All right. Test, test. Here we go. It's the closing ceremonies for DEF CON 30 where we'll
give you the seat, but you'll only need the edge. I tried. Okay. We got everything going
here. We got the slides up. And I'm going to welcome you to the final session of DEF
CON 30 homecoming. Thank you for sticking around, everybody. Give yourself some applause.
This is one of the only times I really can enjoy drinking a beer, because normally when
I do, something bad happens, and then I'm not totally functional, and so then bad things
happen. But now what bad thing could happen?
Even at closing ceremonies. It's going to be fine. It'll be fine. Okay. Here we go.
Next slide. Look at that. I want to call out Slee Stack for designing that logo. We were
having a brainstorming session, and I woke up the next day, and that sort of just came
to him.
And it was just such a brilliant summation. All the other ideas were like, okay, that's
it. That's the logo, and it just came together really well. It was awesome.
But before we get going, every year I like to really call out and have us just take a
moment of silence for all the hackers that came before, the people's shoulders we've
been standing on or are standing on, and we'll just be quiet for a minute, think about all
your friends you've lost.
And then we'll really kick this thing off. So just a moment of silence, please.
Yeah, it was a pretty tough year, but coming in the escalator here, when I saw all of you,
just like the buzzing energy, I felt like there was this invisible weight that was lifted
from my shoulders. It was invisible in the sense that I didn't know it was still there.
I thought I'd sort of unburdened myself, anyways, I was like, okay, get this thing
throughout the year but no when I saw everybody it was awesome and so by show
of hands did anybody else feel the same way or am I just freakish yeah yeah it's
just this really cathartic like here are my people and this is awesome another
thing that was sort of awesome is is this guy
and it kind of really reminded me of the bees for those of us that got trapped at
the hotel on the last day when the bees were swarming by the pool yeah and so so
you have now experienced some extra Defcon mystery lore and you're free to
retell the storm to whatever biblical
proportion you want and that was what made us made this one really memorable
okay so for a homecoming theme I want to call out thirty years of history and
there are some people that are still been engaged with Defcon as goons or in
support or still around that attended the very first Defcon and this year
this was the first one to go.
At 30, there's two people we could identify that were at the very first DEF CON.
And so I want to have a call out, a shout out to the debt addict.
And I want to call out to the prophet who has been doing the TeleFreak challenge.
So if you're in the room, prophet.
Now we've got something a little special right now, if I could ask all the red shirt goons
to stand.
Everybody, all the red shirt goons stand, please.
We're also going to recognize and give a 30, 3-0 year goon patch for all the contributions
of gooning over the years to stealth.
Okay.
You didn't know this was coming, did you?
This is a one-of-a-kind 30-year goon patch.
You have been to every single DEF CON you could physically get a visa for.
The countries that won't let you in, then sorry.
I don't want to go there.
Okay.
So why do you keep doing it, man?
I keep asking myself that question every year.
But I think the answer is that it's just such a great community.
And getting involved when I didn't know any better, I guess I've just kept being involved.
And I love helping people and being part of this conference.
And every year we get new challenges and somehow all the goons, they rise to the occasion.
And it's really just become a family.
This is truly for me a family reunion with my fellow goons and all of you.
It's an exceptional experience.
And it's not a job.
It's a lifestyle.
I don't know how to do anything else.
Thank you so much.
Thank you.
And something we have never done before, we figured we may as well start now.
30th anniversary.
We have what I'm calling the Uber contributors recognition.
There's two people.
Two people.
Two people that we're recognizing as Uber contributors.
And on my right, hidden underneath this flag, are the Uber contributor awards.
So I'm going to go now, surprise you by revealing them.
They are about five pounds of solid aluminum.
So carry that on.
Okay.
So there are two people.
One is here.
One was supposed to be here.
And due to complications, they could not, which was sad.
But here are the recipients.
Lost boy.
.
Come on up.
.
Okay.
That's a little bit of a surprise for you.
So if you can't, the inscription reads Lost Boy, the original puzzle master in spirit
of inspiration.
I think that's pretty accurate.
All the work Ryan has done inspiring people, taught people, the way he's built the puzzles,
the way he's included people and challenged us really, I think, took DEF CON to another
level.
Give us a round of applause.
I don't want to get emotional.
DEF CON represents many years of my life.
And trying to give to this community.
And to draw people together.
So those of you who have been following my stuff, you know, my designs, everything I
do is meant to make you interact, take care of each other.
And that's all I would say is just don't be an ass.
And I'm going to give you a round of applause.
Woo!
I knew Ryan, I knew Lost Boy was a keeper when he had some hat on with electronics and
wires sticking out.
That's what I like.
The second Uber contributor award goes to Richard Theme, Neural Cowboy, who was a first
year speaker at the first Black Hat.
And I've known Richard for a long time.
And his inscription reads, Seeker of a deeper meaning, an explorer of the unknown.
If you've ever listened to a Richard Theme talk.
And, if you have.
Please tell me what it meant.
Everybody that heard his talk came away with a different message.
And what he's trying to do is synthesize a lot of how do you know the unknown.
And I think he forced us or encouraged us to think differently.
I couldn't always follow it.
But I wanted to, man.
It always felt like Richard was channeling something into a place that I wanted to be,
but I couldn't fully get there.
And that's unusual, especially for geeks,
where we think we're the masters of all the known.
And because of that, I think he really helped our community progress.
And I'll be getting his award to him.
I'm going to leave it up here in case people want to take pictures of it later and everything.
You get a closer view of what an award looks like.
But that's something new.
Thank you for DEF CON 30.
And I really appreciate you being along for the ride and seeing that.
Yeah.
Okay.
So by show of hands, how many people enjoyed the musical interactivity of the badges?
Yeah.
Wow.
We've never done a musical badge that I'm aware of.
And so that was really nice and novel.
And like all badges, we wanted them to be interactive.
And so to tell us a little bit of the story,
I'm going to bring up MK Factor, the designers.
Compu Mike and Mike's...
How do I say that?
Mike's wife.
Twitter handles.
Come on up, MK Factor.
Thank you, sir.
Talk a little bit about the, briefly about the, you know, the design.
Is there any problems?
How do you solve them?
And then the user manage.
Just tell them a little bit about it.
Okay.
Cool.
Hi.
This is not scary.
Okay.
So...
There's a lot of your beautiful faces.
Like a lot more than last year.
A lot more faces this year than last year.
It's a little terrifying.
Yeah.
So thank you to everyone who helped.
We had tons of people helping assemble badges.
This year and get it all ready.
Okay.
So thank you to everyone that helped us.
Yeah.
We wanted a musical badge.
Something that would be fun for everyone to interact in a different way than you normally interact with the badge and with your fellow attendees.
I hope you got to do that.
We did have some crazy issues.
For those of you who burned up the audio amplifiers on your badge, I'm sorry.
We do have a workaround posted on Twitter.
A couple little solder jumpers.
And you can get audio.
We're working again.
Anything you want to add?
I hope some of you found a new passion for some music.
Some that never tried it before.
That was my hope.
Now for our Uber badge.
I don't think we have a picture of it because that's our badge.
Yeah.
So it's kind of double sided.
So we have one side.
So this side is the back.
Technically we have the...
Oh my goodness.
Words are failing me so bad.
The Jack.
The Jack.
Thank you.
He's in there and he's glow in the dark.
And then we have pieces falling like there's debris of different components of things of for circuit boards.
It also lights up.
That's you.
We're going to go with you now.
There it goes.
And then the back side is a picture frame for homecoming.
So you can put your homecoming picture in it.
So.
And then it also says we have recorded Jeff's voice.
Saying.
Defcon Uber badge.
Let's see if we can get it to work.
Please work.
You're welcome.
Congratulations, you're holding a Defcon 30 Uber badge.
So thank you, everyone, for making this an awesome year.
Thank you for putting up with us.
Thank you.
Thank you.
Thank you.
Now we're going to talk a little bit about what happened from a transparency perspective for those of you who don't know, we instituted a code of conduct policy years ago and then a couple of years later to try to hold ourselves accountable, we started publishing a transparency report.
And the idea is that we have these standards and then we want to show you.
That we're actually following our own standards.
So there's sort of a loop there.
It's not just one-sided.
And so where is CJ?
CJ?
CJ?
There you go.
Okay.
So CJ is the number one of our SOC team.
And so it is his responsibility to deliver to you the transparency report.
CJ.
Thank you.
It was an interesting year.
I was here last year and it was probably one of the most mellow cons I've ever been to.
And so I was expecting this to be a bit kind of crazier and it was in some regards.
But it was also still pretty mellow in a lot of regards.
Like you walk down the corridor and people were greeting everyone like old friends.
That was really cool to see.
That said, there was a lot of stuff that went on.
I'd also like to say the transparency report is five years old.
Today.
We had 12 calls for medical assistance.
Most of those were alcohol related.
Not me.
I can't drink this year.
Masking was probably the most challenging thing we had to deal with this year.
It's got to be clear that people are tired of masking.
But we still need to do it to keep people safe.
So that led to a lot of friction.
My team had to keep reminding people to do it.
Some folks took offense to that and pushed back.
We ended up with three badges revoked.
One individual who ended up banned from the conference.
And what else was there?
Many requests to put masks on.
And at least nine people decided to leave the conference rather than wear a mask.
Members of the press, three press badges were revoked this year.
This is why we can't have nice things.
One member of the press was banned.
And one news outlet was banned.
Thank you.
Thank you.
Oh, you can say OAN.
It was OAN.
Only the second news outlet ever banned.
NBC was the first.
So Geoff just reminded me this was the only second news outlet we've ever had to ban.
The first one was NBC.
And I don't mind about that.
Do any of you remember that?
The Dateline report?
coming undercover and having to be chased out that was fun times it's still
on YouTube hotline took 34 calls and 14 texts three paraprofessional consulting
calls for code of conduct violations three calls about masks five
accessibility concerns and many many calls about hotel registration and I'd
like to make it clear we cannot book you rooms cruises or anything else code of
conduct violations so we had a fair few of these and it shows that we are
so we had a number of violations that read to warning letter warnings we had
one of verbal harassment we had one for aggressive and threatening behavior we
had to remove two goons from staff for violating the code of conduct and we had
one person removed from by the venue security for threatening behavior
unfortunately there was also a rise in sexual misconduct
this year
mostly offenses like harassment this is none of this is acceptable and I want to
point out that we have a zero tolerance policy here my team will find you
and we will delete you
we had five cases of unwanted touching to the perpetrators were tracked down with
the assistance of hotel who gave us access to CCTV and a lot of tracing they
were identified and they were permanently banned from the conference
a former attendee who had assaulted a another attendee in the
previous conference about two years ago was identified before con and was also
banned permanently
I want to encourage everyone to reach out to us and use our safety their
email address send us reports give us the power to track these people down and
remove them and we were more effective this year because
of reports and because of quick reporting than we have been in any other year and I want to see that
trend continue. One last personal favor. I run an unofficial check on how many people pick up
COVID during the con. I did it last year. So if anyone tests positive or knows someone who tests
positive, reach out to me, Twitter, DM, whatever. You'll be anonymous. We just want to get a count
because it tells us how well things are working and it helps us guide us for the next year. Thanks
all.
Next up, we're going to get an overview of what happened with the media.
Next up, we're going to get an overview of what happened with the media. Next up, we're going to get an overview of what happened with the media.
Next up, we're going to get an overview of what happened with the media. To let us know, I'm going to introduce Wednesday,
to let us know, I'm going to introduce Wednesday, head of press.
.
So the first things I want to know is my team doesn't hate that reporters are here.
So the first things I want to know is my team doesn't hate that reporters are here. And I know that a crossing of you all also don't hate that reporters are big here because
Because your PR team keeps calling me. So this year, we had a swap and I didn't get to remain in this
had over 70 credentialed individuals so those are people walking around with the
green press badges this is a smaller number than we had in the before times
but definitely a huge increase from the handful of reporters that we had last
year and what I think is significant to note this year is that nearly half of
these individuals are what we consider non-traditional media meaning they're
perhaps they're not coming from a traditional news outlet so we have a
lot of really talented people in our community who are contributing content
through blogs YouTube channels podcasts and all of these individuals are welcome
to request press badges from our team and those and I'm really excited to see
that there is more of those requesting badges from our team and continuing to
report and create content from the
conference and the conference and the conference and the conference and the
conference and the conference and the conference and the conference and the
community so if you didn't request one this year but you fall into that camp
please consider requesting it next year we're actually going to start creating
some new programs and opportunities to give you even more access and
behind-the-scenes information and experiences because we love when people
from the community are the ones that were reporting back to the community
Okay, Jeff thinks this is interesting, so I'm going to share it.
So one of the things that I want to note is it's actually been more than a decade, like
even pre-dating me, since we have deliberately invited reporters to DEF CON.
I have never extended a single invitation to a reporter to come to DEF CON.
They just come anyways.
But in the early days of DEF CON, when we were small and hacking was less mainstream,
the press team did put a lot of effort into inviting media into the community and to help
make sure that we were really addressing.
We were addressing inaccuracies, misperceptions and confusion about what hacking was in general,
as well as the DEF CON community.
And over time, the function of our team has really shifted away from proactive PR efforts
and more about issues management.
So that transparency report, which I love that we're doing it, it creates a lot of work
for my team.
Because you know, one of the we get a lot of questions about it, and those are the types
of questions that we like to get because we like to push the organization to be even
more transparent and to share more information with all of you.
I have been a reputation management expert for a very, very long time.
And secrets are very expensive to keep.
So I love to see the transparency that DEF CON has been increasing over the last couple
of years.
I'm thrilled that our transparency report, as CJ said, is now five years old.
It is really difficult for organizations.
It is something that I'm really proud of and I commend CJ and his team and Dark Tangent
and everyone for actually really pushing that forward.
I also want to note we had a special contingency of journalists from the Norwegian Institute
of Journalism this year.
This is particularly exciting for me because they were invited by a member of our community
who has been working with them over several months.
Got them all together.
Worked with my team to get them registered with the proper credentials and then took
them around the con and introduced them to all the different villages and helped them
understand what's happening within the community.
And so those are the types of things that we're going to try to integrate more for next
year so that there's more opportunity to do education with press so they're not walking
around with a scarlet letter with their badge but are actually being invited by the community
to learn about what they're doing.
The more hacking and other cybersecurity issues become more mainstream, it's really
important that we're not just educating press but through educating press, we're actually
educating consumers, right, and end users of all these technologies.
So it's important to us that we welcome the reporters who come and follow our rules.
As CJ mentioned, there are a couple that didn't.
They will not be allowed back.
But...
We have one rule for the media that attend here.
And that is that they have to respect the privacy of our attendees.
That means advanced and explicit consent before taking a photo or video of everyone.
That's a very simple policy to follow in theory.
It's difficult for news outlets because they like to get video of everybody's faces.
But I'm really, really proud and really appreciate that most reporters have really not just accepted,
and honored this, but really adapted the way that they work in order to demonstrate respect
for our community and for all of you.
That being said, it is increasingly difficult for my team to enforce that policy when we
don't treat each other with the same respect.
So when you are taking photos and videos and sharing them online and on social media, please
be mindful of the fact that if you don't want a news outlet to do that to you, consider
not doing it to your neighbor and your fellow.
And so as CJ mentioned, we did have a couple of badges that were revoked.
We did have to ban an outlet.
And I do want to mention that the NBC ban from a couple of years ago was actually because
they were filming in the casino.
I told you during the DEF CON.
101 panel, don't fuck with the hotel or the casino.
When you get escorted out by casino security, there is nothing I can do to get your badge
back.
So we now have ‑‑ we're up to two outlets that are, you know, outlet‑wide bans.
And then, you know, a couple folks that couldn't follow the rules and maybe next year we will
consider giving them a second chance.
But before I close, I want to think.
I want to thank everyone who is helping to educate their corporate PR and marketing teams
about what DEF CON is and what DEF CON isn't.
And how to engage with us appropriately.
I sincerely appreciate the improvement that I have seen in Village sponsors who are participating
to support our community instead of exploiting it.
So thank you.
.
Well done.
Thank you.
Thank you.
Thank you.
Thank you.
REN8.
Riverside, Riverside.
Calling on Riverside.
Better get up on stage.
Okay.
DevOps is the group that runs our Discord and the number one of DevOps is Riverside.
BRENDAN GALLON, MARKET
J، ZT6 18
I'm going to go through some of the stats and talk a little bit about the Discord as
well as all the other activities that the DevOps team has been doing.
So we've kind of grew out of a necessity to keep the community around the world together
and keep everything flowing when all things were shut down and make sure that we had a
thing and the thing just keeps growing.
What we ended up turning into was a team helping automate things and build things, putting
together con mod boards and writing code and helping the back end team that, you know,
caught man and those folks to make the DEF CON infrastructure better, more stable, more
smooth and automate as much as we possibly can.
And so these are some of the stats that we threw together on the Discord specifically,
but I'll talk about a couple other things.
So this year I'm knocking on the podium, I mean, it's been kind of crazy, but we had
no downtime, which was awesome.
Thank you.
I noticed lots and lots and lots of people on Discord during con asking each other where
they're going, where the parties are, what's going on.
How many of you used Discord during the con, if I raise a hand?
Wow.
That's impressive.
So it's going pretty solid.
So this year I'm going to actually switch down to the bottom line.
We had 15,000-plus lines.
And because of the way that the community works and Discord and all the automation,
we actually changed 40% of the entire code base this year.
So the team is not just a weekend warrior team.
This team works year round to try to make things happen.
And so they did over 6,000 lines of new code to make things better for all of you.
Three new bots.
Lots created.
We have almost 500 Discord channels.
We still break records on the amount of Discord channels and a lot of other things.
I mean, we have insane amounts of stuff going on.
There were 55,000 messages sent in just core channels, not all the stuff between all of
you.
We tax the hell out of the things that we have.
But they're holding up.
They've been a great partner to us on making this happen and keeping the community together.
Seventy-seven percent of the members on the Discord have been there for more than a year.
So it's not just for me.
It's not just fake accounts jumping on and doing a thing.
These are real people, part of the community that have been doing this and connecting.
Every weekend I see people on there on the chat talking and hanging out from around the
world.
It's pretty awesome.
All the files sent.
We do, you know, virus scans and all the things that happen above and beyond the Discord.
So I think they're safe maybe.
And then, yeah?
Okay.
Okay.
So 33 percent of the people that were on there were from outside of the U.S.
And that was the way that the folks from outside of the U.S. were able to participate this
year.
Thirty-three percent of those.
And so all the international contestants for the competitions were going through Discord.
And they really sent a lot of notes thanking us for making sure that happened.
Three issues were issued or three warnings were issued.
No bans this year, which is amazing.
Yeah.
Yeah.
Here are some stats you guys can look at later.
And then right here, we helped out the Black Badge raffle.
So if you notice getting disqualified from the Black Badge raffle, that was through there.
And I'd like my DevOps team to stand if you wouldn't mind.
Woo!
And the packet hacking village folks that spent all the time testing all the bots and
doing all the stuff.
This is Fox over here with the red hat. She's the second who's been an absolute rock star on all this stuff.
I want to just thank you personally for everything. And with that, thank you.
All right. Keeping us connected in a brand-new facility with new infrastructure.
The number one, Louise Effin, come to stage. Tell us what happened with our packets.
Where did our packets go?
Hello, everyone. My name is Effin. I'm here with Mack, number two for the NOC.
We're going to talk a little bit about what happened.
Before I start, and I can barely see you,
but how many people use the Wi-Fi network here?
Quite a lot.
How many new people? How many people is their first DEF CON?
That's excellent.
Well, welcome. It's about the same.
Okay.
We like this new place. Thank you, Jeff.
Yes. New place, good.
And we still like Guy Fieri.
And we like you.
We like it even more because it's so close to Flavortown now.
So I'll turn it over to Mack.
Mack is going to walk you through what took us to get you here, to get everything working.
Mack?
So, like, a lot of teams work throughout the year to get stuff going.
We get to be one of the teams that gets on site a little bit early to get some stuff here.
So for the last couple of months, we've actually been bringing up gear
to leave in the forum space to be ready,
such that it's not such the kind of frantic scope that we see as we get here.
So that's been for the last few weeks, or last few months.
Once we get here, there's a little bit of shoring up what's there,
and then kind of go drop in.
We start on Monday, and we are just running everything that needs to be there.
We set up access points, we do any patching, we do last-minute requests
as it goes through the week.
And then, you know, kind of goes a little bit more with more last-minute requests.
And then, to be quite honest, and don't tell Jeff this,
but we did nothing like Friday and Saturday, which is a first.
So, yeah, so the rest of it has been today is our teardown,
and then, of course, we're supporting the training.
Tomorrow is Tuesday, and the last of our team is out of here on Wednesday.
And that really is one of those things where it's like, you know,
it's still amazing that we were able to enjoy ourselves.
Just to give you a high-level layout, you know,
in this particular case, it largely is a star network.
We come down from the Internet, distribute to each of the sites.
The link is a little bit of a satellite site to the forum.
And then we just kind of put all the edge switches down,
and then access points below all of that.
Giving you an idea of the scope of the gear,
there were three firewalls in that picture, four distribution or core switches,
21 edge switches, or politely known as four Prius cargo loads of edge switches.
Some unmanaged switches, cloud monitoring,
infrastructure, the WiFi reg server for WiFireg.defcon.org,
support the media server.
And then a lot of it, which is what a lot of people see,
is the Aruba infrastructure.
We used a total of four controllers between our gear and Encore's gear,
one of our partners here at the forum.
We have 45 of our own access points, and then up in the sky,
there's 318 access points.
Which is...
Space is big.
It needs it.
So...
We support everyone that we can.
Even odd requests that come in, last minute requests,
you know who you are.
We try to do everything that we can for them.
If we can't, it's usually because we're limited by some physical capability.
And even then, we try to break through them.
So thanks to everyone who helped out and worked with that.
And now for the victory parts.
Thank you, Mac.
So just going through the numbers, not going to go through everything.
The slides are going to be posted on NOC.defcon.org.
You can download them in about a week and a half.
But we use more traffic than before, which is expected and great.
And I put DC27 there because that's when we had a lot of people here.
Right?
So we used a couple more...
We transferred a couple more terabytes of data for you guys throughout this year.
What else is interesting?
Over 8,000 different number of devices on wireless.
Provided some of the new phones and whatnot.
They do some MAC address randomization and stuff like that.
So the number might be a little skewed, but let's go with that.
There's no way to track that.
Challenges?
We had none.
Again, first time ever.
Other than Mac driving here three, four times to bring gear and all that stuff.
Right?
He likes driving, so whatnot.
But, yeah, no major problems this year.
That was good.
What is new that we implemented this year?
We finally have a new ticketing system that we track the requests that we get from the different teams.
We were testing some services to the Internet.
Continuous monitoring.
Not monitoring, but testing.
Just to make sure that not all, but most of the stuff that you all use is accessible.
And also make sure that our stuff here, DNS, DHCP, and all that good jazz doesn't get broken.
One of the networking goons installed Enzyme.
Probably you guys know this better than I do.
To do some monitoring, we just did close to the NOC and we saw some stats.
There is a slide with data that I'm not going to go through.
And there is an ESS ID for WPA3, but WPA3 is fully supported on Linux and Android.
But we had over 400 devices using that.
So really cool.
Pictures, pictures, pictures.
And I want to thank the NOC team.
They put a lot of work here and a little bit before.
Thanks to Mac for what he does.
And I want to also thank our families for allowing us to be here for over a week sometimes.
So a round of applause for them.
Last but not the least, I want to thank everybody who's on this slide.
DT, Nikita, Janet, all the department leads for being super helpful and understanding with us.
Providing what we need.
QM, Cesar's IT and Cesar's SOC, Encore.
Without them, we cannot do what we do either.
And all the goons here, they're super helpful with us.
They try to help.
But when anyone has any questions about anything, they try to help before coming to talk to us or their department leads.
And Guy Fieri and you.
Thank you.
So by show of hands, how many people stayed within the hotel block?
All the hotels that we tried to promote.
Okay.
Of those people, who watched DEF CON TV in your TV?
Awesome.
Okay.
The people that bring you all the streaming both on the interwebs and in your hotel room, the DC TV network.
Getting up so you don't have to.
Video man, number one.
Come on up.
Tell us what happened.
And Morgan, number two.
Thanks, Jeff.
All right.
So how many people actually watched on Twitch?
Show of hands.
A few people.
Okay.
Well, basically our infrastructure is pretty big.
We also get here the Sunday before.
And we deploy out to the seven different properties.
We deploy to 28 different channels in the hotels.
20,000 hotel rooms.
Which I guess is significant.
So if you want to watch the talks in your room and not have to worry about Internet, book in one of those hotels.
That would be my suggestion.
We also have six Twitch channels that we put out live channels on every year now going forward.
We also did a stream for DEF CON China.
Because none of the folks from China could actually come to our event.
Which kind of sucks.
And then we also have, new to this year, 360 camera in this room that's actually blinded off.
Because we want ‑‑ we have privacy concerns, you know.
So it's like a 180.
Yeah.
So it's like a 180.
We tried to find a 180 camera.
We could not find a 180 camera.
They're all like 96 degrees or 60 degrees.
Anyway.
So we have a 360 camera.
We had it set up in black and white ball where everybody's, you know, the lights are low.
It's up high.
It's dark.
People are wearing masks.
You're not going to see people's faces at that point.
For our Twitch stats, we had 26,000 unique viewers.
Which is pretty good.
Right?
We have 15,000 followers between all of our channels.
And apparently Hacker Jeopardy was the most popular program.
422 people at one time.
Which was a pretty good number for all of our streams for that week.
So we have a number of volunteers.
We have video men.
Myself.
But also Sandwich, Squeak, Ghost Pepper, Eagle One, and Robins BS.
Yeah.
So without all of these volunteers being here this whole week, this wouldn't happen.
It's a huge team effort to deploy this hardware into all the head ends.
Get all the infrastructure up and running.
We also have a couple of streaming servers that we set up and support on the back end.
We have the website on the front end.
I mean, it's awesome.
It's a whole effort.
Supply chain getting the gear.
Oh, gosh.
Yeah, yeah.
Supply chain getting the gear.
Like, this has been a heck of a year to get anything.
I tried to get Switches multiple times this year.
I finally got two.
Right?
I don't know if anybody else is having this problem, but it's a pain in the butt.
And then we actually were able to order the 360 cam, which was amazing.
But I think that's because they're not in demand.
And they're so expensive.
Right?
Yeah.
So shout outs to the DEF CON NOC.
Because if we didn't have a NOC, there would be no network for us to stream this stuff
to you.
Shout out to Caesar's IT.
Phil and his crew, Harry, got us into all the property head ends.
Without them, I don't know that we would have had anything up on Friday.
So.
Thanks to them.
And also, shout out to QM.
I forgot to put him on the slide.
But QM stores a pallet of our gear at the end of the year and gets it to us on time
on Sunday so that we can set up and get going on Monday morning.
And we did our best.
So thank you very much.
Thank you.
Thank you.
Thank you.
So.
Trying to coordinate all of this is like herding cats.
And we have so many channels.
And different ways to push out the information.
There's independent groups that on their own effort try to aggregate all the data.
All of the things that are happening.
The villages.
The contests and events.
They're constantly making changes to their schedule.
and we're trying to update that, to coordinate it all and try to have a single point of contact
for when things change is the Info Booth. So Info Booth, come on down.
Hello. I'm Little Bruiser. I'm the department head of Info Booth.
How many people came and visited one of our locations at least once and
did not ask where the restroom is? Because this year, I think, is the first
year where that wasn't the number one question. The number one question was
where do we get our tickets? Where's registration? So that's a new one for us.
So with that, I would like to thank DT, Janet, Nikita, Will, Neil,
everyone here. Thank you!
the rest of the HQ staff because without you guys we wouldn't be here and we really appreciate you,
so thank you. I'd also like to thank all my info goons because this year we ran thin. We really
needed more people on our team, but we made it happen, so thank you guys. Appreciate you all.
How many of you use the Hacker Tracker app? Right here is our team lead, Locke,
Advice, and Anual Value. I'm going to turn it over to Locke to share some stats with you.
I'm the team lead. I do the iOS version, Advice does the Android version,
and Anual Value does all the data wrangling. So if you like the app, tell me. If you don't like it,
tell Advice.
But please, please be nice to Anual Value because he's the reason
that it all comes together.
Yeah. So much work that goes into this. There's just over a thousand total events with 871
speakers across all the villages and talks that were official, 126 major changes within the last
week leading up to the con and during the con. We had a peak of about 17,000 daily users on
Saturday.
.
average about 12,000 a day. And 12K app installs, this was the year that iOS overtook Android.
So yay for iOS. We've done that. Only by about 400 installs. But, you know, we're going to
keep that up. 450 million data reads out of the app itself, of which there was about 480,000
bookmarked events. So thank you all for installing it. We're trying to make it better. So feedback
at our hacker tracker at DEF CON.org. If you have anything that you would like to see in the app,
we want to know. We want to make it better. It's for you. Thank you.
With that, we'll turn it back over to you, Jeff.
Okay. So speakers. Speaker control. The
core content of DEF CON has always been our speakers. And as DEF CON evolved over the years,
villages, contests and events grew. But we spend an inordinate amount of time reviewing call for
papers. We're one of the first conferences that I know of in the hacking space where if you are
rejected as a speaker and you ask for feedback, we give you the feedback. You might not like the
feedback, but we try to constructively give the feedback.
This takes a lot of time from the speaking coordination team. But it's interesting, on Twitter,
you see people who are very depressed that they were not selected, and then they say, but you know
what? The feedback was actually more valuable. So if you're involved in a CFP program somewhere,
really consider trying to provide that feedback. Because it's one of the only ways the speakers can
evolve and grow.
So.
With that said, I'd like to introduce P.W. Crack, head of the CFP speaker control.
I am not P.W. Crack. I am pasties. I'm giving the speaker operations slides today.
So, hello, DEF CON. In DEF CON 26, we started collecting qualitative metrics about the talks that were given
on all of our main stages. These were very simple metrics. I think we have five or six. They were all
rated on a scale of one to five. There was no comments or anything like that. It was just a simple set of
metrics to see how the speakers were doing, if there was any technical difficulties, which there had been
quite a few in the past. And we're in a new space this year. Historically, whenever we got to a new Caesar
property, there was a learning experience between speaker operations and the local staff. There was weird
issues with the stages and stuff like that. This is the first time we've had a transition to a new space where
there was no issues. There was no technical issues. This is also the first time that we actually didn't lose
any time due to technical difficulties. The only time that we actually lost was because DT here was double
booked for one of the tracks. So he couldn't do both of the tracks.
At the same time, he had to jump between the two and give the intros. So we lost about 15 minutes total, and it was not
something that we could have accounted for. A few more quick stats that I'd like to explicitly call out. 71% of our
speakers this year were brand new to DEF CON. They were first time speakers.
So of all of our talks that we gave, we had a lot of people that were really interested in the
talk. 95% or 94% had an internal rating of 4 or 5. 4 is already exceeding expectations. 5 is they went way
above and beyond. So 94%, according to our internal metrics, were just fantastic talks. They met all the
requirements. They asked everything that or they gave everything that they gave in their abstract and a little bit
beyond. Every talk successfully delivered their abstract.
So I've got a couple of things that I want to talk about. The first thing that I want to talk about is the
CFP board. I want to especially call out that the CFP board did a fantastic job in selecting our speakers. And with the
number of new speakers, I want to encourage you all, if you have a great talk idea, submit it. You will get that
feedback, like DT mentions, and at the very least, and if not, then you'll get the feedback to improve yourself and
become like an interesting speaker and maybe eventually join our alumni of speakers.
I'd like to do a quick thank you. We can't do what we do in speaker operations without the Stockoons. They control the room, we control the
stage. They make sure that you guys are getting in and out on time, that you guys have seats. They're very important to how we
operate and they've done a fantastic job this year. I'd also like to thank Encore, our conference AV team and, of course, all of
speaker operations. They do a fantastic job. They always crush it. They show up every time. So thank you so much for being here, and
Every morning they deal with my weird requests and they just crush it every year.
So thank you, DEF CON.
Thank you, speaker operations.
Thank you, NOC.
And thank you, Encore.
You're going to just have to keep waiting.
Okay.
Let's talk about workshops.
We dedicated one whole hotel property to just workshops.
And the idea there was, if you're doing workshops, you go to one place.
We don't split it amongst.
The capacity, the number of workshops that
we do, we've done too many investigations of our event groups.
could hold was based on the physical space of the hotel. So, let's bring up head of workshops.
Megan. Megan.
Hi, everyone. Who was able to attend a workshop this year?
How many of you attempted to sign up for a workshop this year?
So, this year, we had three days of workshops between Thursday, Friday, and Saturday.
And we sold 2330 seats out in 24 minutes. Or 24 hours, sorry.
Oh, so, yeah, we do an Eventbrite pre-sale every year right after the 4th of July holiday in the
U.S. So, that way, we can, first of all, gauge interest in a specific topic.
As well as try to control the number of folks who actually show up.
So, if we didn't do pre-reg, we've had instances where we started getting sideway glances from the
fire marshal. Because there was such a great interest in these workshops. So, this year, we
had 28 workshops compared to 20 workshops last year. And a lot of these workshop instructors
were brand-new instructors. Our workshops are four hours in line.
So, that can be really intimidating for a lot of folks who have never taught
a class for that long. But they did great. We had no issues. The attendees were really
interested and engaged. Most of our classes stayed full the entire time.
So, if you have any interest in giving a workshop, we open up our CFP the same time as the main
stage. And we try to give you guys as much feedback as possible if it gets rejected.
What you guys can do better. Where you might want to submit.
So, you can submit it in the villages. And we try to share content that way. So, please share as much information as possible.
Do you know any trends in the workshops that are popular?
We don't have trend data yet. So, for everyone who did attend a workshop,
we did send out a Google form link. So, that way you could provide us with information about
what you thought of the instruction. What you thought of the goons. So, that way we
can incorporate that with the CFP review process with the board. As well as improve the experience
for you all as well. So, please, do not hesitate to give us feedback. You can also just email
workshops at DEF CON.org. And we would be more than happy to receive any feedback or questions
that you have for us. Thank you.
While not technically. I see this next slide coming up. Training. While not technically, I definitely
want to say that this is a DEF CON event. We're trying something new this year. It's a more
commercial paid training Monday and Tuesday. So, some of you are going to give it a go.
And so, the idea here is that from workshops, there were some people that just wanted more
in depth training. They didn't want four hours. They wanted eight or 16 hours. And this is
something we've never done. It's been 30 years. We've never done trainings, paid trainings. And we looked around and, in fact, it is
everybody's doing trainings. Why aren't we doing trainings? So, we're going to try it. We're trying
it on Monday and Tuesday. See what happens. And so, I just want to call this out because
workshops are not trainings and trainings are not workshops. They're just different.
And this is a new thing we're doing. So, to prevent confusion, I just wanted to call that out. Now,
Rocking the Beats is arts and entertainment. And if you saw this new space, they worked
really hard to try to create a more immersive sort
of environment so you know you're at DEF CON. So, by show of hands, who either listened to SOMA FM,
went to the black and white balls, or who just enjoyed the energy of the music we produced?
Right on. Yeah. So, the number one of arts and entertainment, Chris A.M.,
unfortunately could not be here. So, number two is Taking Over. And I'm told it's either DJ Dead or
Clink.
Okay. Come on down.
Hi. Move that mic. Check. One, two.
My name's Andy, also known as Zeeks. I'm a 22-year veteran. 22 years. It's been a long time, man.
Let's see. I'm the technical director for arts and entertainment.
So, of course, we have a microprまり department. And I'm currently the lead for our department in
Chris's absence. See, the department, we're a pretty tight group. And yeah. We went through a
lot this year. We had over seven crates of new stuff that came in. And that was a nightmare.
I showed up Monday morning and it was intense.
With Chris's absence, I took control.
We got through all that gear
and we got it out to you guys.
And man, that was tough.
Thank you.
We also booked a new group, the Tycho group,
which was really cool.
They were an amazing group of Tycho players,
all the way from the far world of Los Angeles.
And they were fantastic to work with.
A funny story with them, when we booked them,
we were trying to figure out a way
to test the structural integrity of this building,
because as though, excuse me,
those that remember DEF CON 29,
when Ms. Jackalope was playing the...
Hi, where are you?
Stand up, stand up.
There you are.
When she was playing,
she literally broke the ceiling down.
So we were discussing how we were going to
see if these chandeliers were gonna fall.
And so we were trying to figure out,
oh, do we play metal?
Do we play, you know, what do we play?
Bass house, you know, more drum and bass.
We just get nothing but drum and bass out there.
No, we figured, why don't we do something cultural?
And we figured out that the Tycho group
would have been a great, you know,
just giant ass drums, just, it'd be awesome.
So we booked them, and that was amazing.
And my phone's gonna die.
That's wonderful.
Oh, fuck it, I'll wing it.
Yeah, fuck it, fuck it.
Don't forget the music CD.
Yes, we have the original soundtrack.
Dead, where are you?
Are you here?
That's DJ Dead.
He did your original soundtrack.
Props to him.
How many people have listened to the soundtrack?
How many people have done the,
have listened to the soundtrack or downloaded it?
We got a lot out there?
Oh, man, everybody else, seriously,
download it, it's the bomb.
Like, I'm constantly listening to it.
Let's see, what else do we have?
Media.defconn.org.
We have media.defconn.org.
We also have our own channel, which is defconnmusic.org,
which is where you can see
the latest info that we had.
We were having a real hard time
with getting our tweets and whatnot out to you guys,
so we decided, hey, you know what,
let's just start our own website
and bring all that information together for you guys.
Let's see, oh, thank you, Ms. Jackalot, my phone came back.
Yay.
Oh, one story, one story that was really cool.
That just kind of brings together
the whole community that I wanna share.
I was cleaning up the,
the party that was at the top of the escalators
the other night, and it was just me,
middle of the fucking night,
because that's when us entertainment people work,
and loading all the stuff up, and I see a laptop.
And this laptop is sitting on,
right next to these plants, plugged in,
like, oh, man, somebody left their laptop, this sucks.
So I grab the laptop, take it in,
since I'm a goon, I kinda keep it with me in my possession,
put it in my lockup, I go back down the next morning,
to the chill-out, and there's this guy in a panic.
Absolute panic, oh my god, where the hell's my laptop?
Where's my laptop?
And he approaches me, says, hey, I'm missing a laptop.
I grill him on it first off, like, what does it look like?
What kind of sticker's on it?
Because it's DEF CON, you have stickers on your laptop.
And then finally, can you get into this,
and legit show me that this is your,
put your passcode in there and tell me that it's yours.
And sure enough, he's like, oh, man, I'm missing my laptop.
He did all that, and it was really cool.
Like, he got his laptop back.
So, you know, kind of a dull story,
but it got me thinking, none of you assholes took that laptop.
None of you assholes cracked that laptop.
You guys deserve a round of applause for yourself
for not taking somebody else's property.
That thing, that laptop sat there for hours.
So Jonathan, if you're in here at all,
or you're watching me on TV,
don't leave your shit around DEF CON,
because somebody may take it.
Of course, I just want to thank everybody in the crew.
Chonez, my audio engineer, first year with our department,
did a phenomenal job.
Dude, you're coming back.
We had a ton of help from you guys,
when it came to, you know, my laptop.
When it came to pushing boxes.
When it came to unwrapping those goddamn fucking ninja swords.
Oh, my God.
Those things were...
It was a good idea.
It was a good idea.
Anybody have a sword in here?
Turn it on, please.
There we go.
I hate that fucking sound.
I hate it so much.
I am so sorry.
Yeah.
Again, thank you to absolutely everyone that showed up.
Thank you to everyone that helped.
And if you are in the entertainment field,
like me,
we need help.
We are growing.
We have got a metric shit ton of equipment
that we want to help distribute to parties.
You know, your events.
We love loaning our stuff out so that we get it back.
And you guys have a good party.
The emphasis is getting it back.
So, yes.
Please feel free to reach out to anybody from the arts and entertainment department.
Use all the words there.
And contact us.
We would love to have you on our crew.
So, thank you.
I have now switched away from the central nervous system depressants
and I am now working on the central nervous system stimulants.
I have got all my bases covered.
Oh, wait.
You forgot your music viewing statistics.
Okay.
Here we go.
Look at these statistics.
They are very beautiful.
And now we are talking about the parties.
Parties.
Come on down, Bert.
Wow.
This is scarier than it was last year.
I got this.
I got this.
Every year the DEFCON community comes together to party and meet in the desert.
A&E had the black and white ball this year.
But we also give the community space to create their own parties
and to give you all something special and exciting.
Show of hands.
Who here went to one or more of the amazing parties at night?
Yes.
Excellent.
Alongside that, we provided a place for people to come together
from various D.C. groups and special interests.
The meetups are run by you all.
By the humans.
And we love seeing the community come together under one roof
and provide that space where you can talk about those things that are interesting to you.
Or just this is where the D.C. is.
The D.C. group comes together once a year to say hi in DEFCON.
Thank you so much for all the parties and meetups.
On a more serious note, the last couple of months I've been having a rough time mentally.
And none of this would have been possible without the help from all the amazing people in my life.
I especially want to thank my friend Nikita for keeping me level-headed
and picking up my slack when I had no spoons left.
More importantly, all the hard work she puts in to make the parties and meetups happen.
Please give her a round of applause.
Thank you, Nikita.
Thank you all so much for coming out and making DEFCON Homecoming a huge success.
Much love to you all and have a great, great time for the rest of your time in Vegas.
Thank you.
I love you, man.
Love you, too.
It's okay.
We're all secure in our identities.
Okay, so something new again this year.
And I don't know why.
This is the thing, right?
We've been doing this for so long and then a new idea pops up and you're like,
why didn't we do this like 20 years ago?
I don't know.
The idea this year is that we've got Instagram and Twitter and TikTok
and people are running around recording everything and we try to watch it all and see what's going on.
We never really created a team or tried very hard beyond PhotoCore.
PhotoCore is taking static photos of what's going on to try to capture
and we'd use it in a slideshow or we'd put it online to create some images that people could use later.
We've never really done it with video.
And we've never really tried besides, say, DEF CON 20 to try to really, in a more organized way,
record what's happening in all these villages and contests.
Like, how does that thing actually work?
What is the actual hack-a-sat contest about?
And this year, for 30, because, well, we wanted to do another DEF CON documentary for 30.
That was the plan.
But the plan ran into COVID.
Boo.
Yeah, so the group we were going to use to do the recording kind of exploded.
It was too last minute to get replacement.
So instead, we figured we went to the community.
We found people that have experience with DEF CON and with doing video.
And we got them going and they've done a ton of interviews.
I think we're up to 47.
Or maybe 50 little videos on everything.
And so they're being released on YouTube, on different creators' channels.
We're going to eventually edit them all together and sort of create a best of DEF CON 30.
And so that was great.
We're going to keep doing that.
Because what we found is a lot of the villages don't have time to capture what it is that they're doing.
And we want to promote all the awesome work that the creators are doing.
And so I think in the future, this is just going to be a service where we just help them spread the word of the awesome creativity that they have.
So another new thing for this year, we're calling it the video team.
But you might have seen them.
They're running around.
They've got video cameras.
They're scheduling with the contests and events.
And if you go to YouTube, I think already we have about 20 or 30 of these videos listed.
So please take a look at something new that you might not be aware of.
We have some shout outs to silk, gory, Shannon snubs Morris.
I cannot pronounce that.
Ending with all alley, snares, random ware, neon temple, legacy, lower CVSE, and late to the game, did some great work.
And this is the capture crew this year that really first year thrown into the fire really pulled it off.
So thanks to them.
We're going to have some really great memories of all the things behind the scenes that we didn't actually get to see because we were too busy.
You can go back and visit what you missed.
So thanks to the video team.
Now, talking about all that fantastic content, I would like to introduce you, if you don't know him, Zant, the number one head of villages.
And he's going to let us know what's going on.
As always, I'm going to keep this nice and short because I hate these long talks.
Number one, as always, Jeff Villages needs more space.
We'll start to get that one out of the way.
All right.
I would just like to thank my seconds, which was Honi, who actually ran everything that had to do with the Flamingo Hotel.
And Fox, who ran everything that had to do with the Link Hotel.
Be careful.
Because I can't be in three places at once.
And the rest of my team that's out there, they made everything work really smooth for me by helping to support all the villages.
So I also want to thank all of the village leads that brought all their great content for you guys to enjoy.
I ain't even going to bother asking how many people went to villages because I saw.
Other than that, I'd like to thank Jeff, Nikita, and everybody else for allowing us to keep bringing this stuff in for you guys.
I hope you enjoyed it.
Of course, we also, villages, would love to thank the NOC.
Because without them, we wouldn't be here.
Without them, none of our villages would be able to do the stuff that they do.
So, I hope you all enjoyed them.
Thank you very much.
For some of you, this is a village that was created a number of years ago.
Data Duplication Village.
Where are you, Data Duplication Village?
Come on up.
We give away free data to attendees and we're hoping to continue to do it in the future.
That's a big crowd.
So how many of you know of the Data Duplication Village?
Oh, cool.
Excellent.
How many of you know of InfoCon.org?
He's providing all of that source for us.
That's where that's all coming from.
So the Data Duplication Village has been around for about seven years now.
And we've been putting together all the InfoCon.org to the drive to bring out to us.
And this year we were over in Flamingo.
Kind of over the river and through the woods, so to speak.
But despite being so far away, you guys still found 427 drives to turn into us.
So thank you for bringing those to us.
That's about 80% of our normal capacity.
108 of those drives, Jeff, you were asking this, are over 8 terabytes in size.
So we're probably going to be making some adjustments to the data next year.
420 of them, putting that together, came up to about 2.5 petabytes worth of data in just the con time.
Started off with just three drives that were handed off and multiplied out to all those drives for us.
We had about 20 drives fail.
Most of those we got to be successful.
Still got to work again.
We're finding that drives are starting to age.
So get some new drives.
After about five years, you're going to need to get your drives updated.
Big thanks out to DT, Nikita, Will, Ira, Zant, of course, Honi, the QM stores.
All you guys.
All the goons.
And, of course, you guys, the human hackers.
Thanks for coming out and getting those drives in and getting that data out.
Do, if you would please, seed the planet.
Get those things out there.
The more seeds you have, the easier it is to get that data out there.
Stay tuned for those updates for next year.
Thank you.
How many of you were walking down the hallway and you saw those cool glass rooms with the demo labs inside?
You weren't walking.
You were crawling.
So I don't know if you realized.
But those rooms, those walls are like LED blackout walls.
And you can press a button and the walls go opaque.
Which is really cool.
So they probably got some of the coolest space we have at Conn.
And running demo labs.
Where is the head of demo labs?
Heisenberg.
Heisenberg.
Okay.
Come on down, Heisenberg.
Number one.
We get a lot of submissions and just like call for papers, we review demo lab submissions.
And to give you an overview of how that went and what we selected and how it went, Heisenberg, come on down.
Demo labs is really a cool thing that DEF CON does.
And I'm really stoked about it.
And I hope you guys had a chance to participate.
Demo labs is an opportunity where we bring the infosec community together with the people that are doing the content, doing the development, doing the tools, doing the really cool projects.
And we get an opportunity for you guys to interact in a close and highly interactive manner.
Where presentations are given, but it's a lot of questions and answers.
There's a lot of back and forth and talking.
And there's a lot of feedback.
And the thing that really made it so cool for me this year is almost every demo lab that came up and did their presentation came up afterwards and said, I got great feedback from the community.
A lot of people were saying really good suggestions.
This is awesome.
Could it do this?
Could we go this direction?
That sort of thing.
And it was absolutely fantastic.
So kudos to all of you who gave great feedback to demo labs and to the people that presented.
As the slide says, we had 41 call for demo lab projects received.
We picked 30 of them.
Just like a call for papers.
We go through and look at them and screen them pretty carefully.
And ended up 28 of them were presented in person.
And two of them were presented virtual.
So if you think that you've got a really cool project that you want to actually get, maybe it's just now getting off the ground.
Maybe it's a pretty mature project where you're looking for direction.
And you really want infosec community feedback.
Demo labs.
Demo labs is the place.
I hope to see your call for papers next year.
Thank you.
Okay, grifter.
It's grifter time.
Contests and events.
A large part of what happens at DEF CON and a large part of the shenanigans happen in contests and events.
And leading that chaos is grifter.
Also known as the dinosaur.
.
.
Hey.
I'm not nervous to see all of you.
I missed you very, very much.
Thanks for coming out.
This has been absolutely incredible.
It was clear from this year that you were all really tired of being in your houses.
It says something that we all crawled out of our basements and ran, literally ran onto the contest floor.
As the doors opened every morning, people headed in every direction.
It wasn't one contest that was driving that kind of excitement.
There were people flying in every different direction.
And that's super cool to see.
We're seeing that on the contest floor, but we know that that's also happening in villages all around this space.
So contests and events are also hosted in many of the villages.
So thank you to Zant as well for the support around those contests and events that are within his purview.
So I would like to thank the contests and events goons without whom none of these things would run.
But I heard Bert say something about Nikita there where he said she picked up some of the slack for him.
And I am also one of those slackers.
Not that you were slack or Bert.
We got where you were going.
But sometimes I would get a message from Nikita and she would just say, hey, I saw that this thing wasn't done.
So I did it for you.
And I'm like, dope.
And then she would send me another message and be like, I made this document.
I've arranged it this way.
And I think that will be easier for it to use because the one that you were using didn't look so nice.
And I'm like, dope.
And that happened over and over and over again.
So again, please, another round of applause for Nikita.
One of my favorite people and the heart of DEF CON if I can be so bold.
So a lot of different activities going on this year.
A lot of new stuff and cool things that you were doing.
We're really, really excited.
To see the things that you create.
Please, if you have ideas, send them to us.
We want to see new things.
We want to see what weird stuff you come up with.
But some of the best weird is what we're going to talk about next.
The black badges.
So I think the best way to kick this off is with the badge challenge itself.
So not only do the creators of the badge create the badge itself that gives you something to look at and play with.
And when a talk is boring, you can tell because people are staring at their badge.
But Lost created a tradition where not only is the badge something you wear around your neck, but it's something that keeps you up at night.
So with that, the badge challenge.
Thank you.
Thank you.
All right.
So how many of you played the badge challenge?
Yes.
All right.
So for those of you who didn't, there were some things you could unlock on the badge.
We had a bunch of telephones set up in the contest area.
And for those who played last year, we brought back Jenny.
It was a big thing.
We had 12,771 phone calls made.
1,128 unique badges played the challenge.
And 312 voicemails left for Jenny.
We're still combing through that.
But it was awesome.
And real quick, I want to thank Redacted and his wife Boots.
They helped a ton with the challenge and the hardware and getting that done.
And getting that all set up and making it work.
And then here's our winner.
Thanks.
Wow.
This is incredible.
So, again, this was just an incredible ‑‑ I mean, this is a piece of art.
Physically, literally.
You can make music with it and you can have a lot of fun with it.
I couldn't thank you guys enough.
You did a great job.
So please, once again, let's hear it for MK Factor and his team.
That was awesome.
With the challenge this year,
most of the credit is going to have to go out to the community.
This was a group effort.
Big shout out to the family at the DC 30 badge hacking Discord.
The Discord.
The DEF CON Discord.
We documented almost everything.
We made all the answers available on Wiki pages.
You can find links at those sub Discord channels.
And while I'm still here, I'd like to do one more thing.
Could I quickly ask everyone to just power on, right button,
and let's see what thousands of these things sound like in unison.
.
That's beautiful.
Thank you all.
.
.
We also gave him a phone to keep from one of our phones of the many.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
we had prior year Black Badge winners goose egg this year. So we definitely need to figure
out do we want to keep it this extremely hard or dial it back a little bit? What do you
think? Super hard? All right. Dial it back? All right. Super hard it is. All right. So
I want to thank the many, many, many people that helped make all the challenges and keep
the engines running and all the things and the folks in the packet hacking village that
made all the infrastructure, dropped it down, get everything together. I mean, there is
no way that that event would be nearly as cool without the vibe going from the DJs in
there and all the things that were happening. And then if you feel like checking it out
and you want to try to get into the podcast, you can do that. You can do that. You can
get into the Black Badge, but you're like, I don't know. We take prior year stuff and
put it into packet detective so you can sit down and try the things out and kind of get
a feel of what the stuff is and then go for it. But this year, all the way from France,
their first time at DEF CON, right, rolling in and dominating and taking a Black Badge,
Team Blero. Good job.
Here you go, guys. All right. Thanks, DEF CON.
Make sure they get the registry. Yeah. Be careful if you're walking up here.
If you fall, I will take your wallet. I love you guys. I always say I love all of you and
here's why. He just talked about how hard it was and DEF CON responded with hurt me,
daddy.
.
So the next contest up here, I went in and took a look at what they were offering
up for their CTF. And when you walk into the IoT village, you see a ridiculous array of
devices stacked on top literally on top of each other, shelf after shelf after shelf,
and what you're looking at is the levels of difficulty of the CTF getting harder and harder,
including, you know, things from a standard. . .
IoT webcam all the way up to the emergency broadcast system, right? So they bring it all.
And 48 different challenges and then continued to add more throughout the contest by sourcing
them from other nerds inside the IoT village. So it just got crazier and crazier. So let's
go back. So I want to go back just a second back to DEF CON 26 when myself, Huffy and
Noob won the black badge at the last time that the IoT CTF got a black badge. And I
actually jumped on the mic for a second when I probably wasn't supposed to. And I said
I want to be thankful for DEF CON and IoT village and we want to come back next year
and make IoT village bigger and better. And fast forward four years later, now we are
the team that is helping build the IoT CTF and we tried to put together the biggest
and baddest IoT CTF that DEF CON has ever seen. And I think we may have gone a little
bit overboard. As Gertrude said, we had over 50 challenges. But I think that you guys all
appreciated that. And I'll ask you, do you want more? Less? More. Awesome. Awesome.
Not only that, though, one thing we wanted to do is we wanted to help bridge the gap
between players that are noobs and some of the badass players that compete in our CTF.
So I wanted to give a shout out to Noob, who actually helped develop the game. And he
helped develop some of the labs that we do in IoT village so that people can get intro
to IoT. And I want to see all the people that did those labs come back next year and play
in the IoT CTF. Folks that are familiar with our contest might remember that we used to
be called the Soho-lessly broken CTF. But we dropped that name. We went just to IoT
village CTF because IoT is so much more than just Soho. So as Gertrude said, we expanded
the CTF to include things like the emergency alert broadcast systems. We had an Inmarsat,
a satellite that was retired from the U.S. Secret Service that we had in the CTF. As
well as other things like Bluetooth low energy locks, firmware challenge. And we also wanted
to introduce people to the hardware side of IoT. So we had a UART bootloader attack in
the CTF. We had over 175 teams register. 70 teams solved at least one of the challenges
in the CTF. And the competition was super close throughout the contest. With the top
teams only separated by a couple of challenges. So in third place, we had two teams that were
20,501 points. It was Leet the hard way. So congratulations to them.
In second place, with 21,001 points, only 500 point difference, was Colonel Panic.
And the winners of the DEF CON IoT CTF with 25,501 points was Dark Wolf Fire.
Congratulations.
Thank you.
So this next contest has been around for many years. Every year we'd see lines of folks
outside of the contest area waiting to get in to get their hands on whatever the Darknet
folks had gotten up to.
And they really upped it this year to include as many people as humanly possible. And when
I mentioned the running earlier, they were way off in the back of the contest area. And
so getting geeks to run that far just speaks volumes, right?
Literally creating traces out of foil themselves on the badges, tables covered in components.
It was a hacker's dream.
So we'll bring to the stage Darknet NG.
Hello, you beautiful party people at DEF CON!
So my name is Gaynor.
I'm one of the operatives for the Darknet NG.
The Darknet is many things.
We are in a person role-playing game where our contests are accessible to beginners and
challenging experts.
We're one of the most prolific badge producers that make a bit of a thorn in the side of
the contest goons every year.
Sorry, guys.
One of the, let's see, so we are a year-round community of teachers that helps encourage
people to learn something new and have fun.
This is our 11th year doing yet another highly successful year for Darknet and our homecoming,
Gulo.
He was our badge designer and he helped us get back to the basics.
We went and gave away the paper circuit boards, which hopefully you guys have seen a few around
the conference, and we got a lot of folks getting in and tracing for the first time.
We had about 13,000, excuse me, 1,300 new unique electronic badges designed all in one
year.
Because you were designing them yourselves, which is awesome.
We had over 200 players.
In our online CTF and with the final standings, in third place, we had at 640 points, Tupac.
Put a round of applause for that.
In second place, at 711 points, a remote player, not even here physically at DEF CON,
is Crombo.
And our first place winner, second time coming to DEF CON, at 822 points.
Was Crooked Fingers, the Fellowship of the Token Ring.
So I want to thank the operatives who slaved away to make this happen, including
Gulo, Mantle, Digital Tinkerer, Oh Hi There, Pyre, Key, Colonel, Sanity, and Skyria.
Thank you for the contest, goons, for helping us manage all those silly lines that we had
across the entire contest floor on Friday morning.
Thank all of you, all of the players.
You guys are the reason why we exist.
We hope to see you online and see you come back next year.
And DEF CON is our people.
So go love your hacker family.
All right.
This next contest was new last year.
They came in, set up a village, put together a CTF.
And when I sat down.
With the creator of the CTF, I was blown away.
Like the amount of challenges and the ridiculous hoops that you had to jump through to solve
them was on the level of Lost himself, right?
And so they received a black badge last year.
And then they looked at us this year and said, watch this.
Blacks in Cyber CTF.
.
Wow.
They were not kidding when they said there was a lot of you.
Hi, guys.
Oh, my gosh.
Hey.
Wow.
Well, I mean, a lot of things go through your mind when you're thinking about what you want to say in moments like this.
But honestly, the only thing I can say would be our village slogan for this year, which, if you were able to solve it, was love does not lose its way home.
It's based on a Sankofa symbol out of West Africa.
And love really doesn't lose its way home.
Like, look at how many people have lost their way home.
We're just so excited to be able to showcase what our community can do within the hacker community.
And we're so excited to do it again next year.
So thank you guys so much.
Yeah.
Let's talk about the CTF real quick, though.
How y'all doing?
Yeah.
I go by Daddy Coco, man.
You can find me everywhere.
So we had about 41 teams register for this event.
It was pretty dope.
All the challenges were solved.
The challenges were made by us and hosted by the Georgia Cyber Warfare Range.
So thanks to them for being able to host our infrastructure for us.
They're a group of individuals in Atlanta, Georgia, who host live fire, blue and red team exercises.
So check them out if you are interested in that type of stuff.
We had 20 challenges and a total point possibility of 480.
So we'll just announce our winners real quick.
And they were very close.
They were within one challenge of each other each.
So in our third place, we had The Boar with 160 points.
You can make some noise for them.
Yeah.
Yeah.
In second place, we had UrchinSec2 with 170 points.
Yeah.
And our first place winners are Collateral Damage with 174 points.
It was pretty, pretty tight there.
Yeah.
Really close, right?
So thank you to all the players.
Appreciate it.
And hopefully we'll have some more new challenges for you next year.
All right.
Another long running contest here with a newer name, but long running.
When we look at everything around us, whether it should have it or not, it's got Wi-Fi in it.
So these guys chain all those things together and say get after it.
The radio frequency CTF.
There it was.
There it was.
Thank you.
So hello, DEF CON 30.
Back again this year, Radio Frequency Hackers Sanctuary presented the RF Village.
We used to be the Wi-Fi Village about 15 years ago.
Turned that into the Wireless Village, which then became the RF Village.
Thanks a lot, DT, Grifter, Zant, for the 15th year.
I mean, it's just we're so happy to just kind of keep doing this thing over and over and over again.
On top of the over 100 challenges ranging from DC to Daylight, we were on site.
We had over 100 players on site.
We had 40 players playing virtually.
So we had people worldwide playing this time as well.
We really couldn't have done this without the RF Village team up here.
Thank you so much, guys.
You just every year just bring it like crazy.
And our sponsors, Pentoo, Amazon, PI Achievers, Aruba, Weathered Security, Red Team Alliance, Hack Five, Hacker Warehouse, and Wiggle.
Wiggle has been absolutely amazing this year.
Just give them quick props.
They're 21 years old this year.
They can drink.
Thank God.
Yeah, Bob.
We had two awesome Wiggle wardrobes.
Thank you.
Worldwide war drive last week.
2.5 million new access points worldwide.
This week we did something a little different.
We did the first ever indoor war walk.
It was four square miles, 27 properties, and out of the ten foxes that were hidden, seven of those ten were found within 27 properties.
All of the rooms were in play.
Our rules were air conditioned.
You were okay.
If you were out in the heat, you were doing it wrong.
There goes my phone.
Yay.
Black badge winners this year.
They've been fighting and fighting and fighting.
Finally got first place.
What the freak?
Good job.
Good job.
Followed by a much smaller but powerful team called Team Blunderbuss who I think is going
to start to catch them soon.
Again, thank you, DEF CON.
We'll see you next year.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
Thank you.
All right.
So the SE community village put together, you know, one, they faced an incredible challenge.
They were coming in to fill some very large shoes.
A lot of expectations on them on what would it look like, what would it feel like, and,
And, you know, for social engineering, right?
And so a team stepped up, made up out of black badge winners from competitions in the past,
people who lived in that village in the past as well,
and if you went in there, you know that they met the challenge head on.
It was incredible.
We'll have them come up and tell you about their competition, the vision competition.
Hi, everyone.
I'm JC, and I am proud to be joined by Snow.
Together, I got a couple claps, but see if I can impress you in a second.
We're the founders of the new social engineering community.
I'd like you to make some.
Hang on.
Hang on.
Hang on.
Hang on.
Hang on.
Hang on.
I want you to make some noise first if you went to our village.
All right.
There's the turnout.
You're the reason why we chose to build this and meet this task head on.
This was a lot of work.
If you came to the link, waited in those long lines, and listened to our calls, our panels, our talks,
we really truly hope you enjoyed it, found them both entertaining and valuable.
This year, we were excited to bring some new things with our village,
including our cold calls.
With our cold calls, we gave attendees opportunities to make a call.
We gave them five minutes, three objectives, easy, medium, and hard, and one phone number.
We placed that call.
It was on the spot, no preparation.
They were in there for experience.
Nothing was judged.
There was no scores, pure experience.
Raise your hand if you've made cold calls.
Hang on.
That was stupid.
Let me hear you.
I can't see anything.
We were able to make 35 calls with the time that we had.
Hey.
All right.
So, okay, cool.
So, we were really, really excited to bring back one of the competitions that everyone loved to watch,
our vision competition.
This year, we had 16 teams come and compete.
Every single one of them showed up, which was huge.
A lot of them were brand new.
They're brand new to DEF CON.
They've never been here before.
That takes a lot of guts.
So, we are proud to give our second place to Team Arty Boy.
Round of applause.
Thank you.
And then with us on stage is our first place team.
So, we have Jen, Sean, and Matt with Team Split Beans.
And because we're new, we would love volunteers, people who want to be contestants, all these things.
So, please follow us on Twitter.
We are SEC underscore DEF CON.
And we also want to thank everyone from DEF CON who helped support us, all of the goons, right?
Nikita, I love you.
Thank you so much.
Grifter, Dark Tangent, everyone for believing in us and showing up to the village.
Thank you so much.
Thank you.
Thank you.
You're welcome.
Thank you.
All right.
This next competition, I hold near and dear to my heart.
When this contest was started years and years ago, it was started by Pinguino.
And there was a lot of illegal stuff on the scavenger hunt list.
At one point, she couldn't cover the hunt.
She wasn't going to be able to make it to DEF CON.
And she asked me if I would take it over.
And I did with a group of friends.
And we did it with a group of friends from Salt Lake City, what later became DC801.
We ran the scavenger hunt for several years, Pinguino joining us by our side.
And we had an absolute blast.
Over the years, we would hand it off and hand it off.
And every year, it got better and better and better.
And if you saw the scavenger hunt, yeah, the scat shooter limitations, I'll tell you all kinds of weird stuff later.
But if you saw the scavenger hunt this year, you saw that they raised it to a level that I just,
I don't even know if anybody else is ever going to be able to beat.
That's a challenge.
But I'll bring them to the stage to tell you about what they put these folks through, the scavenger hunt.
What's up, nerds?
Here's the badge.
Hold my beer.
All right.
Okay, so I'm Evil Mofo.
I'm from the scavenger hunt.
And as Grifter said last year, we are always watching and always judging.
This year, we had Balsa and Dual D and Zora and I were judging this year.
And this was our 25th year.
As Grifter was saying, it was started by Pinguino.
And he took it over and then C.
Civiak took it over and then Salem took it over and I'm the one and we're all making this happen.
And if it wasn't for them, we wouldn't be here.
We wouldn't be making DEF CON weird.
This year being so special, we invited all of our previous judges to come by if they had the time.
And we want to thank every one of them that had the time to come and help us run the hunt.
Um, so as he said, you couldn't miss us.
We, we're quite the spectacle in the contest room.
Uh, if you didn't come in the contest room, you should make it a priority to do that next year.
We are a spectacle not to be missed.
Um, and this year we actually built a soda machine that was dispensing virtual machines for people to hack at DEF CON.
Um, and so let's see.
Uh, so this year it was a heated contest between, uh, for second place and third place.
With.
A total of five points between first, uh, second and third.
In the end, team fuck Howard ended up in third place.
Team Hooters came in second.
And the first place team who had two of their members fly to Italy last night are what's with the nails.
So here you go, guys, you got yourself a black badge.
Uh, if you're uninitiated.
Yeah.
You should go to DEF CON scav hunt.
Dot or, or DEF CON scav hunt.com.
We own both of them.
Um, and look up the history of the hunt and come play next year.
Um, I say this every year and it's true every year.
They need no introduction.
Capture the flag.
Woo.
Yeah.
Yeah.
Yeah.
Yeah.
Yeah.
Yeah.
Yeah.
Yeah.
Hi everybody.
Uh, I'm Thomas windmill from the Nautilus Institute.
Uh, one of our, our plans for the inaugural year.
of our Capture the Flag was a return to form
to allow DEF CON CTF to be weird
and to allow more shenanigans to be in the game
than we've seen in past years.
Shenanigans were had and our infrastructure
greatly suffered.
We are deeply appreciative of the grace and patience
that our team showed us as we worked through
what in retrospect was the most predictable
problem in the world.
One of the things that DT has been asking for
for quite some time is a way for CTF spectators
to get a better understanding of the game
and what exactly it is our players are doing.
In moving in that direction, we introduced a new part
of our game this year, Live CTF.
Thanks Thomas.
I'm really excited to be representing Live CTF
that was able to be a sub-event this year
during the finals.
It certainly showcased exactly how impressive
all the teams are that participate.
During the finals, we ran a 1v1 single elimination tournament
between the best members of each team
where any points or any wins gathered them points
for the main event.
Everyone did amazing.
Even participating in such a nerve-wracking environment
is challenging, but congratulations to C2W2M2
from Team Starbugs for a first place finish
and some amazing challenges and solves
about throughout the way.
Check it out on livectf.com to see the videos
of every match and all the scores and challenges as well.
So after all of this, I'm proud to announce
the results of this year's DEFCON Capture the Flag.
In third place, we have Starbugs,
the champions of the Live CTF.
In second place, we have Kotzebon,
who were last year's DEFCON CTF champions.
And in first place, we had the Maple Mallard Magistrates.
.
.
.
.
.
.
. All right.
All right, my first time, so never talked
in front of this many people.
So thank you, Nautilus, for running the CTF.
As a longtime CTF player, I know it's very challenging
and requires a lot of sacrifice to run a CTF competition,
especially when the world's best hackers are your audience.
And congratulations to other teams as well
that played and competed with us.
It was definitely challenging, but fun nonetheless.
I look forward to seeing you all again next year.
Thank you.
All right, so there was
an accidental omission from the slide deck,
and so I just want to call out that if you noticed,
all the different teams here have different badge types,
press, contests, events, villages, CFP review,
and all of that coordination and handling
all of those different badge types, checking them in,
making sure the right people have the right kinds of badges
is a team called Inhuman Registration
that handle all badge types besides human registration.
And between the two, we distributed about 25,000 badges this year.
Next slide.
Okay, here it comes.
Are you ready to rumble?
So...
So, some of you might remember the black badge raffle, which was a troll, which was then
another troll, and then the next year another troll.
But we were thinking DEF CON 30, maybe it's not a troll.
And to tell you the story, come on up.
It's not quite a troll, but it might be a troll.
How are you doing?
I am Sonicos.
I am one of the sock goons.
For the last several years, we've been doing the troll.
Basically since 26, we wanted to encourage the shenanigans.
By the way, I am sorry for the clusterfuck from 26.
Kind of.
Are you?
Yeah.
But am I really?
So three months ago, I had an idea.
I reached out to Nikita, who reached out to DT.
We had a conversation.
I told him, hey, you know what?
Let's try and make this thing real.
So he said, okay.
Fuck it.
Let's go put the pool on the rooftop.
And then I said, oh, fuck.
I actually have to do homework now.
So three months ago, I started making my first badge, which is the black badge raffle badge
that you've been seeing running around.
So first and foremost, I want to thank a lot of people.
My girlfriend.
My girlfriend for helping me with the pick and place for the assembly.
She kicked ass.
It would not have happened without her help.
Scav hunt for a thousand different reasons.
Seriously, you guys kick ass.
The SOC goons for helping me hand these things out.
The info goons for telling you guys to fuck off.
And not XOR's DC 26 bender badge is where I stole most of the code that works.
All of the code that works is from them.
All the code that's broken is mine.
Thank you.
DT, thank you for not kicking me out after 26.
And I preemptively thank you all for not fucking killing me when I walk off the stage.
So for all of you who have one of the DEF CON raffle tickets for this year, enjoy your
souvenir.
You're not winning shit.
So.
You know, I do, too.
So.
So the way that I set this up, the entrance for this, these five humans had to give me
the tickets from 26, 27, all three different colors from this year, a receipt from scav
hunt requiring, what, was it ten points?
Yep.
And a single page, single spaced report on a topic of their choice.
Printed and delivered to me directly because I wasn't open in any attachments.
So.
So the entrance would hunt for beacons, hidden challenges, unlock flags for the badge.
Each flag was going to get a roll of an N16 dice on my badge.
But in the vein of badge life, I fucked it up.
The firmware was not complete.
So fuck it, we'll do it live with a D20.
So.
One, two, three, four, five.
17, what's three off?
U.
U-N.
Holy shit.
So, thank you, thank you again for putting up with me.
Follow Def Con Raffle on Twitter and we'll see how we can keep the shenanigans going.
Thanks everybody.
I want to thank all the
departments that make this possible.
possible. If you look in the printed program, you can see the sheer number of goons it takes
to pull off a conference like this. It's almost 500. They're all organized into the different
groups. There's about 1,000 content creators, so about 1,500 people at least are necessary
to give you the experience that you've had here. So let's see a round of applause for
all the creators.
Now every year there's sort of a cycle of goons that are retiring and new goons that
come on. And if you've gooned for ten years or more, you get what we call the gold badge.
And the gold badge is like the black badge in the sense that you can continue to attend
for life for free.
And we would like to call out those who are retiring this year.
Sunshine, Bit Monk, Ahab, Red Beard, A, Killer Spud, Matrix, Salem, Karik, Lizal, 33, Brazil
Scout, Ricku, 83D, Dallas, Amlazar, Chosen One, Concrusader, oh, and Stumper. Stumper's
not added.
Right on.
So thank them for ten years.
Without all of their help and the help of all the goons, this would not be possible.
So thank you.
Now behind the goons, we have what we call the deep end.
These are the full-time, year-round employees that help try to coordinate everything.
It's myself, Nikita, Janet, Neil, Will, Darrington, the other Jeff, and TCMBC.
And this year I've got Nikita and Janet bolded because due to COVID and some other situations,
they really had to step up their game and they really, I mean, they're already doing
great work.
But I want to thank Janet and Nikita, really shown this year.
And I'd really like to thank them personally for their fantastic work.
So thank you for all the DCHQ.
So we're nearing the very end.
And I just want to call out for those of you who want to continue with some DEF CON action
throughout the year.
Okay.
So we have a lot of ways to engage with us online.
And over the last couple of years, our Reddit channel has really been taking off.
So we've added it to the slide.
Check out our slash our DEF CON Reddit.
We have mobile apps for both Android and Apple for the DEF CON forums.
And we've really been trying to figure out post sort of DEF CON 29 how to engage more
online.
Now next year.
Next year DEF CON 31 will be back here.
Registration is live.
Put this date in your calendar.
We're going to be here.
We're not going anywhere.
We're going to try to figure this place out.
Now we've got some content coming online.
I talked about some of the video.
A lot of the videos and slides will all go online over the next couple of months.
Follow our Twitter.
We'll tell you all about it.
Now I would normally say thank you.
That is it.
But for the first time ever, 11 p.m. tonight, in the Chill Out area, there's going to be
an after party for those of us still around.
And so for those of you who won't be around that long, we'd really like to wish a happy
birthday.
Someone who's been a long time contributor to DEF CON, El Cantaro, let us sing happy
birthday.
Happy birthday to you.
Happy birthday to you.
Happy birthday, El Cantaro.
Happy birthday to you.
I love you, man.
Okay.
Get the fuck out.