Main Stage·43 min
Elie Bursztein
Google researcher Elie Bursztein combines deep learning side-channel attacks with AI explainability to pinpoint and remediate cryptographic hardware leakage.
side-channelai-explainabilitydeep-learning+2
DEF CON Safe Mode/Main Stage across years
Main Stage Safe Mode
Virtual (Discord and Twitch) · 6-9 August 2020 · 67 talks
Main Stage presentations and live Q&A sessions at DEF CON Safe Mode, covering wireless combo chip escalation, Ripple20 supply chain vulnerabilities, ATM jackpotting, macOS malware, and cloud privilege escalation.
1–24 of 66 talks / 67
Main Stage·33 min
Elie Bursztein
Elie Bursztein discusses deep learning side-channel analysis, AI explainability tools, and hardware leak testing in a live Q&A.
side-channelai-explainabilityq-and-a+2
Main Stage·33 min
Paul Marrapese
Paul Marrapese exposes critical vulnerabilities in the iSmartViewPro P2P protocol, enabling unauthenticated remote hijacking of over 3 million IoT cameras globally.
iotp2pcameras+2
Main Stage·31 min
Paul Marrapese
Paul Marrapese answers questions regarding P2P IoT protocols, white-label security disclosure obstacles, and consumer camera defense.
iotp2pcameras+2
Main Stage·31 min
Peleg Hadar · Tomer Bar
Peleg Hadar and Tomer Bar audit the Windows Print Spooler service a decade after Stuxnet, uncovering multiple zero-day SYSTEM privilege escalation bugs.
print-spoolerstuxnetprivilege-escalation+2
Main Stage·24 min
Peleg Hadar · Tomer Bar
Peleg Hadar and Tomer Bar discuss Windows Print Spooler architecture, local privilege escalation techniques, and spooler patch testing.
print-spoolerprivilege-escalationwindows+2
Main Stage·50 min
Trey Keown · Brenda So
Trey Keown and Brenda So reverse engineer automated teller machines, defeating firmware code signing and discovering network zero-days to jackpot ATMs remotely.
atmjackpottingreverse-engineering+2
Main Stage·1 hr 39 min
Electronic Frontier Foundation staff and Electronic Frontier Alliance members host an open community Q&A on digital rights and grassroots advocacy.
effefadigital-rights+2
Main Stage·43 min
Christopher Wade
Christopher Wade reverse engineers closed proprietary NFC controllers in modern smartphones, patching microcontroller firmware to expand RF capabilities.
nfchardwarereverse-engineering+2
Main Stage·31 min
Christopher Wade
Christopher Wade discusses reverse engineering proprietary NFC microcontrollers, patching mobile baseband coprocessors, and custom firmware.
nfchardwaremobile+2
Main Stage·27 min
Yamila Levalle
Yamila Levalle explores spoofing biometric fingerprint and facial recognition sensors on consumer smartphones using low-cost 3D printing and conductive materials.
biometricsfingerprint3d-printing+2
Main Stage·58 min
Mickey Shkatov · Jesse Michael
Mickey Shkatov and Jesse Michael demonstrate abusing non-volatile memory chips in laptop trackpads and USB-C monitors to store stealthy malware payloads.
nvmhardwarehardware+2
Main Stage·30 min
Mickey Shkatov · Jesse Michael
Mickey Shkatov and Jesse Michael answer community questions regarding non-volatile memory chips, peripheral firmware modification, and detection.
nvmhardwarehardware+2
Main Stage·53 min
Christian Dameff
Dr. Christian Dameff and panel answer questions on clinical cyber defense, medical device vulnerability handling, and pandemic healthcare resilience.
healthcarehealthcarecovid-19+2
Main Stage·1 hr 5 min
Christian Dameff
Emergency physician Christian Dameff and a panel of experts examine escalating cyber threats to hospitals, patient safety, and medical devices during the COVID-19 pandemic.
healthcarehealthcarecovid-19+2
Main Stage·39 min
Bill Demirkapi
Bill Demirkapi demystifies writing modern Windows kernel rootkits, demonstrating novel kernel hooking techniques to manipulate user-mode network stacks.
rootkitkernelwindows-internals+2
Main Stage·31 min
Bill Demirkapi
Bill Demirkapi answers community questions regarding modern Windows kernel development, PatchGuard interactions, and network driver hooks.
rootkitkernelwindows-internals+2
Main Stage·46 min
Cooper Quintin
EFF researcher Cooper Quintin introduces Crocodile Hunter, an open-source tool using low-cost SDRs to detect 4G LTE IMSI catchers (Hailstorm) in real time.
imsi-catcherltecellular+2
Main Stage·30 min
Cooper Quintin
Cooper Quintin answers questions on Crocodile Hunter, 4G IMSI catcher detection mechanics, and cellular surveillance tracking.
imsi-catchercellularlte+2
Main Stage·30 min
Feng Xiao
Feng Xiao presents Hidden Property Abusing (HPA), a novel attack vector exploiting internal Node.js runtime properties to achieve arbitrary code execution.
nodejshidden-propertyjavascript+2
Main Stage·31 min
Feng Xiao
Feng Xiao answers audience questions on Hidden Property Abusing (HPA), JavaScript runtime internals, and securing NPM libraries.
nodejshidden-propertyq-and-a+2
Main Stage·38 min
Hadrien Barral · Rémi Géraud-Stewart
Hadrien Barral and Rémi Géraud-Stewart disclose DNSSECTION, demonstrating subtle structural attacks on DNS and DNSSEC record validation.
dnsdnsseccache-poisoning+2
Main Stage·32 min
Hadrien Barral · Rémi Géraud-Stewart
Hadrien Barral and Rémi Géraud-Stewart answer questions on DNSSECTION attacks, DNS record parsing semantics, and DNSSEC resolver validation.
dnsdnsseccache-poisoning+2
Main Stage·30 min
Erik Hunstad
Erik Hunstad answers questions on TLS 1.3 Encrypted Client Hello, CDN domain fronting circumvention, and DPI evasion.
domain-frontingtls-1-3censorship+2