10-Year-Old Presents App Exploit at DefCon

DefCon, the long-running, annual hacker conference in Las Vegas, lowered its age restrictions this year for the inaugural “DefCon Kids Village.”

Roughly 60 young hacker-wannabes aged eight to 16 were mentored in the arts of “white hat” hacking, or hacking in a responsible manner, this past weekend. They listened to talks by Black Hat and DefCon founder Jeff Moss, a.k.a. “The Dark Tangent,” Steven Levy, a writer for Wired, and Johnny Long, best known for using Google Search to discover security loopholes. The kids were taught how to open Master locks, Google hacking, social engineering, coding in Scratch, and more.

CyFi, a ten-year-old Girl Scout and DefCon Kids co-founder from California, presented her findings on an exploit in an unnamed social game. She began tinkering with the code after growing impatient with the game’s slow place, and discovered that by disconnecting her phone from Wi-Fi and re-setting the clock forward in small increments, she could fast-forward many of the actions in the game, “a new class of vulnerabilities” she dubbed “TimeTraveler.”

Today’s 10 year olds are > yesterday’s hackers.