We All Know What You Did Last Summer
Talkat AppSec California 2015 · on Tuesday, 2015-01-27· at 17:15· Annenberg Community Beach House: Track 2, 415 Pacific Coast Hwy·
summary
Demonstrates concrete techniques and outcomes: a laptop software that snaps webcam and Wi‑Fi geolocation and USB payloads that phone home, a firmware‑level USB persistence used to map supply chains (devices found in Iran), a crawler that builds a camera serial‑number search over Flickr and yields IDs leading to arrests and recoveries, and a consumer tool reporting app leaks. Reports that almost half of recoveries uncover firearms, drugs, identity theft. Recommends stripping EXIF, minimizing collection, and client‑side encryption of backups.
AI-written summary · about
chapters (22)
- 0:00Intro
- 0:46Images of people in jail
- 1:33USB hacks
- 2:39Recover stolen devices
- 4:44Customization of malware
- 5:49Connections between devices
- 7:02Data classification
- 8:05Pyramid of data
- 9:03Devices
- 9:57Location
- 11:39WiFi
- 11:55Privacy
- 13:47Stolen Laptop
- 19:02GPS Disabled
- 19:28Serial Number Search
- 20:24Serial Number Bot
- 21:17John Heller
- 26:39Andrew Garbutt
- 27:05Snapchat
- 27:45ThirdParty Libraries
- 28:58Google Maps
- 30:02Outro
related talks
32mThe Evil of Spy Camera
59mThe Less Hacked Path
41mJust Another Live Hacking - How Insecure Is Secure Enough?
24mLens Of Deceit: Unmasking And Altering Camera Sunglasses' Footage
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
49mContain Yourself: Building Secure Containers for Mobile Devices
32mUsing Geopolitical Conflicts for Threat Hunting
39mAccidental Abyss: Data Leakage on The Internet