Dumpster Diving: One Man's Trash
Grifter - Dumpster Diving: One man's trash.
Summary
Architecture and Background
Grifter - Dumpster Diving: One man's trash... Dumpster Diving: One man's trash... There are few things that yield more information about an individual or organization than their very own trash. This simple fact can be both fun and frightening depending upon which side of the fence you're on.
Vulnerability Analysis
Practiced by hackers for countless years, the act of Dumpster Diving has been an essential tool in the hackers toolkit; and an often overlooked area of an organizations security policies. This speech will cover but not be limited to: * Who are Dumpster Divers? What it is, and why they do it. * What to wear and take with you when Dumpster Diving.
Exploitation and Demonstrations
* Basic Rules to follow to stay safe and within the law. * What to do if approached by the authorities. * Areas to dive and not to dive. * Interesting and Humorous Anecdotes.
Remediation and Defensive Strategies
* Ethics. * Protecting your privacy or the privacy of your organization. Grifter has been involved in the scene for over a decade and currently runs 2600SLC, the Salt Lake City 2600 meeting, where he often lectures on a range of security related topics. He has been published in numerous online and print publications and has previously been a speaker at Defcon. He has also been the subject of several interviews for various online, print, and television pieces regarding different areas of the hacker culture over the last several years. He is also a Defcon Goon and primary organizer of the Defcon Scavenger Hunt and Defcon Movie Channel.
Related talks
Main Stage·51 min
Social Engineering Panel explores social engineering fundamentals at DEF CON 11, examining dumpster-diving and practical defenses.
Main Stage·43 min
Keanu Nys
Demonstrates how red teams can abuse legitimate Microsoft login branding parameters and OAuth endpoints to host convincing, high-trust phishing infrastructure.
Main Stage·36 min
Harrison Sand · Erlend Leiknes
Analyzes the evolution of enterprise phishing defense and demonstrates novel reverse-proxy adversary-in-the-middle tradecraft to bypass modern authentication.


