Community Stage·19 min
Eero "rambo" af Heurlin
Follows a beginner's attempt to reverse engineer the Bluetooth Low Energy protocol behind an LED helmet light.
reverse-engineeringdeviceiot+2
February 2023 · Helsinki, Finland
Disobey 2023
2 sessions · 26 talks
Sessions at this event
All Disobey 2023 talks
1–24 of 25 talks / 26
Community Stage·32 min
Lotta Sandroos
Argues that home users need encouraging, targeted security messaging rather than fear-based campaigns.
sociallearningprivacy+1
Community Stage·25 min
Matthew Keogh · Tom Taylor-MacLean
Shows how trusting an AWS service principal in resource-based policies can let outside accounts reach a victim's resources.
cloudawsidentity+3
Community Stage·26 min
Markus Lehtonen
Shows how links sent by email can leak sensitive data through public URL scanning services.
privacyphishingweb+2
Community Stage·52 min
Knud
Walks through finding and exploiting bugs in Uniview IP cameras, from UART access and firmware unpacking to a stack overflow.
embeddediotvulnerability-research+2
Community Stage·55 min
Walter Belgers
Shows how a magnetic lock's sliders can be read, copied and bypassed, including recovering its master key.
deviceattackhardware+2
Community Stage·30 min
Mikko Kenttälä
Shows how crafted calendar invitation attachments can write and delete files on macOS through Apple Calendar bugs.
vulnerability-researchvulnerabilitiesattack+2
Community Stage·19 min
Silvan Michael Gebhardt
Walks through how a routing mistake at a European ISP leaked routes and disrupted traffic for other networks.
incident-responselessons-learnednetwork+1
Community Stage·28 min
Lauri Paatero
Explains the IEC 62443-4-2 device security standard, its security levels, and its shortcomings for industrial devices.
icsdeviceiot+3
Community Stage·53 min
Idanhurja
Walks through studying an Abloy lock and building a pick tailored to it.
hardwaretoolexploiting+1
Community Stage·25 min
Jouni Mikkola
Walks through three real intrusions, mapping observed attacker techniques to the defenses that could have stopped them.
incident-responselessons-learneddefensive-security+2
Community Stage·28 min
Lindsay Kaye
Traces how ransomware groups changed their deployment, obfuscation, extortion and coding choices, and which changes backfired.
ransomwaremalware-analysisthreat+2
Main Stage·54 min
Karo Vallittu
Traces how Rolls-Royce built cyber defenses for Swan, a demonstrator autonomous passenger ferry, and what went wrong.
buildinglessons-learnedrisk+2
Main Stage·34 min
windytan
Shows how HDMI display signals leak radio emissions that can be captured from another room to move data across an air gap.
attackhardwaredevice+2
Main Stage·28 min
J. Tuomas Harviainen
Examines how drug buyers and sellers build trust on dark web image boards and the closed groups replacing them.
trustthreatintelligence+2
Main Stage·1 hr 2 min
Aapo Oksman
Shows how clients that skip certificate checks can be tricked into trusting forged TLS servers, with demos against iOS and Windows.
vulnerabilitiestrustnetwork+2
Main Stage·42 min
Jonas Vestberg
Walks through local privilege escalation flaws found in example scripts of a popular Windows pentest toolkit.
vulnerability-researchwindowstool+2
Main Stage·58 min
Connie McIntosh
Surveys how generative AI, deepfakes and human error are reshaping attacks and what defenders should expect.
aiphishingthreat+2
Main Stage·39 min
Suvi Lampila
Explains why harvest-now-decrypt-later attacks make post-quantum key exchange urgent and how to migrate existing network protocols.
post-quantum-cryptographynetworkrisk+1
Main Stage·28 min
Pyry Åvist
Compares red team phishing emails with ChatGPT-generated ones across tens of thousands of simulated attacks.
phishingaimachine-learning+3
Main Stage·52 min
Benjamin Nagel
Explains how aircraft are engineered and where cybersecurity fits, from redundancy and building blocks to segregation and testing.
architecturerisksystem+2
Main Stage·45 min
Ville Vainikka · Henri Aalt
Compares EDR endpoint telemetry with SSL-decrypting gateway visibility for spotting C2 traffic and adversary-in-the-middle logins.
threat-detectionnetworkdetection+2
Main Stage·51 min
Nick Jones
Walks through real-world AWS attack paths, from leaked credentials and CI/CD pipelines, plus detection and hardening advice.
cloudattackdetection+3
Main Stage·52 min
Antti Kurittu
Traces the Vastaamo psychotherapy patient data breach from an exposed database to extortion, leaked records and regulatory fallout.
incident-responseransomwarelessons-learned+2