That's kind of silly honestly. I can see where they are coming from but the people at the conference are the good guys. If I were them I would get some of those security professionals to give suggestions on how to have better security. Also random room checks aren't going to catch anything. Anyone who wants to cause harm isn't going have such bad opsec. You will end up catching people with legitimate and highly dangerous stuff like routers, network switches and vacuum cleaners
this post was submitted on 14 Sep 2024
155 points (95.3% liked)
Privacy
32723 readers
359 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Just FYI, you need very little skill to clone the WiFi access gateway of a hotel WiFi, and then blast their SSID from your router, to lure close guests into your honeypot. Once people are on your malicious gateway, the fun starts.
In a hotel with hundreds of hackers on alcohol, it's not unlikely for people to fuck around.
There is also no requirement to be a "good guy" to attend the conference.
There is also no requirement to be a "good guy" to attend the conference.
Correct. But it's kind of the inevitable outcome that only "good guys" attend. Why would any bad actor go there and risk being exposed / caught...
In short, untreated mental illness
Defcon is a useful resource for networking and learning. It being run by and for good guys doesn't mean bad guys don't find the event useful. The vague risk of "getting caught" is probably worth taking, regardless of whether that risk is tangible, especially if they follow proper security practices.
Isn't also a game at defcon to spread a harmless package to as many devices as possible?
Hopefully that would get flagged. If you start broadcasting that will show up under rouge ap detection
Right. And then they locate it and search the rooms nearby. Exactly what their disclaimer is about
vacuum cleaners
Why would someone bring their own vacuum cleaner in a hotel room?
The automatic vacuum cleaners have lots of security issues and are often a common target at blackhat
Your title is terrible. Use the article's title.
Agreed. I really dislike editorialised titles.
It's not a title, it's an opinion. Having said that, I agree, it's terrible as a title. Fixed (I think).
Fedcon
We have confiscated all the laptops we could find sir. They had a TERMINAL open. Filthy hackers!
I can also imagine some talks getting disrupted after the speakers demonstration gets confiscated
"is that arch Linux?!"
Bold of you to assume they know what a terminal is.
But they were hacking all the IPs simultaneously!
They had 127.0.0.1. That's my IP!!!!
What are you talking about, that's mine scumbag!
Reminds me of the bash.org Napster entry. For posterity:
#104052 + (14264) - [X]
<NES> lol
<NES> I download something from Napster
<NES> And the same guy I downloaded it from starts downloading it from me when I'm done
<NES> I message him and say "What are you doing? I just got that from you"
<NES> "getting my song back fucker"
Mine is 127.43.3.59
TIL you can set a custom one
Even better. If you are programming all networking H/W yourself, you can even ignore address conventions and reserved addresses.
Well no
127.0.0.1/8 points back to localhost
People you dont want to piss off:
- Mother in-law
- Worlds greatest hackers
- The IRS
They should boycott the hotel next time. I'm sure there are plenty of other places that would accept them
For real, this convention has been around for a long time without issue, we should poke the bear.
Barges into room.
Them: “Are you hacking, son?
Me: “No.”
Them: “Cool. I’m just a hotel employee, and I only have understanding of computers at an end-user level. Plus, I see you’re not wearing a hoodie and sunglasses while being hunched over a laptop. Have a nice day and enjoy your stay at the Hilton!”
most accurate portrait
A hotel confiscating random stuff would be considered theft and the hotel employees arrested in any civilized country.
The US stopped being civilized a while ago.
view more: next ›