BSides Canberra 2026

Waffling Around WAFs
2026-09-26 , Main Track

Collecting data from the game of Pokemon Go involves bulk creation of game accounts. In order to combat bots and other abusers of the game, cloud WAFs are used to prevent mass account sign-ups. This talk outlines some cheap techniques that can be used to bypass anti-bot measures employed by Imperva and other similar security platforms.

Aeri is a Linux sysadmin who these days [unfortunately] works in cyber security policy and auditing. In between making biltong and hiking around Namadgi, she likes to level the playing field in Pokemon Go by developing tools to annoy spoofers in the game.