DEF CON 26 PACKET HACKING VILLAGE - Chris Hanlon - Holes in the Foundation of Modern Security
Channel: DEFCONConference
Date: 15/11/2018

In this talk we briefly introduce common SMTP/TLS implementation weaknesses explain how governments, criminals, and malicious insiders can exploit them to remotely reset account passwords, create/update/delete firewall rules, control windows desktops/laptops, access online backup systems, download full-disk Encryption Keys, watch security cameras, listen to security camera microphones, control social media accounts, and takeover AWS virtual machines.