I got word back on a few CFP’s I sent out for 2008 conferences.  I’m very happy to be speaking at the ShmooCon 2008 conference (my favorite conference every year) as well as the RSA 2008 conference.

At ShmooCon, my session is titled “PEAP: Pwned Extensible Authentication Protocol”, where I’ll be talking about the attack surface of EAP methods, examining attacks against LEAP, EAP-MD5, EAP-FAST, PEAP and TTLS.  ShmooCon 2008 is in the Wardman Park Marriott in Washington, DC on February 15-17.  This is an awesome con, that is well-run, and I always learn new stuff and go home with an awesome motivation level, all ready to learn/hack/discover new stuff.  You can snag my ShmooCon CFP submission for more detail. 

At RSA, my session is titled “High Speed Risks in 802.11n Networks”, where I’ll be talking about vulnerabilities that are inherent in IEEE 802.11n networks.  RSA2008 is held at the Moscone Center in San Francisco CA, starting on April 7th and 8th for pre-conference sessions, finishing up on April 9th through 11th for speaker tracks and keynote sessions.  I’ll be speaking on April 10th at 8:00 am (yeah, this is the same day/time I got last year too; I get the pre-coffee crew, which is OK with me, since I get to set the bar for the rest of the day’s speakers).

RSA2008 is a MEGA-CONFERENCE.  At RSA2007, I stood slack-jawed at the marketing marvel as soon as I walked in the door.  There is always fun bling to pick up at these cons as well.  You can snag my RSA CFP submission for more detail.

Drop me a note if you plan on attending either session; I’m thinking of making up some WillHackForSushi t-shirts to hand out as well!

-Josh