Skip to content
0:00 / 0:00

#socialengineering#physicalsecurity#penetrationtesting

DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker)

Christiaan008

73K subscribers • 19 videos on Hallway

YouTube
  • Recommended by 4 people: 2 on Hacker News and 2 on Lobsters.
  • Presented by Jayson E. Street

Beginner. No background in the topic needed.

1.6M views14 years ago4 recommendations

SecurityWeb and application securityExploits and vulnerabilities

Jayson E. Street shares real-world stories and photos of physical penetration testing and social engineering attacks, explaining how to prevent them.

Speaker: Jayson E. Street CIO of Stratagem 1 Solutions This is not a presentation where I talk about how I would get in or the things I might be able to do. This is a talk where I am already in and I show you pictures from actual engagements that I have been on. They say one picture is worth a thousand words I show you how one picture cost a company a million dollars and maybe even a few lives. In a community where we focus so much on the offensive I also make sure with every attack I highlight. I spend time discussing what would have stopped me. We need to know the problems but we need more talks providing solutions and that is what I hope people will get from this. I show the dangers of Social engineering and how even an employee with no SE experience can be an eBay James Bond which can cause total financial ruin to a company. These Security threats are real. So are these stories! For more information visit: bit.ly/defcon19_information To download the video visit: bit.ly/defcon19_videos Playlist Defcon 19: bit.ly/defcon19_playlist

Why it's here

4 people recommend this

What people say. Highly recommended as an entertaining and eye-opening talk on the power of social engineering and physical security vulnerabilities.

nikisweetingon Hacker News • Recommends

On “Ask HN: What is your favourite tech talk?”

Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin! link to this video Van Albert and Banks: Looping Surveillance Cameras through Live Editing link Ken Thompson: Reflections on Trusting Trust link And of course, Simple Made Easy, Wat, etc.

crazypythonon Hacker News • Recommends

On “Ask HN: What is your favorite tech talk?”

The absolute funniest tech talk I've seen "Steal Everything, Kill Everyone, Cause Total Financial Ruin!:" link to this video

kjensenxzon Lobsters • Recommends

Steal Everything, Kill Everyone, Cause Total Financial Ruin

steinuilon Lobsters • Recommends

Steal Everything, Kill Everyone, Cause Total Financial Ruin (2012)

ATschon Hacker News • Mentions

On “Socially Engineering Myself into High Security Facilities”

This something that the speaker in the famous "steal everything, kill everyone..." 1 defcon talk refers to as the "jedi wave" and makes similar remarks about. I think it's a great name. 1 link to this video

brianpgordonon Hacker News • Mentions

On “Apple contractors listened to 1k Siri recordings per shift: former employee”

All of that sounds impressive, until you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering- link to this video I'd also be concerned with leaking of mass amounts of records at once due to a security lapse on servers where it's a bit easier for grossly inadequate protections to lurk unnoticed- link I think I've read that Google doesn't even store the original recordings, but distorts them randomly to make them unrecognizable but still intelligible by their models. That seems like a pretty reasonable way to protect people, provided they're informed and there's no link back to the original account.

will_pseudonymon Hacker News • Mentions

On “Vulnerability Reporting Is Dysfunctional”

They do do that, if I understand correctly. Penetration testing handles the physical security of the company. DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin!( link to this video ) Social Engineering Hacking the Wetware: Compromising Companies with Social Engineering( link )