Main Stage·44 min
Cybertiger · Colonel Panic · The Wrew
Cybertiger, Colonel Panic, and The Wrew introduce low-cost counter-surveillance hardware built around the ESP32 to detect tracking devices.
surveillanceesp32hardware-hacking+3
Main Stage
Main stage keynote and presentation talks delivered at DEF CON 34.
DEF CON 344DEF CON 33106DEF CON 3293DEF CON 31100DEF CON 3091DEF CON 2968DEF CON China Party 20219DEF CON Safe Mode67DEF CON 2791DEF CON China 118DEF CON 26102DEF CON China Beta8DEF CON 2474DEF CON 2387DEF CON 22117DEF CON 21114DEF CON 20108DEF CON 19127DEF CON 18146DEF CON 17137DEF CON 16118DEF CON 15121DEF CON 1484DEF CON 1371DEF CON 1264DEF CON 1165DEF CON 1059DEF CON 950DEF CON 851DEF CON 739DEF CON 61
1–24 of 2371 talks / 2390
Main Stage·45 min
Bruce Schneier
Bruce Schneier examines how artificial intelligence systems hack human institutions, tax codes, financial markets, and legal frameworks.
artificial-intelligenceai-securitypolicy+2
Main Stage·46 min
Bill Swearingen
Bill Swearingen explores whether adversarial patterns printed on everyday clothing can effectively fool commercial and municipal facial recognition algorithms.
facial-recognitioncomputer-visionprivacy+2
Main Stage·57 min
Cliff Stoll
Cliff Stoll reflects on the 40th anniversary of tracking down an international KGB cyber espionage ring originating from a 75-cent accounting error.
hacker-historyincident-responseforensics+2
Main Stage·42 min
Micah Lee
Micah Lee recounts the Signalgate investigation, dissecting mobile forensic extraction techniques, operational security failures, and secure messaging tradecraft.
privacysignal-appopsec+2
Main Stage·43 min
richinseattle · Netspooky · Chompie
Editors and contributors celebrate four decades of Phrack magazine, reviewing foundational exploit techniques, hacker journalism, and counterculture history.
hacker-historyhacker-culturecommunity
Main Stage·40 min
Julian Horoszkiewicz
Demonstrates rapid vulnerability discovery methodologies that uncovered seven zero-day local privilege escalation flaws in pre-installed OEM bloatware.
vulnerability-researchprivilege-escalationwindows+2
Main Stage·44 min
Wesley McGrew
Wesley McGrew analyzes digital forensics and unallocated space across 500,000 Commodore 64 floppy disk images to uncover early hacker subcultures and ephemera.
hacker-historyforensicsculture+2
Main Stage·38 min
Yoav Magid
Analyzes the architecture of Apple Intelligence and Private Cloud Compute, identifying privacy risks and data leakage vectors across on-device and cloud models.
appleai-securityprivacy+2
Main Stage·49 min
Cooper Quintin · Lisa Femia · Thorin Klosowski · Alexis Hancock · Hannah Zhao
Electronic Frontier Foundation attorneys, technologists, and activists answer community questions on digital rights, surveillance law, privacy legislation, and AI policy.
policyprivacydigital-rights+2
Main Stage·38 min
Zhengyu Liu · Jianjia Yu
Introduces Hulk, the first dynamic analysis tool to automatically detect and generate exploit payloads for complex DOM Clobbering vulnerabilities at web scale.
appsecdom-clobberingxss+2
Main Stage·39 min
Agostino Panico
Presents a dynamic analysis framework for automatically unpacking and deobfuscating nested virtual-machine-based software protectors used in advanced malware.
reverse-engineeringobfuscationvirtualization+2
Main Stage·38 min
David Ledbetter
Demonstrates physical and firmware attack vectors against Windows Recovery environments to extract BitLocker encryption keys from TPM and memory.
full-disk-encryptionwindowsside-channel+2
Main Stage·47 min
Hugo Gonzalez · Caleb Howell
Deconstructs the anti-cheat and runtime integrity mechanisms in Pokemon Go, demonstrating mobile reverse engineering and integrity bypass tradecraft.
anti-cheatreverse-engineeringmobile+2
Main Stage·39 min
David Cash · Rich Warren
Reveals an architectural vulnerability in cloud-managed enterprise VPNs that allowed unauthenticated administrative takeover and network pivoting across corporate tenants.
vpncloudauthentication+2
Main Stage·39 min
David Cash · Rich Warren
Discloses a critical vulnerability in cloud-managed enterprise VPN platforms that allowed unauthenticated administrative takeover across thousands of corporate networks.
vpncloudauthentication+2
Main Stage·41 min
George Chatzisofroniou
Conducts a comprehensive security analysis of Wi-Fi Easy Connect (Device Provisioning Protocol v3.0), uncovering protocol design flaws and implementation vulnerabilities.
wirelesswifiprotocols+2
Main Stage·50 min
Lior Shmueli · Tomer Peled
Exposes UI redressing and clickjacking vectors in popular browser extensions that trick users into granting administrative cloud permissions with a single click.
browser-extensionsclickjackingcloud+2
Main Stage·40 min
Mikko Hypponen
Mikko Hypponen explores the preservation of historic malware samples, early virus artistry, and four decades of digital threats in the Malware Museum.
malwarehistorycommunity+2
Main Stage·44 min
Mark Carney · Victoria Kumaran
Introduces the first open-source, low-cost hackable quantum sensor using Nitrogen-Vacancy centers in diamond to explore quantum sensing applications.
quantum-computingsensorshardware+2
Main Stage·47 min
Qidan He
Discloses new Intent redirection vulnerabilities in modern Android frameworks that bypass destination checks to achieve LaunchAnyWhere privilege escalation.
androidmobile-securityprivilege-escalation+2
Main Stage·47 min
Qidan He
Demonstrates novel Intent redirection and LaunchAnyWhere privilege escalation techniques in modern Android platform frameworks.
androidmobile-securityprivilege-escalation+2
Main Stage·43 min
Tim 'diff' Becker
Presents an automated framework for generating universal return-oriented programming chains and bypassing ASLR across modern operating system binaries.
ropaslrbinary-exploitation+2
Main Stage·42 min
Alex Holden
Examines the internal operations, financial infrastructure, and sabotage tactics behind major underground darknet carding markets.
dark-webfinancial-crimethreat-intelligence+2