Skip to content

Far More Than You Ever Wanted to Tell

Maximillian Dornseif

Maximillian Dornseif explores far more than you ever wanted to tell at DEF CON 12, examining vulnerability-research and practical defenses.

Summary

Architecture and Background

Maximillian Dornseif, Far More Than You Ever Wanted To Tell - Hidden Data In Document Formats Applications usually put all kinds of information besides the ones which you intend to into saved documents. This can lead to embarrassing revelations.

Vulnerability Analysis

We will take a look into different types of application data and what can be hidden in there. This allows us to 'scrub" our own documents to avoid unwanted information in there but also to look for information in documents which the authors didn"t want to hand out.

Exploitation and Demonstrations

Go grasp the scope of the problem we will present a large scale study of hidden information in Documents on the Internet. Maximillian Dornseif has studied laws and computer science at the University of Bonn, Germany where he wrote his PhD Thesis about the "Phenomenology of Cybercrime".

Remediation and Defensive Strategies

He has been doing security consulting since the mid nineties. His clients included the industry but also government. At the moment he works on a third party founded research project about measurement of security and security breaches taking place at the Laboratory for Dependable Distributed Systems, RWTH Aachen University. He also oversees several other projects in the area of detection and documentation of security incidents. Dornseif has published in the legal and computer science fields on a wide range of topics.

Related talks

Main Stage·1 hr 5 min

  • DEF CON
  • Red Team
  • Date: Jul 2012
  • Location: Las Vegas

Dan Kaminsky

Dan Kaminsky details black Ops Dan Kaminsky Chief Scientist, DKH If there's one thing we know, it's that we're doing it wrong.

penetration-testingvulnerability-researchexploit-development+1

Main Stage·41 min

  • DEF CON
  • Red Team
  • Date: Jul 2012
  • Location: Las Vegas

Dustin Hoffman · Semon Rezchikov

Dustin Hoffman and Semon Rezchikov details busting the BARR: Tracking "Untrackable" Private Aircraft for Fun &Profit Dustin Hoffman President & Senior Engineer, Exigent Systems Inc.

penetration-testingvulnerability-researchexploit-development+1