Niall Merrigan
where else to find them
what they talk about
all 6 in the filters
where they keep going back
- Øredev3 editions2018–2024
- NDC Security3 editions2022–2026
- NDC Security Oslo2 editions2019–2020
all 11 in the filters
on a stage with
- Dylan Beattieonce
- Heather Downingonce
- Mark Rendleonce
all 5 in the filters
who talks about the same things
- Troy Hunt39 talks
- Aaron Bedra14 talks
- Laura Bell13 talks
- Ben Dechrai29 talks
- Erlend Oftedal12 talks
- Brian Contos3 talks
| title | conference | date |
|---|---|---|
| Won't somebody please think of the children!? | NDC Security 2026 | 2026-03-02 |
Details of real cases and tools: a catfisher uses Snapchat quick add to pose as teens, harvest images and issue threats; one offender tricks roughly 3,500… | ||
| Exploiting the supply chain | NDC Manchester 2025 | 2025-12-01 |
AI accelerates classic supply‑chain and social‑engineering attacks: vendor email compromise nets ~$2.7B across ~22,000 incidents; npm/PostHog and SolarWinds… | ||
| The Evolution of Security Attacks and Threats | NDC Copenhagen 2025 | 2025-09-08 |
A concise timeline of concrete attacks and defenses: 1903 wireless interception proves early man-in-the-middle trick; 1972 Creeper spawns Reaper antivirus… | ||
| Optimistic Security | NDC Security 2025 | 2025-01-20 |
Explains why optimism and shortcut thinking cause security and engineering failures, citing about 186 cognitive biases, a study of 10 programmers (range: 1… | ||
| Optimistic Security | Øredev 2024 | 2024-11-06 |
Specific claims and fixes: humans use fast‑and‑frugal trees and heuristics that become 186 cognitive biases leading to confirmation bias and Dunning–Kruger… | ||
| On Building Teams | NDC Security 2022 | 2022-04-06 |
Practical lessons on building security teams and culture: a red‑team proof‑of‑concept uses bucket-stream piped to a bucket‑finder to enumerate exposed S3… | ||
| A reasonable guide to security practices | NDC Security Oslo 2020 | 2020-01-22 |
Advice: use a password manager (example LastPass) to generate 80–100 character passwords, rotate them every few months, and avoid reuse; add MFA/2FA everywhere… | ||
| A reasonable guide to security practices | Øredev 2019 | 2019-11-06 |
Shows concrete, actionable defenses and real attacks: a Wi‑Fi pineapple man‑in‑the‑middle steals a Gmail password, a $20–$25 tool (Con‑Boot) bypasses Windows… | ||
| Hacking a Cat — Going Beyond Traditional Attack Vectors | NDC Security Oslo 2019 | 2019-04-04 |
Shows concrete attack paths against implantable and nearby devices: captured AuraDev credentials using a Wi‑Fi Pineapple (credential capture), proposes… | ||
| Hacking a Cat — Going Beyond Traditional Attack Vectors | Øredev 2018 | 2018-11-19 |
Claims a practical threat model and demos rather than philosophy: shows how proximity relay attacks start cars using $20 radios + Raspberry Pi for under $200… | ||
| The Psychology of Social Engineering | Øredev 2018 | 2018-11-19 |
There is an old saying, give a person money and they will eat for a day, teach a person to phish and they will eat for life. This session shows how social… | ||
| The Pyschology of Social Engineering | NDC Oslo 2018 | 2018-06-11 |
Shows how attackers convert psychology into exploits with concrete examples: pixel-perfect phishing pages that mimic LastPass and iCloud, spear-phishing from… | ||
| The Hello World Show LIVE | NDC Minnesota 2018 | 2018-05-07 |
A live panel delivers five concrete demos: a failed attempt to precompile .NET Core to native binaries, a plea to measure user happiness because slow UX can… | ||
| The Psychology of Social Engineering | NDC London 2018 | 2018-01-15 |
Shows concrete manipulations: pricing anchors and the “magic 9” push buyers toward the middle option (8GB $229 vs 32GB $299), New York Times upsell example… | ||
| A security tester's toolkit | Build Stuff 2017 | 2017-11-15 |
Demonstrates hands‑on offensive steps: boots Kali Linux VM, maps networks with nmap, finds 597,458 IIS6 hosts via Shodan/Showdown, uses Wi‑Fi Pineapple to… | ||
| Where did you find that? | NDC London 2017 | 2017-01-16 |
Searches and screenshots show live industrial and consumer controls reachable from the public Internet: uses Shodan and takes 2.5 minutes to scan IPv4, finds… | ||
| Where did you find that? | NDC Sydney 2016 | 2016-08-01 |
Demonstrates specific, repeatable finds: use Shodan and SearchDiggity to locate VNC on 5900/5901 consoles, open MongoDB servers (examples with 381 GB and a 1.1… | ||
| A Security Tester's Toolbox | NDC Sydney 2016 | 2016-08-01 |
Kali plus Nmap, Wi‑Fi Pineapple and cheap Alfa cards are used to find targets; Searchsploit/Exploit‑DB holds ~335,484 exploits and CVE feeds showed ~7,988 new… | ||
| Defensive Programming - A Look at how to Break your Web App | GOTO Aarhus 2013 | 2013-09-30 |
Live demos show an uploaded .aspx file allowing web.config leakage so full connection strings and the machineKey are downloaded; that key plus a leaked SAM… | ||
| nothing matches | ||