NorthSec Talks & Presentations

NorthSec

You're Not an Idiot

Explore imposter syndrome, self-doubt, and personal growth in tech. Learn to embrace uniqueness and overcome negative self-perceptions in this empowering talk.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

NorthSec

How Crypto Gets Broken - by You

Explore cryptography fundamentals, encryption methods, and attack techniques in this comprehensive workshop. Learn about hashing, ciphers, and practical approaches to breaking crypto systems.

• YouTube
• 3 hours 22 minutes
• On-Demand
• Conference Talk

NorthSec

Unicode Vulnerabilities That Could Byte You

Explore Unicode vulnerabilities in web applications, including normalization, capitalization misuse, and encoding conversion risks. Learn about HostSplit, HostBond attacks, and Punycode exploitation.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

NorthSec

Regions Are Types, Types Are Policy, and Other Ramblings

Explore innovative software hardening using typed region-based policies. Learn how to apply this approach to protect against vulnerabilities and enhance system security beyond traditional compiler techniques.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

NorthSec

IOMMU and DMA Attacks

Exploring IOMMU and DMA attacks, focusing on security implications, operating system integration, and techniques to bypass protections, particularly on macOS up to version 10.12.4.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

NorthSec

High Speed Fingerprint Cloning - Myth or Reality

Explore the impact of 3D printing on fingerprint cloning and its security implications for devices. Learn about real-world attack scenarios and the level of sophistication needed to bypass biometric authentication.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

NorthSec

Stay Quantum Safe - Future-Proofing Encrypted Secrets

Explore quantum-safe cryptography's progress, standardization, and implementation in TLS, SSH, and VPN. Learn to future-proof encrypted data against potential quantum computer decryption.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

NorthSec

The Long Journey to a Multi-Architecture Disassembler

Explore multi-architecture disassembly techniques, from intuitive strategies to advanced concepts like non-returning calls, type libraries, and identifying library routines.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

NorthSec

Post-Quantum Manifesto

Explore post-quantum cryptography, its impact on public key systems, and emerging hard problems in lattice-based, multivariate, and code-based cryptography for future security.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

NorthSec

Making It Easier for Everyone to Get Let's Encrypt Certificates with Certbot

Simplifying HTTPS adoption: Learn how Certbot streamlines Let's Encrypt certificate acquisition, enhancing website security and user privacy through improved accessibility and user-friendly design.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

NorthSec

Safer Online Sex - Harm Reduction and Queer Dating Apps

Explore safer online dating for queer communities through harm reduction strategies, focusing on user-centric safety, privacy, and security in app design and personal tech choices.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

NorthSec

Threat Hunting in the Cloud

Explore cloud security challenges, attacker strategies, and effective threat hunting techniques in AWS and Azure environments. Learn to protect against and detect sophisticated cloud-based attacks.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

NorthSec

What is Our Ethical Obligation to Ship Secure Code?

Explore ethical obligations in secure coding, data breaches, and developer responsibilities. Gain insights on improving security practices and addressing user privacy concerns.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

NorthSec

Trick or Treat - Unveil the "Stratum" of the Mining Pools

Unveil mining pool strategies, identify Stratum servers, and explore cryptomining malware detection techniques through static and dynamic analysis, web scraping, and network scanning.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

NorthSec

Where Do We Go From Here? - Stalkerware, Spouseware, and What We Should Do About It

Explore stalkerware and spouseware threats, their impact on victims, and potential solutions. Learn about detection, legal aspects, and the role of tech companies in combating these privacy invasions.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk