Author Archive

Need something to read? – First Batch of DeepSec 2018 Presentation Slides online

December 11, 2018

Do you fear reading the news? Fancy some facts? Well, we have something different for you to read. We have collected presentation slides from DeepSec 2018 and put the first batch online. You can find them in this rather nostalgic directory listing. We have renamed the files with their title and the name of the […]

Tags: ,
Posted in Administrivia, Conference No Comments »

Thank you all for attending and speaking at DeepSec 2018!

December 3, 2018

DeepSec 2018 is over. Thank you for attending and presenting at our conference! Without your interest and your configuration there would be no talks, no workshops, and no one else present.We had a great time, and we hope you enjoyed everything. We are now dealing with the administrative backlog, the metric ton of receipts, the […]

Tags: ,
Posted in Conference, Security No Comments »

Opening & Keynote – DeepSec 2018 has started

November 29, 2018

So, now is the opening and the keynote presentation by the magnificent Peter Zinn. This means that DeepSec 2018 has officially started. Since we do not live stream the talks, we will be away from the blog and mostly from Twitter until the end of the conference. Communication in meatspace has full priority. In case […]

Tags: ,
Posted in Administrivia, Conference No Comments »

Discussing Threat Intelligence in the City of Spies – DeepINTEL 2018 has started

November 28, 2018

What’s the best place to discuss security and threat intelligence? Well, according to Austrian investigative journalist Emil Bobi there are over 7,000 spies living and working in Vienna. To quote the article: „Austria has been an international spy hub since the late 19th Century, when people from all parts of the Austro-Hungarian empire flocked to […]

Tags: , , ,
Posted in Conference, DeepIntel No Comments »

(Almost) (Pretty) Final ROOTS 2018 Schedule (last beta version) published!

November 21, 2018

We have rearranged the ROOTS 2018 schedule to its final form. You may have noticed that it is more condensed. We thought it would be easier to connect, to discuss, and to exchange ideas without the stretch over two days. Furthermore it is easier to have sessions with a specific focus when there is more […]

Tags: , ,
Posted in Administrivia, ROOTS No Comments »

Special Offer for “Mastering Web Attacks with Full-Stack Exploitation” Training – get 3 for the Price of 1

November 19, 2018

The DeepSec training Bug Hunting Millionaire: Mastering Web Attacks with Full-Stack Exploitation by Dawid Czagan has some seats left. Dawid has agreed to give away free access to two of his online courses for everyone booking tickets until Wednesday, 21 November 2018 (2359 CET). This gives you a perfect preparation for penetration testing, software development, […]

Tags: , , , ,
Posted in Conference No Comments »

Last Call for your Web Application Security Training – Break all teh Web and enjoy it!

November 9, 2018

The Internet is full of web applications. Sysadmins used to joke that HTTP is short for Hypertext Tunnelling Protocol, because anything but web content is transported via HTTP these days. It’s the best way to break out of restricted environment, too. So the chances are good that you will need the skills for dealing with […]

Tags: , , , , , ,
Posted in Conference, Security No Comments »

Binary Blob Apocalypse – Firmware + Cryptography = less Security

November 6, 2018

A couple of years ago we had a chat with one of our sponsors, Attingo. They are specialised in data recovery from all kinds of media and in all kinds of conditions. Since vendors keep secrets from the rest of the world, the data rescuers do a lot of reverse engineering in order to decode […]

Tags: , ,
Posted in High Entropy, Security No Comments »

DeepINTEL 2018 Security Intelligence Event – Preliminary Schedule is available

November 3, 2018

It took us longer than anticipated, but the schedule for DeepINTEL 2018 is final and available. The topics covered are ICT risk assessment in interconnected and complex environments, drone threats (to critical infrastructure), drone countermeasures, assessment of digital black markets (you can call them darkweb/crypto markets if you must), live threats to the information industry […]

Tags: , ,
Posted in Conference, DeepIntel No Comments »

ROOTS Schedule almost ready, mind your DeepSec Training Tickets, DeepINTEL Schedule is coming up

October 19, 2018

The review process for ROOTS has been completed a few days ago. Proper reviews are hard, this is why it took a bit longer. The accepted papers will be in the schedule at the beginning of next week for we need the redacted abstracts of all presentations. The research topics are worth it, so make […]

Tags: , ,
Posted in Administrivia, Conference No Comments »

Translated Press Release: Systemic Errors as Vulnerabilities – Backdoors and Trojan Horses

October 9, 2018

DeepSec and Privacy Week highlight consequences of backdoors in IT Vienna (pts009/09.10.2018/09:15) – Ever since the first messages were sent, people try to intercept them. Today, our modern communication society writes more small, digital notes than one can read along. Everything is protected with methods of mathematics – encryption is omnipresent on the Internet. The […]

Tags: , , , , ,
Posted in Conference, Discussion, Press, Security No Comments »

DeepSec 2018 Talk: IoD – Internet of Dildos, a Long Way to a Vibrant Future – Werner Schober

September 26, 2018

The Internet of Things has grown. Interconnected devices have now their own search engine. Besides power plants, air conditioning systems, smart (or not so smart) TV sets, refrigerators, and other devices there are a lot smaller and more personal things connected to the Internet. Your smartphone includes a lot of personal conversations, most probably pictures, […]

Tags: , , , ,
Posted in Conference, Internet, Security No Comments »

DeepSec 2018 Training: Professional Bug Hunting for Early Bird Millionaires – Sensitive Data Exposure

September 24, 2018

DeepSec’s Early Bird Tariff is still valid for today. If you are interested in bug hunting for money, i.e. bug bounties, then you should hurry. Dawid Czagan is conducting a training at DeepSec 2018 where you can learn all you need to get started. If you don’t know what to expect, we recommend one of […]

Tags: , , ,
Posted in Training No Comments »

Translated Press Release: Bug Bounty Programs – Vulnerabilities as a worthwhile Investment

September 12, 2018

DeepSec Conference offers trainings for security researchers Vienna (pts010 / 04.09.2018 / 08:30) – This year, in addition to lectures about the failing of security measures, the DeepSec In-Depth Security Conference will offer a workshop for finding vulnerabilities. Unfortunately the testing of software in the context of quality assurance is no longer sufficient in the […]

Tags: , ,
Posted in Conference, Press No Comments »

Translated Press Release: Intelligence Agencies want to abolish Information Security

September 11, 2018

https://www.pressetext.com/news/deepsec-konferenz-veroeffentlicht-programm-fuer-2018.html DeepSec Conference criticizes the open Attack on secure End-to-End Encryption Vienna (pts014/21.08.2018/09:25) – Ever since security measures have been in existence, there have been discussions about their benefits and their strength. In digital communication, the topic of back doors keeps coming up. In the analog world high quality locks are desired to protect against […]

Tags: , ,
Posted in Conference, Press No Comments »