start	end	text
2750	7310	Some trouble with our slides, they're not working at the moment, but they're working on it. We're
7310	17650	talking to tech support in alt space about it. Okay, no problem about the slides. Can you hear
17650	23370	me well everyone? Oh yeah, so you want me to go ahead and I can... we're a little early yet,
23370	28170	we got about six minutes, but I can go ahead and introduce you whenever you're ready.
29330	36250	Yeah, please do. Thank you. Okay, welcome everybody. This is Defcon 30, alt space VR,
36250	42950	Defcon Group's presentation. We're having a little technical difficulty with our slides,
42950	46710	but they're working on that and they're talking to alt space VR tech support for it. In the meantime,
46710	51990	our speakers can go through the slides. We can make these slides, depending on the talk, we'll
51990	58870	talk to the presenters. Not all of them may embargo their slides, for instance, but if they
58870	63630	are willing to release them, we'll make them available so people can download them. Also,
63630	69330	we're available on Discord. You can always talk to us on the Defcon Group's VR Discord,
71530	77950	dcgvr.org. There's links there to all that information. So our next speakers are Mauro
77950	89690	Eldridge and Adan. They're both from Argentina. Mauro is an Argentinian hacker, founder of DC5411
89690	100090	in Argentina and Uruguay, specializing in hardware hacking and crafting madness of Ruby. He's a
100090	107930	speaker at over 35 events, so he's a very seasoned speaker. Adan is also from Argentina Hacker Group.
108370	113750	Member of DC5411. He's a junior hacker and developer learning
115250	121630	my way by playing with different languages and boxes, or I hope I got all that right.
121630	126570	So thank you for being here and feel free to take it away. Just you'll have to run your slides
126570	131610	locally. If you pick up a mic here, I'll drop this one. You can pick up these mics. You'll be
131610	136470	able to talk to everybody in the room. I'll also make sure I give you megaphone status,
136470	140190	which means that no matter where you are on the stage, you'll be able to hear you
140190	142810	throughout the entire space. So let me set that up real quick.
148540	152760	Okay, thank you for inviting us today. We're really happy to be here.
154240	159760	Okay, since the slides are not working, we provided on our Twitter and the channel
161460	166980	GitHub where we're posting in source code what we're presenting today and also the thoughts.
166980	171440	So feel free to follow from there. There's also a recorded demo
173540	180800	around the other day by playing with this. So feel free to watch it there too.
182860	192200	So okay, I will say this. Welcome to the talk. I'm Martin Valdez from today and me from PC54.
193160	204740	Our talk today presents this old tool called Gene. Think of it like a box or an acme,
204740	214200	but where the machine is sold. It's not only a mouse, it's a face. Think of it as a game
214200	221460	where you have a box that has a name, has a face, it has some quotes, phrases.
222200	229300	We can show you in this code, so it won't fall back. Think about it like a box.
230380	249460	It won't fall back without putting a thought. So I'm going to play this and I'm going to pass
249460	261790	the microphone to Adam to present. Hello there, my name is Adam DiBattista and I am a junior
261790	268810	hacker from Argentina. I spoke in the past for Argentina, India and Bolivia and this is my first
268810	276090	time taking for the USA. I am really happy to be here in the interest of showing the demo of
276090	290190	Exploit and Drown in some minutes. Okay, this will be an open-source tool, so we are happy to
290190	296810	share with you and to receive any kind of contributions that you make. It doesn't matter
458770	467830	if you are new to the channel or if you are new to the platform, we are here to help you.
469370	472330	If you are new to the channel or if you are new to the platform, we are here to help you.
477810	483730	Yeah, we're having some technical difficulties. Ability to present slides has gone down.
718560	735240	So, we are having some technical difficulties. Ability to present slides has gone down.
751700	778540	So, we are having some technical difficulties. Ability to present slides has gone down.
778560	793460	Ability to present slides has gone down.
817560	834540	Ability to present slides has gone down.
844240	865360	Ability to present slides has gone down.
902260	903660	...
904560	905840	...
909360	910060	...
910060	911760	...
915400	916800	...
916800	917800	...
923080	924480	...
926480	927180	...
928740	930140	...
933600	935000	...
966300	971300	Now, I'd like to share with you a little bit of history.
971300	975060	Some of the things we've done for fun,
975060	978220	found a way for the community to get together,
978220	984140	and we've come up with this crazy scenario of curfew changes.
984260	988960	Again, everyone will contribute what they can.
990860	996280	Some of the things we've done for fun,
996280	1000580	found a way for the community to get together,
1000580	1012200	and we've come up with this crazy scenario of curfew changes.
1012900	1016900	Again, everyone will contribute what they can.
1016900	1018940	Again, everyone will contribute what they can.
1031640	1050740	I don't know about anybody else, but I could definitely see the GitHub screen there for a good bit of the presentation.
1055500	1061120	Yeah, we put that screen up with the GitHub link.
1061120	1069800	The reason we did that is that people using an actual VR headset would not be able to see a URL that we posted.
1069800	1073260	We also posted it over on the screen here on the side, but it got cut off.
1073260	1080120	So they posted the actual GitHub page on a screen temporarily during the presentation so people could get the link.
1080120	1088020	If you go to defcongroupsvr.org, you can connect to our Discord server.
1088020	1091560	We can give you the links that way as well.
1091640	1095520	And they've made their slides available on that GitHub page as well.
1095520	1098620	So thank you to our speakers. That was an excellent presentation.
1098720	1100080	Thank you for that.
1101280	1105600	If anybody has questions right now they would like to ask our speakers, feel free to ask.
1110890	1113670	Are you all avid D&D players as well?
1115690	1123950	No, you know, to be fully honest, I just saw some campaigns of D&D on Warhammer 40k, but I never played myself.
1131210	1134690	What was the hardest part of making all this, would you say?
1135830	1147490	The hardest part for sure was that once you submit the form, we need to replace all the string you submitted to the Ruby template,
1147490	1154410	where they would, you know, to fill the API keys, the strings that the boss is going to say, and we use placeholders.
1154410	1166670	You know, we use a highly specific variable name, which needs to be replaced with GSOV, or something like Unix Set, S-A-E-D.
1167710	1172030	And the bad part is that this messes up everything.
1172030	1178110	Because the backend sometimes will just catch a single quote or catch anything and it won't run at all.
1178750	1181190	Debugging that part was really hard.
1190600	1196160	Would you say when you started this project that you knew what the end of it would look like exactly?
1196160	1200740	Or was it just kind of an idea that just kind of grew like an initial idea?
1202220	1210600	Well, this is a really early stage. We couldn't exactly figure out how many conditions we wanted to implement.
1210600	1219240	Actually, we have a list of all the things we would like to see implemented, but we can't materialize lots of these ideas.
1220400	1230040	And that's a good thing for me. Part of the project is foreseeable. We can see how it will look like.
1230040	1237140	But another part is still quite ethereal. We can still yet figure out exactly how to make it.
1237180	1243660	And that's fun, because you need to resort to a lot of people from different backgrounds to ask,
1243660	1250680	Hey, can we do this? Can we get this information? Can this be done this way?
1250920	1254760	So yeah, there are a lot of things that are still undefined, to be honest.