- Dołączono
- 4 Lis 2017
Remember that the puzzle events are only part of what DEFCON is about.I've seen mixed opinions about DEF CON. I've seen in this thread it being described as nothing much and really intermediate skillsets, and then out in the general public it's the grand thing of awesomeness.
Like I said, anything in the public space is pretty well neutered
Also I was wrong about the CTF.
Now, full disclosure without PL too hard:
I've never offically been to DEFCON, but I ran in circles with people who did back when it was worth a damn. One guy said he would buy a burner cell and a used laptop each year before he went and throw SE Linux on them, and then immediately dispose of them once it DEFCON was over. And only carried/paid for everything cash from plane ticket to hotelroom and meals - if he ran out, he would get someone back home to send him more Western Union to an alias. That was a guy I trusted to know about such things, so I'll take that as necessary steps.
He didn't want any real-world information (address, phone, ID #s, banking info, etc) to be scraped as I guess quietly breeching the airline databases to see who's coming was just expected; I didn't keep up once we didn't have a professional relationship so have no fucking clue what he's doing about RealID requirements; maybe he drives in now.
I was invited to come along as physical security a couple times by someone who was attending and buying something not officially for sale. One time when doing this I was given someone's badge to go around the venue, and it was just like any tech conference.
this is much,much less exciting than it sounds. He just wanted someone who looked serious to stand outside the door while the deal went down in case the other party tried to either have him ambushed or bolt with the money. Absolutely nothing happened.
Anyway, there was some event some this guy was telling about where it wasn't just crypto puzzles, it was serous physical/digital security. It might have been an unofficial event.
The teams were all given stuff to keep safe while taking the other teams' secrets (sometimes digital, sometimes physical), and while there were rules and challenges (i.e. one of the digital things was you had to have a webpage running with something like 90% uptime on a 2003 IIS box with an 802.11b wifi router on the same network as the digital secret, you had to keep your physical item inside the hotel)
Getting access to the secrets was 100% no-holds-barred, anything that didn't cause serious physical injury was allowed.
Getting access to the secrets was 100% no-holds-barred, anything that didn't cause serious physical injury was allowed.
Ostatnio edytowane: