BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Bird Hunting Season: The Final Flight\n   Tags: DEF 
 CON Official Talk | Demo 💻 | Tool 🛠 | Exploit 🪲\n   When: Saturda
 y\, Aug 8\, 14:30 - 15:30 PDT\n   Where: LVCCW Level 1 Hall 3 1007 (Main T
 rack 2) and DCTV-2 - [1]Map\n\n   Description:\n\n   Surveillance tech oft
 en operates as a "black box" burdened by systemic\n   technical debt. This
  session is the capstone of "Bird Hunting Season\,"\n   an independent\, s
 elf-funded teardown and research of the Flock Safety\n   ecosystem. What b
 egan with an eBay purchase evolved into 51+\n   vulnerabilities across Rav
 en gunshot detectors\, Falcon LPRs\, and\n   Picard/Bravo compute boxes.\n
 \n   I detail the project's lifecycle: from hardware root via UART and\n  
  unauthenticated EDL mode to protocol-layer failures. I demonstrate how\n 
   broken mTLS\, hardcoded Java Keystore secrets\, and debugging\n   compil
 ations led to system level escalation. The narrative reaches its\n   clima
 x with an an explanation of how I found 63 live production camera\n   feed
 s exposed without authentication to the public internet.\n\n   I also form
 alize the "Flea Market Supply Chain" attack\, detailing how\n   direct com
 munication with upstream SoM manufacturers can bypass months\n   of revers
 e engineering.\n\n   The talk culminates in the release of BirdShot: a 12 
 module testing\n   framework that incorporates the exploits I've discovere
 d as well as a\n   TensorFlow harness (BirdEye) for hijacking proprietary 
 ML models. I\n   demonstrate how BirdShot automates the journey from a thr
 ee button\n   physical hotspot trigger to a persistent root shell\, provin
 g that when\n   the birds are watching you\, you can watch them back.\n\n 
   [1] Gaines\, J. (2026). Examining the Security Posture of an Anti-Crime\
 n   Ecosystem. Zenodo. DOI: 10.5281/zenodo.17584876\n\n   [2] Gaines\, J. 
 (2025-2026). Bird Hunting Season: Anti-Crime Ecosystem\n   Research Reposi
 tory. GitHub.\n   https://github.com/GainSec/anti-crime-ecosystem-research
 \n\n   [3] MITRE/CWE. ES2510-692960d9: Improper Entitlement/Authorization 
 for\n   Protected Artifact Access. (Submission Pending/Accepted).\n\n   [4
 ] https://github.com/justcallmekoko/ESP32Marauder/wiki/Flock-Sniff\n\n   [
 5]\n   https://github.com/justcallmekoko/ESP32Marauder/wiki/flock-wardrive
 \n\n   [6] https://github.com/colonelpanichacks/flock-you\n\n   SpeakerBio
 :  Jon "GainSec" Gaines\n\n   Jon "GainSec" Gaines is a offensive security
  researcher\, leader and\n   "lifelong hacker" with over a decade of exper
 ience hacking all types\n   of technologies for international organization
 s. By day\, he serves as\n   a Senior Security Engineer at Anduril\, where
  he hacks next generation\n   defense systems\, following a career of Prin
 cipal and Managing roles at\n   security firms like NetSPI.\n\n   Jon has 
 independently disclosed over 50 CVEs spanning critical\n   infrastructure\
 , hardware\, web applications\, software\, mobile\n   applications\, and e
 mbedded systems. His technical research has been\n   featured in Phrack Ma
 gazine and he maintains a diverse output of\n   open-source projects\, ran
 ging from automated PCB hardware hacking\n   tools to control in depth off
 ensive agent governance frameworks.\n   Beyond the lab\, he also serves as
  an adjunct instructor at Herkimer\n   College\, where he is dedicated to 
 mentoring the next generation of\n   offensive researchers.\n\n   Jon rema
 ins committed to lifting the community through technical\n   transparency\
 , tooling\, and the meticulous deconstruction of insecure\n   infrastructu
 re.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\n\n\n
DTEND:20260808T223000Z
DTSTART:20260808T213000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 1007 (Main Track 2) and DCTV-
 2
SUMMARY:Bird Hunting Season: The Final Flight
END:VEVENT
END:VCALENDAR