Lightning Talks
summary
Study of 2023–24 eCTF submissions and interviews shows recurring failures: misunderstandings of privilege separation on microcontrollers, assuming compiler NX flags work without an MMU, and ignoring physical attacks; practical pain points include single address space issues and lack of entropy and vendor Rust support. Operation Mango ships a static-value DFA with Rich Expressions and heuristics that yields 22× speedup over symbolic execution, finds 166 manually verified vulnerabilities across more binaries, and is on GitHub. AI Cyber Challenge teams use hybrid pipelines where LLMs help patching.
AI-written summary · about
related talks
13mThe Automation of Exploits: Will Eatherton on AI-Driven Security and the End of Obscurity
30mLocknote: Conclusions and Key Takeaways from Day 1
52mSecuring The Unseen: Vulnerability Research In Confidential Computing
39mNight of the living vulnerabilities
01h 05mTheory and Security
28mIt's Not a Best Practice If No One Can Follow It: Learning From...
16mLost in Translation: Enabling Confused Deputy Attacks on EDA Software...
33mSecuring the Unseen: Vulnerability Research in Confidential Computing