The Less Hacked Path
summary
Creates a MySpace worm that infected ~1M profiles in <24 hours using XSS plus AJAX to steal CSRF tokens, builds an open project called SkyJack drone takeover that hijacks nearby Parrot drones, and publishes Evercookie persistence and a USB/e‑cig HID firmware attack that proves malicious firmware works. Demonstrates side‑channel exploits—laser vibration and DSLR bag‑of‑chips audio recovery, thermal ATM PIN capture, ultrasonic RSA key extraction from a phone, MagStripe/MaxBoof next AMX prediction, and ground‑line keystroke leakage—plus the legal aftermath and a three‑year computer ban.
AI-written summary · about
chapters (11)
- 0:00My early hacking days
- 2:57Learning to code and cheat
- 6:26The Myspace worm incident
- 13:27Aftermath of the worm
- 17:25Secret Service raid and trial
- 21:52Post-probation research
- 26:16Vulnerabilities in modern tech
- 30:41Tracking and fake traffic
- 33:44Physical security loopholes
- 38:26Unconventional attack vectors
- 42:30Questions and advice
related talks
33mHacking The Front-End
40mXXSS: Exotic Cross-Site Scripting vectors
59m50 Shades of AppSec
42m"Vulnerabilities from a grave. Forever dead or maybe alive..."
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
46mAttacks, Lies and the Underground World
01h 01mSomething Something Cyber
41mJust Another Live Hacking - How Insecure Is Secure Enough?