Metal-as-a-Disservice - Exploiting Legacy Flaws in Cutting Edge Clouds

Explore the hidden security vulnerabilities in bare metal cloud environments through this 46-minute DEF CON 33 conference talk that reveals how decades-old attack techniques remain devastatingly effective against modern cloud infrastructure. Discover the critical risks organizations face when deploying high-performance machine learning workloads on dedicated hardware, as the presentation demonstrates real-world exploitation scenarios including hijacking provisioning processes, installing persistent firmware implants, intercepting sensitive network traffic, and compromising secure ML workflows. Learn about the unique attack surfaces present in bare metal environments, understand why legacy vulnerabilities continue to pose significant threats in cutting-edge cloud deployments, and examine how major cloud providers attempt to mitigate these risks. Gain practical insights for evaluating bare metal cloud providers, receive actionable recommendations for protecting critical infrastructure, and witness technical demonstrations that illustrate multi-tenant compromise scenarios through firmware, hardware, and network-based attack vectors.