GTFO Mr. User
"GTFO MR. USER" is the talk from the speaker David Sopas at BSidesLisbon 2017. The co-founder of Char49 will present real case scenarios (aka hacking to PoC) showing the danger of large organizations ignoring high and critical security issues, with repercussions that would affect millions should the security threats fall into the wrong hands. Additionally, the author will share tips on how to properly disclose bugs to companies without being a real Trump. Besides this talk you can attend several others, the difficulty is choosing between them:
- KNOCK KNOCK! WHO'S THERE? NSA! from Pedro Vilaça - INTEL AMT: USING & ABUSING THE GHOST IN THE MACHINE from Parth Shukla - WILD WILD WEB APP TO DOMAIN ADMIN: A CASE STUDY from Nacho Sorribas - CRAFTING THE NEXT-GENERATION MAN-IN-THE-BROWSER TROJAN from Pedro Fortuna and Paulo Silva - ABUSING ANDROID IN-APP BILLING FEATURE THANKS TO A MISUNDERSTOOD INTEGRATION from Jérémy Matos - HARDWARE BASICS - WHY AND HOW TO BREAK HARDWARE from Kieran Roberts - V!4GR4 BOTNET: CYBER-CRIME, ENLARGED from Ben Herzberg - BOTNET ACTIVITY MONITORING THROUGH PROCESS PUPPETEERING from Tiago Pereira - I BOOT WHEN U-BOOT from Vincent Ruijter and Bernardo Maia Rodrigues - FANTASTIC SIGNALS AND WHERE TO FIND THEM from Luís Grangeia and José Moreira - I THOUGHT I SAW A |-|4><0.- from Thomas Fischer - THE BUSINESS OF RANSOMWARE from Allan Liska - PRACTICAL OUT-OF-BAND DATA EXFILTRATION IN 802.11 from João Pena Gil (jack64) and Luís Gomes (justpassingby) - HAVING FUN WHILE ANALYZING MOBILE APPLICATIONS from Álvaro Felipe Melchor - FILELESS MALWARE INFECTIONS - MALWARE TRICKS FOR PENTESTERS from Ramon Pinuaga
If you need any more reasons to be present check out these 3 Workshops: - STATIC ANALYSIS OF A RAT CAMPAIGN from Ricardo Dias - WEB APPLICATION TESTING WITH SWAG (SUSCEPTIBLE WEB APP GENERATOR) from Colin Mclean - INTELMQ - THE FULL PROCESSMENT OF A THREAT from André Garrido and Duarte Sousa
With JP Aumasson and Javvad Malik as Keynote Speakers this conference has everthing to be another great success. You can check soon the schedule of the sessions at www.bsideslisbon.org/schedule