BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: You've Got Mail (That Was Meant For No One)\n   Tags
 : DEF CON Official Talk | Tool đź› \n   When: Friday\, Aug 7\, 17:30 - 17:
 59 PDT\n   Where: LVCCW Level 1 Hall 3 904 (Main Track 4) and DCTV-4 - [1]
 Map\n\n   Description:\n\n   In 2020\, I registered a domain on a whim\, m
 ostly because I thought it\n   would be hilarious for email\, and then for
 got about it. Then a city\n   government faxed me their internal documents
 . Then an organization\n   started sending me Cisco UCM alerts. Then 363\,
 000 emails arrived in\n   sixteen months. I never sent a single packet of 
 attack traffic. The\n   vulnerability is an assumption\, that a domain nob
 ody owns is safe to\n   hardcode. Developers at enterprise software vendor
 s\, government\n   agencies\, and companies made that assumption. I regist
 ered the domains\n   and the mail flowed in. This talk covers six years of
  passive email\n   interception across more than 20 domains\, the tooling 
 built to\n   systematically map this attack surface across hundreds of TLD
 s\, and\n   what 400\,000 misdirected emails reveal about how production m
 ail\n   infrastructure actually fails. No exploits. No credentials. Just a
  $11\n   domain registration.\n\n   Sheward\, M. "Deleteduser.com -- a $15
  PII Magnet." Medium\, April 2026.\n   https://mike-sheward.medium.com/del
 eteduser-com-a-15-pii-magnet-c4396eb21061\n\n   Krebs\, B. "They Told You 
 Not To Reply." Washington Post Security Fix\,\n   March 2008.\n   https://
 web.archive.org/web/20200905092128/http://voices.washingtonpost.com/securi
 tyfix/2008/03/they_told_you_not_to_reply.html\n\n   Krebs\, B. “Chipotle
  Serves Up Chips\, Guac & HR Email.” Krebs on\n   Security\, 16 Nov. 201
 5\,\n   https://krebsonsecurity.com/2015/11/chipotle-serves-up-chips-guac-
 hr-email/\n\n   Fitzpatrick\, J. “Sears-Kmart MyGofer\,” Internet Arch
 ive\, archived\n   May 1\, 2014\,\n   https://web.archive.org/web/20140501
 153309/http://sears-kmart-mygofer.com/\n\n   Kim\, P. and Gee\, G. "Doppel
 ganger Domains." Godai Group\, 2011.\n   https://godaigroup.net/wp-content
 /uploads/doppelganger/Doppelganger.Domains.pdf\n\n   Szurdi\, J. and Chris
 tin\, N. "Email Typosquatting." IMC 2017. ACM.\n   https://dl.acm.org/doi/
 10.1145/3131365.3131399\n\n   Internet Assigned Numbers Authority. "RDAP B
 ootstrap File for Domain\n   Name Space." https://data.iana.org/rdap/dns.j
 son (RFC 7484)\n\n   Bradner\, S.\, "RFC 2606: Reserved Top Level DNS Name
 s"\, IETF\, 1999\n   https://www.rfc-editor.org/rfc/rfc2606\n\n   Klensin\
 , J.\, "Simple Mail Transfer Protocol"\, RFC 5321\, IETF\, October\n   200
 8. https://www.rfc-editor.org/rfc/rfc5321\n\n   DomainTools. "TLD Registra
 tion Count Statistics."\n   https://research.domaintools.com/statistics/tl
 d-counts/\n\n   SpeakerBio:  Cøry "interpünkt" Solovewicz\n\n   Cory Sol
 ovewicz (aka interpĂĽnkt) is a security consultant\n   specializing in web
  and mobile application testing. His path into\n   security started early\
 , experimenting with tools like Sub7 and\n   learning how systems could be
  pushed beyond their intended use. After\n   a career in full-stack develo
 pment\, he transitioned into security to\n   focus on breaking and improvi
 ng real-world systems. He brings a\n   builder’s perspective to his work
 \, shaped by years of coding\, late\n   nights in hackerspaces\, and a cur
 iosity for how things fail.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\n\n\n
DTEND:20260808T005900Z
DTSTART:20260808T003000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 904 (Main Track 4) and DCTV-4
SUMMARY:You've Got Mail (That Was Meant For No One)
END:VEVENT
END:VCALENDAR