TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Revisiting the BlackHat BCard hack of 2018

29 pointsby sus_007over 5 years ago

3 comments

todd3834over 5 years ago
I remember when I was a kid and thought that hacking was this intense activity of &quot;breaking in&quot;. Movies like Hackers really captured my imagination. Some vulnerabilities and hacks truly are incredible like Stuxnet[0]. However, after creating software for many companies for many years you start to realize that most of the &quot;hacks&quot; were just someone not being careful enough. A PM dropped the ball on a project, security wasn&#x27;t even informed of the project, there was no security team, or some other simple mistake. One of the companies I worked at hired security experts to train us how to write more secure code and you wouldn&#x27;t believe how bored the room looked. Almost no one was paying attention, even the junior engineers who were the primary reason for the training.<p>Anyways, as long as humans are writing code and organizations function the way they do today these exploits are going to continue happening.<p>0: <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Stuxnet" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Stuxnet</a>
评论 #21296741 未加载
yellow_leadover 5 years ago
This is why Defcon doesn&#x27;t ask for attendee information and only accepts cash. What an embarrassment.
BlueGh0stover 5 years ago
&gt;the range of valid IDs was between 100000-999999, and there were about 18,000 attendees<p>&gt;Using Burp Suite, the task would take about six hours.<p>I really don&#x27;t think you should be using Burp Suite for this number of requests. IME You&#x27;re begging for a crash.