The Black Hat cybersecurity conference app has a cybersecurity problem
Look, we get it: cybersecurity is hard.
Still, you'd think the folks at the Black Hat cybersecurity conference in Las Vegas this week would have a better handle on things. And yet, according to noted French security researcher Baptiste Robert, they still managed to release a conference app that could put attendees' phones at risk.
The conference, which is now in its 22nd year, runs Aug. 3-8, and is ground zero for cybersecurity companies peddling their wares. It's followed by the DEF CON hacking conference, also in Las Vegas, which has a decidedly non-corporate ethos.
"The official Android app of #BHUSA is a joke," wrote Robert, who is in town for both Black Hat and DEF CON. "For an event of this size this is not serious @BlackHatEvents."
Robert, who goes by the handle Elliot Alderson on Twitter, laid bare what he says are the Android app's flaws in no uncertain terms.
"Thanks to the #BlackHat app, an attacker can: - Open a random url in the app browser - Pre dial a number - Create an email - Open Chrome to download a file."
An accompanying video shows the purported vulnerabilities in action.
Tweet may have been deleted
Now, importantly, Robert added that the Black Hat app alone is not enough for a theoretical attacker to ruin someone's day. Rather, it would be a part of a one-two punch involving tricking a victim into downloading another app of the attacker's making.
Tweet may have been deleted
And, before everyone at Black Hat abandons their phones in the desert, Robert assured those concerned that it's "not a high priority."
Even so, he wrote, "it's still a shame to have something like this in the app of the biggest security conference of the world."
Tweet may have been deleted
And perhaps that's the real takeaway: Even the pros can make mistakes.
We contacted Robert to ask just how easy this type of attack would be to pull off in the wild, and will update if we hear back.
That an app associated with a security conference has its own security issues isn't exactly reassuring. It also isn't the first time it's happened. In 2018, the RSA security conference app exposed attendees' personal data, forcing organizers to scramble to resolve the issue.
SEE ALSO:Dozens of Vegas slots went offline simultaneously during a hacker conventionWe reached out to Black Hat in an attempt to determine just what, if anything, it plans to do to resolve the issues highlighted by Robert. While we have not heard back as of press time, we assume the organizers of "the world's leading information security event" are totally on top of things.
Featured Video For You
Changing your office printer password may protect you against Russian hackers
-
NCT member Taeil leaves band over sexual offense allegations名山区法院 紧急出动不停歇 千里追车促执行最全游玩攻略!2月23青岛市市南区:新模式巧解“停车难”GPU Mining is Dead, Where are my Cheap GPUs?倒计时!中建筑港集团董家口化工管廊架工程完工在即青岛市城市冰雪灾害Ⅲ级应急响应凌晨启动绿色过中元 文明寄哀思US to oppose North Korean worker dispatch to occupied Ukrainian territory: State Dept.梁晓声|爱阅读的人 一生将是幸福的
- ·How 3D Game Rendering Works: Texturing
- ·“至圣孔子礼乐团”亮相青岛
- ·两年零九个月! 77岁老太绣出22米清明上河图
- ·中国表达:撬动中国电影未来的支点
- ·Best Labor Day headphones deals: Apple, Bose, Beats, and more on sale
- ·8.8米刺绣长卷亮相民俗博物馆
- ·新时代文明实践邻里同乐 青岛珠海路街道左邻右舍文化节闭幕
- ·创票房纪录!“青岛京剧唱响京城”赢得满堂彩
- ·NCT member Taeil leaves band over sexual offense allegations
- ·@铲屎官们,清远鸡猫粮来了,你会给猫主子们试试吗?
- ·首次饰演武侠片中的历史人物 青岛演员文俊珽用“尊重历史”刻画角色
- ·青岛市市南区:新模式巧解“停车难”
- ·Wordle today: The answer and hints for August 29
- ·廉江:科技创新,引领农业产业高质量腾飞
- ·水墨红岛活力高新 青岛高新区举办地书文化交流活动
- ·创新争先锋丨青岛移动:走“实”出“新”,为社会治理智造强市增添新动能
- ·The Analog Embrace: How Some Experiences Are Surviving the Digital Age
- ·墨染国韵听琴咏诗 市博物馆开启“文人新年”
- ·浓情端午!中建五局青岛核心区项目启动安全生产月暨“超英杯”劳动竞赛
- ·全链条、数智化、平台式农服新模式助农“大丰收”
- ·How to Backup Your Gmail Account
- ·38年前因贪玩失去左手食指 盼望再造 38年后雅安仁康医院施妙手 梦想实现
- ·8.8米刺绣长卷亮相民俗博物馆
- ·CCOR帆船赛4月27日上演
- ·优化广东优质农产品产销资源对接!“农友圈”又有新动作
- ·琼州海峡拥堵!海南农产品价格暴跌
- ·This shark lives for centuries. Scientists discover how it resists aging.
- ·关注骨关节健康 切实服务广大病患
- ·年画里的“神仙” 幸福生活的美好祈愿
- ·绿色过中元 文明寄哀思
- ·Cheap heat
- ·中建交通山东公司“建证科技”系列培训开课
- ·奇石书画义捐拍卖征集作品 善款用于救助早产儿
- ·闈掑矝楂樻柊鍖哄皬闆ㄦ枃鍖栬壓鏈暀鑲叉垚鏋滃睍绮惧僵涓婃紨
- ·Amazon Android Days sale 2024: Save on unlocked phones, tablets, and more
- ·梁晓声|爱阅读的人 一生将是幸福的