https://peertube.eqver.se/videos/watch/89f1c024-25f6-45ef-b9c5-7c65b1247e1c A DEF CON 31 talk on how private keys, certificates, and cryptographic secrets are often left inside firmware and software, where they can be extracted through binary analysis. The talk presents real-world examples from products by Netgear, Fortinet, and Dell. The researcher demonstrates techniques for finding keys in firmware, including analyzing PEM files, extracting certificates from obfuscated archives, and uncovering hidden cryptographic mechanisms. In the most critical case, Dell software was found to use a static AES key to connect to VMware vCenter. This key is shared across all customers, allowing attackers to decrypt credentials. The talk concludes with a discussion on improving key management, developer education, and eliminating the practice of storing secrets in binaries. Fri, 24 Jul 2026 11:29:40 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.eqver.se https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png https://peertube.eqver.se/videos/watch/89f1c024-25f6-45ef-b9c5-7c65b1247e1c All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.