Sunday, July 08, 2018

Toorcamp reflections

Leaving Toorcamp, I felt conflicting emotions. These developed further after some thoughts and while compiling the Toorcamp presentations.

1. I could have spent more time getting to know the people at my campsite (Camp for Misfit Toys). It was a last-minute campsite for people who didn't know anyone else, who most frequently were at their first Toorcamp. And they were all interesting and unique people. However, in my rush to see everything at Toorcamp I didn't get to know them well.

2. Last Toorcamp I focused on talking to many people (without personal projects to work on). I remembered only a few after the camp was over. This time I focused on personal projects, like soldering a TV-B-Gone, and trying some other things, and less on talking to people. While these are different approaches, what's left with me after Toorcamp is mostly what I learned from talking to other people, such as what projects they were working on (related notes and keywords of which I saved on my phone for later). This is probably the most useful.

3. I spent too much time more drunk than preferred. Several of my phone notes are from times I don't remember from some sort of combination of cider (cider lovers rejoiced at the grocery in Eastsound due to its flabbergasting collection of the stuff) and other beers (but I can't deny that Pike Monk's Uncle Tripel Ale (purple can) was fantastic and enhanced the experience). I feel like I lost the chance to connect with people more deeply due to being forgetful while tipsy.

On the plus side the lighting effects the Toorcamp team placed to light up the night sky and dark trees were gorgeous and once brought me vividly back to the pine trees of Rome.

Courtesy of @macklikeaduck

As in the resolutions in the 2016 presentation, here are some new ones for the next two years (and my phone notes):

1. Really start soldering. I'll get a desk, a soldering iron, a fume extractor, and a workspace to hold components, and finally start soldering kits and learn how to use a breadboard and wires.
2. Actually take the radio ham exam. Tried the week after Toorcamp but the contact was not amenable so I'll set up to take it elsewhere. June 2018 was the last month before a different version of the exam comes into use, so I'll study that guide instead.
3. Hardware hacking?
4. Cyberchef
5. DeviantOllam's CarolinaCon talk about Liquor
6. DJ lobsterdust
7. Jim's famous hackerbourbon list
8. Johann Sebastian Joust (kinda stupid though)
9. Milky Tracker, protracker for amiga (tried but failed, now to get a VM of an amiga)
10. NodeMCU esp-12e module
11. Security+
12. Quantize playing (?)
13. Script to automate getting a ticket on Orcas Island Ferry website. Check for tickets not open for reservation vs yes (this one came to me while pretty high).
14. Strapbook
15. Trash-grass
16. Play with WS2812B LED individually-addressable strips.

Resolutions for Toorcamp 2020 (if I wind up going):

1. This time, actually take a car, by ferry, to the island. It makes life a lot more convenient. For instance, with a rental car I won't need to waste most of an afternoon hitchhiking to the grocery to pick up victuals.
2. Come with a girlfriend or wife? Anything can happen in 2 years... :)

Mount a remote directory using sshfs

How did I not know about this all this time???

https://debmintux.wordpress.com/2010/04/25/mount-a-remote-directory-with-sshfs/

Now I can do music file management via a graphical interface versus cp / mv in command line.

Monday, July 02, 2018

Post-Toorcamp Presentation (2018)

As in 2016, I've created a presentation that makes an attempt at capturing the magic of Toorcamp with slides and pictures of everything I saw (and missed) at Toorcamp. Although this powerpoint was originally created with embedded videos, these ballooned the size to nearly half a GB, so there will be two presentations - one with videos, and one without 'em.

Unlike in 2016, this one will not be on Slideshare as pictures were used mostly without attribution.

If attribution is requested, attribution will be added.

Slides here without video

Update: Slides with video, as presented at HAHA

Monday, June 25, 2018

Post Toorcamp packing analysis

Got back from Toorcamp yesterday. It was certainly interesting. This year I focused on making things (soldering for instance), so there was less opportunity to meet new people.

Here's a quick brain dump mostly for me on what was useful to pack and what was not. Once again, there was a cold night (Saturday) when the temperature dropped to 48 degrees F, and I wasn't quite ready for that.

Scarf: Made life much more bearable. Probably the single one thing that really made everything much better. I wore it all the time except sleep and about 11 to 4 PM.

REI shirts from my Europe and Italy trips: Great as before, no sweating.

All my Raspberry Pi Projects: Didn't even touch them. There's just too much to do and see at Toorcamp.

A gaggle of cables and 10/100 5-port switch: Unnecessary.

Rope: No trees, not useful for keeping animals away.

Scent-proof Ziploc bags: Much more useful, no animal issues (unlike the tent next door, used to store food, which was torn apart at odd hours of the night by a large racoon).

LUCI lights: Lux variety much better than the clear ones. Fantastic for ambient lighting on a table with a group of people, which was my situation. 

Solar-powered LED lights: Wonderful. I didn't realize till after receiving it that it was 66 feet long. This was enough to cover a 10x10 canopy all around plus extra, and it stayed on for hours. Several people commented on how nice it was.

Spare disposable batteries: Not necessary.

SDR and antenna: didn't get to use it, probably not necessary.

Poncho: Used once, maybe an umbrella would make more sense.

Sweater purchased in Prague: Very useful.

All the extension cords: Yes.

Reusable shopping bag: Definitely useful. Too bad I didn't get to drink all the cider I bought.

Instant Oatmeal, many tea bags, kosher beef jerky, instant potatoes, challah bread: Eh.... The challah bread went stale, the kitchen was too far away for tea, and the rest wasn't really necessary since I hitchhiked to the store on the island and picked up more than enough canned food.

On that note, curried lentil canned soup: Absolutely not a good idea in a camping situation. Contrary to traveling for work when occasionally limited food situations can arise, extra fiber isn't good when 500 other people need to use a limited number of restrooms on a continual basis (especially if a nearby campsite decides to have free bar evenings from 8 PM until "the lights are turned off").

Shabbos goy shirt: Limited value this time.

For next time:

Sunscreen: Although I'd packed it, I was afraid of running out, to no need. It would have been smart to bring maybe an extra tube, as everyone got burned the first day. For me, badly burned on my nose.

Piratebox: bigger capacity, enable upload functionality. I substituted with an AC750 travel router or portable external drive instead.

Car: Driving to camp will make life much easier, plus I can clean up if needed.


Wednesday, June 06, 2018

Blackhat Talks to look forward to

The schedule for Blackhat 18 talks has been released here: https://www.blackhat.com/us-18/briefings.html

Looking forward to the following:

A Dive in to Hyper-V Architecture & Vulnerabilities (Could be useful, VMs are everywhere)
AI & ML in Cyber Security - Why Algorithms are Dangerous
An Attacker Looks at Docker: Approaching Multi-Container Applications
Applied Self-Driving Car Security (the original car hackers strike back)
Are You Trading Stocks Securely? Exposing Security Flaws in Trading Technologies
Automated Discovery of Deserialization Gadget Chains (making deserialization vulnerability exploitation easier? yes please)
Blockchain Autopsies - Analyzing Ethereum Smart Contract Deaths (I like sci-fi)
Breaking the IIoT: Hacking industrial Control Gateways
Catch me Yes we can! – Pwning Social Engineers using Natural Language Processing Techniques in Real-Time
Deep Neural Networks for Hackers: Methods Applications and Open Source Tools
Don't @ Me: Hunting Twitter Bots at Scale
Edge Side Include Injection: Abusing Caching Servers into SSRF and Transparent Session Hijacking
Exposing the Bait: A Qualitative Look at the Impact of Autonomous Peer Communication to Enhance Organizational Phishing Detection
For the Love of Money: Finding and Exploiting Vulnerabilities in Mobile Point of Sales Systems
From Bot to Robot: How Abilities and Law Change with Physicality
From Workstation to Domain Admin: Why Secure Administration isn't Secure and How to Fix it
Identity Theft: Attacks on SSO Systems
Is the Mafia Taking Over Cybercrime? (tie into the recently-released Web of Profit study)
Last Call for SATCOM Security (see this article for a preview)
Meltdown: Basics Details Consequences
Open Sesame: Picking Locks with Cortana
Outsmarting the Smart City
Over-the-Air: How we Remotely Compromised the Gateway BCM and Autopilot ECUs of Tesla Cars
Practical Web Cache Poisoning: Redefining 'Unexploitable' (from Burp Suite extraordinaire himself)
Screaming Channels: Extracting Bluetooth and WiFi Keys from Radio Noise
SirenJack: Cracking a 'Secure' Emergency Warning Siren System
So I became a Domain Controller (from authors of mimikatz)
The Air-Gap Jumpers
The Science of Hiring and Retaining Female Cybersecurity Engineers
The Unbearable Lightness of BMC's
The Windows Notification Facility: Peeling the Onion of the Most Undocumented Kernel Attack Surface Yet
TRITON: How it Disrupted Safety Systems and Changed the Threat Landscape of Industrial Control Systems Forever (I read the PDF but having it explained would be great)