***From DVR worms, to fridges, via dildos, the sins of the IoT in 50 minutes*** Come and see us at the IoT Village (in the ballroom/main contest area on the pool level). We're doing a formal IoT security presentation, as well as just hanging out and being available for general chit-chat.

We’ll be giving a lightning talk at Revolution at the BSides pre-party about security issues around Bluetooth Low Energy and IoT. It might involve a smart butt plug and a live (hacking) demo

Here's what we'll be presenting: ***Using IoT to take us back to the Dark Ages*** For many, the IoT is a shiny new tech playground, but the flipside could be much, much worse. We’ll look at how the seemingly endless failures and flaws in IoT security could be used to do something far more damaging […]

This year Tony Gee will be talking about "Reverse engineering hardware on DVRs and sex toys": Why reverse engineer DVRs? Here’s why: *Mirai was elegantly simple; using default telnet credentials to compromise large numbers of devices. However, in the quest for simplicity, the author missed numerous more significant vulnerabilities. *We have spent the last few […]

Tony and Takeshi gave a talk about hardware hacking and reverse engineering at the Microchip EU Masters event; a technical training event for embedded control engineers. They showed routes to extract firmware from chipsets, then how to analyse the extracted binaries for vulnerabilities. The talk concluded with demonstrations of two remote command injection attacks on […]

Tony Gee was speaking at the Energy & Utilities Alliance Smart building event and asks "2017: The year your privates were violated by your kettle?"

Following last year's Las Vegas event, Ken Munro will be speaking again, this time digging in to the world of adult toys and the repercussions poorly secured devices have for all of us. CANCELLED DUE TO HURRICANE IRMA

Application Security Flaws in the Internet of Things Ken looked at the reasons why IoT devices are flawed, be it commercial pressure, code re-use, or even simple ignorance of the importance and brand benefits of securely coded apps. He explained and offered advice that applies equally to IoT device manufacturers, app developers and anyone else […]