DEF CON 27/IoT Village across years
Paris, Bally's, Flamingo, and Planet Hollywood hotels, Las Vegas · 8-11 August 2019 · 14 talks
IoT Village at DEF CON 27 covers IoT security vulnerabilities, firmware hacking, and device exploitation. The 14 talks explore attacks on smart home devices, routers, wearables, surveillance cameras, and industrial IoT systems.
1–14 of 14 talks
IoT Village·28 min
Lee Brotherston
"The IoT industry is often lambasted for lax security, it faces unique challenges. This talk brings expertise from a veteran security engineer who has spent the last few months embedded (pun intended) in an IoT manufa...
IoT Village·29 min
Andrew T
"Never, ever claim your smart product is unhackable. Don't snort bath salts either. The Bitfi is/was a hardware brain-wallet for crypto currency. John McAfee was probably paid to promote it & wisely identified that it...
IoT Village·44 min
Daniel Wegemer
We will show how the Fitbit ecosystem works based on the Fitbit Flex and Fitbit Charge HR as well as the Fitbit Ionic smartwatch. We also show how we modified the firmware of the Fitbit Flex and discuss several vulner...
IoT Village·37 min
Elvis Collado
This talk is about how an unauthenticated heap-based buffer overflow vulnerability was discovered and exploited within a router distributed by a market-leading ISP. Despite the targeted process utilizing mitigations s...
IoT Village·34 min
Hyejin Jeong
" HDMI is used by many display devices as an interface for transmitting high-definition video and audio data. The HDMI usage rate is expected to increase further as many global IT companies such as Samsung, Google, an...
IoT Village·29 min
Maxwell Dulin
"This talk will convey the hacking methodology that took place in order to find the vulnerabilities within the Zyxel NAS 326, including some fun dives into the technical weeds. Note: despite how critical security flaw...
IoT Village·50 min
IoT Security and Manufacturers Q and A Panel
IoT Village·38 min
Bertin Bervis
In this talk i'm going to explain in detail a new technique to achieve javascript code persistence in web applications from devices using the Bacnet protocol (building automation) in the underlying device protocol/web...
IoT Village·41 min
Alex Jay Balan
Traditional IoT botnets operate pretty much like shooting fish in a barrel. With an elephant gun. A service running on a port. A weak password or a lame vulnerability and you've got yourself a few hundred thousand zom...
IoT Village·46 min
Dennis Giese
"Remember the good old fun sport, where people bought random hard drives from eBay and did forensics on them? Did you know you can do the same thing with used IoT devices too? Most end-users have no idea what kind of ...
IoT Village·36 min
Amit Elazari
A discussion of the latest in the how the law is coming for the IoT, especially in the realm of whether or not cybersecurity is considered a manufacturing or design defect to allow product liability law to be used to ...
IoT Village·44 min
Rick Ramgattie
Internet of Things (IoT) devices have always been vulnerable to a variety of security issues. In 2013, Independent Security Evaluators (ISE) performed research on IoT devices that showed how rich feature sets could be...
IoT Village·28 min
Michael Raggo
"Over the last 2 years we've analyzed and reverse-engineered a plethora of IoT-enabled surveillance cameras and spy cameras analyzing their app behaviors, cloud storage, network communications, data-at-rest, and hardw...
IoT Village·16 min
M Can Kurnaz
"Electrical Vehicle Charging Points are relatively new on the field and security level of these devices are quite low at the moment. Unfortunately we see lots of EV charging points connected to the internet. This imma...
