DEFCON 18: How I Met Your Girlfriend 3/3

[madtrade]

good stuff

the random guessing of php was a really cool one i loved it

[nDUBbeatboxing]

To those getting mad over the "GUI Interface" comment:

It's a reference to a CSI line. Just search "CSI GUI"and see the awesome within.

[VerifyVolatile]

lol @ visual basics.

[robinbateboerop]

Well done, Samy. Mad skills.

[Sorcerer8472]

In response to the last slide: privacy is: changing your router's default password...

Very impressive/creative though. This isn't that hard to duplicate. Maybe router manufacturers will finally stop using default passwords...

[mackenzie2211]

COME AT ME SAMMY! lol

[mednozje]

@OD533 Is refering to CSI... So stop trolling...

[Str8upWizardCJ]

OH SHIT THEY CAN BACKTRACE.

[darkdan4ever]

awesome talk..

[georgekozlovsky]

nice slide in the end :)

[bman123321]

@quelorepario

just demilitarized your fios router.

[falkenfluegel]

very impressive. I m just about smart enough to understand what he s talking about.

[Overlord360]

@OD533 GUI interface = graphical user interface interface

[Xenctuary]

JUST BING IT 2:13

[BarkJesus]

Facebookstalking on an extreme level.

[Anon12356]

can't you spoof the wifi MAC address?

[galimim]

does the MAC address trick work if you have protected WiFi or it doesnt really matter

[quelorepario]

@galimim He mentioned it and I reconfirm it for you: it doesn't matter.

Even if you have the SSID broadcasting disabled, even if you have WPA/WEP enabled: your MAC addresses (your router's, your laptop, your phone, and whatever device that's using wifi) are completely plain in the air.

MAC addresses are designed to uniquely identify any device PHYSICALLY (half of the MAC tells you the manufacturer), they are supposed to be unmodifiable and hardcoded to any device that connects to a network.

[antipryzm]

lmao@ the bing diss

[joedaviso]

As soon as I saw "default credentials", I changed my router password. You should too.

[quelorepario]

@joedaviso if you have Verizon's fiOS, it actually doesn't matter if you change your password.

All Verizon FiOS customers are doomed: the security can be bypassed... remotely.

[SrslyBuisiness]

@OD533 nice CSI: New York reference there

[CoolDudesJunk]

Liked the vids, big eye opener.

[AudioSheff]

Worst Defcon talk I have ever seen, what a load of bullshit. He's boring and a terrible talker.

[F3arMagick]

Bing part was funny.

[sierinjsh]

Anyone hating on OD533 is a retard.

[SaintLouisX]

He looked really annoying and depressed with the delayed applause at the end rofl.

[theron1n]

@K0p0n0 Really? I felt it was both informative and light hearted. He obviously made a big effort to reference popular internet culture and relate to his audience.

[UerMom]

I like the awkward silence at the end

[Qunir]

this is shit

[TheCrocodilator]

Consequences will never be the same. He can backtrace our urls. Security dun goofed.

[OD533]

Or he could have just created a GUI interface using visual basic to track the IP address

[DragoonJett]

@OD533 IP addresses are only 1 part of the puzzle, they do not lead right to your router.

[mrdkaaa]

@DragoonJett v=hkDD03yeLnU

[MKGStuff]

@OD533 no he couldnt. because the ip address is assigned by your provider dynamically and may change over time. running geoip on your ip usually points you to the city or the district. but not to the exact house (or wifi zone).

why are most youtube user stupid as shit and even get upvoted for that?

[DirkZz]

@MKGStuff Because most of them are stupid, and other stupid people think alike?

[mattegeniet]

@MKGStuff because it's a joke! Search for visual basic gui interface csi.

[scumbaguk]

@OD533 he had the ip the frist time they connected to his malicious website. watch the video again and learn.

[Snprwlf]

@OD533 complete bullshit

[Snuskigaste]

@OD533

Or he could just have it within CLI interface so he wouldn't have to waste time writing non-important code.

[c0ldelement]

@OD533 lol CSI Reference nice..

[quelorepario]

@OD533 IP addresses doesn't pinpoint to your home address, unless you have the access to the ISP and have direct access to the subscriber's billing information. Either you have ADD or you are extremely n00b.

Btw, changing subject, a similar trick to manipulating Google, there is also the alternative of manipulating Skyhook wireless by simply spoofing your router's MAC with your victim's.

[Creptio]

@OD533 tracking the ip address is far less accurate that using the macaddress, he explained it..

[7PlayingWithFire7]

@OD533 You obviously didn't get it or didn't pay attention. The entire point wasn't to get to her, the entire point was writing the code, finding ways to exploit all of that.

[snipermaniac365]

@OD533 ...Or you could learn a real coding language

[bluedevilzn]

@OD533 DO u even know what you are talking about? Why would a hacker like Samy code a GUI interface and even if he did code one, he would need to have the whole google maps database to track it and even if he had that, tracking location via IP is largely inaccurate. Try using shodanhq.com and your Mac address, it's the most accurate possible way.

[Anasazi2006]

@OD533 Visual Basic? Noobs should shut up.

[Trentr321]

@Anasazi2006 You can do anything in Visual Basics. The main thing I use it for is to track IP address with a Vusial Basics GUI