DEF CON 32 - Why are you still using my server for your internet access - Thomas Boejstrup Johansen

Pawning countries at top level domain by just buying one specific domain name ‘wpad.tld’, come hear about this more the 25+ years old issue and the research from running eight different wpad.tld domains for more than one year that turn into more the 1+ billion DNS request and more then 600+GB of Apache log data with leaked information from the clients.
This is the story about how easy it is to just buying one domain and then many hundreds of thousands of Internet clients will get auto pwned without knowing it and start sending traffic to this man-in-the-middle setup there is bypassing encryption and can change content with the ability to get the clients to download harmful content and execute it.
The talk will explain the technical behind this issue and showcase why and how clients will be trick into this Man-in-the-middle trap.

[@missingsig]

we are so screwed. since the City of Worms.. and beyond

[@ZedaZ80]

This is pretty funny, great work! It's wild this still works

[@ZedaZ80]

Buddy, I cackled out loud about the crowd strike thing. A true hero!

[@storm4246]

Great talk!

[@NinaMcmunn]

I thought the audio would be better at a computer nerd convention

[@Algoinde]

Sadly audio is provided by the venue. Or so I've heard. And the venue audio is usually the worst and the most rundown thing you can have. I'm a bit surprised defcon doesn't just run their own audio at the venue... could be achieved by using digital runs and one flight case worth of stuff nowadays.

[@zwapz]

Nerds type, radio dj's talk. ;)

[@NinaMcmunn]

@@zwapz this is a talk 👀

[@NinaMcmunn]

@@Algoinde that makes a lot of sense, if they streamed the event the issues would probably solve themselves with the stream implementation and would actually be worthwhile to do.