Bugs Aren't Random: A Unified Perspective on Building and Breaking

Presented at DEF CON China Beta (2018), May 12, 2018, 10 a.m. (60 minutes)

It can take looking at a few thousand bugs, but eventually hacking feels like getting really good at telling the same joke, over and over again. It's OK, the computer still laughs, but why isn't software engineering delivering the reliability and predictability of other engineering disciplines? That's a question with an answer. It's not an easy answer, like "devs are lazy" or "tools are bad". Who are hackers to complain about either? But it's an answer I intend to explore, in true hacker fashion, by seeing traditional boundaries as mostly false, but useful for identifying what to fuzz. Why should we separate the humans that write bugs, from the tools the tools they use? Humans write tools. Why these tools in particular? Why would we separate forward and reverse engineering, dev from test? Wait, are those the same thing? Does any other field isolate the creator from the consequences of their creation? Is this going to be just some fluffy exploratory keynote? No, this is way too long a flight for that. We're going to talk about where I think software and hardware architecture is going to go, with actual code you're welcome to try to break. I'll tell you exactly where to look. Should be fun.

Presenters:

  • Dan Kaminsky - Chief Scientist, White Ops
    Dan Kaminsky Dan Kaminsky has been hacking professionally for almost twenty years. A well known speaker at conferences such as Black Hat and Defcon, Dan is the Co-Founder and Chief Scientist of White Ops, and is one of seven Recovery Key Shareholders for the Internet's Domain Name System. Dan's research spans a wide variety of topics, but he gets the coolest emails from kids who use his iPhone app to correct their color blindness. It's called DanKam, because of course it is, and he's telling you this so he has to get it back on the iPhone store already.

Links:

Similar Presentations: