Conference Talks

NahamSec

Practical Attacks Using HTTP Request Smuggling

Explore practical HTTP request smuggling attacks, including CL.TE/TE.CL desync techniques, testing methods, and real-world examples. Learn to exploit vulnerabilities for session stealing and response queue poisoning.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

Kaspersky

Time to Grow Up - Counterproductive Security Behaviors That Must End

Explore counterproductive security behaviors and attitudes in the industry, and learn how professionals can improve their approach for better outcomes and credibility.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Kaspersky

The Ultimate Tips to Implement a Secure Smart City Municipal Drone Program

Explore the cybersecurity challenges and requirements for implementing secure municipal drone programs in smart cities, focusing on stability, reliability, and threat prevention.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Kaspersky

Do Tinder Bots Dream of Electric Toys?

Explore the world of Tinder bots: their creation, operation, and the infrastructure behind them. Uncover patterns in bot profiles and learn about the campaigns spanning multiple countries.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Kaspersky

The Memory Corruption Safety Dance

Explore memory safety vulnerabilities, their mitigation strategies, and the future of cybersecurity in this comprehensive analysis of defense-in-depth approaches and exploit techniques.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

Kaspersky

Tools of NSA Playset

Explore NSA's surveillance tools, including retroreflectors, USB implants, and Thunderbolt exploits. Learn about their capabilities and implications for cybersecurity.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Kaspersky

IoT Security Nightmares - 20 Minutes, 10 Devices

Explore security vulnerabilities in IoT devices through live demonstrations, uncovering root access on routers, toys, and cameras. Learn about the importance of penetration testing and responsible disclosure.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

USENIX

Spanner - Google’s Globally-Distributed Database

Explore Google's Spanner: a globally-distributed database with scalability, multi-version support, and synchronous replication. Learn about its structure, features, and innovative time API for external consistency.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Why I Wrote My Own Rsync - Michael Stapelberg - Media.CCC.De

Explore the creation of a custom rsync implementation in Go, delving into rsync's inner workings, performance improvements, and integration with home networking projects.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Catching NSO Group's Pegasus Spyware

Explore Amnesty International's innovative forensic techniques for detecting NSO Group's Pegasus spyware, including the open-source Mobile Verification Toolkit (MVT) for identifying sophisticated mobile threats.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

media.ccc.de

What Have We Lost?

Explore forgotten operating systems like IBM i, Interlisp, OpenGenera, and TRON. Discover unique features and innovative designs that challenge our current computing paradigms.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Hacking Google Maps

Explore the impact of digital maps on urban spaces and society, examining critical perspectives, surveillance capitalism, and the potential for civic hacking in shaping smart cities.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Harry Potter and the Not-So-Smart Proxy War

Análisis técnico y de seguridad de Protego, un supuesto sistema de control de armas de la CIA para fuerzas proxy. Explora su funcionamiento, vulnerabilidades potenciales e implicaciones más amplias.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

media.ccc.de

Intel Management Engine Deep Dive

Explora el Intel Management Engine: arquitectura, firmware, seguridad y desarrollo de un emulador. Análisis profundo de su funcionamiento interno y posibilidades de reemplazo de código abierto.

• YouTube
• 1 hour
• Self-Paced
• Conference Talk

media.ccc.de

SIM Card Technology from A-Z

Comprehensive exploration of SIM card technology, covering hardware, software, standards, and evolution from early GSM to modern 5G networks. Includes insights on security, applications, and industry processes.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk