36C3: Resource Exhaustion

Hirne Hacken

Menschliche Faktoren der IT-Sicherheit

• Security Main
• 43 min
• 2019-12-29
• 49153
• Linus Neumann

What's left for private messaging?

• Security Main
• 60 min
• 2019-12-27
• 41864
• Will Scott

Messenger Hacking: Remotely Compromising an iPhone through iMessage

• Security Main
• 61 min
• 2019-12-27
• 29670
• Samuel Groß

"Hacker hin oder her": Die elektronische Patientenakte kommt!

• Security Main
• 60 min
• 2019-12-27
• 22290
• Martin Tschirsich, cbro - Dr. med. Christian Brodowski and Dr. André Zilch

Das nützlich-unbedenklich Spektrum

Können wir Software bauen, die nützlich /und/ unbedenklich…

• Security Main
• 63 min
• 2019-12-28
• 16109
• Fefe

Hacking an NFC toy with the ChameleonMini

• Security WikiPakaWG
• 13 min
• 2019-12-30
• 11360
• fptrs and ceres-c

Leaving legacy behind

Reducing carbon footprint of network services with MirageOS…

• Security Main
• 52 min
• 2019-12-27
• 10336
• Hannes Mehnert

All wireless communication stacks are equally broken

• Security Main
• 38 min
• 2019-12-28
• 9575
• jiska

SELECT code_execution FROM * USING SQLite;

--Gaining code execution using a malicious SQLite database

• Security Main
• 46 min
• 2019-12-27
• 9563
• OmerGull

Tales of old: untethering iOS 11

Spoiler: Apple is bad at patching

• Security Main
• 39 min
• 2019-12-27
• 8303
• littlelailo

Plundervolt: Flipping Bits from Software without Rowhammer

• Security Main
• 49 min
• 2019-12-27
• 7788
• Daniel Gruss and Kit Murdock

How to Break PDFs

Breaking PDF Encryption and PDF Signatures

• Security Main
• 58 min
• 2019-12-27
• 7335
• Fabian Ising and Vladislav Mladenov

The sustainability of safety, security and privacy

• Security Main
• 43 min
• 2019-12-28
• 7265
• Ross Anderson

Harry Potter and the Not-So-Smart Proxy War

Taking a look at a covert CIA virtual fencing solution

• Security Main
• 35 min
• 2019-12-28
• 6907
• Jos Wetzels

A systematic evaluation of OpenBSD's mitigations

• Security Main
• 53 min
• 2019-12-29
• 6532
• stein

Intel Management Engine deep dive

Understanding the ME at the OS and hardware level

• Security Main
• 60 min
• 2019-12-27
• 6276
• Peter Bosch

Uncover, Understand, Own - Regaining Control Over Your AMD CPU

• Security Main
• 56 min
• 2019-12-27
• 5992
• Robert Buhren, Alexander Eichner and Christian Werling

The Great Escape of ESXi

Breaking Out of a Sandboxed Virtual Machine

• Security Main
• 40 min
• 2019-12-27
• 5924
• f1yyy

(Post-Quantum) Isogeny Cryptography

• Security Main
• 52 min
• 2019-12-27
• 5276
• naehrwert

On the insecure nature of turbine control systems in power generation

A security study of turbine control systems in power…

• Security Main
• 60 min
• 2019-12-28
• 4317
• repdet, @_moradek_ and c0rs

15 Jahre deutsche Telematikinfrastruktur (TI)

Die Realität beim Arztbesuch nach 15 Jahren Entwicklung…

• Security Main
• 41 min
• 2019-12-29
• 4181
• Christoph Saatjohann

The One Weird Trick SecureROM Hates

• Security Main
• 38 min
• 2019-12-29
• 4005
• qwertyoruiop

Hacking Sony PlayStation Blu-ray Drives

• Security Main
• 49 min
• 2019-12-28
• 3999
• oct0xor

Email authentication for penetration testers

When SPF is not enough

• Security Main
• 61 min
• 2019-12-29
• 3523
• Andrew Konstantinov

Cryptography demystified

An introduction without maths

• Security Main
• 53 min
• 2019-12-29
• 3317
• oots

Hacking (with) a TPM

Don't ask what you can do for TPMs, Ask what TPMs can do…

• Security Main
• 37 min
• 2019-12-29
• 3250
• Andreas Fuchs

It's not safe on the streets... especially for your 3DS!

Exploring a new attack surface on the 3DS

• Security Main
• 46 min
• 2019-12-27
• 3054
• nba::yoh

A Deep Dive Into Unconstrained Code Execution on Siemens S7 PLCs

• Security Main
• 62 min
• 2019-12-27
• 2700
• Ali Abbasi and Tobias Scharnowski

High-assurance crypto software

• Security Main
• 61 min
• 2019-12-29
• 2336
• djb and Tanja Lange

No source, no problem! High speed binary fuzzing

• Security Main
• 59 min
• 2019-12-29
• 1877
• Nspace and gannimo

Boot2root

Auditing Boot Loaders by Example

• Security Main
• 62 min
• 2019-12-29
• 1861
• Ilja van Sprundel and Joseph Tartaro

Vehicle immobilization revisited

Uncovering and assessing a second authentication mechanism…

• Security Main
• 55 min
• 2019-12-28
• 1668
• Wouter Bokslag

ZombieLoad Attack

Leaking Your Recent Memory Operations on Intel CPUs

• Security Main
• 55 min
• 2019-12-28
• 1442
• Michael Schwarz, Moritz Lipp and Daniel Gruss

KTRW: The journey to build a debuggable iPhone

• Security Main
• 54 min
• 2019-12-28
• 1363
• Brandon Azad

TamaGo - bare metal Go framework for ARM SoCs.

Reducing the attack surface with pure embedded Go.

• Security Main
• 59 min
• 2019-12-28
• 1221
• Andrea Barisani

SigOver + alpha

Signal overshadowing attack on LTE and its applications

• Security Main
• 55 min
• 2019-12-28
• 1091
• CheolJun Park and Mincheol Son

Practical Cache Attacks from the Network and Bad Cat Puns

• Security Main
• 42 min
• 2019-12-27
• 1061
• Michael Kurth

Don't Ruck Us Too Hard - Owning Ruckus AP Devices

3 different RCE vulnerabilities on Ruckus Wireless access…

• Security Main
• 48 min
• 2019-12-28
• 905
• Gal Zror

Identifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale

• Security Main
• 36 min
• 2019-12-28
• 703
• Nilo Redini

Breaking Microsoft Edge Extensions Security Policies

• Security Main
• 30 min
• 2019-12-28
• 608
• Nikhil Mittal