~/talk

Making Hacking Childs Play

Talkat NDC Sydney 2016 · 2016-08-01..08-05· [security]
slides:none on file

Shows that many breaches are done by bored kids using trivial tools and obvious mistakes: a 15‑year‑old exploits SQL injection in TalkTalk, Ashley Madison leaks ~30 million records, and a data aggregator holds ~1.3 billion accounts. Demos use hackertyper.net to fake “hacking,” a Wi‑Fi Pineapple to capture device probe requests and intercept HTTP, and an automated HAVIJ/SQLi tool to enumerate databases and dump user/password columns — all working live, plus demos of timing/account‑enumeration, LOIC/cheap DDoS services, CSP and HSTS defenses.

AI-written summary · about

  1. 0:00Intro
  2. 2:30Hacking in Kids
  3. 3:55Cujo
  4. 14:00Ashley Madison
  5. 17:55XSS
  6. 22:45Dutch Banks
  7. 30:32DDoS Services
  8. 30:57Kids Like DDoS
  9. 36:42Stress Tests
  10. 38:42ManInTheMiddle Attack
  11. 39:17ManInTheMiddle Attack Demo
  12. 42:54FBI HTTPS
  13. 43:49HTTP 307
  14. 44:42HTTP STS
  15. 45:58HSTS Preload
  16. 48:41Sequel Injection
  17. 51:31Google Doc
  18. 53:05Live Blog Post
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.