Community Stage·19 min
Eero "rambo" af Heurlin
Follows a beginner's attempt to reverse engineer the Bluetooth Low Energy protocol behind an LED helmet light.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34Helsinki, Finland · February 2023 · 13 talks
Community Stage talks from Disobey 2023.
1–12 of 12 talks / 13
Community Stage·19 min
Eero "rambo" af Heurlin
Follows a beginner's attempt to reverse engineer the Bluetooth Low Energy protocol behind an LED helmet light.
Community Stage·32 min
Lotta Sandroos
Argues that home users need encouraging, targeted security messaging rather than fear-based campaigns.
Community Stage·25 min
Matthew Keogh · Tom Taylor-MacLean
Shows how trusting an AWS service principal in resource-based policies can let outside accounts reach a victim's resources.
Community Stage·26 min
Markus Lehtonen
Shows how links sent by email can leak sensitive data through public URL scanning services.
Community Stage·52 min
Knud
Walks through finding and exploiting bugs in Uniview IP cameras, from UART access and firmware unpacking to a stack overflow.
Community Stage·55 min
Walter Belgers
Shows how a magnetic lock's sliders can be read, copied and bypassed, including recovering its master key.
Community Stage·30 min
Mikko Kenttälä
Shows how crafted calendar invitation attachments can write and delete files on macOS through Apple Calendar bugs.
Community Stage·19 min
Silvan Michael Gebhardt
Walks through how a routing mistake at a European ISP leaked routes and disrupted traffic for other networks.
Community Stage·28 min
Lauri Paatero
Explains the IEC 62443-4-2 device security standard, its security levels, and its shortcomings for industrial devices.
Community Stage·53 min
Idanhurja
Walks through studying an Abloy lock and building a pick tailored to it.
Community Stage·25 min
Jouni Mikkola
Walks through three real intrusions, mapping observed attacker techniques to the defenses that could have stopped them.
Community Stage·28 min
Lindsay Kaye
Traces how ransomware groups changed their deployment, obfuscation, extortion and coding choices, and which changes backfired.