Archives

Windows services are particular processes that run in a separate Session and without user interaction. For security reasons, many of these services run under dedicated and less privileged accounts (WSH). But those accounts usually holds impersonation privileges that can be also abused under certain conditions, for instance the well known DCOM/NTLM reflection. Even if some […]

WIN A FLIGHT* + VIP TICKETS to HITBSecConf2020 – Singapore! The lucky draw will be held at 09:00 in Track 1 before the start of Keynote 2 on 24th April See you there! * terms and conditions apply

KEYNOTE ABSTRACT “Is it secure?” What does that even mean? The question itself is biased; looking for a Yes/No response. We get annoyed when TV lawyers press a testifying witness for a Yes/No answer, when we can clearly see that both answers are wrong since there are so many potential contextual nuances that affect how […]

FOR PAID CONFERENCE DELEGATES

FOR PAID CONFERENCE DELEGATES

KEYNOTE ABSTRACT Since commercialization and privatization of the Internet first began in the 1990’s, there has been a steady push to move access side DNS (called “recursive”) away from customer networks and towards first ISP’s and later Cisco, Google, IBM, and Cloudflare. What are the real motives for this trend? What are the risks and […]