［CB20］サイバーデブリをどう片づけるか？ ～感染/脆弱IoT機器の発見、観測、分析、通知活動の今～

IoT Village·37 min

• DEF CON
• Policy
• Date: Aug 2019
• Location: Las Vegas

Elvis Collado

This talk is about how an unauthenticated heap-based buffer overflow vulnerability was discovered and exploited within a router distributed by a market-leading ISP. Despite the targeted process utilizing mitigations s...

IoT Village·44 min

• DEF CON
• Red Team
• Date: Aug 2019
• Location: Las Vegas

Daniel Wegemer

We will show how the Fitbit ecosystem works based on the Fitbit Flex and Fitbit Charge HR as well as the Fitbit Ionic smartwatch. We also show how we modified the firmware of the Fitbit Flex and discuss several vulner...

IoT Village·41 min

• DEF CON
• Red Team
• Date: Aug 2018
• Location: Las Vegas

Veronica Schmitt

There are advancements made on a daily basis, with regards to medical implantable devices. These devices offer life extensions when organic systems fail. Are these systems secured? There are shocking amounts of vulner...