Reflections from DEF CON 33

Introduction

DEF CON has always held a special place in the world of cybersecurity. It’s not just a conference, it’s a global gathering of curious minds, researchers, hackers, and practitioners, all united by a shared passion for pushing boundaries and advancing security. This year, I had the privilege of attending and speaking at DEF CON 33, and the experience was nothing short of unforgettable.

DEF CON 33
That feeling when you finally step into DEF CON,
the energy, the buzz, and the anticipation of what’s ahead.

Speaking at DEF CON

I was honored to present my talk, “Examining Access Control Vulnerabilities in GraphQL – A Feeld Case Study.” The talk focused on uncovering access control flaws within GraphQL APIs and how these vulnerabilities can be exploited in real-world applications.

Sharing this research at DEF CON was particularly rewarding because of the engaged audience. The conversations that followed reinforced how critical API security has become in today’s landscape and how the community can work together to address these challenges.

DEF CON 33 presentation
Truly honored to take the stage at DEF CON 33 and share my research with such an incredible community.

The DEF CON Experience

The moment you step into DEF CON, you immediately feel the scale and energy of the event. With thousands of attendees from all corners of the world, the atmosphere is electric. What makes DEF CON truly unique is the blend of formal presentations, hands-on activities, and a creative, open environment that welcomes everyone, from seasoned professionals to first-time attendees.

Unlike any other conference, DEF CON thrives on community spirit. It’s where the latest research meets curiosity, creativity, and collaboration.

Conversations & Connections

One of the highlights for me was reconnecting with old friends while also meeting new people. The hallway conversations, spontaneous discussions, and shared moments outside the sessions often became just as valuable as the talks themselves.

I even had the chance to catch up with an old friend, a reminder of how small and interconnected our industry truly is. These moments made the experience more personal and meaningful.

Community & Collaboration

The Mobile Hacking Community (MHC) track was a standout part of DEF CON 33. The work put in by the organizers created a space where mobile security researchers and practitioners could come together to share knowledge and collaborate.

Events like this are a reminder of how vital community-driven initiatives are to the cybersecurity field. DEF CON doesn’t just showcase cutting-edge research, it strengthens bonds, encourages collaboration, and helps drive the industry forward.

Mobile Hacking Community at DEF CON 33
The Mobile Hacking Community village was buzzing with energy, amazing talks, hands-on sessions, and some of the best conversations of the weekend.

Highlights Beyond the Stage

Beyond my own session, I attended several talks, villages, and workshops that left me inspired. The breadth of topics, from hardware hacking to advanced exploit research highlighted the diversity of the community.

AppSec Village at DEF CON 33
AppSec Village: Presentation on gaining root access to car systems over WiFi (CarPlay exploitation). Truly eye-opening research into automotive security.
Car Hacking Village at DEF CON 33
The Car Hacking village – where hackers get hands-on access to real vehicles.
Maritime Hacking Village at DEF CON 33
The Maritime Hacking village – highlighting the importance of securing autonomous and IoT-driven systems in critical environments.

Each village and community provided unique insights and takeaways that will influence my own work moving forward.

Personal Reflections

DEF CON 33 reminded me of why I love being part of this field. It’s not just about presenting research or attending sessions; it’s about the exchange of ideas, the collaborations formed, and the friendships strengthened.

The event reinforced the importance of staying curious, staying open to new perspectives, and continuing to share knowledge for the collective good of the community.

Running Group at DEF CON 33
One of my favorite memories is joining the DEF CON running group. A perfect reminder that community extends beyond the talks and into shared passions and connections.

Live from DEF CON

A big shoutout to Marco Figueroa from 0DIN for live-streaming from La Villa each day of DEF CON. His efforts gave the wider community a chance to experience the event in real time, with recordings available on his X channel and YouTube.

One highlight was on “Day 6,” where a member of the BT6 team demoed an autonomous attack system called FANG. The live demo (starting at 2:30:55) showed how inserting a simple USB cable could trigger a prompt and gain root access within seconds. The exploit was being generated autonomously by the system, truly a glimpse into the future of offensive security.

0DIN live at DEF CON 33
Marco Figueroa from 0DIN live-streaming DEF CON from La Villa

Gratitude

A massive thank you to Grigoris Papoutsis, Kostas Mokos, Jun May Cheng, and Ricardo Loura from the Mobile Hacking Community (MHC) team for making this possible and for putting together such a fantastic track.

I’m also grateful to the Mobile Hacking Community and DEF CON for creating an environment where we can connect, share, and grow together.

Mobile Hacking Community crew at DEF CON 33
Grateful to the Mobile Hacking Community organizers for their hard work in bringing us all together.

Looking Ahead

The experience at DEF CON 33 has left me even more motivated to continue exploring new areas of security research and contributing back to the community. I’m already looking forward to DEF CON 34 and the opportunities it will bring to learn, collaborate, and share.

Conclusion

DEF CON 33 was an incredible journey filled with insights, collaboration, and community. Speaking, connecting with peers, and learning from others made it an event I’ll always remember.

To everyone who was part of DEF CON 33. thank you. Until next year!

About Post Author