Filters
43:43
Yolan Romailler: A “Dead Man’s” Responsible Disclosure System
A DEF CON 30 talk introducing a new model of responsible disclosure based on timelock...
43:09
Sam Quinn and Steve Povolny: Hacking an Access Control System
A DEF CON 30 talk about compromising the HID Mercury networked physical access control system,...
23:16
Slava Makkaveev: Hacking Xiaomi’s TEE and Attacking Mobile Payments
A DEF CON 30 talk examining the security of mobile payment systems on Xiaomi smartphones...
32:20
Nikita Kurtin: Bypassing All Android Permission Levels
A DEF CON 30 talk exploring systemic ways to bypass Android’s permission model — from...
35:58
Jeffrey Hofmann: Pre-Auth RCE Chains in MDM — Full Compromise of KACE SMA
A DEF CON 30 talk covering three pre-authentication RCE chains in KACE Systems Management Appliance...
44:20
Jonathan Leitschuh: Scaling Security Research to Fix Open-Source Vulnerabilities at Scale
A DEF CON 30 talk about automating the discovery and remediation of common vulnerabilities in...
44:24
Nick Powers and Steven Flores: ClickOnce as a Trusted Code Execution Vector
A DEF CON 30 talk exploring ClickOnce as an underused yet powerful initial access technique....
36:04
Jacob Baines: Do Not Trust the ASA — Vulnerabilities in Cisco Firewalls
A DEF CON 30 talk about newly discovered vulnerabilities in Cisco ASA and ASA-X firewalls,...