Welcome Payments Village to DEF CON Safe Mode!

[Dark Tangent]

https://paymentvillage.org/

Payment technologies are an integral part of our lives, yet few of us know much about them. Have you ever wanted to learn how payments work? Do you know how criminals bypass security mechanisms on Point of Sales terminals, ATM’s and digital wallets?

Payment technologies are an integral part of our lives, yet few of us know much about them. Have you ever wanted to learn how payments work? Do you know how criminals bypass security mechanisms on Point of Sales terminals, ATM’s and digital wallets? Come to the Payment Village and learn about the history of payments. We’ll teach you how hackers gain access to banking endpoints, bypass fraud detection mechanisms, and ultimately, grab the money!

In a first of its kind, the Payment village combines elements of art and science to make learning about security an interactive experience. We have self-guided displays which teach the fundamentals of payment technology. If you’d prefer to speak to a human, one of our organizers is available to answer any questions that you may have.

Once a day the village hosts a workshop, where we’ll introduce you to the basic concepts of payments. Next, we’ll discuss security issues of legacy technology, and how these vulnerabilities have been inherited in modern technology. If you are up for the challenge, you can practice identifying vulnerabilities using your own bank cards!

Time	Speaker	Title
Friday, August 7
10.00AM GMT-7	Leigh-Anne Galloway	Payment Village intro
10.30AM GMT-7	Leigh-Anne Galloway, Timur Yunusov	Finding vulnerabilities in contactless payments, part 1
11.00AM GMT-7	Leigh-Anne Galloway, Timur Yunusov	Finding vulnerabilities in contactless payments, part 2
11.30AM GMT-7	TBA	TBA
Saturday, August 8
10.00AM GMT-7	Steven Murdoch, Principal Research Fellow	TBA
10.30AM GMT-7	TBA	TBA
11.00AM GMT-7	Timur Yunusov	Bug bounty in banks. Shall we even try? part 1
11.30AM GMT-7	Timur Yunusov	Bug bounty in banks. Shall we even try? part 2
Sunday, August 9
10.00AM GMT-7	Sean Neary, Featurespace	TBA
10.30AM GMT-7	TBA	TBA
11.00AM GMT-7	TBA	TBA
11.30AM GMT-7	TBA	TBA

For an up to date schedule, please check https://www.paymentvillage.org/schedule

[payv_la]

Hi everyone,

We are in the process of finalizing our schedule. Please keep an eye on the website schedule I'm really excited to say we have some amazing speakers lined up for you. Dr Steven Murdoch from UCL who wrote papers such as "CHIP & PIN is broken" and many more papers describing the weaknesses in modern payments. He's a legend for many. He also maintains a website that decodes TLV tags https://emvlab.org/tlvutils/. If this all sounds like gibberish, he'll be explaining what they are and how to use them in his talk.

Uri Rivner from BioCatch and previously RSA is going to talk to us about account opening fraud. I'm particularly excited to hear how synthetic IDs are created and used. This is a significant problem in the US.

Tim Yunusov from Cyber R&D Lab will be talking about his experience in bug bounty for payments. He'll be giving us practical tips on how you can learn more about payments whilst making money at the same time! Win, win in my book.

Menaka Basker from Accenture will be talking about Architecting Modern Payment Gateways in .Net core with Azure. She's going to give us advice on how to do this securely.

There are more speakers to be announced. The website will be updated with additional resources and we will be providing exercises via discord.

Finally, we've got stickers! rainbow metallic vinyl stickers and regular stickers. If you want some you need to participate in discord and ping one of the village staff. We will mail them out to you at no cost.