Skip to content
HHackerTube.videoSurprise me

DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker)

DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! (w speaker) on HackerTube: recommended by 2 Hacker News commenters across 2 separate months, 2017–2021.

Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.

Why Hacker News recommends it

It is a repeat pick in 'favorite tech talk' threads as a funny, eye-opening look at how easily physical security and people can be bypassed.

people recommended it
2
separate months
2
strong recommendations
2
discussed on HN
2017–2021
“The absolute funniest tech talk I've seen”
— crazypython, Mar 2021, in “Ask HN: What is your favorite tech talk?”

What HN commenters said

5 Hacker News comments link this video. Each one links back to its thread.

crazypythonMar 2021Strongly recommends

The absolute funniest tech talk I've seen "Steal Everything, Kill Everyone, Cause Total Financial Ruin!:" ▶ this video

in “Ask HN: What is your favorite tech talk?” · View on HN

nikisweetingApr 2018Strongly recommends

Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ▶ this video Van Albert and Banks: Looping Surveillance Cameras through Live Editing [link] Ken Thompson: Reflections on Trusting Trust [link] And of course, Simple Made Easy, Wat, etc.

in “Ask HN: What is your favourite tech talk?” · View on HN

will_pseudonymMar 2020Cites it

They do do that, if I understand correctly. Penetration testing handles the physical security of the company. [DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ]( ▶ this video ) Social Engineering [Hacking the Wetware: Compromising Companies with Social Engineering]( [link] )

in “Vulnerability Reporting Is Dysfunctional” · View on HN

brianpgordonAug 2019Cites it

All of that sounds impressive, until you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering- ▶ this video I'd also be concerned with leaking of mass amounts of records at once due to a security lapse on servers where it's a bit easier for grossly inadequate protections to lurk unnoticed- [link] I think I've read that Google doesn't even store the original recordings, but distorts them randomly to make them unrecognizable but still intelligible by their models. That seems like a pretty reasonable way to protect people, provided they're informed and there's no link back to the original account.

in “Apple contractors listened to 1k Siri recordings per shift: former employee” · View on HN

ATschOct 2017Cites it

This something that the speaker in the famous "steal everything, kill everyone..." [1] defcon talk refers to as the "jedi wave" and makes similar remarks about. I think it's a great name. [1] ▶ this video

in “Socially Engineering Myself into High Security Facilities” · View on HN

Topics & tags

Security & hackingPrivacy, surveillance & cybercrimedef consocial engineeringred teampenetration testingsecurity awareness