The Okanagan Information Security Group (OISG) is open to everyone interested in information security, whether they are working in infosec, learning, seeking a career, or just curious and wanting to know more.

Presentation: Swiss Cheese holes in the foundation of modern security

Presenter: Chris Hanlon

Abstract: This presentation is based on Chris Hanlon's presentations at the DEFCON Packet Hacking Village and BSides Las Vegas.

The presentation

1. Provides details about common email interception techniques.

2. Demonstrates the way that we used common email interception techniques to break into Cisco Meraki routers, AWS control panels, Oracle Cloud, Google Nest, Online Medical records, 3 online backup vendors, Social Networks, and google nest security cameras, ...

3. After demonstrating our breakin to Google Nest Security cameras, we remotely turn on the microphone and listen in on the conversations.

4. Explains ways that developers can protect their users while preserving compatibility (these are based on ways that Apple, Google, and Microsoft blocked some of my attacks)

5. Discuss the potential for large scale password reset security enhancements.

6. Explain ways for corporate customers and home users to protect them selves

Biography: Chris Hanlon has been maintaining Unix, Linux, and Windows Servers since 1998 and submitting vulnerability reports since 2000. Chris’s submissions have resulted in security and privacy enhancements in Google Apps, the Linux Kernel, and Interac email transfers.

Doors open: at 5:30pm
Presentation: starts at 5:45pm

Sponsors
*Thank You to Okanagan coLab for donating the use of their presentation room