Track 1·57 min
Adrian Wood · Mary Walker
Shows how attackers can hide malware in machine learning models shared on Hugging Face and run it inside ML environments.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34Mesa, AZ, USA · February 2024 · 13 talks
Track 1 talks from CactusCon 12 2024.
1–12 of 12 talks / 13
Track 1·57 min
Adrian Wood · Mary Walker
Shows how attackers can hide malware in machine learning models shared on Hugging Face and run it inside ML environments.
Track 1·1 hr 3 min
Michael Moore · Ivan Zhelev · Ryan Murray · Nate Young · Angie Claer · Jerry Keeley · Dana Lewis · Lester Gody · Sean Trackman · Ken Ma
Arizona election officials and their partners describe physical and cyber protections and threat sharing ahead of the 2024 general election.
Track 1·58 min
Naomi Brockwell
Argues that pervasive surveillance shifts power and shapes behavior, then offers practical privacy steps for builders and users.
Track 1·39 min
Ryan Thompson
Walks through AWS and Azure persistence mechanisms in the cloud control plane and how defenders can detect them.
Track 1·57 min
Ben Webb
Explains how cloud shared responsibility changes network security thinking and demonstrates a live cloud account compromise.
Track 1·43 min
Alissa
Explains how WiFi, Bluetooth and RFID signals can reveal where people are, and which common privacy beliefs hold up.
Track 1·25 min
David Bravo
Shows how misconfigured AWS Cognito user pools and identity pools can be abused to reach AWS resources.
Track 1·23 min
Anthony Pipia
Explains how dangling DNS records, including A records, enable subdomain takeovers and how to automate their detection.
Track 1·56 min
Marcus Guevara
Points newcomers to free resources covering IR preparation, telemetry, forensic artifacts, free tools and building labs.
Track 1·27 min
Noah Pitts · Morgan Hunting
Shows how HID iClass multiclass readers can be downgraded to weaker low-frequency cards using a Flipper Zero.
Track 1·57 min
Katelyn Bowden (Medus4) · Christien 'DilDog' Rioux
Presents Veilid, an open-source peer-to-peer framework for private messaging and decentralized apps.
Track 1·27 min
Yael Grauer · David Huerta
Roasts 2023 security articles on phones, surveillance and hyped threats, and what readers should actually worry about.