BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: HandPwning: “Your Hand is your Passport. Verify me
 . Now let\n   me in!”\n   When: Saturday\, Aug 10\, 14:00 - 14:59 PDT\n 
   Where: LVCC West/Floor 1/Hall 2/HW2-08-03 - [1]Map\n\n   Description:\n\
 n   Biometrics applied to PACS (Physical Access Control Systems) has been\
 n   an hot-topic for a few years now. The spread of fingerprint or face\n 
   recognition based access control and time attendance systems among\n   c
 orporate\, industrial and military environments has surged. And with\n   i
 t\, also the number of potential attack vectors has increased. In this\n  
  talk\, after a brief overview of the state of art of available PACS\n   u
 tilizing biometrics to authenticate and authorize users\, we will\n   inve
 stigate one technology among others (usually perceived\n   less-invasive) 
 that has been widely used in some specific fields (e.g.\n   industrial pla
 nts\, airports\, food industry\, etc.): the handpunch\n   access control a
 nd time attendance systems. The handpunch PACS are\n   based on the hand-g
 eometry recognition. In this presentation we will\n   have a look how this
  tech works and\, in particular\, we will focus our\n   attention on revie
 wing some of existing handpunch devices: from a\n   physical security POV 
 until reversing the communication protocol.\n   Moreover\, during the pres
 entation will be demonstrated how to remotely\n   push a new super-admin u
 ser into it (i.e. persistent backdoor)\, how to\n   dump existing users cr
 edentials and will be also released an\n   opensource tool-suite: HandScan
  & HandPwner. Eventually\, thanks the\n   cooperation with Shodan’s crea
 tor\, it has been confirmed that more\n   than 1800 of these vulnerable de
 vices were found exposed on the\n   Internet. Finally\, we will conclude t
 he talk with practical and\n   actionable countermeasures to prevent these
  attacks and how to harden\n   these devices.\n\n   SpeakerBio:  Luca "CYB
 ERANTANI" Bongiorni\, Founder at We Hack In\n   Disguise (WHID)\n   Luca B
 ongiorni is working as Director of a CyberSecurity Lab and is\n   Founder 
 of WHID - We Hack In Disguise: a cybersecurity boutique\n   focused on R&D
  offensive hardware implants and IIoT Security. Luca is\n   also actively 
 involved in InfoSec where his main fields of research\n   are: Radio Netwo
 rks\, Hardware Hacking\, Internet of Things\, and\n   Physical Security. A
 t the moment\, he is focusing his researches on\n   bypassing biometric ac
 cess control systems\, IIoT Security & Forensics\,\n   Air-Gapped Environm
 ents and IoOT (Internet of Offensive Things).\n   '\n\n   1. #LVCCW_Level1
 _Hall2\n\n\n
DTEND:20240810T215900Z
DTSTART:20240810T210000Z
LOCATION:PSV - LVCC West/Floor 1/Hall 2/HW2-08-03
SUMMARY:HandPwning: “Your Hand is your Passport. Verify me. Now let me in
 !”
END:VEVENT
END:VCALENDAR