31C3: a new dawn

The Perl Jam: Exploiting a 20 Year-old Vulnerability

• 29 min
• 2014-12-29
• 18348
• Netanel Rubin

Heartache and Heartbleed: The insider’s perspective on the aftermath of Heartbleed

The untold story of what really happened, how it was…

• 29 min
• 2014-12-28
• 3882
• Nick Sullivan

UNHash - Methods for better password cracking

• 32 min
• 2014-12-29
• 4136
• Tonimir Kisasondi

Finding the Weak Crypto Needle in a Byte Haystack

Automatic detection of key-reuse vulnerabilities

• 32 min
• 2014-12-28
• 1557
• Ben H.

SCADA StrangeLove: Too Smart Grid in da Cloud

• 47 min
• 2014-12-27
• 6114
• Sergey Gordeychik and Aleksandr Timorin

The Matter of Heartbleed

What went wrong, how the Internet reacted, what we can…

• 50 min
• 2014-12-28
• 3350
• Zakir Durumeric

Funky File Formats

Advanced binary tricks

• 51 min
• 2014-12-29
• 10533
• Ange Albertini

Preserving arcade games

• 52 min
• 2014-12-28
• 5156
• Ange Albertini

Too Many Cooks - Exploiting the Internet-of-TR-069-Things

• 53 min
• 2014-12-28
• 8462
• Lior Oppenheim and Shahar Tal

AMD x86 SMU firmware analysis

Do you care about Matroshka processors?

• 54 min
• 2014-12-27
• 4701
• Rudolf Marek

Security Analysis of a Full-Body X-Ray Scanner

• 54 min
• 2014-12-29
• 5432
• Eric Wustrow and Hovav Shacham

Mining for Bugs with Graph Database Queries

• 55 min
• 2014-12-28
• 2819
• fabs

ECCHacks

A gentle introduction to elliptic-curve cryptography

• 55 min
• 2014-12-27
• 14920
• djb and Tanja Lange

Revisiting SSL/TLS Implementations

New Bleichenbacher Side Channels and Attacks

• 55 min
• 2014-12-27
• 2587
• Sebastian Schinzel

Cyber Necromancy

Reverse Engineering Dead Protocols

• 55 min
• 2014-12-28
• 5211
• Joseph Tartaro and Matthew Halchyshak

(In)Security of Mobile Banking

• 56 min
• 2014-12-27
• 11100
• ericfiliol and Paul Irolla

EMET 5.1 - Armor or Curtain?

• 57 min
• 2014-12-29
• 1520
• René Freingruber

Thunderstrike: EFI bootkits for Apple MacBooks

• 57 min
• 2014-12-29
• 8055
• Trammell Hudson

Switches Get Stitches

Industrial System Ownership

• 58 min
• 2014-12-28
• 2762
• Eireann Leverett

Practical EMV PIN interception and fraud detection

• 58 min
• 2014-12-27
• 4278
• Andrea Barisani

Virtual Machine Introspection

From the Outside Looking In

• 58 min
• 2014-12-30
• 2038
• Tamas K Lengyel and Thomas Kittel

Glitching For n00bs

A Journey to Coax Out Chips' Inner Secrets

• 58 min
• 2014-12-27
• 4987
• exide

DP5: PIR for Privacy-preserving Presence

• 59 min
• 2014-12-29
• 1134
• Ian Goldberg, George Danezis and Nikita Borisov

Beyond PNR: Exploring airline systems

• 59 min
• 2014-12-28
• 17109
• saper

osmo-gmr: What's up with sat-phones ?

Piecing together the missing bits

• 60 min
• 2014-12-27
• 4434
• Sylvain Munaut

Ich sehe, also bin ich ... Du

Gefahren von Kameras für (biometrische)…

• 60 min
• 2014-12-27
• 29572
• starbug

Vor Windows 8 wird gewarnt

Und nichts (Secure) Bootet mehr?

• 60 min
• 2014-12-28
• 21375
• ruedi

Attacks on UEFI security, inspired by Darth Venamis's misery and Speed Racer

• 60 min
• 2014-12-28
• 4043
• Rafal Wojtczuk and Corey Kallenberg

SS7map : mapping vulnerability of the international mobile roaming infrastructure

• 60 min
• 2014-12-27
• 6138
• Laurent Ghigonis and Alexandre De Oliveira

SS7: Locate. Track. Manipulate.

You have a tracking device in your pocket

• 60 min
• 2014-12-27
• 35942
• Tobias Engel

Code Pointer Integrity

... or how we battle the daemons of memory safety

• 61 min
• 2014-12-27
• 2661
• gannimo

Crypto Tales from the Trenches

• 61 min
• 2014-12-27
• 5288
• Nadia Heninger, Julia Angwin, Laura Poitras and Jack Gillum

Now I sprinkle thee with crypto dust

Internet reengineering session

• 61 min
• 2014-12-30
• 2365
• Ryan Lackey, Andres Erbsen, Jurre van Bergen, Ladar Levison and equinox

Rocket Kitten: Advanced Off-the-Shelf Targeted Attacks Against Nation States

A Deep Technical Analysis

• 61 min
• 2014-12-27
• 4754
• tw and gadi

Uncaging Microchips

Techniques for Chip Preparation

• 61 min
• 2014-12-28
• 7146
• Peter Laackmann and Marcus Janke

Tor: Hidden Services and Deanonymisation

• 63 min
• 2014-12-30
• 15731
• Dr Gareth Owen

Mobile self-defense

• 63 min
• 2014-12-27
• 14979
• Karsten Nohl

Reproducible Builds

Moving Beyond Single Points of Failure for Software…

• 63 min
• 2014-12-27
• 2266
• Mike Perry, Seth Schoen and Hans Steiner