WirelessPhreak.com

I like to travel, f*ck with technology, and partake in the occasional tropical drink.
I am also a co-host on The NBD Show podcast.
Follow Me
Showing posts with label defcon. Show all posts
Showing posts with label defcon. Show all posts

 

 

For many of us who have been attending DEFCON for decades, the experience is more than just a conference. It’s been a front-row seat to the evolution of cybersecurity and hacker culture itself. I could play the role of the old guy yelling “get off my lawn”—and to be honest, sometimes I am—but it’s not all bad. In fact, a lot of it has been incredibly good.

 

Let’s start with the positives. Over the years, cybersecurity has transformed from a fringe interest into a legitimate, respected, and in many cases, lucrative career. Many of us have been fortunate enough to get paid for something we would have happily done for free. What was once a hobby or obsession—pulling things apart, seeing how they worked, and occasionally breaking them—became the foundation for a professional industry. That’s no small shift.

 

But for those who remember the early days, the heart of it wasn’t about career ladders or sponsorships. It was about the subculture that pulled us together under the neon glow of Las Vegas. Black t-shirts. Spiked mohawks. A healthy distrust of authority. A belief that information should be free, and that curiosity—sometimes reckless, sometimes brilliant—was worth celebrating.

 

In those days, spotting a fed was a game. Literally. “Spot the Fed” was one of DEFCON’s most infamous contests, and it existed because federal agents were considered outsiders, infiltrators, or at the very least, people who didn’t quite belong in hacker spaces. The tension was part of the fun. It was a cat-and-mouse game that defined the line between hacker culture and the government.

 

Today, the dynamic has changed. Federal agencies now have an official and very visible presence at DEFCON. Recruitment booths, sponsored talks, and entire tracks dedicated to government perspectives are part of the modern conference. The fed you once tried to spot in a crowd is now right there on the main stage, sharing insights and seeking talent.

 

Some of this is inevitable, and even beneficial in some ways. Governments need skilled hackers to help defend critical systems, and for many attendees, these sessions provide valuable knowledge. But the side effect is that the rebellious, underground feel that once defined DEFCON has shifted. The hacker culture that thrived on curiosity, experimentation, and skepticism of authority now has to coexist with the very institutions it once quietly resisted.

 

That doesn’t mean it’s gone. If you know where to look, it’s still there: the hallway conversations, the unsanctioned meetups, the weird projects that never make it onto the main stage. The spirit of hacker culture is still alive, but it has to fight harder for space in a conference now defined by its visibility to the government and the influence of corporations .

 

One way to preserve that spirit is to create smaller groups of like-minded people locally. Meet regularly, share projects, organize mini-conventions, and nurture the hacker ethos on a scale where curiosity, experimentation, and irreverence can thrive. These local efforts help keep the culture alive in ways that a massive conference can no longer fully support.

 

When you attend DEFCON today, understand what it has become. It’s still an important place to share ideas, learn, and connect—but remember what it once was. Enjoy the villages, the talks, the camaraderie, but it’s okay to feel a little nostalgic for the desert as it was. Missing what it was doesn’t make you bitter; it means you care about the culture that drew you there in the first place. And that care ensures hacker culture continues, long after the neon lights dim.

 

DEF CON Attendance & Venues

DEF CON Attendance Over the Years




**Update 8/8/2020**
I have been spending some time in the #lobby-bar channel on the Defcon Discord. We have been reminiscing of Defcons' past and one of the attendees posted up a couple Docs from the AP they had worked on. I wanted to post them because they pretty much sum up a lot of peoples Defcon experience at the AP.
**Update 8/8/2020**
Dark Tangent just posted in the info-booth Discord channel a link to the Defcon info page.  Really nice easy to use interface and search functionality:
 
**Update 8/7/2020**
Wall of Sheep aka Packet Hacking Village talk schedule is online.
Shedule:
Where to watch:

 
**Update 8/6/2020** 
DCTV just posted their twitch channel.  
 
 
**Update 8/6/2020 13:21**
 "The following Twitch Streams are available depending on the schedule for each specific track or village. The schedule can be found at https://info.defcon.org/.

I have found if you follow the channels within twitch you can see what channels are live or not.

**Update 8/6/2020 10:00**
I have found a method to engage in Defcon that works well with me. 
  1. Identify the talks I want to watch
  2. Create a youtube playlist listing the talks in order of the live Q&A's (then watch them)
  3. Created calendar events of the live Q&A with the speaker on the Defcon Twitch channel (https://www.twitch.tv/defconorg)
  4. between live Q&A I want to watch I stream the Defcon Entertainment channel on twitch (https://www.twitch.tv/defcon_music)
  5. Hang out on the Defcon Discord server in #linecon, #dcg, #pool-1, and the #pool-3 channels we will see which ones i spend the most time in. Currently linecon is holding most of my attention.
We will see when the Villages open up tomorrow how much time I will hang in there.

Defcon 28 Safe Mode is a culture shock, and for me the move to online does not feel as natural as I though it would. I am fighting 18 years of routine and habit that I need to kick. That being said I wanted to create a page where I could keep track of whats going on and where it happening,  I imagine there will be a lot of spin off twitch channels and discord channels I will try to keep it up.

Defcon Talks:
The schedule was released https://defcon.org/html/defcon-safemode/dc-safemode-schedule.html One interesting point about the lineup it looks like all the talks will be sequential so you can see every talk if you want.

Defcon Forums:
This is the major jumping off point for everything going down at Defcon 28. Explore the forums that interest you and get involved. Some of the villages have already set up active discord channels and the will list them in their forum channel.

Defcon Entertainment:
Here is a link to some of the live entertainment that will be going down. Defcon has posted the schedule of the live sets and published the twitch channel that will be streaming the performances.

Defcon Swag Shop:

Discord Servers:
Defcon 28 Main Server: https://discord.gg/defcon
Blue Team Village: https://discord.gg/nqMrrJ
Wireless Village: https://discord.gg/pfu9mu
Ham Radio Village: https://discord.gg/Dv38mc
Biohacking Village: https://discord.gg/G3TyUp


Defcon Reddit Post
Below is an extensive list that was posted by Defcon on Reddit (https://www.reddit.com/r/Defcon/comments/hzafso/lots_of_links_defcon_and_village_info_pages/)I wanted to capture it here to share with everyone.

Please also consider "The One!", a unofficial consolidated schedule of all the Villages, Talks, Contests, and various Events occurring during DEFCON 28. One page, one look, all things happening!

Lots of things are still missing, As various schedules get released and processed they will appear. Keep coming back to get the latest.

Links
DEFCON home page
DEFCON 28 FAQ
DEFCON FAQ
DEFCON 28 Schedule and Speakers pages
DEFCON 28 Demolabs Schedule
DEFCON 28 Entertainment
DEFCON 28 Villages

Village info derived from the following pages
DEF CON 28 Villages page
DEF CON 28 Villages Forum page

Villages
Village Name & Web PageForum LinkDC Village DescDiscord ChanSoc Media Links
AI VillageForumAIV Desc#aiv-general-textTW @AIvillage_DC
AeroSpace VillageHack-A-SatForumAEV Desc#av-lounge-bar-textTW @SecureAerospace TW @Hack-A-Sat
AppSec VillageForumASV Desc#asv-general-textTW @AppSec_Village YT AppSec Village
BioHacking VillageForumBHV Desc#bhv-general-textTW @DC_BHV YT Biohacking Village TI biohackingvillage
BlockChain VillageForumBCV Desc#bcv-general-textTW @BCOSvillage
Blue Team VillageForumBTV Desc#btv-general-textTW @BlueTeamVillage TI BlueTeamVillage
Car Hacking VillageForumCHV Desc#chv-welcome-textTW @CarHackVillage
Career Hacking VillageForumCRV Desc#cahv-general-textTW @HackingCareer
Cloud VillageForumCSV Desc#cloudv-general-textTW @cloudvillage_dc
Crypto and Privacy VillageForumCPV Desc#cpv-general-textTW @CryptoVillage TI cryptovillage SL cryptovillage YT Crypto and Privacy Village
Data Duplication VillageForumDDV Desc#ddv-general-textTW @DDV_DC
Ethics VillageForumETV Desc#ev-general-textTW @EthicsVillage
Hack The SeaForumHSV Desc#htsv-general-textTW @hack_the_sea
Ham ExamsForumHRV Desc#ham-general-text@DC_Ham_Exams
Ham Radio VillageForumHRV Desc#ham-general-textTW @HamRadioVillage TI hamradiovillage
Hardware Hacking VillageSolder Skills VillageForumHHV Desc#hhv-infobooth-textTW @DC_HHV
ICS VillageForumICS Desc#ics-general-textTW @ICS_Village YT ICS Village TI ics_village
IoT VillageForumIOT Desc#iotv-general-textTW @IOTvillage TW @ISEsecurity TW @Villageidiotlab TI iotvillage
Lock Bypass VillageForumLBV Desc#lbpv-social-textTW @bypassvillage
Lockpick VillageForumLPV Desc#lpv-general-textTW @toool TI toool_us
Monero VillageForumMOV Desc#mv-general-textTW @MoneroVillage TI MoneroVillage YT Monero CommunityWorkgroup
Password VillageForumPWDV Desc#pwdv-general-textundefined
Payment VillageForumPAYV Desc#pay-labs-textTW @paymentvillage YT Payment Village TI paymentvillage
Packet Hacking VillageForumPHV Desc#phv-infobooth-textTW @WallOfSheep FB @WallOfSheep
Recon VillageForumRCV Desc#rv-general-textTW @ReConVillage FB @ReConVillage
Red Team VillageForumRTV Desc#rtv-briefings-textTW @VillageRedTeam YT Red Team Village TI redteamvillage DC Red Team Village
Rogues VillageForumRGV Desc#rov-announcements-textTW @RoguesVillage TI RoguesVillage
Social Engineering VillageForumSEV Desc#sev-general-textTW @HumanHacker FB SocialEngineerInc
Voting Machine VillageForumVMV Desc#vmhv-general-textTW @VotingVillageDC
Wireless VillageForumWLV Desc#wv-general-textTW @WiFi_Village DC Wireless Village
Other Interesting Links
Defcon MUD a Multi User Dungeon. An old school game style that uses telnet to connect to a remote server. Check it out https://mud.mog.ninja/

Other cons during #SummerHackerCamp

EventTwitterFacebook
BlackhatT @BlackHatEventsFB Black Hat Events
BSides Las VegasT @BSidesLV
r00tz AsylumT @r00tzasylum
QueerconT @QueerconFB @queercon
The Diana InitiativeT @DianainitiativeFB @dianainitiative

Guides/Tips/FAQs

General / previous years
JK-47 - BSidesLV & DEFCON Conference Tips
Just another DEF CON guide
HACKER SUMMER CAMP 2018 GUIDE
On Attending DefCon





Defcon is Canceled!

The meme that never dies finally became a reality. I have attended Defcon for nearly 2 decades and every year I am excited to see friends but dread staying in Vegas. This year my dread turned into mourning. After Jeff's initial COVID post, the progression of the pandemic, and the physical conference cancellation, I feel Defcon is more important than ever.

Most con attendees identify Defcon as a way of life just not a conference. It is our responsibility to keep Defcon alive, share in the intellectual, the consciousness, and the bonds that make up Defcon. If this means meeting in smaller groups locally or hanging with friends online we can still make Defcon, Defcon...


**One Idea**
Perhaps, depending on the state of the pandemic locally, DC groups could throw classic Defcon parties. DJs, drinks, and attendees bring a Defcon badge from any year to be admitted. Of course, the badge idea could be a loose requirement since we wouldn't want to exclude anyone who hasn't been to Defcon. It might be a cool way to locally create that Defcon atmosphere.



This is the 2.0 version of my previous Defcon Prep Guide. Every year more people ask me about attending Defcon for the first time. Many are intimidated or not sure if they should attend. I hope to address their concerns and sway them toward checking out Defcon.

Should I Attend: This is probably the first and most frequent question I get about Defcon. There is a lot of lore and hype around Defcon much of which is earned and deserved, but you don't have to be a 1137 black hat hacker to go to Defcon. Defcon has something for everyone, and I mean everyone. Defcon is usually broke up into 4 tracks that are loosely themed and diverse. So diverse you can generally find talks that interest you in any of the tracks. Check out this link to Defcon 24's schedule to get an idea of what the talks are about.

But the talks are just a small portion of a much bigger convention. As a first time attendee, I would recommend spending most of your time in the different villages, and competition areas. These are smaller convention within the convention where people who are interested in anything from Ham radios, to social engineering, to car hacking can spend the entire day hanging out with people who share their interests.  Here is a link to Defcon 24's Village Talks.

It may seem overwhelming but just find something that interests you and don't try to do everything.  Oh ya and drink some beer, there will be a lot of it.

When is Defcon: Its normally held towards the end of July or beginning of August. It's a good idea to get there a day early, usually Thursday, to buy SWAG and get your badge because it gets super busy the day of.

ProTip: You will want to go down Thursday morning or stay up parting Wednesday night to get your badge.  People start lining up around 4:00am for the Convention passes.

How Much is Defcon:  The registration fee goes up a little every year, and they will post the fee as we get closer to the Con. Most everything at Defcon is cash only including the ticket, and for the love of god don't use an ATM any where near the convention.
  • Registration: $230 to $250 (just a guess)
  • Hotel: Defcon room rates differ depending when you book, but Defcon usually negotiates a good price.

Where to Stay: Staying at the hosting hotel is a must.  It's nice to just head up to your room between talks, and attending the late night festivities are a breeze since you only have stumble to the elevators. Reserve your rooms early for Defcon, the hosting hotel sells out quickly. 

Added bonus; If you stay at hosting hotels Defcon will stream the talks and schedules to the hotel rooms. This is not always guaranteed especially when they move to a new venue, but they usually work it out.  

What to Bring:  A few essentials I bring to Vegas.
  • Snacks because eating at the CON can get kinda pricey, plus a lot people save the money for drinking.
  • Buy a cheap throw away cooler for refreshments and ICE in the room.
  • A laptop "AT YOUR OWN RISK" If you bring your laptop do not bring it to the Con, leave it in your room and even then disable your wifi, bluetooth, and do not use the hotel Internet.  Defcon's network, including the hotels, have been deemed the most hostile network in the world.  Even the cellular network is hostile and usually sucks anyway, "Thanks Ninja Tel". That being said, if you have a fresh wiped laptop and you want to partake in the festivities bring it just don't use it for anything other then hacking, and reformat when you get home.
  • Cell Phone, if you have an old school flip phone bring it.  If you bring your smart phone make sure to turn off the radios, i.e. wifi, bluetooth, etc. Nothing is safe.
  • Aspirin for obvious reasons
  • Your finest hacker tees, there kinda a big thing, and a comfortable pair of shoes.  You will be standing in some lines, imagine a Disneyland for hackers...
Useful Links:

Twitter to Follow:
  • @defcon
  • @DEFCON_NOC
  • @wallofsheep
  • @DC_HHV
  • @toool
  • @dcib

Hope to see you there, you can hit me up at @hackercult on twitter and the convention


Another Defcon and Holly Shit there where lot of people. I registered Friday morning and they had run out of badges. Defcon has out grown the Rio, and to support that theory where rumors the Con would be moving. For conventions over 14,000 attendees the options narrow.  On the Defcon Wikipedia page and the Defcon DC News site they list Defcon 23 will be at both the Paris and Bally's hotels.  Not sure how that will workout, but it definitely needs a larger facility.  This may be mis information though, remember Defcon is canceled every year.

The theme this year at least the talks I attended was Botnets... Botnets... Botnets...  The first talk I attended was Domain Name Problems and Solutions with Dr. Paul Vixie. His talk was a deep dive into how Botnets and other nefarious entities are exploiting DNS. The industries movement to provide convenient and low priced DNS names are fueling the fire.  He also went into analysis of DNS meta data and how it is used in DNS RPZ or a (DNS Firewall.) 

Don't DDOS Me Bro: Practical DDOS Defense presented by Blake Self and Cisco Ninja, was one of the better talks I attended.  They spoke about Layer7 DDOS detection and defense, and brought some real world data from their site soldierx.com.  They presented some examples of multi layer defenses from F5 rules to Apache tools. They also released their DDOS monitoring tool RoboAmp that will run on a Raspberry Pi.

Lastly and trust me it was a tough talk to get to was Catching Malware En Masse: DNS and IP Style. OpenDNS presented tools and techniques they have developed to identify bonnet and malware traffic on the internet.  They also presented an awesome 3D visualization engine they use to graph and identify this rouge DNS and IP traffic. 

Between the parting and binge consumption there was a lot to take away from this years Defcon. It was good catching up with old friends and meeting new ones, and I can wait till next year.


It's that time of year again, start planning for Defcon. For those of you that maybe haven't been before here is a little guide to help you plan.

When is Defcon: Defcon attendance has been growing every year, and for the first time it will be hosted at two hotels, Paris and Bally's. Its normally held towards the end of July or beginning of August. It's a good idea to get there a day early to buy SWAG and get your badge because it gets super busy the day of.

How Much is Defcon:  The registration fee has gone up a little over the last few years, but they will post the fee as we get closer to the Con. Oh ya, like most everything at Defcon - don't use the ATM.  Cash only.
  • Registration: $230
  • Hotel: Defcon room rates differ depending when you book, but Defcon usually negotiates a good price.

Where to Stay: Staying at the hosting hotel is a must.  It's nice to just head up to your room between talks, and attending the late night festivities are a breeze since you only have stumble to the elevators. Reserve your rooms early for Defcon, as some of us experienced the hotels sells out quick. 

Added bonus; If you stay at hosting hotels Defcon will stream the talks and schedules to the hotel rooms. This is not guaranteed this year since we will be in a new venue.  

What to Bring:  A few essentials I bring to Vegas.
  • Snacks because eating at the CON can get kinda pricy, plus a lot people save the money for drinking.
  • Buy a cheap throw away cooler for refreshments and ICE
  • A laptop "AT YOUR OWN RISK" If you bring your laptop do not bring it to the Con, leave it in your room and even then disable your wifi, bluetooth, and do not use the hotel internet.  Defcon's network, including the hotels, have been deemed the most hostile network in the world.  Even the cellular network is risky and it usually sucks anyway. That being said, if you have a fresh wiped laptop and you want to partake in the festivities bring it just dont use it for anything other then hacking, and reformat when you get home.
  • Cell Phone, if you have an old school flip phone bring it.  If you bring your smart phone make sure to turn off the radios, i.e. wifi, bluetooth, etc. Nothing is safe.
  • Asprin for obvious reasons
  • Your finest hacker tees, there kinda a big thing, and a comfortable pair of shoe.  You will be standing in some lines, imagine a disneyland for hackers...

Everyone interested in technology should go at least once.