First talk

Thin Client? Thin Crypto.

Speaker

Darren (r3n5k1)

Synopsis

Every vendor that dominates the thin-client market, HP, Dell, and IGEL, shipped full-disk encryption that can be defeated, and as of early 2026 all three at once. These are not the attacks the word TPM usually conjures: no bus-sniffing, no glitching, no cryptanalysis, mostly reading bash scripts and a USB stick. Five bypasses across the three vendors, all turning on the same flaw: the TPM measured the platform but not the code that actually controls the boot. The talk discusses the bugs, the tooling, and what broken FDE means for the banks, hospitals, and governments that run thin clients at scale.

Second talk

???

Speaker

You?

Future talks

We’re still trying to build up a backlog of talks. If you’ve implemented a C2 on a smartwatch, want to walk us through the highlights of a CTF, or have some insight into the breakdown of security cooperation globally, we’re interested!

Drop a message to talks@dc4420.org with a title, synopsis and rough length, and don’t worry if you haven’t presented before.

We’re also happy to host other activities, like lockpicking, or demoing a new piece of kit, just let us know.