Car Hacking Village·35 min
Bill Demirkapi
Bill Demirkapi uncovers systemic validation flaws in digital signature implementations, allowing attackers to repurpose incompatible certificates to sign untrusted code.
code-signingx509certificates+2
10-13 August 2023 · Caesars Forum, Flamingo, Harrah's, and Linq, Las Vegas
DEF CON 31
10 villages · 179 talks
Villages at this event
Car Hacking Village
6 talks
Car Hacking Village focuses on vehicle security research, CAN bus injection attacks, EV charging side channels, automotive USB kernel fuzzing, and cryptographic validation.
Data Duplication Village
1 talks
Data Duplication Village at DEF CON 31 explores storage media forensics, hardware reliability telemetry, large-scale drive failure trends, and data preservation.
DCGVR Village
9 talks
DEF CON Groups Virtuality (DCGVR) Village hosts talks and discussions on virtual reality workspaces, governance and compliance hacking, identity systems, and grassroots community organizing.
Main Stage
100 talks
DEF CON 31 Main Stage features flagship research, keynotes, and presentations spanning firmware and hardware reverse engineering, advanced operating system exploitation, cloud and identity vulnerabilities, AI red teaming, and landmark cybersecurity policy discussions.
Main Stage & General
1 talks
DEF CON 31 main stage and general track presentations.
Packet Hacking Village
5 talks
Packet Hacking Village explores network packet analysis, cyberpsychological active defense, open-source intelligence pipelines, visual threat modeling, and local malware triage environments.
Policy Village
13 talks
DEF CON 31 Policy Village convenes government leaders, legislative advocates, and security researchers to debate cyber diplomacy, software liability, encryption rights, coordinated vulnerability disclosure, and youth cybercrime diversion.
Village Interviews
26 talks
Interviews, village walkthroughs, and hardware spotlights produced by the DEF CON Video Team at DEF CON 31.
War Stories
13 talks
DEF CON 31 War Stories features first-hand accounts from cybersecurity veterans, researchers, and community leaders sharing pivotal investigations, offensive research discoveries, legal disclosure battles, and retrospective incident analyses.
XR Village
5 talks
XR Village focuses on extended reality security, immersive spatial computing, virtual and augmented reality sensor privacy, and digital twin simulation.
All DC31 talks
1–24 of 152 talks / 179
Car Hacking Village·37 min
Martin Petran
Martin Petran explores exploiting edge cases in the CAN bus protocol specification and message metadata fields to induce denial-of-service across embedded ECUs.
can-busautomotivedos+2
Car Hacking Village·38 min
Euntae Jang · Donghyon Jeong · Jonghyuk Song
Presents an in-vehicle USB kernel fuzzing framework directly connected to production vehicles, discovering zero-days across Volkswagen, Renault, GM, and AGL.
automotiveusbfuzzing+2
Car Hacking Village·45 min
Sebastian Köhler · Richard Baker
Demonstrates wireless electromagnetic leakage in EV Combined Charging System (CCS) cables, using SDRs to eavesdrop on power-line communications and disrupt charging.
ev-chargingbrokenwireplc+2
Car Hacking Village·46 min
Ian Tabor · Ken Tindell
Automotive security experts reverse engineer a real-world CAN Injection theft tool disguised as a Bluetooth speaker used to steal a Toyota RAV4.
can-injectionautomotivecar-theft+2
Car Hacking Village·29 min
Wyatt Ford · Alex Reuter
Wyatt Ford and Alex Reuter investigate security weaknesses in Vehicle Diagnostic Adapters (VDAs) used on heavy commercial trucks, exploring firmware updates and attack surfaces.
automotivecan-bushardware+2
Data Duplication Village·45 min
Andy Klein
Andy Klein presents a decade of longitudinal Backblaze Drive Stats data, analyzing failure metrics, lifetime telemetry, and reliability trends across enterprise storage drives.
backblazestoragehardware-reliability+2
DCGVR Village·44 min
Joe Mast
Joe Mast highlights grassroots organizing and community mentorship initiatives across DEF CON Groups.
dc-groupsmentorshipeducation+2
DCGVR Village·37 min
Jayson E. Street
Jayson E. Street delivers the opening keynote for the DEF CON Groups Virtuality (DCGVR) Village.
social-engineeringcommunityculture+2
DCGVR Village·26 min
Squiddy
Squiddy explores privacy and architectural considerations for designing gender-inclusive health information systems and electronic medical records.
healthcaredata-privacyidentity+2
DCGVR Village·29 min
hoodiepony
hoodiepony discusses digital privacy, operational security, and network footprint reduction in virtual reality and connected cyberspace.
privacyopsecnetwork-security+2
DCGVR Village·1 hr 14 min
Sam Colaizzi
Sam Colaizzi examines cryptocurrency hype, blockchain security pitfalls, and realistic threat models for decentralized systems.
cryptographycryptocurrencyblockchain+2
DCGVR Village·40 min
Abhijeet Singh
Abhijeet Singh examines business logic flaws and authorization bypasses in web applications that defeat traditional security scanners.
business-logicweb-securityappsec+2
DCGVR Village·45 min
JBO
JBO explores the quirks, historical bugs, and text user interface development challenges in ncurses.
ncursestuicli+2
DCGVR Village·39 min
datalocaltmp
datalocaltmp evaluates the security, productivity, and privacy implications of working within virtual reality workspaces and spatial environments.
virtual-realityvr-workspacesspatial-computing+2
DCGVR Village·44 min
Allen Baranov
Allen Baranov explores how the hacker mindset can be applied to Governance, Risk, and Compliance (GRC) to improve security culture and risk assessments.
grccompliancerisk-management+2
Main Stage·36 min
Ron Ben Yizhak
Ron Ben Yizhak introduces #NoFilter, a novel privilege escalation technique abusing the Windows Filtering Platform to achieve SYSTEM execution without token manipulation.
windowswfpprivilege-escalation+2
Main Stage·20 min
Ceri Coburn
Ceri Coburn demonstrates privilege escalation across mixed-vendor environments where Linux/Unix MIT and Heimdal Kerberos stacks integrate with Windows Active Directory.
kerberosactive-directorylinux+2
Main Stage·44 min
Noam Moshe · Sharon Brizinov
Claroty Team82 reveals how cloud connectivity features in Western Digital and Synology NAS devices allow remote compromise and full RCE across millions of devices.
nascloudpwn2own+2
Main Stage·46 min
Bramwell Brizendine · Davy Kusuma
Dr. Bramwell Brizendine and Davy Kusuma present ROP ROCKET, an automated ROP compiler supporting Heaven's Gate architecture switching and bad-byte gadget synthesis.
ropexploit-developmentheavens-gate+2
Main Stage·39 min
David Pekoske · Sean Lyngaas · Jen Easterly
TSA Administrator David Pekoske, CISA Director Jen Easterly, and CNN's Sean Lyngaas discuss modernizing cybersecurity regulations for US transportation infrastructure.
critical-infrastructuretsacisa+2
Main Stage·46 min
Cory Doctorow
Cory Doctorow analyzes platform decay across Big Tech monopolies and outlines a policy and technical roadmap for interoperability, privacy, and user self-help.
enshittificationantitrustdigital-rights+2
Main Stage·46 min
Cory Doctorow
Cory Doctorow delivers an encore analysis on the decay of monopoly web platforms, advocating for aggressive antitrust action and adversarial interoperability.
enshittificationantitrustdigital-rights+2
Main Stage·35 min
Austin Emmitt
Austin Emmitt demonstrates bypassing Apple's iOS 16 NSPredicate restrictions, achieving 100% reliable PAC bypasses and code execution in SpringBoard.
nspredicateiosmacos+2