36C3: Resource Exhaustion

Hirne Hacken

Menschliche Faktoren der IT-Sicherheit

• Security Main
• 43 min
• 2019-12-29
• 49244
• Linus Neumann

What's left for private messaging?

• Security Main
• 60 min
• 2019-12-27
• 41866
• Will Scott

Messenger Hacking: Remotely Compromising an iPhone through iMessage

• Security Main
• 61 min
• 2019-12-27
• 29698
• Samuel Groß

"Hacker hin oder her": Die elektronische Patientenakte kommt!

• Security Main
• 60 min
• 2019-12-27
• 22361
• Martin Tschirsich, cbro - Dr. med. Christian Brodowski and Dr. André Zilch

Das nützlich-unbedenklich Spektrum

Können wir Software bauen, die nützlich /und/ unbedenklich…

• Security Main
• 63 min
• 2019-12-28
• 16119
• Fefe

Hacking an NFC toy with the ChameleonMini

• Security WikiPakaWG
• 13 min
• 2019-12-30
• 11400
• fptrs and ceres-c

Leaving legacy behind

Reducing carbon footprint of network services with MirageOS…

• Security Main
• 52 min
• 2019-12-27
• 10356
• Hannes Mehnert

All wireless communication stacks are equally broken

• Security Main
• 38 min
• 2019-12-28
• 9576
• jiska

SELECT code_execution FROM * USING SQLite;

--Gaining code execution using a malicious SQLite database

• Security Main
• 46 min
• 2019-12-27
• 9564
• OmerGull

Tales of old: untethering iOS 11

Spoiler: Apple is bad at patching

• Security Main
• 39 min
• 2019-12-27
• 8305
• littlelailo

Plundervolt: Flipping Bits from Software without Rowhammer

• Security Main
• 49 min
• 2019-12-27
• 7790
• Daniel Gruss and Kit Murdock

How to Break PDFs

Breaking PDF Encryption and PDF Signatures

• Security Main
• 58 min
• 2019-12-27
• 7339
• Fabian Ising and Vladislav Mladenov

The sustainability of safety, security and privacy

• Security Main
• 43 min
• 2019-12-28
• 7265
• Ross Anderson

Harry Potter and the Not-So-Smart Proxy War

Taking a look at a covert CIA virtual fencing solution

• Security Main
• 35 min
• 2019-12-28
• 6911
• Jos Wetzels

A systematic evaluation of OpenBSD's mitigations

• Security Main
• 53 min
• 2019-12-29
• 6670
• stein

Intel Management Engine deep dive

Understanding the ME at the OS and hardware level

• Security Main
• 60 min
• 2019-12-27
• 6283
• Peter Bosch

Uncover, Understand, Own - Regaining Control Over Your AMD CPU

• Security Main
• 56 min
• 2019-12-27
• 6004
• Robert Buhren, Alexander Eichner and Christian Werling

The Great Escape of ESXi

Breaking Out of a Sandboxed Virtual Machine

• Security Main
• 40 min
• 2019-12-27
• 5927
• f1yyy

(Post-Quantum) Isogeny Cryptography

• Security Main
• 52 min
• 2019-12-27
• 5278
• naehrwert

On the insecure nature of turbine control systems in power generation

A security study of turbine control systems in power…

• Security Main
• 60 min
• 2019-12-28
• 4320
• repdet, @_moradek_ and c0rs

15 Jahre deutsche Telematikinfrastruktur (TI)

Die Realität beim Arztbesuch nach 15 Jahren Entwicklung…

• Security Main
• 41 min
• 2019-12-29
• 4189
• Christoph Saatjohann

The One Weird Trick SecureROM Hates

• Security Main
• 38 min
• 2019-12-29
• 4005
• qwertyoruiop

Hacking Sony PlayStation Blu-ray Drives

• Security Main
• 49 min
• 2019-12-28
• 4004
• oct0xor

Email authentication for penetration testers

When SPF is not enough

• Security Main
• 61 min
• 2019-12-29
• 3525
• Andrew Konstantinov

Cryptography demystified

An introduction without maths

• Security Main
• 53 min
• 2019-12-29
• 3317
• oots

Hacking (with) a TPM

Don't ask what you can do for TPMs, Ask what TPMs can do…

• Security Main
• 37 min
• 2019-12-29
• 3258
• Andreas Fuchs

It's not safe on the streets... especially for your 3DS!

Exploring a new attack surface on the 3DS

• Security Main
• 46 min
• 2019-12-27
• 3054
• nba::yoh

A Deep Dive Into Unconstrained Code Execution on Siemens S7 PLCs

• Security Main
• 62 min
• 2019-12-27
• 2708
• Ali Abbasi and Tobias Scharnowski

High-assurance crypto software

• Security Main
• 61 min
• 2019-12-29
• 2338
• djb and Tanja Lange

No source, no problem! High speed binary fuzzing

• Security Main
• 59 min
• 2019-12-29
• 1880
• Nspace and gannimo

Boot2root

Auditing Boot Loaders by Example

• Security Main
• 62 min
• 2019-12-29
• 1862
• Ilja van Sprundel and Joseph Tartaro

Vehicle immobilization revisited

Uncovering and assessing a second authentication mechanism…

• Security Main
• 55 min
• 2019-12-28
• 1672
• Wouter Bokslag

ZombieLoad Attack

Leaking Your Recent Memory Operations on Intel CPUs

• Security Main
• 55 min
• 2019-12-28
• 1444
• Michael Schwarz, Moritz Lipp and Daniel Gruss

KTRW: The journey to build a debuggable iPhone

• Security Main
• 54 min
• 2019-12-28
• 1366
• Brandon Azad

TamaGo - bare metal Go framework for ARM SoCs.

Reducing the attack surface with pure embedded Go.

• Security Main
• 59 min
• 2019-12-28
• 1221
• Andrea Barisani

SigOver + alpha

Signal overshadowing attack on LTE and its applications

• Security Main
• 55 min
• 2019-12-28
• 1093
• CheolJun Park and Mincheol Son

Practical Cache Attacks from the Network and Bad Cat Puns

• Security Main
• 42 min
• 2019-12-27
• 1061
• Michael Kurth

Don't Ruck Us Too Hard - Owning Ruckus AP Devices

3 different RCE vulnerabilities on Ruckus Wireless access…

• Security Main
• 48 min
• 2019-12-28
• 906
• Gal Zror

Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

• Security Main
• 36 min
• 2019-12-28
• 703
• Nilo Redini

Breaking Microsoft Edge Extensions Security Policies

• Security Main
• 30 min
• 2019-12-28
• 608
• Nikhil Mittal