#05 Jupiter – OWASP Porto

Agenda

18:00 Intro and Welcome by the OWASP Porto chapter leadership

18:15 Hacking Embedded Devices – From Black Box to UID 0 — Zezadas & David Silva

19:00 Lessons Learned and How Not to Choose Your Next Drive — Paulo Silva

20:00 Drinks & Dinner by Critical Techworks

Talks

Hacking Embedded Devices – From Black Box to UID 0

Zezadas LinkedIn ↗ & David Silva LinkedIn ↗

This presentation leads through the remarkable process of gaining root access in an unsuspecting video converter embedded device. Witness the fusion of expertise and creative problem-solving as the speakers share a step-by-step account of their exploits. Discover firsthand that hacking embedded devices, often perceived as daunting, can be accessible, enjoyable, and most importantly, a valuable learning journey. Whether you're a security aficionado or simply curious about the intersection of technology and hardware, this talk promises to entertain, educate, and inspire.

Speaker Bios

Zezadas is a dedicated security researcher with a strong passion for hardware hacking. As a committed advocate for cybersecurity education, he frequently shares knowledge at renowned security conferences worldwide including BsidesLisbon, BsidesBangalore, BerlinSides, AlligatorCon, WarCon, 0xOPOSEC, and many others.

David Silva is a Software Engineer with professional experience in full-stack software development, project management, and cloud deployments in Kubernetes, AWS, Google Cloud, and Azure. His professional experience is combined with a strong interest in cybersecurity, including understanding how things work and how one can give new uses to existing technology.

Lessons Learned and How Not to Choose Your Next Drive

Paulo Silva LinkedIn ↗

Instead of focusing on cars per se, this talk uses lessons from security research to highlight security pitfalls that plague organizations across industries. From cloud bucket misconfigurations to BOLA bugs giving users more power than a valet with Ferrari keys, real-world lessons are shared with humor — covering how to prove impact with PoCs and get rid of annoying web flaws. The talk covers practical security lessons applicable well beyond automotive security.

Speaker Bio

Paulo is a security practitioner with a solid background in software development, who has spent the last decade focused on identifying critical vulnerabilities and breaking software. He is a long-time OWASP volunteer and co-leader of the OWASP API Security Project, where he advocates for secure API practices and contributes significantly to mitigating security risks in the API landscape.

Photos