BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Pwning Rekordbox: Unauthenticated filesystem access 
 in the\n   world's most popular DJ software\n   Tags: DEF CON Official Tal
 k | Exploit 🪲\n   When: Friday\, Aug 7\, 15:00 - 15:30 PDT\n   Where: L
 VCCW Level 1 Hall 3 904 (Main Track 4) and DCTV-4 - [1]Map\n\n   Descripti
 on:\n\n   First public disclosure. rekordbox\, the world's most popular DJ
 \n   software\, silently runs an NFS server whenever you play over the\n  
  network\, and it shares your whole hard drive\, not just your music. Any\
 n   device on the same subnet can quietly read your SSH keys\, passwords\,
 \n   and files. It works the same on Windows\, macOS\, iOS\, and Android. 
 The\n   catch: the obvious fix would break 20 years of hardware compatibil
 ity.\n\n   This talk breaks down the PRO DJ LINK protocol\, shows how any 
 device\n   on the wire talks its way into full filesystem access\, and exp
 lains\n   why the fix is stranger than it looks.\n\n     * CWE-284: Improp
 er Access Control:\n       https://cwe.mitre.org/data/definitions/284.html
 \n\n     * Deep Symmetry\, crate-digger (Java\, Pro DJ Link NFS client):\n
        https://github.com/Deep-Symmetry/crate-digger\n\n     * EvanPurkhis
 er\, prolink-connect (TypeScript\, Pro DJ Link library):\n       https://g
 ithub.com/EvanPurkhiser/prolink-connect\n\n     * Deep Symmetry\, DJ Link 
 Packet Analysis:\n       https://djl-analysis.deepsymmetry.org/\n\n     * 
 CVSS v3.1 Calculator: https://www.first.org/cvss/calculator/3.1\n\n     * 
 JPCERT/CC Vulnerability Coordination:\n       https://www.jpcert.or.jp/eng
 lish/vh/report.html\n\n     * Digital DJ Tips\, Global DJ Census / AlphaTh
 eta market share:\n       https://www.digitaldjtips.com/pioneer-alphatheta
 -industry-standard/\n\n   SpeakerBio:  Christopher "TRIODE" Le\n\n   TRIOD
 E is an engineer\, semi-professional DJ\, and livestreamer who has\n   per
 formed at the last four Defcons. He discovered this vulnerability\n   whil
 e reverse-engineering the Pro DJ Link protocol to build custom\n   perform
 ance tooling. His background spans systems programming and\n   network pro
 tocol analysis. This is his first Defcon talk submission.\n\n   '\n\n   1.
  #LVCCW_Level1_Hall3\n\n\n
DTEND:20260807T223000Z
DTSTART:20260807T220000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 904 (Main Track 4) and DCTV-4
SUMMARY:Pwning Rekordbox: Unauthenticated filesystem access in the world's 
 most popular DJ software
END:VEVENT
END:VCALENDAR