DEF CON Hacking Conference

News

New Challenge in the Tamper-Evident Village - 'The Box'!

The challenge? Defuse a bomb. I feel like I don't have to say a lot more than that. Bring your own tools, have an action hero moment for yourself.

Reg begins Friday in the Tamper-Evident Village, and it's probably wise to expect a bit of a queue.

Full info in the Forum:

https://forum.defcon.org/showthread.php?t=13947

SomaFM at DEF CON 22!

One week, people. All that stands between all of us and DEF CON is a few measly days. To help get you amped up, we offer the SomaFM preview stream. Like last year, SomaFM will be manning the chill room and providing luscious, rejuvenating audio delights whenever you're looking for a recharge or a welcoming nook amidst the chaos.

Fire up the stream and close your eyes. It's like you're already at DEF CON.

http://somafm.com/defcon/ One week, people!

For the Kids: Rootz Asylum at DEF CON 22

Rootz Asylum (formerly DEF CON Kids) has a full schedule of goodness planned for your padawan hackers. Learning, competition, fellowship with other hackish youth. It's pretty great. Back-to-school will definitely be cooler for the kids who spent their summer vacation winning DEF CON. http://www.r00tz.org

Movie Night With Dark Tangent: ‘The Signal’

The sci-fi mind bender ‘The Signal’ centers around hackers on a road trip to DEF CON, so we can be forgiven for being a little biased in its favor. But from that promising starting place, the escalating weirdness and suspense take the movie everywhere but where you might expect. We don’t want to spoil anything - you’re gonna thank us if you go in with a clean slate. We’re proud to have ‘The Signal’ for Saturday’s ‘Movie Night with the Dark Tangent’, and we’re prouder still to have director Will Eubank on hand for Q&A after the screening. The last reel will definitely make you want to talk to Mister Eubank. Make it a point to be there!

Saturday the 9th at 21:00, Track 3

DEF CON MEDIA HARD DRIVE DUPING STATION!

For even faster leeching pleasure of the conference media server we have invested in hard drive duplication towers, and next year DT plans to launch the Data Duplication Village.

Too busy to pick and choose what you want from the server and want it all?? This year we have three sets of 4TB drives that contain the same data as the media server, just split up and color coded. If you want to duplicate a particular drive you need to show up at the INFO BOOTH with your drives at the start of each day. First come First server. It will take about 8 hours to dupe a 4TB drive so a set will start in the morning and a set in the evening, to finish overnight.

There should be six 1:11 duplication towers (If they show up in time), with two for each drive color. That means we can dupe 66 drives at a time. Once enough people show up to fill a station the duplication process starts.

As of this writing it is sorted like this:

BLUE Drive = Conference Archives 1 of 2, including DEF CON

GREEN Drive = Conference Archives 2 of 2

ORANGE Drive = Podcasts, Cryptome, 1.5T of the Hak5 archives, FOSS Operating Systems, all other content

There will be an updated list at the infobooth.

Want in on it? Go buy some 4TB SATA II 7200 RPM drives (internal drives, not usb). Buy three if you want to try for the complete collection this year. I'd do it in advance, I think the local Frys will sell out! Duping should start Thursday!

DEF CON 22 Music Announcement: THE ORB

You better have just done that spit-take. That's right. Electronica/Trip-Hop/IDM/dub music classics and pioneers: The Orb. They're here. They're kicking. And on the 3rd day of DEF CON (Saturday night/Sunday morning 00:00-01:00) their divine presence shall bless the glorious attendees who... attend their glorious and divine performance. Those who do not attend will be forsaken and cast into the dystopian landscape known as "the rest of Las Vegas." And so this event shall henceforth be written into the Dark Tangent's Book of DEF CON, Volume 22 - also referred to by some as "the conference program." So say we all.

- The Orb - Little Fluffy Clouds

- The Orb - Toxygene

- The Orb feat. Lee Scratch Perry - Fussball

- The Orb feat. Lee Scratch Perry - Soulman

- The Orb - A Huge Evergrowing Pulsating Brain That Rules From the Centre of the Ultraworld (Orbital Dance Mix)

Social links:

- The Orb Official Site

- The Orb's Facebook

- The Orb's Twitter

DEF CON 22 Music Announcement: DJ Spooky (That Subliminal Kid) a.k.a. Paul D. Miller

A major announcement right here. We're bringing you the legendary DJ Spooky (That Subliminal Kid), a.k.a. Paul D. Miller. His CV runs deeper than the Mariana trench and is more Renaissance than the Teenage Mutant Ninja Turtles combined. Perhaps originally and best known for his artisinal music crafting (collaborating on projects with Meat Beat Manifest, Slayer, Chuck D.) and turntablism , he's become a university music professor (EGS, Switzerland), author (too much stuff to list), and an executive director of Origin Magazine. He's had his works featured in major museums like the Warhol, The Whitney, the Museum of Contemporary Art (Chicago), blahblahblahblah the pseudo-anonymous writer of this announcement could go ad infinitum. The point is, he's attained legendary-levels of awesome, and is coming to DEF CON to drop some hip-hop (perhaps with orchestral accompaniament) on Thursday Night in Track 1 (22:00-23:00)!

- DJ Spooky live on Engadget TV (Oh right, he's recently been on an Antarctic expedition that was used for his latest album)

- DJ Spooky's Music Mixing/DJing iPad/iPhone app (... and is involved with app development)

- Spooky's upcoming book with MIT Press on apps (... ... ...)

Social links:

- DJ Spooky / Paul D. Miller Official Site

- DJ Spooky's Facebook

- DJ Spooky's YouTube

DEF CON 22 Music Announcement: Elite Force & MC Frontalot!

A favorite from DEF CON XX (he dropped the killer set after The Crystal Method), we're bringing the near-mythical adrenaline-inducing Elite Force back for another sonic pummeling. Many of you may also recognize one of his prior projects, Lunatic Calm, which had music featured on films like The Matrix, Mortal Kombat: Annhilation, Drive, and tooons of others. We're extraordinarily excited to have Elite Force back, and we'll all need to be sure to keep our collective cholesterol levels in check to ensure we can survive his performance. Catch him Saturday night in track 1 (23:00-00:00)!

Here. Take a gander at some choice recent Elite Force cuts:

- Elite Force - Gamechanger (WARNING: BASS MAY MELT FACES OFF)

- The Prodigy, Physical - Firestarter (Elite Force RVMPD) (WARNING: SEE PREVIOUS WARNING)

Social links:

- Elite Force Official Site

- Elite Force Soundcloud

- Elite Force Facebook

- Elite Force YouTube

Another throwback to DEF CON XX, we're bringing back one of the grandmasters of Nerdcore hip-hop, MC FRONTALOT. His prolific lyrical stylings have been proverbially known to knock socks off, so shoes (as always) are encouraged (we'll let sandals slide too). He's also the star of the acclaimed documentary Nerdcore Rising. Catch him Friday night in Track 1 (23:00-00:00), alongside other hard-hitters and partners in nerdcore-crime Dual Core and ytcracker!

Gorge yourself on his flow and become a better person for it:

- MC Frontalot - Nerd Life

- MC Frontalot - I'll Form the Head (feat. Dr. Awkward and ZeaLouS1)

- MC Frontalot - Zero Day (feat. Dual Core and ytcracker)

Social links:

- MC Frontalot Official Site

- MC Frontalot Facebook

- MC Frontalot YouTube

DEF CON Entertainment Presents: Anamanaguchi!

Today we announce eccentric retro electro video game chip-tune-inspired dance-rock that is purveyed by ANAMANAGUCHI. Not only is their music video game-inspired, their music actually HAS appeared on video games (like Rockband and Scott Pilgrim vs. The World). The real deal! Check 'em out at the Friday festivities in track 1. (set time: 00:00, Saturday AM)!

Also be sure to check out their totally rad and typically incredibly neon music videos:

- Anamanaguchi - Endless Fantasy (See pizza get launched into space!)

- Anamanaguchi - Meow (Neon black light explosion. More pizza.)

Social links:

- Anamanaguchi Official Site

- Anamanaguchi Soundcloud

- Anamanaguchi Facebook

- Anamanaguchi YouTube

DEFCON 22 Music Announcement: Zebbler Encanti Experience

Do you remember the giant projection-mapped DEF CON exploded face? Or maybe the dragon installation? Or how about the DEF CON sign installation in the chillout lounge last year? These are the epic works of Zebbler's design team, who have also developed installations for the likes of Shpongle, EOTO, and a number of other class acts. But Zebbler doesn't just excel at design. He also excels, along with his comrade Encanti at music. Together, they form an incredible audiovisual duo that goes by Zebbler Encanti Experience, and they will be purveying this experience to you at DEF CON 22! Take delight in their glorious bassy weirdness at DEF CON's official Saturday evening event in track 1 (set time: 01:00, Sunday) !

Most of their music is free/pay-what-you-can too! Check it out:

- Freakquency, their latest album has just dropped

- Altered Projections is a killer recent remix release (free/pay-what-you-can)

- Psychic Projections is their debut album (free/pay-what-you-can)

Calling All Accepted Speakers!

Attention all accepted DEF CON speakers! The deadline for getting your materials in for inclusion on the conference CD is Tuesday, July 15. Pencils down. Pass your paper to Nikita. Thank you.

Capture the Packet Registration Open!

Registration is now open for those willing to push their Cyber Traffic Analysis skills to the limit, you can compete in the latest Cyber Analytics and Network Forensics Challenge. Now in its fifth year ! Capture the Packet has brought more APT’s, Trojans, Malware, Web and Red team attacks, network issues and sneaky covert channel coms to one event ! Do you know when important data is leaking out of your network and who is doing it - Can you handle the Advanced Persistent Threat ? Can you spot that nasty bug your neighbors workstation contracted from visiting an infected website ? Can you spot a networking configuration issue with routing, spanning tree, BGP or OSPF ? Do you know how to count your IPV6 lucky stars ? Do you speak VOIP, MGCP or H323 ? We welcome everyone to try their hand at the most intense live network traffic analysis and forensic challenge, who knows you could be our next grand finals winner. You must bring your own laptop/computer to compete in this challenge, remember while this is not an attack game, it is a hostile network.

Details:

This year, the completion is handled in three Challenging phases:

Pre-Qualifying Rounds Start Thursday August 7th at 1:00pm and End Friday August 8th at 1:00pm

Those that have the highest scores “overall” from all rounds combined, essentially 40 teams will move on to the qualifying rounds

The Qualifying rounds are held starting Friday August 8th at 2:00pm and end on Saturday August 9th at 1:00pm

The top 10 teams from the Qualifying rounds with the highest over-all move on to the finals held on Saturday at 6:00pm

The Final round will consist of the top 10 scoring teams to survive the qualifying rounds,

These 12 teams will compete in a two hour long finals competition to determine the winner

Register your team of two – at https://www.capturethepacket.com/ctp_dc_signup.html, or sign-up onsite.

Capture The Packet will be hosted in the “Packet Hacking Village” at the DEFCON Entrance Area !

DEF CON 22 Schedule is LIVE!

Just a little over a month until we rendezvous at the Rio for DEF CON 22! Are you ready? We hear it's eleventy-one degrees there today, so bring weapons-grade sunscreen if you're one of those 'goes outside' kind of hackers.

You'll also want to know who's talking about what and when so you can plan your DEF CON experience. To that end, we proudly present the DEF CON 22 Speaker Schedule! Get yourself familiar, people. The key to maximum DEF CON is maximum planning. Or no planning. The key to maximum DEF CON has been in your heart all along. SCHEDULE IS LIVE!

https://www.defcon.org/html/defcon-22/dc-22-schedule.html

DEF CON’s First Google Hangout!

We’re trying something new. Friday, June 27th at 11am Pacific Time, we’re hosting our first Google Hangout on Air. The guest is Jennifer Granick, DEF CON CFP Review Board member, preeminent hacker defense lawyer and Director of Civil Liberties for the Center for Internet and Society at Stanford Law School. The subject is her recent article for Wired regarding the verdict in United States v. Davis and what it could mean for the future of mass surveillance.

If you’ve got good questions about the intersection of law and ‘metadata’ collection, either leave them here in the comments or ask them live at the Hangout tomorrow.

If you’re not following us on Google Plus, the link is here:

https://plus.google.com/+DefconOrgplus/

Join us, and as always, spread the word.

DEF CON 22 CFP Review Board Revealed!

‘This talk is amazing!’ You say this to yourself (inside voices) while watching someone awesome say and demonstrate awesome things. ‘How does DEF CON consistently pick so many great talks? They must have a team of borderline superheroes slogging through hundreds and hundreds of proposals for months! Who could those paragons of determination and insight BE, exactly? How could I learn their handles and perhaps show my appreciation by buying them many beers?’

Here’s an answer key to these questions you’re asking yourself:

1.)This talk probably is amazing. Not really a question.

2.)Lots of caffeine and eyestrain. Also dedication and love.

3.)They do have a team of borderline superheroes, and there is no DEF CON without them.

4.)They are known as the DEF CON CFP Review Board.

You can check out their page here. And maybe show them some love.

Get VIP Tickets for the 10th Anniversary of theSummit!

The 10th Annual EFF fundraiser, hosted by Vegas 2.0, has VIP tickets to event on sale now!  Get early access to an intimate meet and greet with the Speakers of DEF CON!  Also, get special schwag and extra raffle tickets exclusively for VIP guests!

https://www.crowdtilt.com/campaigns/thesummit-10-year-anniversary-vip-tickets

Last round of DEF CON 22 Talks are Live!

This is it. The speaker list for DEF CON 22 is now locked and complete. This means two things: DEF CON is really almost here, and we are now hard at work creating the Tracks and the Schedule (watch this space, buckaroos). We're very proud of the lineup we've assembled, and we think you will find a lot of good stuff to choose from. Whether you're coming to Vegas or not, we'd love it if you'd take some time to check out the speaker list and give us some feedback about what talks have you the most excited.

55 days, people. Get psyched!

New for DC101

Panel - Diversity in Information Security

Jennifer Imhoff-Dousharm, Sandy “Mouse” Clark, Kristin Paget, Jolly, Vyrus, and Scott Martin

New Presentations

The Cavalry Year[0] & a Path Forward for Public Safety

Joshua Corman and Nicholas J Percoco

Mass Scanning the Internet: Tips, Tricks, Results

Robert Graham, Paul McMillan, and Dan Tentler

Hack All The Things: 20 Devices in 45 Minutes

CJ Heres, Amir Etemadieh, Khoa Hoang, and Mike Baker

Raspberry MoCA - A recipe for compromise

Andrew Hunt

Home Insecurity: No alarms, False alarms, and SIGINT

Logan Lamb

Dark Mail

Ladar Levison and Stephen Watt

Attacking the Internet of Things using Time

Paul McMillan

Open Source Fairy Dust

John Menerick

Generating ROP payloads from numbers

Alexandre Moneger

Panel: Ask the EFF: The Year in Digital Civil Liberties

Kurt Opsahl, Nate Cardozo, Mark Jaycox, Yan Zhu, and Eva Galperin

Panel - Surveillance on the Silver Screen- Fact or Fiction?

Nicole Ozer, Kevin Bankston, and Timothy Edgar

Measuring the IQ of your Threat Intelligence feeds

Alex Pinto and Kyle Maxwell

Secure Because Math: A Deep Dive On Machine Learning-Based Monitoring

Alex Pinto

Detecting and Defending Against a Surveillance State

Robert Rowley

Advanced Red Teaming: All Your Badges Are Belong To Us

Eric Smith and Josh Perrymon

The Internet of Fails: Where IoT Has Gone Wrong and How We're Making It Right

Mark Stanislav and Zach Lanier

Domain Name Problems and Solutions

Dr. Paul Vixie

DEF CON Secret Media Server Project Revealed!

RED ALERT TOP SECRET WIKI LEAK SN0DEN LEAK GAMMA GAMMA ZF0 P0SSE DOC DROPPER

The previously sooper seekret media.defcon.org server project has leaked out on the twitter and the face book. No use hiding behind our press secretary any longer, It's better to just admit it and let everyone make up their own minds.

WHAT LEAKED? The Dark Tangent is collecting as much open source security conference footage, training materials, podcasts, white papers, videos, and anything else haxors may be interested in. He plans to make it all available at DEF CON 22 in August and let anyone download it, or even direct HD copy it.

WHO LEAKED THIS SECRET PROJECT? The Dark Tangent. Oops.

WHAT NOW? A huge burden has been lifted off of DT and he no longer has to live two lives. He can now focus on getting as much content as possible from the community.

That's where you come in.

HOW CAN I HELP?

Send links to content you think everyone should have access to that is related to the hacking and infosec scene somehow. It can be an rss podcast, a .torrent of academic journals, and ftp link to text files, a web site to mirror full of source code, an svn operating system repository, a YouTube channel, whatever!

Send your links in an email to dtangent@defcon.org, or tweet them to @thedarktangent and he will start the leeching.

HOW DO I GET MY HANDS ON THE DATA?

At DEF CON 22 you will be able to get to the gigs in a couple different ways. The con Wi-Fi network (at 802.11g speeds), through wired switches on 1 gig links in different areas, or by bringing your own 4TB SATAII or III hard drive(s).

We will have HD duplicators running all con copying drives for people who just want to drop off a drive and pick it up later.

Please help out with links, and we'll see you at con!

Registration Now Open for Crash and Compile

Do you think you can code? Do think you can code while drinking? We're not talking about coding in the warm safe confines of your cubicle. No, this is programming for sport. It's live competition, against the clock, and the other teams. And we don't make it easy. Have the smarts to solve our programming challenges? Good. We want you to show us that programming is not only about laying down some sweet sweet code, it's about the style in which you do so. Sound fun? We think it is.

Crash And Compile is a ACM-style programming contest crossed with a drinking game, where teams of two people try to solve as many programming problems as they can. As teams compile and run their programs, each time their code fails to compile, produces the incorrect output, or seg-faults, the team must drink. Meanwhile, our lovely Team Distraction will be doing what they can to make the job of programming while intoxicated all the more difficult and/or enjoyable.

Registration is now open. Sign up over at https://dc22.crashandcompile.org

Big 'Ol Batch of Talks!

It’s getting pretty real, people. The speaker selection process is almost complete, the party and event planning is in full swing - DEF CON 22 is just a little over two months away!

To celebrate, another round of speaker announcements. Twenty-five more abstracts to help you create your DEF CON battle plan. We anticipate one more round of announcements before the roster is locked, but by now you should have a pretty good idea how much good stuff we have on tap.

DEF CON 101 Presentations

Detecting Bluetooth Surveillance Systems

Grant Bugher

Dropping Docs on Darknets: How People Got Caught

Adrian Crenshaw

Is This Your Pipe? Hijacking the Build Pipeline.

Kyle Kelley and Greg Anderson

Home Automation and Defensive Security Measures

Chris Littlebury

Instrumenting Point-of-Sale Malware: A Case Study in Communicating Malware Analysis More Effectively

Wesley McGrew

Android Hacker Protection Level 0

Tim Strazzere and Jon Sawyer

Presentations

I am a legend: Hacking Hearthstone with machine learning

Elie Bursztein and Celine Bursztein

Hacking US (and UK, Australia, France, etc.) traffic control systems

Cesar Cerrudo

NSA Playset: DIY WAGONBED Hardware Implant over I2C

Josh Datko and Teddy Reed

Check Your Fingerprints: Cloning the Strong Set

Free and Lachesis

Shellcodes for ARM: Your Pills Don't Work on Me, x86

Svetlana Gaivoronski and Ivan Petrov

Blowing up the Celly - Building Your Own SMS/MMS Fuzzer

Brian Gorenc and Matt Molinyawe

Deconstructing the Circuit Board Sandwich: Effective Techniques for PCB Reverse Engineering

Joe Grand (Kingpin)

Panel: Ephemeral Communications: Why and How?

Ryan Lackey, Jon Callas, and Elissa Shevinsky

NinjaTV - Increasing Your Smart TV’s IQ Without Bricking It

Felix Leder

Catching Malware En Masse: DNS and IP Style

Dhia Mahjoub, Thibault Reuille, and Andree Toonk

Old Skewl Hacking: Porn Free!

Major Malfunction

A Survey of Remote Automotive Attack Surfaces

Charlie Miller and Chris Valasek

Learn how to control every room at a luxury hotel remotely: the dangers of insecure home automation

Jesus Molina

Acquire current user hashes without admin privileges

Anton Sapozhnikov

Impostor — Polluting Tor Metadata

Charlie Vedaa and Mike Larsen

Manna from Heaven: Improving the state of wireless rogue AP attacks

Dominic White and Ian de Villiers

The Open Crypto Audit Project

Kenneth White and Matthew Green

Practical Aerial Hacking & Surveillance

Glenn Wilkinson

Don't Fuck It Up!

Zoz

DARPA announces its 2-year Cyber Grand Challenge, Final Tournament at DEF CON 24

The Cyber Grand Challenge asks some simple questions - can you create a fully-automated system to detect, thwart and mitigate network attacks? Can you build one so effective that it can win an all-computer tournament without human intervention? Would you like 2 million dollars?

If you have a great proposal but lack the funds for a 2-year competition, you can pitch DARPA for funding - they’re already backing seven of the registered teams. Teams that survive the quals in June 2015 are eligible to compete in the final tournament at DEF CON in 2016. Grand prize is $2 million dollars.

Competitors will need a dizzying array of skills and an encyclopedic understanding of every form of network kung-fu. They will also need a pretty serious amount of free time, but the winner gets a nice check and an answer to the question of what to put first on a resumé.

We believe that such a team must exist in the DEF CON family. If you think you’re up to the challenge, more information awaits you at the DARPA CGC page.

http://www.darpa.mil/cybergrandchallenge/

Vote for your Favorite short story!

The DEF CON 22 Short Story Contest is now closed. Time for you to head over to the forums and vote for the People's Choice Awards. You're the people. Get in there. Be somebody.

https://forum.defcon.org/forumdisplay.php?f=796

Enormous Speaker Update! First DC101 Talks Revealed!

Posted 5.23.14

Hot off the presses - more speaker selections. Several of them are for the DEF CON 101 Track, newly expanded for DC 22 and running all the way through the con. The rest of the presentations listed here fall into the other tracks, and if we do say so ourselves, this is shaping up to be quite the year, hackwise. You’re definitely going to want to make sure you have a seat for some of these. The titles alone should tell you we’re coming correct in 2014.

New Presentations

The Simple Route to Backbone Routers

Luca "kaeso" Bruno and Mariano "emdel" Graziano

Summary of Attacks Against BIOS and Secure Boot

Yuriy Bulygin, Oleksandr Bazhaniuk, Andrew Furtak, and John Loucaides

Saving Cyberspace by Reinventing File Sharing

Eijah

Secure Random By Default

Dan Kaminsky

Masquerade: How a Helpful Man-in-the-Middle Can Help You Evade Monitoring.

Ryan Lackey and Marc Rogers

Just What The Doctor Ordered?

Scott Erven and Shawn Merdinger

NSA Playset : GSM Sniffing

Pierce and Loki

Don't DDoS Me Bro: Practical DDoS Defense

Blake Self and Shawn "cisc0ninja" Burrell

"Around the world in 80 cons” - A Perspective

Jayson E. Street

DEF CON 101 Presentations!

Now running Thurdsay through Sunday!

The DEF CON 101 track is a series of talks aimed at attendees who are not yet internationally-recognized infosec experts. This is not the n00b track. But if you're interested and engaged in the hacker community, these sessions are right up your alley. From Sysadmins & NOC Jockeys to College Students & IT Professionals, everyone exploring the world of Information Security can expect to feel welcome, not intimidated. We have grouped the sessions by interest area, so you're not spending all day bouncing between talks.

DEF CON 101 - The Talk

HighWiz, Lockheed, Pyr0, Roamer, and LosT

Protecting SCADA From the Ground Up

AlxRogan

Hacking 911: Adventures in Disruption, Destruction, and Death

Christian “quaddi” Dameff, Jeff “r3plicant” Tully, and Peter Hefley

How to Disclose an Exploit Without Getting in Trouble

Jim Denaro and Tod Beardsley

NSA Playset: PCIe

Joe FitzPatrick, Miles Crabill, and Dean Pierce

Oh Bother, Cruising The Internet With Your Honeys, Creating Honeynets For Tracking Criminal Organizations

Terrence Gareau and Mike Thompson

The Monkey in the Middle: A pentesters guide to playing in traffic.

Anch

Investigating PowerShell Attacks

Ryan Kazanciyan and Matt Hastings

Screw Becoming A Pentester - When I Grow Up I Want To Be A Bug Bounty Hunter!

Jake Kouns and Carsten Eiram

Meddle: Framework for Piggy-back Fuzzing and Tool Development

Geoff McDonald

One Man Shop: Building an Effective Security Program All By Yourself

Medic

Rf Penetration Testing, Your Air Stinks

RMellendick and DaKahuna

Touring the Darkside of the Internet. An introduction to Tor, Darknets, and Bitcoin.

Metacortex and Grifter

USB for All!

Jesse Michael and Mickey Shkatov

ShareEnum: We Wrapped Samba So You Don’t Have To

Lucas Morris and Michael McAtee

An Introduction to Back Dooring Operating Systems for Fun and Trolling

Nemus

Standing Up an Effective Penetration Testing Team

Wiseacre

Data Protection 101 - Successes, Fails, and Fixes

PTzero

Anatomy of a Pentest; Poppin' Boxes like a Pro

PushPin

Practical Foxhunting 101

SimonJ

Blinding The Surveillance State

Christopher Soghoian

Bug Bounty Programs Evolution

Nir Valtman

Client-Side HTTP Cookie Security: Attack and Defense

David Wyde

Submissions Now Open for 'From Dusk Til Con'

Posted 5.22.14

You’ve had the thought: “DEF CON is super fun, but how much cooler would this be if there was a little corner devoted to my weird niche interest?” ‘From Dusk Til Con’ is your chance to realize that overly specific dream.  Got a mini-village idea? Want to run an Inception style Con-within-the Con? Want to play strip Settlers of Cataan? Shoot us your ideas for themed mini-events on the Crawl and we’ll make the best ones happen.

Find out more and how to submit at: https://www.defcon.org/html/defcon-22/dc-22-fdtc.html

DEF CON 22 CTF Quals Roundup!

Posted 5.21.14

The DEF CON 22 CTF Qualifiers are in the books. Challenges were faced, and bested. Points were accumulated. Bedtimes were missed. It’s all over but the paperwork.

So here’s a roundup of writeup links. IF you participated, read and see how other people approached the same problems. If you didn’t, read and get an idea of how the CTF process works and consider signing up next time. You lose 100% of the CTFs you don’t enter.

If you enter, you could still lose 100%. That’s just math. But you’ll have a story. An awesome, glorious, highly technical story to share with the tiny slice of humanity who can understand this sort of thing.

There’s also a bonus link to a GitHub collection that looks like it might end up pretty comprehensive.

https://hackucf.org/blog/category/writeups/defcon-quals-2014-writeups/

http://blog.spiderlabs.com/2014/05/defcon-22-ctf-qualifiers-writeup.html

http://balidani.blogspot.com/2014/05/def-con-quals-2014-100lines-writeup.html

http://ahack.ru/write-ups/defcon-quals-14.htm

http://zepvn.com/blog/defcon-ctf-quals-2014-100lines.php

http://zepvn.com/blog/defcon-ctf-quals-2014-byhd.php

http://sigint.ru/writeups/2014/05/19/defcon-2014-quals---zombies/

http://sigint.ru/writeups/2014/05/18/defcon-2014-quals--polyglot/

http://endgame.com/blog/defcon-capture-the-flag-qualification-challenge-1.html

https://github.com/ctfs/write-ups/tree/master/def-con-ctf-qualifier-2014

On your mark... Get set...

Posted 5.16.14

T minus 3 hours - DEF CON 22 CTF Qualifications are upon us! To read up on the setup for this year, you can check out the Legitimate Business Syndicate blog:

https://blog.legitbs.net/

The road to glory begins here. We at DEF CON applaud all of the brave warriors who've accepted the CTF challenge. Godspeed. May the odds be ever in your favor.

Big New Batch of Talks Incoming!

Don’t look now, but it’s already the middle of May. DEF CON 22 is just over the horizon, a little less than three months away. Preparations are in high gear.

Today, we bring you  more talks - 15 more, to be exact. You can check out the abstracts and speaker bios on the DC22 speaker page. We think you’ll like the choices - there’s everything from shortwave radio steganography to mischief with car firmware.

There’s more coming, of course, so keep checking back with our speaker page as we flesh out the roster.

https://www.defcon.org/../defcon-22/dc-22-speakers.html

The new selections are:

The Secret Life of Krbtgt

Christopher Campbell

The $env:PATH less Traveled is Full of Easy Privilege Escalation Vulns

Christopher Campbell

Why Don’t You Just Tell Me Where The ROP Isn’t Suppose To Go

David Dorsey

Steganography in Commonly Used HF Radio Protocols

Paul Drapeau and Brent Dukes

Weird-Machine Motivated Practical Page Table Shellcode & Finding Out What's Running on Your System

Shane Macaulay

The NSA Playset: RF Retroreflectors

Michael Ossmann

Attacking to Cisco Hosted VoIP Networks

Fatih Ozavci

Abusing Software Defined Networks

Gregory Pickett

Am I Being Spied On? Low-tech Ways Of Detecting High-tech Surveillance

Dr. Phil Polstra

You're Leaking Trade Secrets

Michael Schrenk

Zends Dead baby

Dr Steven Seeley

I Hunt TR-069 Admins: Pwning ISPs Like a Boss

Shahar Tal

Optical Surgery; Implanting a DropCam

Patrick Wardle and Colby Moore

PoS Attacking the Traveling Salesman

Alex Zacharis

Playing with Car Firmware or How to Brick your Car

Paul 0x222

More Accepted Talks!

We’re hard at working choosing the best of the CFP submissions, and today we have five more confirmations to announce. Watch this space for more speaker announcements in the coming weeks. It’s shaping up to be a pretty fascinating roster.

Getting Windows to Play with Itself: A Hacker's Guide to Windows API Abuse

Brady Bloxham

Girl… Fault-Interrupted.

Maggie Jauregui

Elevator Hacking - From the Pit to the Penthouse

Deviant Ollam, Howard Payne

Hacking the FBI: How & Why to Liberate Government Records

Ryan Noah Shapiro

The Only Way to Tell the Truth is in Fiction: The Dynamics of Life in the National Security State

Richard Thieme

You can watch the conference taking shape on the DEF CON Speaker Page:

https://defcon.org/html/defcon-22/dc-22-speakers.html

Art Contest Winners!

Congratulations to the winners of the DC 22 Art Contest:

1st Place: Alice in Hackerland by Tess Schrodinger

2nd Place: Helicopter Parents Weren’t This Bad by Amit Yehuda

3rd Place: Bleed by Joey Strine

People’s Choice: Alice in Hackerland by Tess Schrodinger

And of course, thanks to everyone who submitted work. There is no end to the hidden talents of the DEF CON massive. You can check out the winning artwork on the DC Art Contest page:

https://defcon.org/html/defcon-22/dc-22-artwork-contest.html

And a gallery of all the entries at:

https://www.facebook.com/media/set/?set=a....

Also, don’t let the contest ending stop you - if you have the urge to create some on-theme artworks between now and the show, we’d be happy to share them with the world. You won’t win anything beyond our love and gratitude, but that’s not exactly nothing.

Vote for People's Choice in the DEF CON 22 Artwork Contest!

The DEF CON 22 art contest has closed, and it’s time to start picking the winners. In the ‘People’s Choice’ category, that means it’s time for YOU to cast a vote. Check out the Artwork Contest Entries Gallery on Facebook and cast a ‘Like’ for your favorite.

The winner gets free admission to DC22, $25 credit at the Swag Booth and inky immortality in the DC22 printed program, so it’s kind of a big deal. The theme was ‘Behind the Curtain’, and the winning work should in some way capture the sense of the hidden world behind the world that is seen. Cast your votes wisely.

And as always, we thank everyone who participated in this year’s contest. If you didn’t submit and you’re feeling a little jelly, we offer the wise words of Socrates, who said to his students, “He is not wise who playa-hates; the truly wise participate. This mimosa is terrible.”

DEF CON 22 Vendor FAQ and App is Now Live!

Posted 4.18.14

Attention Entreprenerds!

DEF CON 22’s Vendor Area is a great opportunity to get your geek-centric product in front of a highly focused, upwardly mobile and possibly drunk audience of over 10,000 vacationing tech enthusiasts. Share your business with people passionate about technology, make sales, even make friends.

To sign up, head over to the vendor site, read the FAQ and get the forms filled out. Don’t delay - August is closer than you think.

http://defconvendors.com/

Call for Papers — Only Two Weeks Left!

Posted 4.16.14

Friendly reminder - the DEF CON 22 CFP closes in two short weeks. Your submission has to be in by May 1. It’s go time, people.

To see what we’ve accepted so far, you can check the speaker page:

https://www.defcon.org/html/defcon-22/dc-22-speakers.html

The rules and regulations are here:

https://www.defcon.org/html/defcon-22/dc-22-cfp.html

If you’ve got a great idea, put it in the ring. You can’t win if you don’t play.

Speaker Page Posted, Check Out the First Round Accepted!

Posted 4.10.14

It's official. CON season is really upon us.

DEF CON HQ is proud to announce the first round of accepted speakers! Take a look, let us know what you think and what you're looking forward to most. We'd also love it if you kept your eye on the speaker page, because we'll be posting the rest of the accepted speakers as they are selected. On the speaker page you can watch DEF CON 22 taking shape, and you can weigh in here or @_defcon_.

We think you're gonna like the choices so far. Get excited - the countdown has begun!

SECTF Registration is Live!

Posted 4.8.14

The Social Engineering Capture the Flag contest is back for DEF CON 22 - this time with a Tag Team Twist! Spread the word and get signed up if you're ready to test your SE skills in Vegas!

DEF CON 22 CTF: Registration is Open!

Posted 4.1.14

Good news, everyone!

Registration for the DEF CON 22 CTF season is open! To accomodate international competitors, the qualifying weekend has been moved to May 17-19.

It is time to assemble your champions. Sharpen them to a fine point. The doors to the arena open May 17. Fortune looks kindly upon boldness and skill. Failing those, she also seems pretty okay with treachery and subversion.

The information you require can be found at https://blog.legitbs.net/ . You can register at https://2014.legitbs.net/.

Step forward and meet your destiny.

The DEF CON 22 Contests, Events and Villages RFI is Now Open!

Posted 3.31.14

Got an idea for a game-changing contest or event? Maybe you have the expertise to run a village on a compelling topic we've overlooked? This is your moment. Submit your idea on the DEF CON CnE website - we'll partner up with the best ideas and help make them happen.

The rules and guidelines are available on the CnE website. Check them out, and get yourself involved. We look forward to hearing your ideas.

http://defcne.net/

DC22 Artwork Contest: Only Two Weeks Left!

Posted 3.26.14

We know that art takes time. We know that artists like to paint themselves into deadline corners, waiting until the last minute for inspiration to strike. If that's you, please bear in mind that the minutes run out in about two weeks. If you want to have your work considered for the contest, it has to be in to us by April 10. No exceptions.

Also, if you know a creative soul who might enjoy the opportunity, be sure to share this with them. We'd really love to showcase a lot of cool work this year.

Relevant data is all here:

https://defcon.org/html/defcon-22/dc-22-artwork-contest.html

Be the Match returning to DEF CON 22!

Posted 3.19.14

For the 4th year, 'Be the Match' is returning to DEF CON. It's your opportunity to register as a Bone Marrow Donor, and maybe someday save a life. There are lots of ways to hack your body, but this one doesn't slow you down at airports or make you look sketchy.

It also makes you kind of a hero.

To find out more about how 'Be the Match' works, you can check them out at these links:

Twitter: @bethematch

Facebook: https://www.facebook.com/BeTheMatch

The InterTubes: http://bethematch.org/

DEF CON 22 Artwork Contest!

DEF CON Art Contest is back!

The theme of this year's art contest is "Behind the Curtain". Secrets. Lies. Alibis. The magic shades in 'They Live'. The world behind the world, where all the hidden gears are turning.  The code and subterfuge employed by the adept to sneak knowledge past the sleeping and the uninitiated.

Cool, right? If you can put together a jaw-dropping variation on that theme in the next 30 days, prizes and glory could be yours. Free admissions to DEF CON 22, credit to burn on DEF CON Swag, maybe even a T-shirt with your art on it.

There are Categories and Rules, of course. And a Deadline. All of these are important.  These things make it a contest. But you, my undercover artist friend, you make it epic. Pencils up and good luck.

Call for Musicians/Artists/DJs application is LIVE!

If you're a musical performer, a DJ or an ambient Esperanto slam poet* who dreams of performing at DEF CON, this is your moment. We're beginning to select music acts for DEF CON 22, and we might very well need YOU.

Extra slots for Chillout/Ambient/Downtempo types this year, so you lower-BPM types should make sure to apply.

Your road to rocking DEF CON starts with reading the rules.

https://forum.defcon.org/showthread.php?t=13776

Then, if you think you have what it takes to entertain the DEF CON massive, fill out this form. https://docs.google.com/forms/d/1N0K...jAIWk/viewform

*I'm pretty sure I made that up, but I would be happy to be proved wrong. I will make you a Facebook star.

DEF CON 22 Capture the Flag

Pre-Qualification Events!

Continuing the tradition of recognizing strong performance in Capture The Flag events through the year, Legitimate Business Syndicate is proud to announce the following events as DEF CON 22 CTF pre-qualification events:

- Event

- Date

- Organizers

- Qualified Team

- DEF CON 21 CTF

- August 1-4, 2013

- by Legitimate Business Syndicate

- Plaid Parliament of Pwning

- RuCTFe

- December 14, 2013

- by hackerdom

- More Smoked Leet Chicken

- Ghost In The Shellcode

- January 17-19, 2014

- by Men in Black Hats + Marauders

- Dragon Sector

- Olympic CTF

- February 7-9, 2014

- by More Smoked Leet Chicken

- penthackon

- Boston Key Party

- February 28 - March 2, 2014

- by Boston Key Party

- ???

- Codegate Finals

- April 1-2, 2014

- by Codegate

- ???

- PHDays

- May 21-22, 2014

- by phdays

- ???

- SecuInside

- Unannounced

- by SecuInside

- ???

Twelve more spots will be available to teams wishing to play at the DEF CON 22 Capture The Flag through our own open qualifiers, hosted May 17-May 19.

All qualifying teams will receive eight "Human" badges for admission to DEF CON 22 this year, as well as two hotel rooms at the Rio Las Vegas, for the duration of the event.

DEF CON Future Dates!

Sure, you know that DEF CON 22 rolls around August 7-10, 2014. Everyone knows that. But do you know the dates for DEF CON 23? DEF CON 24?

Probably not, because we're announcing it right now. DEF CON 23 will be August 6-9, 2015, and DEF CON 24 will be August 4-7, 2016.

Now you know. And knowing is half the battle.

Bank error in your favor!

When we announced the discount room rates for the Rio last month, there was some kind of glitch in the Matrix. The first 200 signups were granted a rate even lower than our block rate. The Keymaker at the Rio has agreed to honor this rate for those lucky registrants. He had the Architect explain it to me, but he droned on so long I lost the plot. What I can confirm is that the 200th registration was reached, the anomaly was smoothed over and real-world rates have returned.

As ever, Fortune favors the bold.

The corrected rate (based on occupancy of up to three per room and taxed at 12%) is:

Sunday -Thursday   $119.00

Friday & Saturday $129.00

They charge an extra $30 a night if you add a fourth. Sometimes it's worth it. We don't judge.

Even that rate won't last long – the DEF CON block is about 40% sold. To book now and get the block rate, follow this link. See how deep the rabbit hole goes.

https://resweb.passkey.com/go/SRDEF4

NEW! Announcing the DEF CON 22 Call for Services!

Got something cool to share on the DEF CON network during DC22? Could be almost anything - a game, a stash of vintage K-Rad textfiles, whatever you think Con goers might wanna download. Submit your idea online, and if it's approved you'll get a couple of bonded gig ports and some promotion in the program and on the site. Sharing is kinda our thing - and we're counting on you to add some fun content. Apply today. Operators are standing by.*

* actual operator count may be as low as zero.

The DEF CON 101 Call For Papers is open!

Posted 2.3.14

For those who aren't aware, DC101 is a Thursday event, a kind of combination Opening Ceremonies/Orientation MiniCon. The talks accepted are loosely engineered to acclimate you to DEF CON proper and to help you maximize your DC experience. You can get a look at the talks that were accepted last year at this link:

https://forum.defcon.org/showthread.php?t=13377

The rules for the CFP are here:

http://www.defcon101.org .

DEF CON 22 Short Story Contest!

Posted 1.29.14

The DEF CON Short Story Contest is back, and it's already open! No excuses - you have from now until the first of June to get your story in for the chance to win some cool prizes and get your story shared with the whole DC community. Four months to shape your hacker lit masterpiece. Make us proud.

The rules and regulations are all available in the Short Story Contest thread on the DC Forums.

DEF CON 22 Call for Papers is Now Open!

Posted 1.23.14

It's that time again folks! Polish up those ninja caliber proposals, because The DEF CON Call for Papers is now officially open! Read the announcement and find out what's new, then fill out the CFP form and start down the road to DEF CON glory! Good luck!

Book a room at the Rio for DEF CON 22!

Posted 1.15.14

For those of you that want to get a jump on DEF CON 22, you can now book your room for DEF CON 22 at our discounted rate! Register now and save! We have a special discount for the first 200 reservations made in the DEF CON block. There are still a few left, so jump in now and stay at our host venue for the full DEF CON Experience!

Announcing DEF CON 22 CTF!

Posted 1.10.14

Legitimate Business Syndicate has announced their intention to return as organizers of the Capture the Flag competition! Check out their DEF CON 22 CTF Announcement blog post!

DEF CON 22 CTF Quals Tentative Dates Announced!

Posted 10.26.13

The team over at Legitimate Business Syndicate is getting a jump on things for DEF CON 22, and have announced their tentative dates for the 2014 CTF Quals! The 2014 Quals will be held Midnight May 17 to Midnight May 19, 1400284800 to 1400457600. Keep an eye on https://legitbs.net for all of their updates, and for links to the LegitBS Blog and twitter feed!

© 1992-2014 DEF CON Communications, Inc. All Rights Reserved | Privacy Policy