Backdooring Git

Presented at DEF CON 23 (2015), Aug. 6, 2015, 5 p.m. (60 minutes).

Join us for a fun-filled tour of source control management and services to talk about how to backdoor software. We will focus on one of the most popular, trendy SCM tools and related services out there - Git. Nothing is sacred. Along the way, we will expose the risks and liabilities one is exposed to by faulty usage and deployments. When we are finished, you will be able to use the same tools and techniques to protect or backdoor popular open source projects or your hobby project.

Presenters:

• John Menerick - Security @ NetSuite
  John Menerick works on Security @ NetSuite. John’s interests include cracking clouds, modeling complex systems, developing massive software-defined infrastructures, and is the outlier in your risk model.

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Menerick
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - John Menerick - Backdooring Git - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - John Menerick - Backdooring Git - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - John Menerick - Backdooring Git - Video and Slides.mp4 (Video and Slides)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - John Menerick - Backdooring Git - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - John Menerick - Backdooring Git - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - John Menerick - Backdooring Git - Video.srt (subtitles)
• https://www.youtube.com/watch?v=lXf9nlTmnK4

Similar Presentations:

• DEF CON 22 (2014) / Open Source Fairy Dust
• ToorCon San Diego 17 (2015) / Backdooring Git
• BSidesLV 2017 / /.git/ing All Your Data