DEF CON 32 - Breaking Secure Web Gateways for Fun and Profit -Vivek Ramachandran, Jeswin Mathai

[@chucky29949]

yeah seems like getting info through a proxy where they just do file/packet analysis would be relatively easy, as he explains just mask the data and re-assemble it in the browser-pc lol "we will release an open-source attack toolkit for researchers and red teams to test these attacks on their security solutions and better understand their security exposure." thats pretty cool

[@07markus]

that`s why the answer to this is "Multilayer security", not only traffic to and from browser but also endpoint itself.

[@saultube44]

People code like maniacs, generate lots of bugs, screws up the hierarchy of data and code, or just padding, unfinish code structures, etc. A lot Programs/Apps these days are a big messy spaghetti that nobody wants to debug with patient, way too many errors to fix. And nobody talks about this

[@PropheticShadeZ]

They dont want to pay for no change to their product Security is only a concern when something breaks

[@saultube44]

@@PropheticShadeZ Yes, the bottom line first; what a toxic culture

[@effsixteenblock50]

The SWG lets all these attacks through but what about the client browser itself? Surely some of them could be detected?

[@bhnjhbjhbkgkkvhnhmbm]

And as soon as the assembled malicious file is saved, the EDR quarantines it

[@batangx659]

I think you are missing the point. There are a lot of things that it can carry ;)

[@Mr.Viking]

Great talk 👍

[@ImKidriani]

❤❤

[@5m00v]

When he says the code is open source, is he just saying the browser.security page is public? Lol

[@the_sandman00]

This is kind of industry changing research. 🥸

[@LostInTheRush]

What are you talking about? People have been doing this for 10+ years.