Skip to main content
CPEBuddy
DEF CON 32 - The Pwnie Awards

DEF CON 32 - The Pwnie Awards

Source: YouTube · DEFCONConference · published Oct 16, 2024 · 49:43

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The 2024 Pony Awards highlight both breakthroughs and failures in security research, celebrating innovation, community, and accountability through a mix of technical achievements and humorous tributes.

• Best Cryptographic Bug: Borin wins for "go fetch" attack exploiting data memory prefetchers on Apple processors 5:30
• Best Desktop Bug: 708 V1 wins for Chrome zero-day caused by improper audio rendering 9:54
• Best Mobile Bug Research: "Operation Triangulation" exploits hardware features in iPhones and Android devices 13:38
• Best Song Award: "Touch Some Grass" by UU Underground recognized for generating essential "Vibes" in security work 17:30
• Most Innovative Research: Edward and Tao win for bypassing Chrome’s sandbox via V8 exploitation 22:47
• Most Epic Fail: CrowdStrike awarded for mistakenly claiming a breach, underscoring accountability in security 25:09

The event underscores the value of security research, community collaboration, and learning from both successes and failures, culminating in a heartfelt tribute to Sophia Dantan’s legacy.

Sources:

  • 5:30 Borin’s cryptographic attack on Apple processors
  • 9:54 708 V1 Chrome zero-day vulnerability
  • 13:38 Operation Triangulation mobile hardware exploit
  • 17:30 "Touch Some Grass" song nominated for generating vital security vibes
  • 22:47 Edward and Tao’s V8 sandbox escape
  • [25:09]

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

[Applause] hello welcome to the 2024 Pony Awards I'm so happy to see all of you and I'm so happy none of you had to spend $5,000 to get in this time uh so um intro oh yeah sorry we have an intro real I forgot good morning everyone welcome to the 2024 Pony awards ceremony today we celebrate this year's outstanding achievements in security and some well not so outstanding ones all for the first time ever at Defcon we hope you enjoy the show without further Ado please welcome your host Ian Roose [Applause] all right you can tell we didn't do a dry run it'll be good though uh yeah so thank you so much for coming I'm so happy to see you all here uh we do like maybe a rough show of hands how many of you are already familiar with the pony Awards all right I should do that backwards how many of yo…