CSides

CSides Monthly Security Meetups

CSides Monthly Security Meetups provide an opportunity to listen to and share security research within the Canberra region. The meeting occurs normally on the 2nd Friday of every month. Each meetup consists of 1-2 talks of around 30 mins each. Talks start at 6pm and are followed by some socialising at a local pub.

New attendees are welcome, just come along! (There are no entry fees, and no tickets to book)

The talks at CSides are technical. CSides welcomes new and interesting speakers to present - the topic will be on a technical or security issue. As a speaker you can be an expert, a student, someone learning a new area or maybe a regular speaker on the conference circuit, but we also love to have new and occasional speakers. Please contact one of the organisers below if you are interested in speaking.

You are very welcome to propose running activites other than talks, such as hands-on workshops, an infosec quiz or something else relevant to our techie audience!

Location:: Canberra Rex Hotel
150 Northbourne Ave

Braddon ACT 2612
Time:: 6.00pm
Afterwards:: Swan & King Bar
Canberra Rex Hotel
Organisers:: Kylie McDevitt
Silvio Cesare

Future Dates:

24th Jan 2025: TBA
21st Feb 2025: TBA
14th Mar 2025: TBA
11th Apr 2025: TBA
9th May 2025: TBA
6th Jun 2025: TBA

Friday 22nd November 2024

Educational Purposes Only - How I accidentally stopped a massive school data breach without annoying the government (too much)

Over the last few years, the ACT Education Directorate has embarked on an ambitious identity and cloud migration project, moving tens of thousands of students into a digital education suite. Along the way, several security vulnerabilities and system misconfigurations have led to some funny, strange, or sometimes seriously scary results. Educational Purposes Only covers how Miles uncovered, experienced, and reported many of these throughout his time as a public school student, while highlighting how difficult it can be for security researchers to have their findings taken seriously by Australian governments still finding their cybersecurity wings.

Miles Greenwark

Miles Greenwark is a Canberra-based software engineer and an independent security researcher tackling large, interesting problems in the identity and security space in the private and public sectors. Since school, he has been fascinated by the security of IT systems, and how to bypass them in no uncertain terms. Miles hopes that by strengthening Australia's sovereign cybersecurity capability and incentivising researchers to do the work they love, we can cut off the disastrous tsunami of data breaches that Australia has been consistently experiencing for the last few years.

Exploiting a device at Pwn2Own 2024

In October 2024 the InfoSect team attended Pwn2Own in Cork Ireland. This talk will take a deep dive into the bug and exploit that was developed for one of the successful compromises.

Rami

Rami is a senior vulnerability researcher at InfoSect.