Tech News Radio

Technology news when & where you want it ...

[Tech News Radio @technewsradio]

My draft #defcon33 report is available for download (PDF) https://t.co/jDDeAZy1gn

[Tech News Radio @technewsradio]

Last years notes from #Defcon https://t.co/xCd7P9rKHr

[Tech News Radio @technewsradio]

A bunch of #defcon33 links https://t.co/RPYSqNTb0d

[Tech News Radio @technewsradio]

Moving all my real time posts for #defcon33 to https://t.co/zokPHS8Ql3

[DEF CON @defcon]

Responding to the #defcon32 badge controversy:

DEF CON thrives on community collaboration and has operated for over 30 years successfully working with hundreds of vendors including the dozens that have helped with our badges over the years.

For this year’s Raspberry Pi badges, DEF CON hired Entropic Engineering to do the hardware development and firmware. After going overbudget by more than 60%, several bad-faith charges, and with a product still in preproduction, DEF CON issued a stop work order. Any claims that DEF CON did not pay Entropic Engineering for its hardware or firmware development are false. Unfortunately, we heard that these issues with Entropic Engineering were not unique to DEF CON.

We decided at that point to finish the badge on our own. We paid to send engineers to Vietnam to work onsite to finalize and test the badges in order to ensure they would be done on time for the conference. We never removed Entropic Engineering’s logo from our badge, it is still on the PCB. However, Entropic was not involved in the design and production of the case, and we removed their logo we had added as a courtesy.

We were happy to still include one of their contractors on the badge panel session. Unfortunately, shortly before the talk was set to take place DEF CON became aware that unauthorized code had been included in the firmware we had paid Entropic Engineering to produce, claiming credit for the whole badge and promoting their coin wallet to solicit money from DEF CON attendees above and beyond what we had negotiated.

When asked about the unauthorized code, the engineer said it had been done as a “joke” two months ago and forgot to remove it, and we decided as an organization not to have him on stage while we kept the slides in the talk giving him credit for his work.

We communicated the change in advance of the talk, and this individual decided to show up for the panel anyway. He refused to leave, demanding that our security team remove him. Wanting to ensure that the other people involved in creating the badge were able to deliver their presentation, we complied with his wishes and escorted him off the stage, where he was free to continue attending the conference.

Any issues of non-payment are between him and Entropic Engineering, DEF CON fulfilled its financial obligations.

[Nick Percoco @c7five]

The @defcon 32 badge is not only a GameBoy Color, it can also be a PalmOS device. It has a touch screen! My Graffiti skills are non-existent but character input does work. #defcon #defcon32

[Tech News Radio @technewsradio]

.@DEFCON_NOC Anything going on with DefCon-WPA3? It was working great until 1130 ish

[Tech News Radio @technewsradio]

"Smishing Smackdown: Unraveling the Threads of USPS Smishing and Fighting Back" was great Track 3 at 1030 on Day 2 of #defcon32

[Tech News Radio @technewsradio]

Starting Day 2 of #defcon32 in Track 2 (1000) with "Laundering Money" the video on the Media Server is worth watching

[Tech News Radio @technewsradio]

Linecon #1 ... getting on the bus at the Rio at ~0900 this morning #defcon32

[Tech News Radio @technewsradio]

I find this design for the calendar to much easier to navigate and plan than the list design in the printed program #defcon32

[Tech News Radio @technewsradio]

It is impressive to see all the #defcon32 communities/tracks/vendors all under one location. #engage

[Tech News Radio @technewsradio]

Ending Day 1 #defcon32 in Track 2 (1700) "One for all and all for WHAD: wireless shenanigans made easy!"

[Tech News Radio @technewsradio]

Track 4 (1600) "Outlook Unleashing RCE Chaos: CVE-2024-30103 & CVE-2024-38021" #defcon32

[Tech News Radio @technewsradio]

In Track 3 (1500) "Abusing Windows Hello Without a Severed Hand" #defcon32

[Tech News Radio @technewsradio]

In Track 2 (1400) "Optical Espionage: Using Lasers to Hear Keystrokes Through Glass Windows" #defcon32

[Charlie Miller @0xcharlie]

I feel sorry for the young people who never got to see the big mega blackhat talks like @dakami or @barnaby_jack used to give to overflowing rooms.

[Tech News Radio @technewsradio]

In Track 2 (1300) "Sshamble: Unexpected Exposures in the Secure Shell" #defcon32

[Tech News Radio @technewsradio]

In Track 2 "On Your Ocean's 11 Team, I'm the AI Guy (technically Girl)" #defcon32

[Tech News Radio @technewsradio]

Track 3 "No Symbols When Reversing? No Problem: Bring Your Own" was over my head but if you are into studying malware you will probably find it useful #defcon32