CISO was taking Q&A at Defcon. A lot of the questions were directed torward corporate security issues and how testing is done. A lot of jib jab about hackers and the patriot act ensued. Cool questions, but a bit long if you ask me.
Vegas Finally
Well, it’s my turn to roll into town. I got to my friend’s apartment at midnight and I am ready for dead bed. Vince is out with former editor Jason Striegel right now and isn’t sure when the night will end. Well I’ll see you guys tomorrow and I am sure we’ll post a pic to make finding us a little easier.
This Is Us, Come Say Hi
this is us. come say hi and get free stuff.
me (vince)
him (eliot)
Defcon Day 1 – My Next Big Project – Philip R. Zimmerman
Well the two big stories this week are the CISCO router problem and Philip “PGP” Zimmerman’s new project. Originally unveiled at Black Hat earlier this week his new crypted VOIP looks really interesting. Well it would have looked interesting if the demo had worked; eventually his partner just called on a cellphone. The goal is to return the “security” of land lines to the world of VOIP.
The app is based on the shtoom project (open source VOIP written in Python) and the crypto is strapped ontop. A nice feature of the protocol is hashing part of the previous conversation’s key into the current conversation. If you and the other person read the hash aloud and they match it means that this conversation and every previous one has been fully secure.
He’s shopping the project around to venture capital right now to make a commercial product written in C. The source will still be free though.
Most people have left by now, but they were able to get the demo going. It is funny to hear a secure call blasted over loud speakers. He’s got a switch in the software to switch off the packet decryption so you can hear what the wiretap hears
Defcon Day 1 – The Law, The Swag
Hey! The swag is already out and in full force. Defcon is great, but beware about photos, here’s what our man with the master plan Jason C. says:
“We’re 10 minutes into the event and the first privacy/freedom of speech debate has started. The topic was, of course, photos. An organizer went off a long tirade about not taking pictures of the speakers or audience without their permission and that the press would have their film taken if they did. They did says that you could take pictures of the backs of people’s heads without permission. So, since many of you have always wanted to see the backs of 500 sweaty nerds in a tent
Wardriving Box
Defcon isn’t the only hacker gathering starting up right now. If you are at What The Hack in the Netherlands you might catch a glimpse of this project. It’s a wardriving box based on the WRAP. The platform is similar to the Soekris boards and the site actually describes both. It isn’t a complete how to, but you’ll have a good idea of what’s in store for you if you want to attempt this.
[thanks ian]
Defcon Day -1 At 12:40pm PST
Viva las vegas. it’s now 12:30pm here, 3:30pm there (philadelphia).
when the box office opens for tickets, we’ll be there (we = me. eliot gets in late. torrone might be there with me)
we suggest you meet up with us. the t-shirts got lost with UPS, but they’ll be getting a new order here by saturday for us. so no worries! defcon visitors will get some!
expect more posts today. jet lag kills. don’t IM me unless you ARE going to defcon.
if you will be going to defcon, send us a tip or comment with a way to get in touch with you and we’ll let you know whats up. meet us before defcon then come ask us Q&A and show us hacks tomorrow!
plenty of stickers to give out still!
