, Moritz Lipp and Daniel Gruss

Vehicle immobilization revisited

Uncovering and assessing a second authentication mechanism…

• Security Main
• 55 min
• 2019-12-28
• 1.8k
• Wouter Bokslag

Hacking Sony PlayStation Blu-ray Drives

• Security Main
• 49 min
• 2019-12-28
• 4.1k
• oct0xor

KTRW: The journey to build a debuggable iPhone

• Security Main
• 54 min
• 2019-12-28
• 1.4k
• Brandon Azad

The sustainability of safety, security and privacy

• Security Main
• 43 min
• 2019-12-28
• 7.3k
• Ross Anderson

Harry Potter and the Not-So-Smart Proxy War

Taking a look at a covert CIA virtual fencing solution

• Security Main
• 35 min
• 2019-12-28
• 6.9k
• Jos Wetzels

All wireless communication stacks are equally broken

• Security Main
• 38 min
• 2019-12-28
• 9.6k
• jiska

Breaking Microsoft Edge Extensions Security Policies

• Security Main
• 30 min
• 2019-12-28
• 619
• Nikhil Mittal

Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

• Security Main
• 36 min
• 2019-12-28
• 712
• Nilo Redini

Das nützlich-unbedenklich Spektrum

Können wir Software bauen, die nützlich /und/ unbedenklich…

• Security Main
• 63 min
• 2019-12-28
• 16.4k
• Fefe

SigOver + alpha

Signal overshadowing attack on LTE and its applications

• Security Main
• 55 min
• 2019-12-28
• 1.2k
• CheolJun Park and Mincheol Son

TamaGo - bare metal Go framework for ARM SoCs.

Reducing the attack surface with pure embedded Go.

• Security Main
• 59 min
• 2019-12-28
• 1.2k
• Andrea Barisani

On the insecure nature of turbine control systems in power generation

A security study of turbine control systems in power…

• Security Main
• 60 min
• 2019-12-28
• 4.3k
• repdet, @_moradek_ and c0rs

SELECT code_execution FROM * USING SQLite;

--Gaining code execution using a malicious SQLite database

• Security Main
• 46 min
• 2019-12-27
• 9.6k
• OmerGull

Practical Cache Attacks from the Network and Bad Cat Puns

• Security Main
• 42 min
• 2019-12-27
• 1.1k
• Michael Kurth

Uncover, Understand, Own - Regaining Control Over Your AMD CPU

• Security Main
• 56 min
• 2019-12-27
• 6.2k
• Robert Buhren, Alexander Eichner and Christian Werling

The Great Escape of ESXi

Breaking Out of a Sandboxed Virtual Machine

• Security Main
• 40 min
• 2019-12-27
• 6.0k
• f1yyy

(Post-Quantum) Isogeny Cryptography

• Security Main
• 52 min
• 2019-12-27
• 5.3k
• naehrwert

Intel Management Engine deep dive

Understanding the ME at the OS and hardware level

• Security Main
• 60 min
• 2019-12-27
• 6.5k
• Peter Bosch

Plundervolt: Flipping Bits from Software without Rowhammer

• Security Main
• 49 min
• 2019-12-27
• 7.8k
• Daniel Gruss and Kit Murdock

A Deep Dive Into Unconstrained Code Execution on Siemens S7 PLCs

• Security Main
• 62 min
• 2019-12-27
• 3.6k
• Ali Abbasi and Tobias Scharnowski

"Hacker hin oder her": Die elektronische Patientenakte kommt!

• Security Main
• 60 min
• 2019-12-27
• 27.0k
• Martin Tschirsich, cbro - Dr. med. Christian Brodowski and Dr. André Zilch

How to Break PDFs

Breaking PDF Encryption and PDF Signatures

• Security Main
• 58 min
• 2019-12-27
• 7.4k
• Fabian Ising and Vladislav Mladenov

It's not safe on the streets... especially for your 3DS!

Exploring a new attack surface on the 3DS

• Security Main
• 46 min
• 2019-12-27
• 3.1k
• nba::yoh

Messenger Hacking: Remotely Compromising an iPhone through iMessage

• Security Main
• 61 min
• 2019-12-27
• 30.0k
• Samuel Groß

What's left for private messaging?

• Security Main
• 60 min
• 2019-12-27
• 42.0k
• Will Scott

Tales of old: untethering iOS 11

Spoiler: Apple is bad at patching

• Security Main
• 39 min
• 2019-12-27
• 8.5k
• littlelailo

Leaving legacy behind

Reducing carbon footprint of network services with MirageOS…

• Security Main
• 52 min
• 2019-12-27
• 10.6k
• Hannes Mehnert