We're at the DEF CON 30 Cloud Village, where there's a CTF going on, there's constant talks
going on right now, and there's so much to learn about cloud security.
Now, can you tell me a little bit about the village, what you're doing here?
Sure, yeah. So right now, today, we've got two main aspects of it. We've got the presenters
and the presentations, and all these great talks on AWS, GCP, and Azure-based security,
for the most part. And then we have a whole CTF section as well, where folks can actually
sit down and work as teams, or they can actually have assistants, you know, and try and hit
the leaderboards up there. Maybe you might be able to get a quick look at that.
And those are the two big things. We're packed, though. There's so many people who are interested.
I mean, it's such a happening space right now, you know what I mean? It's real hot.
But we have so many individuals that are coming and speaking today, from 9, 10 in the morning,
all the way to 5 p.m. with workshops, the CTF. It's been a fun time so far.
Yeah, it's amazing to me that, like, every one of these villages, there's so much content going on.
You'd get lost in the content the entire weekend, and not waste your time.
There's so much information to learn.
It's not just the Cloud Village, too, right? It's all these villages. You've got so much to do if you're here.
Now, one of the things I noticed at the CTF is, it is cloud-based. Now, we all joke,
oh, well, cloud's just really someone else's computer. But within the CTF, what makes it different
from the other CTFs happening around com?
Well, so, the other CTFs, I mean, so, to clarify, there are flags that you're going to get.
It's very much in the same vein as the CTF that you'd expect elsewhere. But it's going to leverage cloud-based vulnerabilities.
So it might be things like open commissions that exist for, you know, S3 buckets or storage.
It might be, like, insecure configurations you might need to go and leverage those.
So it's very cloud-specific, where I think you might look at maybe the more traditional DEF CON CTFs.
There's probably a lot of, like, binary hacking and things like getting around obfuscation and all that.
You might not necessarily see that in this CTF.
Okay. Well, with that, if anyone wants to learn more about it, I'm guessing some of this content,
if someone wants to learn more about the Cloud Village and the talks going on, where can they go?
Is this information available online?
Yep. Go to cloud-village.org and you can find all the information that you need there. CTF's also available there.
That's great. You're about to let a speaker know that they have to get off the stage again.
These things have to be backed back. Thanks for sharing about the Cloud Village.
Thanks for just running it and running this really great village.
Can you tell us a little bit about the other runners of this village?
Because, again, to put something together this big, you need a lot of people.
Honestly, there's too many people to mention. I'm really thankful for everyone who came together and helped.
But I think, you know, the most important folks are probably Jayesh, who's run the Cloud Village since 2019.
He's working really hard to make sure that this has worked as well as it has.
And then there's Craig, who's working on the CTF, and all of the other folks that are on the CTF, speaker ops, social media, everything.
I'm very appreciative of that. Yeah.
Thanks for watching, and as always, hack on!