War Stories·49 min
Joe Sullivan
Former Uber CSO Joe Sullivan provides an inside retrospective on the 2016 Uber data breach, executive liability, and the criminalization of incident response.
cisoincident-responselegal+2
DEF CON 31/War Stories across years
War Stories DC31
Caesars Forum, Flamingo, Harrah's, and Linq, Las Vegas · 10-13 August 2023 · 13 talks
DEF CON 31 War Stories features first-hand accounts from cybersecurity veterans, researchers, and community leaders sharing pivotal investigations, offensive research discoveries, legal disclosure battles, and retrospective incident analyses.
1–13 of 13 talks
War Stories·34 min
Ben Sadeghipour · Corben Leo
Ben Sadeghipour (NahamSec) and Corben Leo share war stories from high-impact bug bounty engagements across prisons, major tech firms, and online casinos.
bug-bountyweb-securityrecon+2
War Stories·38 min
Paz Hameiri
Paz Hameiri develops a simulation framework to spoof and jam weather balloon radiosonde telemetry, threatening global climate models and rocket launches.
radiosondeweather-balloonssdr+2
War Stories·42 min
Taiiwo · Artorias · Puck · TheClockworkBird
Leaders of the CicadaSolvers community detail the 9-year collaborative effort to decrypt Cicada 3301's Liber Primus runic cryptogram.
cicada-3301cryptographypuzzle-solving+2
War Stories·45 min
Miana Ella Windall
Miana Ella Windall chronicles designing and implanting custom subdermal RFID credentials to interact seamlessly with proprietary workplace access control readers.
rfidhealthcareimplants+2
War Stories·21 min
Lorenzo Cococcia
Lorenzo Cococcia explores offensive physical geolocation, using network latency trilateration across distributed sensors to locate adversary C2 servers.
geolocationlatency-trilaterationthreat-intelligence+2
War Stories·47 min
Allan Cecil
Allan Cecil details how a Use-After-Free flaw in Ocarina of Time allowed TASBot to execute arbitrary code on an unmodified Nintendo 64 to raise $228K for charity.
nintendo-64use-after-freeexploit-development+2
War Stories·48 min
Mikko Hypponen
Mikko Hypponen reflects on living 100 miles from Russia, tracing the evolution of Russian state cyber programs, patriotic hacker collectives, and NATO integration.
threat-intelligencerussiageopolitics+2
War Stories·37 min
Horseman · Hanley
Security researchers demonstrate how simple grep heuristics uncovered a universal remote command injection vulnerability in Lexmark enterprise printers at Pwn2Own.
pwn2ownprinterscommand-injection+2
War Stories·43 min
Tracy Mosley
Tracy Mosley traces the generational evolution of cellular networks from 2G to 5G, breaking down core network topologies, attack surfaces, and protocol vulnerabilities.
cellular5glte+2
War Stories·46 min
Renderman · Tom Dang
Renderman and Tom Dang share first-hand accounts of facing legal retaliation when reporting government vulnerabilities, urging reform in public disclosure policies.
vulnerability-disclosuresafe-harborlegal+2
War Stories·21 min
Cooper Quintin
EFF researcher Cooper Quintin recounts tracking Dark Caracal, a Lebanese state-backed cyber-mercenary group whose comical operational security blunders exposed their operations.
dark-caracalthreat-intelligenceapt+2
War Stories·44 min
Andrew Brandt
Andrew Brandt investigates targeted intrusion campaigns where adversaries engage victims in live conversational social engineering to deliver malware.
social-engineeringtargeted-attacksmalware+2