DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker)
Christiaan0082 HN recommenders · recommended in 2 months, 2017–2021
talk · general · evergreen · 2017–2021 on HN
Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses woul…
It is a repeat pick in 'favorite tech talk' threads as a funny, eye-opening look at how easily physical security and people can be bypassed.
Up next
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
10 HN recommender · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
9 mo on HN28c3: The Science of Insecurity
28c3
9 HN recommender · 2012–2024
8 mo on HNDEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
11 HN recommender · 2017–2023
7 mo on HNElevator Hacking: From the Pit to the Penthouse
DeviantOllam
9 HN recommender · 2014–2026
7 mo on HNCompiling C to printable x86, to make an executable research paper
suckerpinch
8 HN recommender · 2018–2023
7 mo on HNBreak Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Adrian Crenshaw
6 HN recommender · 2017–2026
7 mo on HNBlackHat USA 2011: SSL And The Future Of Authenticity
Christiaan008
9 HN recommender · 2011–2017
7 mo on HN27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
basti0007
8 HN recommender · 2011–2024
7 mo on HNFrank Abagnale | Catch Me If You Can | Talks at Google
Talks at Google
8 HN recommender · 2018–2023
5 comments from Hacker News
The absolute funniest tech talk I've seen "Steal Everything, Kill Everyone, Cause Total Financial Ruin!:" ▶ this video
Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ▶ this video Van Albert and Banks: Looping Surveillance Cameras through Live Editing link Ken Thompson: Reflections on Trusting Trust link And of course, Simple Made Easy, Wat, etc.
They do do that, if I understand correctly. Penetration testing handles the physical security of the company. [DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ]( ▶ this video ) Social Engineering [Hacking the Wetware: Compromising Companies with Social Engineering]( link )
All of that sounds impressive, until you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering- ▶ this video I'd also be concerned with leaking of mass amounts of records at once due to a security lapse on servers where it's a bit easier for grossly inadequate protections to lurk unnoticed- link I think I've read that Google doesn't even store the original recordings, but distorts them randomly to make them unrecognizable but still intelligible by their models. That seems like a pretty reasonable way to protect people, provided they're informed and there's no link back to the original account.
This something that the speaker in the famous "steal everything, kill everyone..." [1] defcon talk refers to as the "jedi wave" and makes similar remarks about. I think it's a great name. [1] ▶ this video