Tuesday, September 04, 2007

All DefCon 15 Session and Panel Videos - Batch 1

I know that somebody will be pissed and mad at me right now, but who gives a fuck :). Here is the first batch of videos of 47 sessions and panels (of a total of 122), from the world largest hacker conference, DefCon 15, which was held on August 3 - 5, 2007 at the Rivera Hotel and Casino in Las Vegas, Nevada.

All videos together is a set of 10 DVD-ROMs!!! full of movie files. Bear with me while I am working on getting the rest of the videos up on-line. It's a pain in the ass and a lot of tedious work.


The Session Videos - Batch I
The videos are sold commercially for several hundred dollars, but who has that amount of money flying around, right? Okay, I paid the money. So you are welcome.

And anyway, isn't DefCon not about making exploits and scams public? I make them public, alright? Not the way some might have planned, but that is not my problem. I did not get the "Black Hat" sessions and have now second thoughts about it. They cost much less if you ordered it on-site. Damn, I hope somebody else will put them up on the Internet.

Okay, the first batch includes the following sessions, which are IMO the most interesting ones.
  1. T536 - The Edge of Forever - Making Computer History by Jason Scott from TextFiles.com who also did the documentary BBS - The Documentary, which is also available on-line at Google Video.
  2. T539 - Internet Wars 2007 (Panel Discussion)
  3. T503 - Anti Spyware Coalition (Panel Discussion)
  4. T504 - Disclosure Panel (Panel Discussion)
  5. T505 - Dirty Secrets of the Security Industry by Bruce Potter
  6. T506 - Self Publishing in the Underground by Myles Long, Rob "Flack" O'Hara and Christian "RaD Man" Wirth, founder and leader of the artscene group "ACiD" who did in 2004 a presentation called The Art of Textmode, the history of ASCII art, which is also available at my videos section.
  7. T107 - Tactical Exploitation by H.D.Moore & Valsmith
  8. T166 - Biting the Hand that Feeds You - Storing and Serving Malicious Content From Well Known Web Servers by Billy Rios & Nathan McFeters
  9. T109 - Fingerprinting and Cracking Java Obfuscated Code by Subere
  10. T111 - Meet the Feds (Panel Discussion)
  11. T112 - No-Tech Hacking by Johnny Long
  12. T131 - The SOA/XML Threat Model and New XML/SOA/Web 2.0 Attacks & Threats by Steve Orrin
  13. T137 - Creating Unreliable Systems - Attacking the Systems that Attack You by Sysmin & Marklar
  14. T140 - The Emperor Has No Cloak - Web Cloaking Exposed by Vivek Ramachandran
  15. T161 - HoneyJax (aka Web Security Monitoring and Intelligence 2.0) by Dan Hubbard
  16. T162 - Hacking Social Lives: MySpace.com by Rick Deacon
  17. T163 - The Inherent Insecurity of Widgets and Gadgets by Aviv Raff & Iftach Ian Amit
  18. T164 - Greater Than 1 - Defeating "Strong" Authentication in Web Applications (for Online Banking) by Brendan O'Connor. I blogged about that session and put the slides from the presentation up on-line.
  19. T207 - It's All About the Timing by Haroon Meer & Marco Slaviero
  20. T201 - Church Of WiFi's Wireless Extravaganza by Church of WiFi's
  21. T202 - SQL Injection and Out-of-Band Channeling by Patrik Karlsson
  22. T206 - Virtual World, Real Hacking by Greg Hoglund
  23. T212 - Trojans - A Reality Check by Toralv Dirro & Dirk Kollberg
  24. T232 - Malware Secrets by Valsmith & Delchi
  25. T234 - Click Fraud Detection with Practical Memetrics by Broward Horne
  26. T235 - Fighting Malware on your Own by Vitaliy Kamlyuk
  27. T238 - Webserver Botnets by Gadi Evron
  28. T239 - The Commercial Malware Industry by Peter Gutmann
  29. T240 - CaffeineMonkey - Automated Collection, Detection and Analysis of Malicious JavaScript by Daniel Peck & Ben Feinstein
  30. T301 - Analysing Intrusions & Intruders by Sean Bodmer
  31. T304 - Re-Animating Drives and Advanced Data Recovery by Scott Moulton
  32. T307 - When Tapes Go Missing by Robert Stoudt
  33. T309 - Hacking UFOlogy - Thirty Years in the Wilderness of Mirrors by Richard Thieme
  34. T312 - The Executable Image Exploit by Michael Schrenk
  35. T337 - Hacking your Access Control Reader by Zac Franken
  36. T338 - Security by Politics - Why it Will Never Work by Lukas Grunwald
  37. T361 - Hacking the EULA - Reverse Benchmarking Web Application Security Scanners by Tom Stracener & Marce Luck
  38. T362 - Network Mathematics - Why is it a Small World? by Oskar Sandberg
  39. T363 - Beyond Vulnerability Scanning - Extrusion and Exploitability Scanning by Matt Richard
  40. T401 - Disclosure and Intellectual Property Law - Case Studies by Jennifer Granick
  41. T402 - Computer and Internet Security Law - A Year in Review 2006-2007 by Robert Clark
  42. T404 - Everything you ever wanted to know about Police Procedure in 50 minutes by Steve Dunker
  43. T431 - The Market for Malware by Thomas Holt
  44. T433 - Routing in the Dark - Pitch Black by Nathan Evans & Christian Grothoff
  45. T435 - Social Attacks on Anonymity Networks by Nick Mathewson
  46. T438 - Saving the Internet With Hate by Zed Shaw
  47. T441- Portable Privacy by Steve Topletz
I was writing about one particular session already twice here at my blog, here and the second time here.

It's the session with Brendan O'Connor titled "Greater than 1: Defeating "Strong" Authentication in Web Applications". If you did not believe me, watch it with your own eyes and hear it with your own ears.

Here is the video of that session. There is unfortunately no video recording of the discussion that happened afterwards in a different room, but I think that the session will be enough to open some people's eyes.



Got it? Gee....

Update: Get the DefCon 15 Session Videos Batch II remaining sessions from track one.

Update II: Get the DefCon 15 Session Videos Batch III remaining sessions from track two and three and ...
DefCon 15 Session Videos Batch IV (final batch) remaining sessions from track four and five.



Enjoy the videos! Cheers!
Carsten aka Roy/SAC

Sunday, September 02, 2007

The Colors of YouTube Custom Players

The announcement of the YouTube custom player feature is already a while old and I even created a player, but never used it yet.

I thought it is time to show it to you :).

Here is a custom player with all my YouTube Videos (stuff I uploaded there)

Update. I removed the one player, because that account I were talking about was closed. I have several other accounts now.

Here some players for my favorite play lists... such as the EBM Playlist



Here is another one, my Cirque Du Soleil Play List, which has my favorite videos and videos uploaded by me at YouTube about Cirque Du Soleil.



Noticed something? Right, different colors hehe. You can also select between two styles of players, The one for the EBM play list uses the smaller format. I am not sure if I like it, but the video selection comes kinda cool. Mhh...

Sweet, isn't it?

Cheers!
Carsten aka Roy/SAC

Saturday, September 01, 2007

Smack My Bitch Up

I was just browsing around a little bit at YouTube.com and found a video, which I remembered well from a couple of years ago. Its a video from the British band "The Prodigy". They have a tendency to create controversy with their music and their videos, some might even say "crazy", but what means crazy in this day and age?

I like a number of songs from The Prodigy, among my favorites are "Firestarter", "Narayan", "No Good", "Out of Space" and "Breathe" ... and this one...

Be warned, this video was even "too much" for the much more open European TV stations. MTV Europe had to take it off the air because of massive numbers of complaints by concerned parents and organizations. I think that taking it off the air was not a good decision. The video was not glorifying abuse and violence. I would say that it did exactly the opposite.

I don't think that anybody with a single functional brain cell left would be encouraged to mimic the behavior shown in the video. It is not an unrealistic depiction of things as it is often done in Hollywood movies. People that behave like this do exist and the video shows very realistically all the "fun" and "ugly" aspects of this.



Full Length, Uncut Version of the Music Video by "The Prodigy" titled "Smack My Bitch Up"

Warning! Viewers Desecration Advised!
Not Suitable for Children.

- Extreme Explicit Content
- Foul Language
- Drug Abuse
- Alcohol Abuse
- Nudity
- Depiction of Unsafe Sex
- Uncivil Behavior
- Violence

I hope I did not miss anything, but you get the idea. :)

Cheers!
Carsten aka Roy/SAC