31C3: a new dawn

The Perl Jam: Exploiting a 20 Year-old Vulnerability

• 29 min
• 2014-12-29
• 18299
• Netanel Rubin

Heartache and Heartbleed: The insider’s perspective on the aftermath of Heartbleed

The untold story of what really happened, how it was…

• 29 min
• 2014-12-28
• 3880
• Nick Sullivan

UNHash - Methods for better password cracking

• 32 min
• 2014-12-29
• 4126
• Tonimir Kisasondi

Finding the Weak Crypto Needle in a Byte Haystack

Automatic detection of key-reuse vulnerabilities

• 32 min
• 2014-12-28
• 1552
• Ben H.

SCADA StrangeLove: Too Smart Grid in da Cloud

• 47 min
• 2014-12-27
• 6108
• Sergey Gordeychik and Aleksandr Timorin

The Matter of Heartbleed

What went wrong, how the Internet reacted, what we can…

• 50 min
• 2014-12-28
• 3346
• Zakir Durumeric

Funky File Formats

Advanced binary tricks

• 51 min
• 2014-12-29
• 10453
• Ange Albertini

Preserving arcade games

• 52 min
• 2014-12-28
• 5149
• Ange Albertini

Too Many Cooks - Exploiting the Internet-of-TR-069-Things

• 53 min
• 2014-12-28
• 8440
• Lior Oppenheim and Shahar Tal

AMD x86 SMU firmware analysis

Do you care about Matroshka processors?

• 54 min
• 2014-12-27
• 4685
• Rudolf Marek

Security Analysis of a Full-Body X-Ray Scanner

• 54 min
• 2014-12-29
• 5428
• Eric Wustrow and Hovav Shacham

Mining for Bugs with Graph Database Queries

• 55 min
• 2014-12-28
• 2818
• fabs

ECCHacks

A gentle introduction to elliptic-curve cryptography

• 55 min
• 2014-12-27
• 14841
• djb and Tanja Lange

Revisiting SSL/TLS Implementations

New Bleichenbacher Side Channels and Attacks

• 55 min
• 2014-12-27
• 2580
• Sebastian Schinzel

Cyber Necromancy

Reverse Engineering Dead Protocols

• 55 min
• 2014-12-28
• 5180
• Joseph Tartaro and Matthew Halchyshak

(In)Security of Mobile Banking

• 56 min
• 2014-12-27
• 11094
• ericfiliol and Paul Irolla

EMET 5.1 - Armor or Curtain?

• 57 min
• 2014-12-29
• 1520
• René Freingruber

Thunderstrike: EFI bootkits for Apple MacBooks

• 57 min
• 2014-12-29
• 8052
• Trammell Hudson

Switches Get Stitches

Industrial System Ownership

• 58 min
• 2014-12-28
• 2762
• Eireann Leverett

Practical EMV PIN interception and fraud detection

• 58 min
• 2014-12-27
• 4274
• Andrea Barisani

Virtual Machine Introspection

From the Outside Looking In

• 58 min
• 2014-12-30
• 2035
• Tamas K Lengyel and Thomas Kittel

Glitching For n00bs

A Journey to Coax Out Chips' Inner Secrets

• 58 min
• 2014-12-27
• 4975
• exide

DP5: PIR for Privacy-preserving Presence

• 59 min
• 2014-12-29
• 1133
• Ian Goldberg, George Danezis and Nikita Borisov

Beyond PNR: Exploring airline systems

• 59 min
• 2014-12-28
• 17067
• saper

Ich sehe, also bin ich ... Du

Gefahren von Kameras für (biometrische)…

• 60 min
• 2014-12-27
• 29346
• starbug

osmo-gmr: What's up with sat-phones ?

Piecing together the missing bits

• 60 min
• 2014-12-27
• 4416
• Sylvain Munaut

Vor Windows 8 wird gewarnt

Und nichts (Secure) Bootet mehr?

• 60 min
• 2014-12-28
• 21370
• ruedi

Attacks on UEFI security, inspired by Darth Venamis's misery and Speed Racer

• 60 min
• 2014-12-28
• 4026
• Rafal Wojtczuk and Corey Kallenberg

SS7map : mapping vulnerability of the international mobile roaming infrastructure

• 60 min
• 2014-12-27
• 6096
• Laurent Ghigonis and Alexandre De Oliveira

SS7: Locate. Track. Manipulate.

You have a tracking device in your pocket

• 60 min
• 2014-12-27
• 35550
• Tobias Engel

Code Pointer Integrity

... or how we battle the daemons of memory safety

• 61 min
• 2014-12-27
• 2660
• gannimo

Crypto Tales from the Trenches

• 61 min
• 2014-12-27
• 5286
• Nadia Heninger, Julia Angwin, Laura Poitras and Jack Gillum

Now I sprinkle thee with crypto dust

Internet reengineering session

• 61 min
• 2014-12-30
• 2364
• Ryan Lackey, Andres Erbsen, Jurre van Bergen, Ladar Levison and equinox

Rocket Kitten: Advanced Off-the-Shelf Targeted Attacks Against Nation States

A Deep Technical Analysis

• 61 min
• 2014-12-27
• 4749
• tw and gadi

Uncaging Microchips

Techniques for Chip Preparation

• 61 min
• 2014-12-28
• 7102
• Peter Laackmann and Marcus Janke

Tor: Hidden Services and Deanonymisation

• 63 min
• 2014-12-30
• 15670
• Dr Gareth Owen

Mobile self-defense

• 63 min
• 2014-12-27
• 14886
• Karsten Nohl

Reproducible Builds

Moving Beyond Single Points of Failure for Software…

• 63 min
• 2014-12-27
• 2253
• Mike Perry, Seth Schoen and Hans Steiner