Further Musings on Attacking Social Networks (Shmoocon 2009)

This is a video of the presentation titled "Fail 2.0: Further Musings on Attacking Social Networks" given by Nathan Hamiel and Shawn Moyer at Shmoocon 2009.

Talk Description:

We've spent a lot of time ranting about and / or embarrassing various Social Networks last year already. Still, we wanted to share with the Shmoo audience some further silliness, social experiments, and good old-fashioned Fail 2.0 that's popped up since we last looked at this topic. We'll also cover some of the new countermeasures and counter-countermeasures that have showed up on various SocNets in the past few months.

In light of some recent mass pwnage occurring over Social Networks this past year, we explicitly promise NOT to say "we told you so", and definitely won't be performing our patented synchronized stage-left Electric Slide followed by some pop-locking and Nathan's famous Gloating Robot.

A few things we'll be covering this time around: SocNets as Attack Platform, SocNets-As-Botnets, new developments in SocNet Applications, Alex Sotirov's cell phone number on Twitter, some new impersonation excercises, bypassing CSRF protections, and thoughts (and potentially some tools) for practicing "safe" Social Networking.

You can download a high resolution video of the talk here. The slides are available here.

Vivek Ramachandran is a security evangelist and has been working in computer security related fields for the past 7 years. In 2007, Vivek spoke at world renowned conferences Defcon (WEP Cloaking Exposed) and Toorcon (The Caffe Latte Attack). The discovery of the Caffe Latte Attack was covered by CBS5 news, BBC online, Network World etc news agencies.In 2006, Vivek was announced as one of winners of the Microsoft Security Shootout contest held in India among 65,000 participants. He has also been a recipient of a Team Achievement at Cisco Systems for his work on 802.1x and Port Security modules on the Catalyst 6500 switches. Currently he spends all of his time maintaining Security- Freak.Net , SecurityTube.Net and is the co-founder of Axonize. Vivek, is a Bachelor in Electronics and Communications Engineering from the prestigious Indian Institute of Technology, Guwahati.You can contact him at vivek[at]securitytube.net