DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker)
Christiaan0082 HN recommenders · 2017–2021
1.7M views · talk · evergreen · Uploaded 2012-02-13
Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.
It is a repeat pick in 'favorite tech talk' threads as a funny, eye-opening look at how easily physical security and people can be bypassed.
51:32Behind the Scenes of iOS Security
Black Hat
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
42:50Defcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
59:2328c3: The Science of Insecurity
28c3
7:26This Video Is Sponsored By ███ VPN
Tom Scott
7:49America Keeps Rejecting an ID Card It Already Has
CGP Grey
49:47DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
5 comments from Hacker News
This something that the speaker in the famous "steal everything, kill everyone..." [1] defcon talk refers to as the "jedi wave" and makes similar remarks about. I think it's a great name. [1] [VIDEO]
Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin! [VIDEO] Van Albert and Banks: Looping Surveillance Cameras through Live Editing [LINK] Ken Thompson: Reflections on Trusting Trust [LINK] And of course, Simple Made Easy, Wat, etc.
All of that sounds impressive, until you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering- [VIDEO] I'd also be concerned with leaking of mass amounts of records at once due to a security lapse on servers where it's a bit easier for grossly inadequate protections to lurk unnoticed- [LINK] I think I've read that Google doesn't even store the original recordings, but distorts them randomly to make them unrecognizable but still intelligible by their models. That seems like a pretty reasonable way to protect people, provided they're informed and there's no link back to the original account.
They do do that, if I understand correctly. Penetration testing handles the physical security of the company. [DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ]( [VIDEO] ) Social Engineering [Hacking the Wetware: Compromising Companies with Social Engineering]( [LINK] )
The absolute funniest tech talk I've seen "Steal Everything, Kill Everyone, Cause Total Financial Ruin!:" [VIDEO]