ShmooCon Talks & Presentations

0xdade

U2F Zero - Secure Hardware Design, DIY Mass Production, and Amazon Prime

Explore U2F Zero: secure hardware design, DIY production, and Amazon Prime sales. Learn about hardware acceleration, manufacturing challenges, and cost breakdown for this innovative security device.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

0xdade

A Nickel Tour of the Ad Fraud Ecosystem

Explore the complex world of ad fraud, from its early days to modern detection methods, verification processes, and the roles of various players in the advertising ecosystem.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

0xdade

The Verilog to Verilog Decompiler

2 reviews

Explore hardware decompilation techniques to extract high-level functionality from integrated circuit netlists, drawing parallels with software decompilation for design recovery and hardware assurance.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Security Response Survival Skills

1 review

Strategies for managing human factors during security incidents, focusing on psychological responses, effective communication, and team leadership in high-stress situations.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

0xdade

Process Control Through Counterfeit Comms - Using and Abusing Built-In Functionality to Own a PLC

1 review

Explore vulnerabilities in PLCs, learn discovery methods, and see how minor flaws can lead to device takeover. Gain insights into industrial control system security and potential exploits.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

More Than One Way to Skin a Cat - Identifying Multiple Paths to Compromise Through the Use of Attach Graph Analysis

Explore attack graph analysis to identify multiple vulnerabilities and compromise paths. Learn about tools, techniques, and considerations for effective security assessment and risk mitigation.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Extending Information Security Methodologies for Personal User in Protecting PII

Explore methodologies for safeguarding personal information, focusing on asset identification, data classification, and vulnerability assessment to enhance individual privacy protection.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

0xdade

Hack the Stars

Explore space-based communications security, attack surfaces, and defensive strategies. Learn to build simple solutions for hacking satellite systems and protecting astroenterprise assets.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Vendors, and Risk, and Tigers, and Bears, Oh My - How to Create a Vendor Review Process From the Ground Up

Learn to create a vendor review management process from scratch using simple tools like email and Google Forms, without expensive software or large teams.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Adversary Detection Pipelines - Finally Making Your Threat Intel Useful

Learn to extract value from threat intelligence by implementing Adversary Detection Pipelines. Explore attribution challenges, leverage TTPs, and enhance security operations through practical case studies and intelligence-driven strategies.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

0xdade

Moose v. Woodchuck

Exploring machine learning limitations in computer security, this talk introduces a framework for understanding AI problem-solving and discusses privacy implications of large datasets.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

0xdade

Hacking Democracy - On Securing an Election

Explore cybersecurity challenges in elections, including disinformation, voting machine vulnerabilities, and election manipulation. Experts discuss threats, solutions, and the role of hackers in building voter trust.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Privacy Scores for iOS Apps

Explore iOS app privacy scoring using network traffic analysis. Learn about data transmission, privacy factors, and challenges in monitoring private information flow on mobile devices.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

0xdade

Knowing the Unfuzzed and Finding Bugs with Coverage Analysis

Explore automated coverage analysis for efficient fuzzing, using bncov plugin for Binary Ninja to identify prime fuzz targets and uncover hidden vulnerabilities in software.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

0xdade

Face/Off - Action Plan for Perils & Privileges of Facial Recognition

Explore facial recognition technology's widespread use, potential risks, and regulatory concerns. Learn about error rates, privacy issues, and strategies to responsibly implement this technology in various applications.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk