1
00:00:01,620 --> 00:00:04,020
Hello, DEF CON Lockpick Village.

2
00:00:04,060 --> 00:00:05,840
Super excited to be here.

3
00:00:05,900 --> 00:00:08,760
This is my talk, Doors, Cameras, and Mantraps.

4
00:00:08,760 --> 00:00:09,740
Oh my!

5
00:00:09,840 --> 00:00:13,740
An overview about the ins and outs of physical security risk assessment.

6
00:00:13,960 --> 00:00:19,040
If you are curious about pursuing this as a career option, you are in the right place.

7
00:00:19,040 --> 00:00:24,760
If you want to learn about lockpicking, I'll mention some sources that can help with that later on in the talk.

8
00:00:28,760 --> 00:00:30,700
Here is a quick intro.

9
00:00:30,700 --> 00:00:34,180
I am The Magician, or Dylan, whichever you prefer.

10
00:00:34,360 --> 00:00:38,740
I am a member of the Open Organization of Lockpickers in Orlando.

11
00:00:38,740 --> 00:00:41,840
I am a security consultant with Gold Sky Security.

12
00:00:42,120 --> 00:00:45,540
I teach cybersecurity at the University of Central Florida.

13
00:00:45,540 --> 00:00:46,560
Go Knights!

14
00:00:46,640 --> 00:00:49,700
And I am an overall security enthusiast.

15
00:00:49,700 --> 00:00:52,640
This is really a hobby for me, as much as a career.

16
00:00:54,800 --> 00:00:57,080
What I do is straightforward.

17
00:00:57,080 --> 00:01:04,720
I explore client sites with the defenders in tow, so I can demonstrate for them any physical security vulnerabilities I spot.

18
00:01:05,400 --> 00:01:12,560
Bringing the client defenders with me allows for a teach-back while on-site, instead of solely in our report.

19
00:01:12,560 --> 00:01:14,460
It is an absolute blast.

20
00:01:15,340 --> 00:01:18,040
This mostly summarizes the process.

21
00:01:18,120 --> 00:01:21,700
I show them the vulnerability, and I tell them the mitigation.

22
00:01:24,470 --> 00:01:27,190
So, what are we going to discuss in this talk?

23
00:01:27,190 --> 00:01:30,510
This is not a lockpicking or how-to talk.

24
00:01:30,510 --> 00:01:40,230
This is more a talk about the processes and procedures, mostly about what we look for and how we relay the information to the clients.

25
00:01:40,810 --> 00:01:50,270
I will cover physical security controls, key questions I ask my clients, and how I go about educating the clients about risk mitigation.

26
00:01:50,550 --> 00:01:54,270
At the end, I'll talk about how to approach this field.

27
00:01:56,450 --> 00:01:59,870
Physical security controls start with the front door, I think.

28
00:01:59,870 --> 00:02:02,950
So, I want to start with doors and windows.

29
00:02:05,160 --> 00:02:11,500
There are a lot of mechanical components to doors, but here's a short list I tackle.

30
00:02:11,500 --> 00:02:15,660
Do perimeter doors have the hinges exposed to the outside?

31
00:02:15,660 --> 00:02:17,460
Those hinges can be exploited.

32
00:02:18,160 --> 00:02:24,800
Can I slide something between the latch and the strike plate to pull the door open without a key or combination?

33
00:02:25,220 --> 00:02:30,700
Can I get tools over or under the doors to manipulate the door handles?

34
00:02:31,340 --> 00:02:42,380
If I run across double doors, can I manipulate crash bars, those bars that go across the middle of doors that you can kind of push open with your hip so you don't need to use a knob or a handle?

35
00:02:42,380 --> 00:02:45,980
These are all resolvable exploits.

36
00:02:48,550 --> 00:02:55,030
While some windows can be opened or manipulated in similar ways, they offer different challenges.

37
00:02:55,030 --> 00:03:04,270
In a lot of office spaces, some clients don't have policies about shoulder surfing or looking over the shoulder of a user to obtain information.

38
00:03:04,710 --> 00:03:07,550
This is a physical security risk.

39
00:03:07,850 --> 00:03:24,670
If someone is trying to establish a good time for physical entry, maybe just what PC operating systems are being used, or even information as simple as what browser type a particular company is using, looking through a window is really low effort.

40
00:03:24,730 --> 00:03:30,270
This clip, by the way, is very much not a risk model my clients have ever asked me to test.

41
00:03:33,660 --> 00:03:38,100
The next physical controls are fencing and bollards.

42
00:03:38,100 --> 00:03:41,940
Both are passive and require little maintenance in most cases.

43
00:03:41,940 --> 00:03:48,480
Even though some folks are scratching their heads about what bollards are, don't worry, you've seen them before.

44
00:03:50,360 --> 00:03:56,540
Fencing is obvious, maybe folks have them in their homes or at work maybe.

45
00:03:56,880 --> 00:04:03,600
Fencing establishes a clear perimeter, if locked, clearly sets an expectation of limited access.

46
00:04:03,800 --> 00:04:13,180
It would take a heck of an improviser to explain to a guard why you are walking around a parking lot or building at a locked and closed facility.

47
00:04:13,500 --> 00:04:22,640
It's also near impossible to scale a fence in most environments without attracting attention, unless in a very rural location.

48
00:04:24,800 --> 00:04:36,100
You have all seen bollards before, they are the reinforced obstacles that prevent the use of a vehicle as a battering ram to create a point of entry in an otherwise defended structure.

49
00:04:36,280 --> 00:04:43,180
This is a very fancy hydraulically assisted version, but here we are at a Target.

50
00:04:43,740 --> 00:04:47,420
Remember when we used to go to Target in 2019 for groceries?

51
00:04:47,420 --> 00:04:48,640
Those were the days.

52
00:04:49,440 --> 00:05:03,960
In front of the store, these steel reinforced concrete spheres are not just to look cool, they actually prevent people from running their cars into the glass doors to gain access in off hours to steal random stuff.

53
00:05:04,640 --> 00:05:08,800
It's a pretty simple passive risk mitigation, I think.

54
00:05:08,800 --> 00:05:12,180
Full bonus, I just find it fun to say bollards.

55
00:05:15,000 --> 00:05:16,840
Next up are Mantraps.

56
00:05:16,840 --> 00:05:19,060
This is a super cool concept.

57
00:05:22,520 --> 00:05:25,820
Mantraps are completely underutilized.

58
00:05:26,140 --> 00:05:34,900
Sure, it's a challenge to get people through them, you'll understand why a flow of people can be interrupted in a moment, but I think they are really awesome.

59
00:05:35,000 --> 00:05:42,940
Many banks have them, and after seeing the next slide, I'm willing to bet a few of you are going to be sitting at home saying, holy cow, I've totally seen those.

60
00:05:45,240 --> 00:05:50,440
This is a great scene from the movie Sneakers, my personal favorite hacker movie.

61
00:05:50,440 --> 00:05:55,960
The lead character, Bishop, walks through a glass sliding door after using a magnetic stripe reader.

62
00:05:55,980 --> 00:06:02,020
The door closes behind him, and another door is in his way that uses a biometric reader.

63
00:06:02,080 --> 00:06:04,120
Now he has to get past that.

64
00:06:04,580 --> 00:06:08,160
Super neat control that I would love to see in more places.

65
00:06:11,070 --> 00:06:14,670
Cameras are a great security control for several reasons.

66
00:06:14,670 --> 00:06:22,070
If you have the means, I encourage you all to grab some power over ethernet or wi-fi cameras and try hacking them.

67
00:06:24,600 --> 00:06:28,120
Cameras are in most businesses and some homes now.

68
00:06:28,200 --> 00:06:36,920
If you have the funding at a job site, you can even have your cameras actively monitored in a SOC or security operations center.

69
00:06:37,100 --> 00:06:46,120
Lots of small to mid-sized businesses just record video and reference it in incident response if something goes wrong for forensic purposes.

70
00:06:46,380 --> 00:06:56,620
Video is easy to store and you could find out who took company property maybe after they got terminated or who was negligent in some security policy.

71
00:06:56,680 --> 00:07:03,860
There are many technologies in the world of cameras, but I firmly believe that wi-fi cameras specifically are a poor choice.

72
00:07:03,900 --> 00:07:07,240
Please reach out for that soapbox rant if you like.

73
00:07:07,720 --> 00:07:15,620
A fun fact about a lot security cameras is that often they aren't even powered on at job sites.

74
00:07:17,880 --> 00:07:29,920
Because I love surveillance cameras and have several to tinker with at home, my oldest son has developed a curiosity around them and likes to point them out when we are at theme parks here in Orlando.

75
00:07:30,280 --> 00:07:34,980
He can quite accurately count the number of cameras on the walk up to a structure.

76
00:07:35,520 --> 00:07:43,520
Would you have seen the two massive dome cameras on top of this archway at Universal Studios Florida if I had not put boxes in this photo?

77
00:07:43,800 --> 00:07:50,300
Heck, I can't even see them hardly with the boxes, but I assure you if you go to Google Maps, they are there.

78
00:07:50,300 --> 00:07:51,360
Go check it out.

79
00:07:54,080 --> 00:07:59,940
For electronic access, I am going to do a very light touch because it is quite a dense topic.

80
00:08:02,720 --> 00:08:08,460
Most of you are in an office environment and have some token that grants you access.

81
00:08:09,040 --> 00:08:17,320
A radio frequency ID badge that you wave in front of a reader that opens a magnetic sealed door might be your front door.

82
00:08:17,380 --> 00:08:24,200
A pin code that is shared among employees and janitorial staff might get you into privileged rooms.

83
00:08:24,220 --> 00:08:27,940
Maybe a fingerprint even unlocks the laptop at your desk.

84
00:08:28,120 --> 00:08:35,820
Grocery stores even have electronic sensors that know when someone is there and detect motion and open for you.

85
00:08:38,200 --> 00:08:43,320
All of these things can be exploited or copied in some way.

86
00:08:43,320 --> 00:08:47,260
I personally am one of the many cyborgs in the hacker community.

87
00:08:47,260 --> 00:09:07,120
I got an implant from Dangerous Things last year and can clone radio frequency ID badges to my hand and I use that to educate clients about the importance of cycling the guest badge so that way someone can't take that badge number and then come back with it and let themselves in.

88
00:09:09,970 --> 00:09:15,090
Next I want to talk about how to speak to clients in a productive way.

89
00:09:17,240 --> 00:09:21,100
What is your personal area of concern?

90
00:09:21,100 --> 00:09:25,800
In other words, ask a client what on earth they care about.

91
00:09:25,800 --> 00:09:32,300
I've demoed a parking lot to server room break-in in four minutes and had a client shrug their shoulders.

92
00:09:32,480 --> 00:09:38,000
Their dollars were in a manufacturing area in another more secure location.

93
00:09:38,740 --> 00:09:42,880
Ask your client what they want you to put time into.

94
00:09:42,880 --> 00:09:49,900
Being efficient is a good way to get repeat clients in a role where often you're billing hourly.

95
00:09:52,620 --> 00:09:54,900
Don't miss any doors.

96
00:09:54,900 --> 00:09:59,740
There is no shame in verifying with a client that you have tested the entire perimeter.

97
00:10:02,020 --> 00:10:06,360
Ask which doors get the most traffic and which get the least.

98
00:10:06,660 --> 00:10:18,500
Some doors may have super beefy security while another may be a smoking area door, has people flowing in and out of it throughout the day, and has less security favoring convenience.

99
00:10:18,800 --> 00:10:24,740
Those are good doors to test a tailgating attack where you try and walk in behind an employee.

100
00:10:27,450 --> 00:10:36,870
Because you truly are a guest in the scenario of being a security risk assessor, you can test guest access policies firsthand.

101
00:10:37,130 --> 00:10:47,670
In some cases, if it is in scope, meaning if the client has agreed to it ahead of time, try entering the client premises and asking to use the restroom.

102
00:10:47,670 --> 00:10:50,790
Then see how far you can get into the building unattended.

103
00:10:52,750 --> 00:11:00,150
If you show up and notice a robust check-in policy, maybe with a photo and temp badge, great.

104
00:11:00,190 --> 00:11:02,270
That is often not the case.

105
00:11:02,490 --> 00:11:04,070
Do you get an escort?

106
00:11:04,110 --> 00:11:05,470
Also a bonus.

107
00:11:05,710 --> 00:11:12,030
Can I keep an RFID badge and replay it when I come back next year for an assignment?

108
00:11:12,030 --> 00:11:14,670
Not ideal, but I've seen that before.

109
00:11:15,050 --> 00:11:21,630
Do you get watched like you're a suspicious hacker in a hoodie, or is there instant trust once you've made it past the perimeter?

110
00:11:22,230 --> 00:11:26,430
Final fun thing to look for if you get a guest badge.

111
00:11:26,570 --> 00:11:28,750
Where can you get in the building?

112
00:11:28,750 --> 00:11:33,730
You might be surprised to find yourself in a CEO or CFO office if you're lucky.

113
00:11:36,070 --> 00:11:41,290
Here we see some extremely robust guest security policies in action.

114
00:11:41,370 --> 00:11:48,310
Armed guards are monitoring a guest who is also restrained and has their tools confiscated temporarily.

115
00:11:48,590 --> 00:11:58,370
Someone in a security someone in security operations hands the guest off to a person of authority who is also armed for the purposes of communication.

116
00:11:58,370 --> 00:12:05,010
This is a bit much, but similar procedures are not unheard of in a military or DoD establishment.

117
00:12:07,280 --> 00:12:12,280
As a social engineering enthusiast myself, this is a huge topic.

118
00:12:12,300 --> 00:12:19,800
Entire companies are dedicated to just educating and empowering employees to act as part of the security team for a company.

119
00:12:21,800 --> 00:12:24,200
Here are quick points on the matter.

120
00:12:24,500 --> 00:12:26,820
Gamify your security training.

121
00:12:26,980 --> 00:12:33,100
A traveling trophy can go on the desk of the person with the least clicks on email phishing one month.

122
00:12:33,320 --> 00:12:39,300
Or maybe someone else who always locks their computer when they head to the break room.

123
00:12:39,780 --> 00:12:41,100
Be creative.

124
00:12:41,260 --> 00:12:49,160
Let employees know that they are an integral part in the security of their company and that they can be the first line of defense.

125
00:12:49,160 --> 00:12:52,320
Every employee is part of the security team.

126
00:12:55,310 --> 00:13:00,550
As a social engineering enthusiast, this is equally important.

127
00:13:00,550 --> 00:13:05,410
You want to make sure you're establishing rapport with your clients.

128
00:13:05,410 --> 00:13:07,770
You want them to want you to come back.

129
00:13:07,770 --> 00:13:11,970
Constructive criticism can be done in a very positive way.

130
00:13:15,310 --> 00:13:31,190
While there have been tons of talks about how to exploit mechanical components of physical security, there have been just a few that cover the specifics of educating the clients on how to go about resolving the exploits that you've demonstrated on the job.

131
00:13:31,510 --> 00:13:34,770
Constructive criticisms are the way to go.

132
00:13:34,770 --> 00:13:37,850
A positive focus is absolutely critical.

133
00:13:37,850 --> 00:13:41,050
Directed or accusatory verbiage is never productive.

134
00:13:41,050 --> 00:13:51,210
Saying things like, this is so bad, or I can't believe you set it up this way, need to be replaced with, we have some good opportunities here for improvement.

135
00:13:51,650 --> 00:13:55,350
Simple phrasing can mean a huge world of difference.

136
00:13:56,010 --> 00:14:03,690
Also, leading a client to come to their own conclusions through education and demonstration will work wonders for client morale.

137
00:14:06,030 --> 00:14:08,170
Here is the show and tell part.

138
00:14:08,170 --> 00:14:10,530
This really is my favorite part of the job.

139
00:14:12,880 --> 00:14:19,500
Showing the defender's vulnerabilities on-site is immensely fun and can have an extremely positive impact.

140
00:14:19,740 --> 00:14:27,920
Telling someone you can bypass a door versus showing them how has a huge difference in the likelihood that a mitigation will be implemented.

141
00:14:28,340 --> 00:14:33,020
This step in the process also gets the most heads popping into the room.

142
00:14:33,220 --> 00:14:36,740
It gets people excited about the security of their company.

143
00:14:36,740 --> 00:14:43,340
I have yet to run across a group of employees that doesn't show interest in an under-door tool or a latch slip.

144
00:14:46,270 --> 00:14:48,270
This is pretty big.

145
00:14:48,430 --> 00:14:53,930
This is all about soft skills and keeping people calm in an otherwise stressful environment.

146
00:14:53,990 --> 00:14:58,330
Fear, uncertainty, and doubt have no place when you're trying to be productive.

147
00:15:01,180 --> 00:15:08,080
You want to avoid saying things like, oh, this is bad, or you've done this incorrectly.

148
00:15:08,280 --> 00:15:10,220
Instead, be inclusive and positive.

149
00:15:10,220 --> 00:15:11,100
We can fix this.

150
00:15:11,100 --> 00:15:12,240
No big deal.

151
00:15:12,960 --> 00:15:16,140
Make sure that you're explaining things.

152
00:15:16,140 --> 00:15:17,580
You're not telling them.

153
00:15:17,640 --> 00:15:21,740
You don't want to just send an email with resolutions.

154
00:15:21,740 --> 00:15:24,300
You want to actually have a human conversation.

155
00:15:27,260 --> 00:15:33,380
This is pretty much the best explainer of fear, uncertainty, and doubt and why it can damage a client relationship.

156
00:15:33,760 --> 00:15:36,740
Fear is not a good motivator to get risks mitigated.

157
00:15:36,740 --> 00:15:37,980
Educate and empower.

158
00:15:37,980 --> 00:15:39,860
Never belittle or disrespect.

159
00:15:43,720 --> 00:15:46,940
Provide some means for clients to reach out to you.

160
00:15:46,940 --> 00:15:48,800
Don't be out of touch.

161
00:15:50,240 --> 00:15:57,320
A reputable company should provide you with a company email, and if you're lucky, a company phone number.

162
00:15:57,320 --> 00:16:05,180
This can separate work and home, and keeping a work-life balance in this particular career field can be challenging at times.

163
00:16:05,180 --> 00:16:12,480
Make sure to also set expectations about when you can be reached and how long it may take for you to respond.

164
00:16:15,260 --> 00:16:19,460
I feel education is the most important aspect of hacking and security.

165
00:16:19,540 --> 00:16:23,880
That's not to say that a four-year degree or anything like that is needed.

166
00:16:24,260 --> 00:16:26,080
Kudos if you're going that route.

167
00:16:26,800 --> 00:16:31,440
The different approaches to learning are varied, but here are a few.

168
00:16:31,960 --> 00:16:36,360
Podcasts, YouTube, and Udemy were big wins for me personally.

169
00:16:38,120 --> 00:16:46,480
If you want to get into lockpicking or just see some jaw-dropping feats of lock exploits, then look no further than Lockpicking Lawyer.

170
00:16:46,480 --> 00:16:51,460
The content on his channel is consistently enjoyable and never stale or boring.

171
00:16:51,460 --> 00:16:56,300
If you are an auditory learner, then podcasts are fantastic.

172
00:16:56,300 --> 00:17:00,620
Darknet Diaries is amazing, with great storytelling and incredible guests.

173
00:17:00,620 --> 00:17:05,420
The lessons learned are valuable and always come in an entertaining package.

174
00:17:05,460 --> 00:17:19,180
If you want to develop your own podcast, or if you want to direct your attention at certification to prove you know a specific skillset, then Mike Myers on Udemy has, I personally think, the best online content for CompTIA Security Plus and Network Plus.

175
00:17:19,580 --> 00:17:26,160
He does cover some physical security content in the Security Plus lecture, and he does it in a very fun way.

176
00:17:26,620 --> 00:17:32,420
These three are Bill Nye-level explainers, for those of you who are old enough to remember Bill Nye from the 90s.

177
00:17:34,460 --> 00:17:37,060
Well, not everyone learns from books.

178
00:17:37,060 --> 00:17:42,160
I know I certainly can, specifically if the content is fascinating to me.

179
00:17:42,320 --> 00:17:48,140
I tried to trim this down to a short list that I can recommend for everybody.

180
00:17:49,400 --> 00:17:58,020
Social Engineering, The Science of Human Hacking by Chris Hadnagy is a very professional and comprehensive guide to social engineering.

181
00:17:58,020 --> 00:18:08,400
If you want to learn more about that kind of engagement, Practical Lock Picking by Deviant gives you a more complete understanding of locks, not just how to pick them.

182
00:18:08,520 --> 00:18:14,580
The Art of Deception by Kevin Mitnick is super famous, and if you haven't read it, you really should.

183
00:18:14,640 --> 00:18:22,780
Although, I will mention that Chris Hadnagy's book is more of a scientific and professional approach to learning about social engineering.

184
00:18:22,780 --> 00:18:27,340
What every body is saying is very useful if reading people.

185
00:18:27,340 --> 00:18:30,600
This is helpful in everyday life as well as on the job.

186
00:18:30,800 --> 00:18:36,700
Just like previously, I wanted to throw in something strictly for those aiming at certifications.

187
00:18:36,780 --> 00:18:42,980
I really am a huge fan of anything and everything under the ExamCram brand.

188
00:18:42,980 --> 00:18:47,560
I really think they portray the information in a way that's very easy to absorb.

189
00:18:49,740 --> 00:18:56,700
This was a big topic for me, and I hope to emulate those who helped me and pay it forward, so to speak.

190
00:18:56,700 --> 00:19:00,920
Approach professionals and listen to talks.

191
00:19:02,180 --> 00:19:03,860
Be courteous.

192
00:19:03,860 --> 00:19:06,720
These people are busy and have their own lives.

193
00:19:06,720 --> 00:19:12,840
That consideration aside, security professionals are people and like to share their experiences.

194
00:19:12,840 --> 00:19:20,400
I have received an amazing amount of support from the security community and wanted to list folks who were large influences for me.

195
00:19:20,400 --> 00:19:29,340
I encourage you to pore over previous DEF CON talks and find individuals who share your personal mindset and speak to you specifically.

196
00:19:29,500 --> 00:19:35,320
Use the knowledge shared in venues like this to build an even stronger community of sharing.

197
00:19:37,540 --> 00:19:44,540
While I know I am biased as an instructor, I recommend taking guided courses if you are able.

198
00:19:47,040 --> 00:19:51,680
Here are some I personally plan to attend as soon as we are able.

199
00:19:51,760 --> 00:20:00,720
You can learn physical security, social engineering, or really anything you like in a course guided by a professional in the field.

200
00:20:00,720 --> 00:20:04,020
A textbook will never have all the answers.

201
00:20:04,020 --> 00:20:12,600
Being able to raise your hand and ask the what ifs and what about this type questions are hugely valuable.

202
00:20:16,760 --> 00:20:27,780
Since we are all at DEF CON, you all have already nailed this so well played, attending events and local meetups is a great way to meet new people and network.

203
00:20:30,440 --> 00:20:35,700
The people I have met in Orlando through meetups and events have truly driven my career.

204
00:20:35,740 --> 00:20:45,800
I was able to learn all the skills I couldn't practice because either I personally did not have the tools or the content online didn't quite break things down well enough for me.

205
00:20:45,880 --> 00:20:52,260
Just getting introduced to people that could help me understand things between the lines of textbooks was awesome.

206
00:20:52,260 --> 00:20:58,180
Huge shout out to the folks at CitrusSec in Orlando and DC407.

207
00:21:01,160 --> 00:21:08,440
If you see your city on the list, then that means there is a chapter of the Open Organization of Lockpickers in your town.

208
00:21:08,440 --> 00:21:12,860
I encourage you to reach out to your local tool group and meet some cool people.

209
00:21:13,000 --> 00:21:15,620
If you don't see your city, good news!

210
00:21:15,640 --> 00:21:20,960
You can now start a chapter in your town and find people that are into physical security.

211
00:21:20,960 --> 00:21:28,320
The Open Organization of Lockpickers, or TOOL, has been amazing to me and I love being a member.

212
00:21:31,160 --> 00:21:36,500
Second to last slide, I promise, but I want to say thanks to my family and friends.

213
00:21:36,540 --> 00:21:38,900
Mostly my wife and kids.

214
00:21:39,080 --> 00:21:44,380
Thank you for understanding when I disappear into my lab for hours at a time for random projects.

215
00:21:44,480 --> 00:21:48,740
Thanks Orlando hackers for just being total class acts.

216
00:21:48,740 --> 00:21:58,120
I want to thank TOOL for providing me an unbelievable networking opportunity and the ability to practice hands-on with locks and tools I would never have seen otherwise.

217
00:21:58,320 --> 00:22:05,340
Thanks GoldSky Security for the opportunity to learn and grow in an incredible supportive environment.

218
00:22:05,560 --> 00:22:07,620
DEF CON, thank you for having me.

219
00:22:07,620 --> 00:22:09,540
This event is so special.

220
00:22:09,800 --> 00:22:15,000
And to the hacker community at large, keep being curious and keep pushing boundaries.

221
00:22:17,420 --> 00:22:23,060
I love helping people who are getting started or maybe who are stuck on something.

222
00:22:23,080 --> 00:22:24,560
Feel free to reach out.

223
00:22:24,560 --> 00:22:28,720
I might take a bit to respond, but I will do my level best to help.

224
00:22:29,020 --> 00:22:32,600
This was a lot of information in a short amount of time.

225
00:22:32,600 --> 00:22:40,920
So if you want clarification on something, I am at 31337Magician on Twitter, and here is my LinkedIn if you prefer that channel.

226
00:22:41,020 --> 00:22:42,960
Thanks for listening to my talk.

227
00:22:42,960 --> 00:22:50,380
That's all I have on this topic, but feel free to reach out if you want to have anything answered that you are still curious about.

228
00:22:50,400 --> 00:22:52,460
Have an excellent day and enjoy DEF CON.