Defcon Day 1 – Beer Cooling Contest

beer cooling

There were two possible categories: cooling a sealed beer and cooling a poured beer. Fastest time to get to 38 degreesF wins, if you kept it under $100. The beer of choice was Tecate at a toasty 90 degreesF surface temp. To kill time while the trials were being conducted the audience answered beer trivia questions and won prizes (thanks for the cherry bomb guys!). Unfortunately I didn’t get to see this competition to it’s completion, but here’s a photo of the Cincinnati Drinking Team’s entry.

Continue reading “Defcon Day 1 – Beer Cooling Contest”

Defcon Day 1 – Lost In Translation – Christian Grothoff

Steganography is the art of hiding things in plain sight. When done correctly an observer shouldn’t be able to tell that there is a hidden message as opposed to cryptography where it is obvious that something is hidden. To do this using text you usually need a large piece of source material; say all of the works of Shakespeare. Since these works are known to most people steg can usually be broken using statistical analysis.

Christian’s solution is to use machine translated (MT) texts as the source material. It is hard to make a computer generate consistant semantically and rhetorically correct texts that mimic the original is very difficult. The technique presented here uses MT texts because translation errors are expected and common.

Continue reading “Defcon Day 1 – Lost In Translation – Christian Grothoff”

Defcon Day 1 – My Next Big Project – Philip R. Zimmerman

Well the two big stories this week are the CISCO router problem and Philip “PGP” Zimmerman’s new project. Originally unveiled at Black Hat earlier this week his new crypted VOIP looks really interesting. Well it would have looked interesting if the demo had worked; eventually his partner just called on a cellphone. The goal is to return the “security” of land lines to the world of VOIP.

The app is based on the shtoom project (open source VOIP written in Python) and the crypto is strapped ontop. A nice feature of the protocol is hashing part of the previous conversation’s key into the current conversation. If you and the other person read the hash aloud and they match it means that this conversation and every previous one has been fully secure.

He’s shopping the project around to venture capital right now to make a commercial product written in C. The source will still be free though.

Most people have left by now, but they were able to get the demo going. It is funny to hear a secure call blasted over loud speakers. He’s got a switch in the software to switch off the packet decryption so you can hear what the wiretap hears

Wardriving Box

wrap box

Defcon isn’t the only hacker gathering starting up right now. If you are at What The Hack in the Netherlands you might catch a glimpse of this project. It’s a wardriving box based on the WRAP. The platform is similar to the Soekris boards and the site actually describes both. It isn’t a complete how to, but you’ll have a good idea of what’s in store for you if you want to attempt this.

[thanks ian]

Continue reading “Wardriving Box”