NorthSec 2019
| title | author | length |
|---|---|---|
| xRAT | Arezou Hosseinzad-Amirkhizi, Apurva Kumar | 49m |
xRAT is a mobile surveillanceware family that exfiltrates contacts, WeChat and QQ databases, photos and passwords and implements do_intruder HTTP fuzzing… | ||
| Where Do We Go From Here? Stalkerware, Spouseware etc | Eva Galperin | 35m |
Investigation maps the commercial stalkerware market: purchased APKs, installed samples, and VirusTotal scans across 61 AV vendors reveal detection is largely… | ||
| What is our Ethical Obligation to Ship Secure Code? | Elissa Shevinsky | 23m |
Faster Than Light builds developer tools that push security earlier into development and argues companies must do more than meet Terms of Service. Example… | ||
| Wajam: From a Start-up to Massive Spread Adware | Hugo Porcher | 34m |
A Montreal social-search product turns into pervasive adware that uses a pay‑per‑install network (over 50 PPI affiliates between 2011–2016, OPC estimates… | ||
| Using Geopolitical Conflicts for Threat Hunting | Kristin Del Rosso | 32m |
Claims a strong link between active conflicts and targeted mobile surveillance and shows concrete cases and tooling: Silverhawk targets anti‑Assad Syrians with… | ||
| Trick or treat? | Emilien Le Jamtel, Ioana-Andrada Todirica | 40m |
Researchers collect ~20,000 miner samples, extract Stratum configs and wallet addresses with YARA rules, decode packed binaries and memory with Volatility… | ||
| Threat hunting in the cloud | Kurtis Armour, Jacob Grant | 43m |
Claims that cloud hunting succeeds only with combined CSP API logs plus full endpoint telemetry, demonstrated by ingesting CloudTrail/VPC flow logs and… | ||
| The SOC Counter ATT&CK | Mathieu Saulnier | 30m |
Walks through applying MITRE ATT&CK to a SOC by mapping all 244 enterprise techniques in the ATT&CK Navigator, scoring each technique with weighted questions… | ||
| The (Long) Journey to a Multi-Architecture Disassembler | Joan Calvet | 47m |
JEB implements a multi‑architecture disassembler that converts native instructions to a unified IL, simulates IL forward to resolve indirect branches and… | ||
| T1: Secure Programming For Embedded Systems | Thomas Pornin | 01h 02m |
Describes a homegrown language stack: a token-threaded VM (T0) and a new, memory-safe follow-up (T1), compiled by a C# tool running on mono and targeting C… | ||
| Safer Online Sex: Harm Reduction and Queer Dating Apps | Norman Shamas | 43m |
Harm reduction frames concrete failures and fixes: researchers find dating apps used for entrapment, images and screenshots used as legal evidence, and many… | ||
| Post-Quantum Manifesto | Philippe Lamontagne | 28m |
Quantum computers run Shor's algorithm to factor and solve discrete log in polynomial time by using the quantum Fourier transform to recover periods, which… | ||
| Making it easier for everyone to get Let's Encrypt certs w/ Certbot | Erica Portnoy | 24m |
Certbot team presents concrete fixes: user testing with personas (e.g. shared-hosting users and power admins) uncovers where people get stuck; results drive a… | ||
| Post-Quantum Cryptography | Christian Paquin | 27m |
Quantum computers threaten long-term secrecy, so the actionable claims are: move now, because recorded ciphertext can be decrypted later; use Open Quantum Safe… | ||
| Mainframe Hacking in 2019 | Philip Young | 55m |
Mainframe offensive work in 2019 focuses on measurable techniques and tools: an IMP masscan+python scanner collects ~600 TN3270 screenshots, an Nmap Lua 3270… | ||
| M33tfinder | Yamila Vanesa Levalle | 30m |
Shows a practical exploit against Cisco Meeting Server WebRTC web-bridge: server responses leak valid numeric conference ID ranges and whether a meeting… | ||
| Hacking Heuristics | Kelly Villanueva | 45m |
Argues that mental shortcuts shape both humans and tools and that attackers exploit them to change what defenders notice, citing a Xerox study where 93% comply… | ||
| Fixing the Internet's Auto-Immune Problem | Chloe Messdaghi | 16m |
Argues that vague laws produce an “auto‑immune” response that prosecutes good‑faith researchers, citing a Canadian case exposing 285 accounts and ambiguous… | ||
| DNS On Fire | Warren Mercer, Paul Rascagnères | 47m |
Two campaigns hijack DNS for espionage: DNSpanache starts with LinkedIn spearphishing that delivers a macro which downloads a loader that uses DNS C2 via… | ||
| Cybersecurity vs the world | Matt Mitchell | 30m |
Argues that “cybersecurity” laws and products often enable repression rather than safety: Vietnam’s 2019 law forces companies to open local offices and leads… | ||
| Cache Me If You Can: Messing with Web Caching | Louis Dion-Marcil | 44m |
Covers three concrete attack classes with real results: web cache deception (2017-style URL trick that caches sensitive HTML/CSRF tokens, Cloudflare seen… | ||
| One Key To Rule Them All | Yolan Romailler | 30m |
Tool called onekey implements deterministic EC key derivation (demo code in Go on GitHub) and shows concrete math: given a master public point P = kG and a… | ||
| nothing matches | ||