Whipped Cream Difficulties

Yes, I know there was a gap yesterday. I was a little busy hanging out with friends, and I made the executive decision that I’d take a day off in hopes that more of Saturday and Sunday’s presentations would be uploaded.

Two things I want to make note of before jumping into links:

1. This Ars Technica article summarizing Phil Zimmerman’s DEFCON talk.
2. FARK had a link to an Orlando Sentinel (!) article about “a surprise appearance” by John McAfee. Here’s a link to the article. I haven’t found any coverage of this elsewhere. And, in my opinion, anything John McAfee says at this time should be taken with an entire lick of salt.

With those out of the way, more links. If I link to a Black Hat version of a talk, it is because I am assuming it is very similar, if not identical, to the DEFCON version of the same talk. It seems like maybe there was a little more duplication this year…

• The team behind “Hack All The Things: 20 Devices in 45 Minutes” now has a Wiki page up with all the hacks for all the things. Hattip for this to Mike Szczys at Hack A Day, who did a write up on their presentation.
• I didn’t have this on my list, but Joe Grand’s “Deconstructing the Circuit Board Sandwich: Effective Techniques for PCB Reverse Engineering” is up over at Grand Idea Studio.
• The Black Hat version of Fatih Ozavci’s “VoIP Wars: Attack of the Cisco Phones” is here, including a PDF of the presentation and the source code.
• As far as I can tell, this was Black Hat only, not DEFCON, but I do want to mention it here: “When the Lights Go Out: Hacking Cisco EnergyWise“.
• I don’t think I ever threw up a full link to the Charlie Miller and Christopher Valasek presentation, “A Survey of Remote Automotive Attack Surfaces“, so here it is.
• Slides and the Mana toolkit from Dominic White and Ian de Villiers’ “Manna from Heaven: Improving the state of wireless rogue AP attacks“.
• The Black Hat version of Nir Valtman’s “A Journey to Protect Points-of-sale” can be found here.
• I don’t work as much with Windows as I used to, so this didn’t make my list. But if you’re interested, the Black Hat version of Ryan Kazanciyan and Matt Hastings’ talk on “Investigating PowerShell Attacks” is here. And here’s a brief article from PowerShell Magazine covering some of the same ground.

More updates later on tonight, I hope; otherwise, tomorrow.