Friday Hacks #264, October 11: On Man-in-the-Middle (MiTM) attacks and Machines as Customers
Posted on by Chua Jun Yu
Date/Time: Friday, October 11 at 7:00pm SGT
Venue: Seminar Room 3, COM1-02-12, NUS
Sign-up Link: Sign-up here
Food 🍕 and Drinks 🧋 will be served!
1) MiTM Magic: Outsmarting SSO and 2FA Defenses
In this talk, we explore how modern tech stacks that rely on SaaS applications behind Single Sign-On (SSO) service providers have become prime targets for attackers. We’ll dive into how even advanced two-factor authentication (2FA) methods remain vulnerable to sophisticated Man-in-the-Middle (MiTM) phishing attacks and examine the bypass techniques that are evolving. Bonus: we’ll put Google’s defenses to the test with a live demonstration!
Speaker Profile 🎙️
Timothy Tan is a penetration tester with 5 years of experience, and spent the last 4 years working on security teams within product companies. He has an interest in Red Teaming, where he explores offensive security techniques to uncover vulnerabilities. Outside of work, Timothy is a sports enthusiast, with a particular love for jumping out of airplanes.
2) Machines are Customers Too: The Next Frontier in Business Growth
In a rapidly evolving digital landscape, the rise of machine customers is set to revolutionise markets and customer engagement strategies. This talk explores the impact of smart devices and software assistants on global commerce, and unpacks the emerging market of machine customers—autonomous, nonhuman actors that make purchasing decisions independently.
Speaker Profile 🎙️
Katja Forbes is a leader in the digital industry who drives growth and innovation as an expert in CX, UX, data science, and product design. As global head of client experience at Standard Chartered Bank, she creates digital products that promote financial inclusion and a net-zero carbon future. Recognized as one of the top 50 Australian professionals, she also serves as an International Director and Vice President of IxDA.
đź‘‹ See you there!