38C3: Illegal Instructions

Wir wissen wo dein Auto steht

Volksdaten von Volkswagen

• Security Saal 1
• 38 min
• 2024-12-27
• 171210
• Michael Kreil and Flüpke

„Konnte bisher noch nie gehackt werden“:

Die elektronische Patientenakte kommt - jetzt für alle!

• Security Saal 1
• 59 min
• 2024-12-27
• 103475
• Martin Tschirsich and Bianca Kastl

Breaking NATO Radio Encryption

• Security Saal ZIGZAG
• 59 min
• 2024-12-27
• 25207
• Lukas Stennes

From Pegasus to Predator - The evolution of Commercial Spyware on iOS

• Security Saal GLITCH
• 59 min
• 2024-12-28
• 21273
• Matthias Frielingsdorf

BlinkenCity: Radio-Controlling Street Lamps and Power Plants

• Security Saal 1
• 61 min
• 2024-12-28
• 20672
• Fabian Bräunlein and Luca Melette

Find My * 101

• Security Saal 1
• 40 min
• 2024-12-30
• 18567
• Henryk Plötz

Fearsome File Formats

• Security Saal 1
• 45 min
• 2024-12-28
• 10515
• Ange Albertini

Fake-Shops von der Stange: BogusBazaar

• Security Saal 1
• 63 min
• 2024-12-28
• 10079
• kantorkel and Kai Biermann

Hacking the RP2350

• Security Saal ZIGZAG
• 57 min
• 2024-12-27
• 6861
• Aedan Cullen

io_uring, eBPF, XDP and AF_XDP

• Security Saal GLITCH
• 56 min
• 2024-12-28
• 4940
• LaF0rge (He/him)

The master key

• Security Saal ZIGZAG
• 51 min
• 2024-12-28
• 4399
• segher and Wanda

Attack Mining: How to use distributed sensors to identify and take down adversaries

• Security Saal ZIGZAG
• 61 min
• 2024-12-29
• 4326
• Lars König

ACE up the sleeve: Hacking into Apple's new USB-C Controller

• Security Saal GLITCH
• 40 min
• 2024-12-27
• 4133
• stacksmashing

From Simulation to Tenant Takeover

• Security Saal 1
• 29 min
• 2024-12-30
• 3421
• Vaisha Bernard

What the PHUZZ?!

Finding 0-days in Web Applications with Coverage-guided…

• Security Saal ZIGZAG
• 60 min
• 2024-12-27
• 2759
• Sebastian Neef (gehaxelt)

State of Surveillance: A year of digital threats to civil society

• Security Saal ZIGZAG
• 59 min
• 2024-12-28
• 2748
• Jurre van Bergen

Projekt Bucketchallenge

• Security Saal ZIGZAG
• 40 min
• 2024-12-28
• 2066
• Kaspar

EU's Digital Identity Systems - Reality Check and Techniques for Better Privacy

• Security Saal GLITCH
• 41 min
• 2024-12-27
• 1926
• Anja Lehmann and socialhack

Ultrawide archaeology on Android native libraries

• Security Saal GLITCH
• 39 min
• 2024-12-29
• 1893
• Luca Di Bartolomeo (cyanpencil) and Rokhaya Fall

Dialing into the Past: RCE via the Fax Machine – Because Why Not?

• Security Saal ZIGZAG
• 38 min
• 2024-12-29
• 1699
• Rick de Jager and Carlo Meijer

MacOS Location Privacy Red Pill: A Rabbit Hole Resulting in 24 CVEs

• Security Saal GLITCH
• 58 min
• 2024-12-28
• 1341
• Adam M.

How election software can fail

• Security Saal GLITCH
• 57 min
• 2024-12-29
• 1146
• Benjamin W. Broersma

From fault injection to RCE: Analyzing a Bluetooth tracker

• Security Saal ZIGZAG
• 31 min
• 2024-12-27
• 1126
• Nicolas Oberli

Ten Years of Rowhammer:

A Retrospect (and Path to the Future)

• Security Saal 1
• 41 min
• 2024-12-30
• 1111
• Daniel Gruss, Martin Heckel and Florian Adamsky

Auracast: Breaking Broadcast LE Audio Before It Hits the Shelves

• Security Saal ZIGZAG
• 41 min
• 2024-12-29
• 1080
• Frieder Steinmetz and Dennis Heinze

TETRA Algorithm set B - Can glue mend the burst?

• Security Saal ZIGZAG
• 40 min
• 2024-12-29
• 1078
• Wouter Bokslag and Jos Wetzels

Guardians of the Onion: Ensuring the Health and Resilience of the Tor Network

• Security Saal ZIGZAG
• 60 min
• 2024-12-28
• 959
• Hiro and Gus

Dude, Where's My Crypto? - Real World Impact of Weak Cryptocurrency Keys

• Security Saal GLITCH
• 39 min
• 2024-12-30
• 915
• sather

From Convenience to Contagion: The Libarchive Vulnerabilities Lurking in Windows 11

• Security Saal ZIGZAG
• 40 min
• 2024-12-30
• 690
• NiNi Chen

AI Meets Git: Unmasking Security Flaws in Qodo Merge

• Security Saal ZIGZAG
• 40 min
• 2024-12-29
• 591
• Nils Amiet