BSides Toronto 2020

From hardware to zero-day
2020-10-17, 10:00–10:40, Twitch

IoT devices are changing the world in both good and bad ways. It is exciting and fascinating to see how technology keeps improving our lives, but it is also worth considering the security impact and the vulnerabilities being introduced in our lives by such connected devices.

This talk will explore the risks associated with IoT devices by sharing a personal research performed on a cloud security camera. This talk will retrace all the steps that have been performed to go from hardware analysis and flash dumping, to zero-day discovery and exploitation.

Pietro Oliva is a security researcher holding a degree in IT security from Università degli Studi di Milano.
He has several years of professional experience in the security field, where he has worked with many global leading companies in a variety of service offerings which mainly include penetration testing, red teaming, and security/vulnerability research.
His main areas of interests involve vulnerability research, reverse engineering, and exploit development. Some of his personal research has been made public through responsible vulnerability disclosures.