1 00:00:05,850 --> 00:00:08,430 Hello and welcome to the Payment Village. 2 00:00:08,430 --> 00:00:12,550 My name is Leanne Galloway and I am the Payment Village Lead. 3 00:00:12,550 --> 00:00:24,450 We set up the Payment Village because we felt like so many of us have an interaction with payment technologies every day, yet most of us don't know how they work. 4 00:00:24,550 --> 00:00:28,750 And it seems from the outside that the barriers for entry are particularly high. 5 00:00:28,750 --> 00:00:32,250 So we set up this village as a way to change that. 6 00:00:32,250 --> 00:00:38,550 We've provided a range of content including talks and lab exercises. 7 00:00:38,930 --> 00:00:46,110 If you need to find any information, please first of all start with our website which is thepaymentvillage.org. 8 00:00:46,110 --> 00:00:56,750 You'll find the schedule, information about how to access Discord, how to register for Discord, and how to access our Twitch and YouTube channels. 9 00:00:56,750 --> 00:01:03,610 We have a number of talks over the three days and all of those are going to be broadcast to Twitch and YouTube. 10 00:01:04,010 --> 00:01:13,830 All of the information for that will be provided in Discord and following each talk we will have a Q&A session which will take place on Discord. 11 00:01:13,830 --> 00:01:20,930 This will be moderated by myself and by Tim who is one of the Payment Village staff. 12 00:01:20,930 --> 00:01:29,010 So after this talk we have a talk by Dr Stephen Murdoch from UCL and he's going to be talking to us about TLV. 13 00:01:29,010 --> 00:01:41,090 So when we look at the communication between a card and a terminal for EMV, the data is sent in units called Application Protocol Data Units or APDUs. 14 00:01:41,090 --> 00:01:47,810 Now within each message that's sent, the data is sent in a structure called TLV or Tag Length and Value. 15 00:01:47,850 --> 00:01:56,390 So he's going to be talking to us about why this is important, how we can understand it, and how we can decode it. 16 00:01:56,390 --> 00:02:07,070 So following that talk we have a talk from Tim Unisoft and he's going to be talking to us about how you can get started with bug bounty for payments. 17 00:02:07,070 --> 00:02:14,930 I think what's particularly interesting about this talk is he's going to talk about some of the challenges that are specific to this area. 18 00:02:14,930 --> 00:02:25,410 On Saturday we have a talk from Yuri Rivner of BioCatch and he's going to be discussing identity data as a commodity. 19 00:02:25,690 --> 00:02:33,670 So he's going to be talking about all sorts of interesting things like synthetic IDs which are a particular problem in the US. 20 00:02:33,770 --> 00:02:46,350 So this might be where a fraudster creates an ID from constructed data, some of that might be real, so for example using the social security numbers of deceased people or children. 21 00:02:46,470 --> 00:02:50,550 So I'm particularly interested in seeing this talk and what he has to say about that. 22 00:02:50,550 --> 00:02:56,790 Then we have a talk by Arkady Litvinenko and he's going to be talking about online banking security. 23 00:02:57,010 --> 00:03:05,070 Specifically he's going to focus on the difference between online banking security assessments and traditional application assessments. 24 00:03:05,150 --> 00:03:14,570 So we'll be looking at some specific issues that are associated with banking security, some of which will be focusing around the actual logic of the application. 25 00:03:14,570 --> 00:03:23,270 On Sunday we have a talk by Alexey Stenikov and he's going to be talking about the security or lack of security in point-of-sales terminals. 26 00:03:23,730 --> 00:03:33,930 Alexey's a hardware reverser so he'll be talking about the security mechanisms that we can find commonly within terminals and how those can be bypassed. 27 00:03:33,930 --> 00:03:45,270 Following Alexey we have a talk by Minarka and she's going to be talking about how we can architect modern payment gateways and do this in a secure manner. 28 00:03:45,270 --> 00:03:50,890 In addition to the talks we have a number of lab exercises which are available on our website. 29 00:03:51,030 --> 00:03:54,530 We'll be providing support for those in Discord. 30 00:03:54,570 --> 00:04:00,470 So under the PayLabs text you'll be able to post your questions and we'll get back to you. 31 00:04:01,690 --> 00:04:12,270 In addition to all of these things we do have a number of stickers available so if you're interested in that please ping myself or Tim or just ping in the general chat. 32 00:04:12,450 --> 00:04:18,970 And please tag us online on Twitter using the tag atpaymentvillage. 33 00:04:18,970 --> 00:04:20,990 And finally have an amazing time. 34 00:04:20,990 --> 00:04:26,770 I hope that this provides you with a great introduction into payments and you'll be keen to come back next year.