Talks·35 min
Christophe Brocas
Shows how an enterprise rolled out ACME certificate automation on its internal PKI, with lessons for other organizations.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34Luxembourg · October 2023 · 70 talks
Talks from hack.lu 2023.
1–24 of 58 talks / 70
Talks·35 min
Christophe Brocas
Shows how an enterprise rolled out ACME certificate automation on its internal PKI, with lessons for other organizations.
Talks·46 min
Jacob Torrey
Shows how compression ratios can flag LLM-generated text quickly, and why evaluating such detectors is so hard.
Talks·5 min
Christophe Vandeplas
Explains how Belgium's new military cyber reserve works and how civilians can join as part-time reservists.
Talks·24 min
Stef Van Dop
Shows how a rigged charging port can mirror a phone's screen over USB-C and recover typed passwords with OCR.
Talks·12 min
Andras Iklody
Shows how the open-source Cerebrate tool centralises contact directories and MISP instance management for security communities.
Talks·33 min
Andras Iklody
Explains how Cerebrate centralizes contacts, sharing groups and keys across MISP instances for a threat-sharing community.
Talks·25 min
Dennis Rand
Shows how a caching proxy in front of MISP can deliver indicators to firewalls and EDR tools during incident response.
Talks·25 min
David
Explores how threat intelligence teams can time and tailor their support for incident response teams during active cases.
Talks·21 min
Koen Van Impe
Shows how Jupyter notebooks and PyMISP turn threat intelligence investigation steps into shareable, documented procedures.
Talks·25 min
Maxime Clementz
Explains how VPN always-on agents can be bypassed through spoofed network checks and Windows filtering rules.
Talks·6 min
Introduces Deming, an open-source information security management system (ISMS).
Talks·6 min
William Robinet
Shows how to turn DER-encoded certificates into editable text and regenerate valid binary files with OpenSSL.
Talks·17 min
Emanuel Seemann
Shows how crowdsourced intrusion data can reveal VPN and proxy addresses through their shifting attack patterns over time.
Talks·22 min
Ange Albertini
Explains how file format design choices create security risks, using historical examples such as MP3 and common container practices.
Talks·18 min
Antoine Cailliau
Presents a self-hosted platform that organizes and searches threat reports by context rather than raw indicators.
Talks·29 min
Markus Vervier
Explores eSIM provisioning, SIM applet abuse and SMS-based command and control from an offensive perspective.
Talks·24 min
Victor Barrault
Shows how CERT-FR enforces indicator quality through internal Python tooling built around MISP and lifecycle tagging.
Talks·28 min
P. Ventuzelo · T. Laucournet
Shows how IPFS content addressing, peer records and node monitoring can support threat intelligence and malware tracking.
Talks·33 min
Shows how an information sharing community can be set up and run using open-source tools.
Talks·25 min
JeongGak Lyu · @lazarusholic
Traces how one North Korean threat actor family picked up its many vendor code names, clusters, and attack patterns.
Talks·23 min
Mauro Vignati
Explains how civilian participation in cyber operations during armed conflict blurs the line between civilians and combatants.
Talks·19 min
Matthieu Mazzolini
Explains how a crowdsourced IP reputation feed is built, scored and prepared for machine learning.
Talks·30 min
Vladimir Kropotov
Shows how public photos and videos expose biometric data that criminals can combine with deepfakes to build digital twins.
Talks·43 min
Introduces cyberwarfare, covering both its theoretical foundations and how it is practised.