Пікірлер

• 
  @faanross25 күн бұрын

  brilliant, 5 years old can't believe i haven't heard more about it

• 
  @Myself-yh9rrАй бұрын

  Though purple is not my favorite color it does look good there.

• 
  @Darkstar23422 ай бұрын

  39:20 I think the biggest reason why the Xbox One security has lasted so long is that there are only a handful of Xbox One exclusive games (and except Forza and Halo 5 they are rather niche)... All other games are also available on Windows where they are much easier to crack/pirate (even Denuvo is not an obstacle anymore these days). So console hacking became rather uninteresting these days, at least for the Xbox ...

• 
  @zxcvbnm24602 ай бұрын

  I need your help I don't understand how to solve my problem, I need your help

• 
  @normanhuntiii4 ай бұрын

  Great job to everyone. This is an important conversation. Also, great to see you in your element, Devin. Keep getting after it!

• 
  @pricedwayne4 ай бұрын

  Outstanding conversation and facilitation!

• 
  @larrymyers59894 ай бұрын

  I hope I can one day work for Microsoft. I’ve always been into tech and worked in tech. I just made some bad choices as a young man that affected my life.

• 
  @sudheer2694 ай бұрын

  Octo Tempest, Lapsus will love this talk

• 
  @kumpadamian1825 ай бұрын

  Sería más bueno Wee UE se traduzca en español

• 
  @TimmyTSENGKaliOSCPpentest6 ай бұрын

  anyone have AI pentest tool project working on?

• 
  @ricsip6 ай бұрын

  There is a slightly longer version of this very same presentation (literally with the same title) on Platform Security Summit YT channel

• 
  @eniggma93536 ай бұрын

  Great talk, thank you for sharing.

• 
  @MrTweetyhack6 ай бұрын

  Microsoft will sue you

• 
  @nixcution49354 ай бұрын

  Why

• 
  @improvisedchaos8904Ай бұрын

  ur goin' down u villians!!!!!

• 
  @mielole7 ай бұрын

  This doesn't feel like responsible disclosure to me. Sure, all of the attacks require physical access, and yet there is no mitigation strategy even discussed. Is facecam Windows Hello insecure too? Who knows...

• 
  @TonyFarley-gi2cv7 ай бұрын

  See sweetheart the public shouldn't have a cloud if you have a clown inside the public you have a construction of someone else's business that you're learning brainwave structure through to learn the placement of someone else's organization or the rotation of weight of gravity's movement in someone else is mine

• 
  @ricsip3 ай бұрын

  you should stop taking that new pill immediately!

• 
  @harrystein20007 ай бұрын

  Thank you!

• 
  @watchrami7 ай бұрын

  Actual review starts 20:52

• 
  @skraushaar7 ай бұрын

  How did the fucking Synaptics chip pass certification? Its hard to imagine scenarios where that chip makes it to market without fraud. Microsoft: More dog food, less dog shit. Your least technically savvy userbase uses the Surface line. The breach of trust with that product's implementation is outrageous. Disgarded broken keyboards could be used to spoof a user. Is there facility to wipe them? Nope. Its so dumb.

• 
  @thevibeinc7 ай бұрын

  Mygawd BRO!! It seems as though public speaking makes you a little nervous which is common. You can clearly tell by your breathing. The gum chewing really amplifies all these little things. I really hate to be that person but this was serious topic and that gum, breathing, and savage borderline choke swallowing midsentence was too much.🥴 This is definitely your fault but I would definitely ask your bros why they all let you carry on without giving you a signal or even text. I ended up reformatting the transcript and listened to a gun free ai. Great information and appreciate the teams work!

• 
  @rickglorie7 ай бұрын

  This will result in some wild and totally unsecure NTLM hack, I guarantee it.

• 
  @beemeerm43327 ай бұрын

  Nice. Good job. I wish you tested Fingerprint cards (FPC) sensor to. I wonder if there was a specific reason not to?

• 
  @pizzlerot27307 ай бұрын

  This was a specific case of integrated fingerprint sensors, representing the typical implementation of a direct-from-device-manufacturer fingerprint scanner utilized by Windows Hello for enhanced security, ie a typical use case for a Microsoft user (for example in the business world). The realm of third party fingerprint sensor peripherals is so vast in both size and quality that it would be very difficult to adequately evaluate in its own case study, much less in one also including integrated biometrics. Another big sticking point is that proper implementation of security standards with these integrated devices depends on Microsoft working with device manufacturers. That isn't really a thing in the peripherals market, except for maybe a couple of choice partners (maybe, idk for sure in this case, that's just how it usually goes), so it would really muddy the waters when it comes time to draw conclusions about what Microsoft could do to improve their security feature. Remember, at the end of the day, this is security science research, not consumer product testing; and effective research is all about controlling the variables.

• 
  @BillyONeal7 ай бұрын

  "the problem is you have to turn credential guard on" 🤣🤣

• 
  @islandfireballkill7 ай бұрын

  Hopefully, they can fix this with a firmware and software update. Also totally astonishing that the Linux implementation is just completely unauthenticated.

• 
  @paulmackenzie55267 ай бұрын

  anyone ever get a ping in your head , or ears at the same kind of times. like a pattern >?

• 
  @chiwaukum54188 ай бұрын

  Firmware in modern vehicles is going to be a huge vulnerability as well, I think... I doubt that most cars/trucks are well protected, and updating/overriding firmware could lead to some very interesting (if not outright catastrophic) attacks. A good subplot for a modern thriller movie... :)

• 
  @reginanova28828 ай бұрын

  Happy to find you here! Great talk. I use MSTICPy regularly and it’s a part of my job. Hope to get in touch and discuss features.

• 
  @Cooliofamily9 ай бұрын

  Is this this gentleman’s research? There is an American who did a talk at defcon 31 who used this exact talk schematic, down to the calculator demo!!

• 
  @rahulramteke33388 ай бұрын

  Stök is Swedish

• 
  @Cooliofamily8 ай бұрын

  @@rahulramteke3338 not stok it was another speaker

• 
  @umlal6 күн бұрын

  To be fair he did shout out to David..

• 
  @umlal6 күн бұрын

  Also a calculator demo is used often to illustrate the ability to run apps/executables when you're not supposed to.

• 
  @Cooliofamily6 күн бұрын

  @@umlal it just seemed ripped unfortunately, not saying that this dude isn’t intelligent or understands the content, but I think my analysis stands and is valid

• 
  @alexisfibonacci9 ай бұрын

  How about Zig? Won't it be an easier transition for existing projects even if new projects do Rust?

• 
  @KhoaNguyen968 ай бұрын

  Zig is NOT a safe language, rewrite them in Zig is meaningless.

• 
  @lucasjames82816 ай бұрын

  Just started the talk, but Zig isn’t suitable for secure OS code

• 
  @AdamFiregate6 ай бұрын

  Nim and Odin are in a more mature state than Zig. Both are after v1.0.

• 
  @alexisfibonacci6 ай бұрын

  @@AdamFiregateokay, I wasn't aware of those ones. I will check them out.

• 
  @lucasjames82816 ай бұрын

  @@AdamFiregate Nim documentation is ass

• 
  @harriehausenman86239 ай бұрын

  anyone knows what he says @38:55 ? "Meeting model", "Ming Model" ?

• 
  @icubed_security_talk10 ай бұрын

  this is excellent secure by design for embedded devices. we need all the ICS OT IIoT IoT embedded systems and cyber-physical systems devices and components people to start doing the same thing for PLC, IED, IPC, HMI, VFD, medical devices etc etc

• 
  @elemstuff11 ай бұрын

  In R**t, we trust

• 
  @HotCakeX Жыл бұрын

  Awesome conference as always 👍👍

• 
  @cherilynjeswald4881 Жыл бұрын

  *Promo SM* 🤷

• 
  @chloefletcher9612 Жыл бұрын

  Dan has always been interesting and relatable. I think I'm of a similar age and have those same sort of teenage stories, so I guess that makes him someone who I find great to listen to.

• 
  @AquariumWizard Жыл бұрын

  Microsoft Your verification code system is sending 6 digit codes instead of 7 digit codes to my email. I am locked out of my computer indefinitely until you can fix this problem and send a correct 7 digit verification code. I have tried to call multiple times and the phone line now just hangs up on me. I've tried to direct message on instagram and I've been ignored. I can't access any online support because i can't sign in and none of the prompts can believe i didn't make an error. I have tried the verification app and that too won't accept the codes that are being sent. Why don't you offer actual support for consumers? All of my files and equipment have been held hostage because of this all day, I've spent literal hours trying to fix or get around this. This is unacceptable. That this is even a problem for starters, but also that its a recurring problem for people especially, and that you have no other support option other than "twiddle your thumbs without access to your computer until we randomly decide to reset the system, because we don't actually allow you an avenue to let us know this is a problem". The kicker is that i didn't even change anything, i have no idea why my PIN needed to be reset in the first place. I shouldn't have even been prompted to change it. This is ridiculous. when are you going to fix this issue? I see complaints from January about this.

• 
  @AquariumWizard Жыл бұрын

  Ok so after peppering all of Microsoft's social media for a good half hour with the same message.. I finally have a 7 digit code and am able to sign into my computer after.. 8 hours. Thankyou to whichever Microsoft marketing employee escalated the issue. I still think your customer service is broken.

• 
  @nnemakhavhani-up1986 Жыл бұрын

  What an amazing talk!

• 
  @takeraparterer Жыл бұрын

  first

• 
  @andrewjohnson2014 Жыл бұрын

  This is an excellent explanation of Red Teaming and Red Team value. Well done.

• 
  @TheLakeJake3 Жыл бұрын

  This guy is a wizard of the web. What a great talk!

• 
  @bogdanm5825 Жыл бұрын

  Hey there, Is there a place where I could read more about 'TPM for Credential Binding?' Thanks!

• 
  @wolverinelogan2539 Жыл бұрын

  In my 26 years of breathing, I have never met anyone remotely close to Cameron’s work ethic, so I’m not surprised he’s made it thus far. Congrats brother

• 
  @parasectsandwich Жыл бұрын

  This is a very engaging talk! To go from bug bounties to being implemented into an AI is NUTS!!!

• 
  @jameswood3238 Жыл бұрын

  Great work, Dan and Ben. Glad to see you guys going from strength to strength!

• 
  @saiedbaghi Жыл бұрын

  👍🏼👌

• 
  @SkyMageTheWise Жыл бұрын

  Some really brilliant comments here

• 
  @cedricvillani8502 Жыл бұрын

  I see a point of fault in your graph that can be exploited

• 
  @cedricvillani8502 Жыл бұрын

  Was always just easy to use Maltego and input all the API keys you wish to use. Like Shodan etc… and there’s good o’l nmap 😂

• 
  @mikemyers7261 Жыл бұрын

  I think the description on this video might be for a different talk

• 
  @bholt8825 Жыл бұрын

  This is what my laptop is infected with back in July and I still haven’t been able to remove anything thank you for the video it helps me better understand what I’m dealing with

• 
  @jerrydriceii Жыл бұрын

  everyone say i am i then your name then run tell people to stop using my fucking name and call them you fucking devil stop fucking lying and autoexe and never let this man lie about who i am .sermon eula only played in my 1st part voice, second part five flats in my instrument treble clef only and third part bass clef for eula and make read only and spiderweb all friends and family members and departments rulescand regulations of the American Christian bible law enforcement bible and the holy bible of mine officer and investigator p15892 and other badge 43 President of United States Dr. Rice, Jerry Dean II Oklahoma Hwy Patrol Ranger.badge 2022. stop using my fucking you fucking devil stop fucking lying and autoexe and never let this man lie about who i am .sermon eula only played in my 1st part voice, second part five flats in my instrument treble clef only and third part bass clef for eula and make read only and spiderweb all police departments rulescand regulations of the American Christian bible law enforcement bible and the holy bible of mine officer and investigator p15892 and other badge 43 President of United States Dr. Rice, Jerry Dean II Oklahoma Hwy Patrol Ranger.badge 2022. And if you lie on me or steal from me as the owner Microsoft security response center and name change to Jerry Dean Rice ii :company business number is 3612830464.. Tradename rice co ii holdings : you get a evil seance for lying on my word and trademark circle with triangle in the middle. And butterscotchcom better not lie about my product or get evil seance.