PDA

View Full Version : Why didn't you compete?


renderman
09-06-2006, 01:22 PM
Just trying to get a sense from people as to why it was only 2 teams in the wireless contest this year. I've retired and want to help run things next year and I'm trying to find out what kept you from competing?

Was it a time commitment? Not enough gear? Did'nt know if you'd have a chance? No incentive? anything else?

Want to make the contest kick ass next year and we need competitors to do that. So what's kept you from competing?

latras
09-06-2006, 01:41 PM
for me? some lack of knowledge, but I want to learn....

I need to branch out my knowledge...

Chris
09-06-2006, 03:41 PM
I have an interesting perspective here I think.

The WD contest has been a source of frustration for me for the past two years.

The first year we did the contest it was a straight WarDrive. Who can score the most based on a few factors (APs found, encrypted APs found, unique APs found etc). The second year was largely the same, but team based.

When it came time for the third year, I really wanted to inject some difficulty into the contest. My thought was, jebus..how many times can we ask people to drive around Vegas? This was the first year of the mini games, but there was also a regular WD. For the most part, the WD contest was an amateur ctf over wireless.

Last year, the WD became one of the mini-games, but we went with the easy/hard format where you had to choose 'gimmie' points or a more difficult game that would require more (or at least different) skills, and would reward more points. To a degree this worked as the winning team choose to take a 'sure thing' easy contest requireing the second place team (sorry Render) to complete the hardest game of all in order to score enough points to tie the game. This was the type of strategy I was hoping for and it worked.

But....my biggest source of frustration with the WD/Wireless contest was that the contest staff was spending 4-6 months getting the contest together, building the required servers, figuring out a way to keep our WLANs up against the massive DoSes, etc. After all the work we put into the contest, the more 'skill intensive' it became, the less interest there was in the contest.

Consider the participation by year (all values are approximate):

1-120
2-60
3-25
4-9

This was the main reason that I wanted to walk away from the contest. I wasn't trying to 'dump a loser' off on anyone else, but it just seemed like my vision for the direction of the contest (more difficult, more hacking/less driving, add in a level of defense capability, etc) was not a direction the attendees and participants enjoyed. I thought it was probably time to inject new blood into the games.

It appears that this didn't really help as participation was at an all time low this year. Which brings me to the actual answer to your question Render. I think part of this can be chalked up to no 'new' games this year. I think part of it can be chalked up to the fact that people have to actually get their equipment to Vegas. The first year or two, WarDriving was 'new' and people were eager to participate so they were willing to haul antennae, etc out. Now, it has largely lost it's sheen and people aren't willing to do that.

Can this be fixed? I think so. I think what we did last year (DEF CON 13) where one of our games was a combo with Lock Pick was a good idea that was VERY poorly executed. I take partial responsibility for that and I think the LPCon guys bear the other half of that responsibility. Short answer, we didn't really know HOW to do a crossover contest. We learned some lessons and I think this could work now. I also think it provides an opportunity, if promoted correctly, for some of the smaller contests to expand their participant base.

I think the level of difficulty needs to come down somewhat. I don't mean go back to 'who has the stamina to drive for 27 straight hours.' I am more referring to the fact that when you tell people they have to locate a WLAN, attack a server, compromise it, escalte privs, secure it, and defend it...well..it seems like a daunting task.

Creativity. Recycling the games from last year was probably not the best idea ever. The PSK Limit guys were eager to defend their crown (again) but other than hardcore guys (ahem Render) that really wanted to win the contest once, I think it was difficult for others to justify participation. Especially since PSK Limit had won it twice before and were likely to defend. Who wants to play a game you can't win?

Finally, time. The days of people being willing to devote their entire con to this contest are over. I don't think it's a good idea to have the contest run for more than a couple of hours each day MAX. I think this is the model that Thorn went with this year.

I really think it would be a good idea to contact the PSK Limit guys and ask them to help out with designing the contest. Also, SYN-ACK is GREAT at that stuff and has organized contests in his local area for several years...some of which are VERY complex.

I wish you luck with this. I would love to see this contest gain a following again and I certainly feel like I can be blamed (wholly) for the decline in participation over the years because my vision of where the contest was going was not in sync with the participants. Good Luck.

renderman
09-06-2006, 04:02 PM
Very useful insights Chris, I was seeing alot of it myself.

I'm envisioning something where the barrier to participate is low (i.e. laptop and card is all that's needed) and it comes down to knowledge of tools and lateral (creative) thinking.

The problems I had with the minicontests at DC13 was that after an initial WLAN bit, the task was unrelated to WiFi. The one I really liked was the 'Last crusade' as it tested participants ability to break through various security methods. I also liked 'King of the Hill' in concept, but when it takes you the length of the contest to get in in the first place, it's appeal wanes a bit.

Myself, I'm retired, so there will be one less hardcore person competing, and PSKL has indicated that they are not going to defend thier title (3rd time was enough I guess).

I still think there is some competition here, it's just a matter of finding out what would appeal to everyone and get them competing. I know there's alot of wireless know how at con, it would be nice to show it off.

converge
09-06-2006, 06:04 PM
I think part of this can be chalked up to no 'new' games this year. I think part of it can be chalked up to the fact that people have to actually get their equipment to Vegas. The first year or two, WarDriving was 'new' and people were eager to participate so they were willing to haul antennae, etc out. Now, it has largely lost it's sheen and people aren't willing to do that.

The traditional drive has had its play for certain, as well as a couple of the minigames, imo.

I suspect TSA may play into things, considering that at Defcon 10 I packed a yagi in my backup as carryon.. but this last year almost got anal probed for a 500mW amp and a fruit rollup. As soon as we landed home TSA released its newer set of restrictions that have many not wanting to fly at all, let alone tote gear for contests.

Major factors I've found.. over the years:

1) Skill level effects participation. It's been joked about since HJ at Defcon 10 when they asked 'What does Wifi stand for?' or something of that matter... amoung other Wifi-related questions. A large number of people can run around and run a program to capture stray packets.. the ability to do something with those packets limits your field. I think the minigames concept can lend to more participation by diversifying the games.. a point system can run for each minigame and apply towards a greater Wifi Decathalon .. if you really want to do the whole thing, but you shouldn't have to.

1a) Equipment/skill level. Lets face it, you're less likely to spend your time playing something when you feel like you're playing against people that can not only out Wifi you with their pinky, but that you feel can out equip you with antennas, amps, or whatever gear may apply. Add in more chance, logic , or similar aspects to the minigames and you'll see more people try, if not just for the fun of doing it. I think the spirit of driving around Vegas was that it didn't require too much skill, but it was fun and new back at DC10. Like Chris said, much of the WDc is no longer new or hip.

Lets face it, a lot of the folks that digged wifi back at DC10 don't play with it as much 5 years later. Why? Well.. its not new(ish) anymore.

Another lesson from l0st: there were a large number of serious hardware hackers that dove into his contest this last year .. but the winners were an adhoc team that showed up when another team didn't. This doesn't make the hardware hackers less skilled .. quite honestly, it's amazing what they can do with a paperclip and chewing gum wrapper. It does show that if properly formatted.. anyone can compete, anyone can _LEARN_, and most certainly anyone can have a fun time that they brag about later on. If people are feeling intimidated by the contest or the competition, it will probably have a VERY limited audience like years past.

1b) While prizes are nice, several contests showed that the drive to play isn't necessarily tied to what goodies you can get for it. Make it fun and at ceremonies talk about the various fun people had.. folks don't need or care about a total rundown of who scored what where, unless a larger contest looms.

2) Timeframe. A lot of folks discovered they didn't want to drop their entire Defcon for a wireless contest. Even some of the hardcore CTF guys take a break once in a while. In previous years there were a handful of contestants that were insane enough to drive distances and lengths that no sane human should to get the most access points within a specified period of time. Even those ironmen got tired of that format .. so minigames mentioned above should be scheduled in advanced, limited in length and spread out throughout the con based on other event scheduling so that participation is available.

3) Look at your NDS/PSP... or a board game. Pick popular game formats and apply them to wifi. The games don't have to be skill testing / eye popping extranaganza. Make a Wifi tictactoe game, or something. Instead of driving to find the most APs, have people drive to flush out the most APs with a specific SSID/config.. or... ask l0st for ideas .. he has a million+1 methods of toruturing contestants in a way that they deem fun.

4) Announce. Some of the games can remain mysterious, but the sooner folks know about it, the sooner anticipation starts building and the more folks become interested. Get people talking about it on the forums, get people signing up.. market it and they will play. Inversely, the less information they have, the less hype that is out there about competing, the less people will commit and effectively the cycle will degrade turnout.

5) Do something that involves getting Chris 1) wet, 2) hugged, 3) filled with whipped cream. This will ensure success.

Voltage Spike
09-06-2006, 06:11 PM
You may also consider that when the contest was simply WarDriving, people knew what to expect. They had practiced at home and didn't expect any surprises (in terms of knowledge gaps, missing equipment, etc.). Change the rules to something they've never done and the motivation to join because they are an expert at X wanes simply because they've never done X before.

(Please, no drug jokes about the wireless folks.)

DJ Jackalope
09-06-2006, 08:30 PM
Myself, I'm retired, so there will be one less hardcore person competing, and PSKL has indicated that they are not going to defend thier title (3rd time was enough I guess).

Renderman, you can't retire. Who else would Chris tell they couldn't do something and have to be DQ'd or something in the middle of the vendor area?:cool:

caffeine20
09-07-2006, 05:01 AM
wardriving just doesnt have the zing it did 4 years ago. atleast mix it up with things like RFID, bluetooth etc...

shrdlu
09-07-2006, 09:03 AM
wardriving just doesnt have the zing it did 4 years ago. atleast mix it up with things like RFID, bluetooth etc...

In 2000, I was excited to see 25 or 30 different ssid signatures on the 35th floor of a hotel in San Diego. Now, I see that many in any urban area. Channel 6 (the default on every moronic consumer device out there) is so overpopulated that I'm sure neighbors interfere with each other's cable modems. Wardriving can be done from your couch; a contest just doesn't seem like much fun.

I'm also not interested in anything that takes up *all* of the time I have at defcon. With the exception of CTF, I don't get it. I'm one of the strange ones that attends the talks (not all, but some). On the other hand, even if it was only a couple of hours, it's too much like working.

theprez98
09-07-2006, 10:21 AM
I think with all the wealth of talent on the organizing side, a contest(s) can be developed that meets the needs of the contesters:

Doesn't take up all day (a few hours at most);

Doesn't require advanced df equipment;

Levels of participation that don't exclude half the potential contesters.

Mother
09-07-2006, 11:08 AM
Sorry to hear that you're retiring, Render, is this just from the WDc? I hope it's not also from CoWF...don't pull a BW on us!

IMHO, the low number of participants has to do basically with what Chris has said - WiFi is not "new" anymore. It is not as exciting. Heck, I even started to do a Google Earth version of SV and got bored...now turning my attention to hardware and other topics.

I also agree that we need to either cross-breed the competition, or do a "static" competition, i.e. one that involves people turning up at the event with something they have been preparing during the months before (do I hear "beer" and "cooling" in the background somewhere...?); this is just an idea I'm throwing on the table, maybe there is no practical way of implementing it.

Another one: an orienteering course. This would depend on the practicality of leaving WiFi devices around Vegas, but the general idea would be - find an initial AP around the con venue, connect to it. A web server has instructions (vague ones) on finding the next AP, only after solving a challenge. Each AP you successfully find and solve the challenge on gives you a code, which you then have to note in order to prove you completed the course.

I sure hope to see something WiFi-related next year!

Cheers,

Mother

renderman
09-07-2006, 11:55 AM
Don't worry, I'm not retiring from life, just the wireless contest.

So far I'm seeing a few things.

Time commitment: Keep it short and sweet
Technical requirements: Keep it low, don't make it about who's got the most gear
Challenge: Make it not something that people can easily prepare for or over study


Additional question: Direction finding or pen testing, which would you want to see more of?

EricM
09-07-2006, 02:33 PM
Why not both, I like the idea of going from one waypoint to the next, get the riddle on the webpage of the site, enter a code, solving the puzzle get a token or new piece of information then move on with the new SSID you have to search for etc etc.

Many more ideas to come.

DaKahuna
09-07-2006, 06:29 PM
Render,

The reason I did not attempt the WiFi con this year was that it sounded from the beginning that it would be a team event and knowing very few of the people that were not already on a team, I decided to just observe.

I think the concept of multiple challenges, may one in AM, one in PM, of cascading difficult is a great concept and may attract more people.

I would also encourage you to think about the possiblity of a separate cons for individuals and teams, or having two awards, one for each.

Vyrus
09-07-2006, 06:53 PM
yea id have to had my hat to the "i know ppl that compeat and totaly own at it so i didnt think id have a shot" category

lol so menny memories of seeing renderman walk around with dual yagies and a backback sensor :P

TheCotMan
09-07-2006, 08:04 PM
yea id have to had my hat to the "i know ppl that compeat and totaly own at it so i didnt think id have a shot" category

lol so menny memories of seeing renderman walk around with dual yagies and a backback sensor :P

Please avoid using abbreviations like "ppl" for people, "u" for "you" and other SMS-abbreviations.

Also, here is a copy with some spelling fixes, in case you are looking for constructive criticism, fixes are in bold:
Yeah. I'd have to hand my hat to the, "People I know that compete and totaly own at it, so I wouldn't think I'd have a shot," category

:biggrin: I have so many memories of seeing renderman walk around with dual yagies and a backpack sensor :P

I don't compete for a few reasons. I investigated the concept of war driving, many years ago, built the tools on my laptop, walked around and "found" access points, and that was enough for me to see how the technology worked. The fun for me was the solving of the problem, and seeing it work for the first time. After that, extrapolation made it less sexy to me.

The contest was becoming one that removed strategy and skill. It was becoming one that (forgive me Chris) could become a contest like the "WiFi Shootout" in this way:

The WiFi shootout started to become a contest where people with more money and resources could beat people with less money an resources. The changes to the newly named "wireless contest" were good to see, as they brought skill back into the picture.

The War Driving contest (driving around to find access points) was becoming a contest where people could buy really nice equipment, multiple antennas, multiple cards, and follow nearly any online docs on selection of antennas, orientation, and "installing and configuraing software" had become a simple step of adding an RPM, or using apt-get/emerge/whatever.

The early adopters solved these problems, and made it easier for those that folowed them.

It was becoming a contest where problem-solving-skills and "hacking" had almost NOTHING to do with snarfing access points.

The addition of the new contests meant that people would have to come up with new solutions to new problems, and maybe even code their own additions to existing tools or new tools. THIS (in my opinion) is where the hacking element is exposed. This process of creation of something new, cobbling dissimilar ideas together, and demonstration of genuine depth of knowledge, that can create the "wow" factor from peers.

Here is what I heard from people:
1) The original war-driving contest had no "forced" schedule. Yes, it had a start time, and an end time, but people could take turns, and schedule their driving, so certain members could attend talks. This made is easy for people to arrange time for competition.
2) The new contests had specific schedules that conflicted, or may conflict with other events, contests, or speakers' schedules.
3) Since traveling by plane has become so restrictive when bringing equipment on-board, there is an even greater problem with bringing the quipment to con.
4) The Driving aspect means people really far away need rental cars, and the people closer must drive or also get rental cars.

Deviant Ollam
09-07-2006, 09:23 PM
how about an idea along the following lines...

a contest that predominantly involves wardriving and wifi hacking but which also has many breakout challenges along the way... challenges which become accessible or noticed only as people progress. essentially, this would take the best of the wifi games, the old "find leeto" contest which sounded cool as hell but which no one knew about, some minor picking/bypassing, the "shirt contest" which people discussed in a forum thread, etc etc.

most of all, however, i feel that to make the contest fun and accessible for the maximum number of participants, two factors should be taken into consideration...


no fixed time frames except for start/end
multiple vectors of attack / paths of progress


the second point is where i'd like to be as clear as possible, because i feel that this can make or break a large-scale contest. i think for a game like this to be most accessible and fun, the challenges should take the form of a tree chart...

the first challenge could simply be to find an open access point somewhere. simply provide the SSID and MAC address, etc. just about anyone could do this. a participant assocaites with the AP, pulls a web page from a local server, and gets some instructions. here is where it gets interesting... there could be a variety of "paths" to choose at this point. maybe you designate them as easy/medium/hard or perhaps you just toss them out there and let people proceed at random. however, each step of the way when a challenge is accomplished there shouldn't be simply a "proceed to this next challenge" instruction but multiple (possibly semi-hidden) clues which people could follow.

this way, even if someone hits a brick wall their team can backtrack and try another route and alternate puzzles. also, teams can do as much or as little as they wish. if they don't dig on picking locks, then the heck with it... they look for another hidden clue that leads to a totally different challenge.

it's like the old video game "out run" where you'd drive a car through southern california. (anyone remember that game? it was one of the first, as far as i can recall, which featured a full-size "car" enclosure that moved and rocked as you played) in this game there were multiple places where you'd approach a fork in the road and have to choose left or right. depending on your choices, you'd wind up on different paths and in different settings. this vastly increased replay value since people could race through the game again and again, always seeing new cities and scenery and obstacles.

a team could progress through many levels of challenges (some public key tokens would be sufficient as evidence that people had reached the various goals) and then jump way back to the first or second "level" and look for alternate clues which they perhaps didn't find before, then progress along to other new things.

converge
09-08-2006, 01:04 AM
1) The original war-driving contest had no "forced" schedule. Yes, it had a start time, and an end time, but people could take turns, and schedule their driving, so certain members could attend talks. This made competition easy to include.

The very first, absolutely orignal drive was very simple. It had a start and an end approximately 2 hours later. Short. Sweet. To the point. It grew into a monster and the attempt to alleviate this by making it an open timeframe across the entire weekend? just encouraged those nuts to drive for 48 frickin hours across multiple states.

TheCotMan
09-08-2006, 02:13 AM
The very first, absolutely orignal drive was very simple. It had a start and an end approximately 2 hours later. Short. Sweet. To the point. It grew into a monster and the attempt to alleviate this by making it an open timeframe across the entire weekend? just encouraged those nuts to drive for 48 frickin hours across multiple states.

My mistake. I remembered looking at the program and seeing something about the wardriving on Friday and then something else on Saturday. Maybe I was reading something about registration one day, and competition the next day, or maybe I am confusing the first year it was hosted with another year, or maybe I just got it wrong.

Sorry about that. Thanks for the correction.

theprez98
09-08-2006, 04:36 AM
the second point is where i'd like to be as clear as possible, because i feel that this can make or break a large-scale contest. i think for a game like this to be most accessible and fun, the challenges should take the form of a tree chart...

the first challenge could simply be to find an open access point somewhere. simply provide the SSID and MAC address, etc. just about anyone could do this. a participant assocaites with the AP, pulls a web page from a local server, and gets some instructions. here is where it gets interesting... there could be a variety of "paths" to choose at this point. maybe you designate them as easy/medium/hard or perhaps you just toss them out there and let people proceed at random. however, each step of the way when a challenge is accomplished there shouldn't be simply a "proceed to this next challenge" instruction but multiple (possibly semi-hidden) clues which people could follow.

this way, even if someone hits a brick wall their team can backtrack and try another route and alternate puzzles. also, teams can do as much or as little as they wish. if they don't dig on picking locks, then the heck with it... they look for another hidden clue that leads to a totally different challenge.

it's like the old video game "out run" where you'd drive a car through southern california. (anyone remember that game? it was one of the first, as far as i can recall, which featured a full-size "car" enclosure that moved and rocked as you played) in this game there were multiple places where you'd approach a fork in the road and have to choose left or right. depending on your choices, you'd wind up on different paths and in different settings. this vastly increased replay value since people could race through the game again and again, always seeing new cities and scenery and obstacles.

a team could progress through many levels of challenges (some public key tokens would be sufficient as evidence that people had reached the various goals) and then jump way back to the first or second "level" and look for alternate clues which they perhaps didn't find before, then progress along to other new things.
I like the "tree" concept very much. Your post is basically a well-written version of the thoughts that have been percolating around in my mind over the past few weeks. I think I'd like to go down that sort of road.

caffeine20
09-08-2006, 07:46 AM
The ideas floating around here are great and make me wish Defcon wasnt almost a year away again, oh well.

I have an idea of my own which i might add does take slightly from a few ideas mentioned around this thread.

scenario:

the idea is to incorporate a little warwalking with a little hacking. you could place Access points around the building, hosted behind these access points are various challenges. these could be anything from Web based hacking challenges to Riddles. once the challenge is completed you win a prize.

its by no means a perfect idea but could possibly be refined into something enjoyable for everyone involved.


Few ideas that might make this interesting:

1. hide easter eggs in the DC guide that lead to AP's
2. have the AP's only broadcast at intervals or set times according to clues
3. have speekers read off clues at the end of talks.

going back to the question renderman posed about what we would like to see more of, i would definately prefer to see more on pen testing.


on a side note i thought the riviera's speeking halls were excellent, although the parties werent as bumping the venues were definately better. all in all i thought it was a move that inevitably kept things a little calmer and more professional.

Deviant Ollam
09-08-2006, 08:20 AM
I like the "tree" concept very much. Your post is basically a well-written version of the thoughts that have been percolating around in my mind over the past few weeks. I think I'd like to go down that sort of road.thanks for the vote of approval. i was thinking about it more... and perhaps it doesn't totally have to be a constantly-forking tree... maybe after about the fourth or fifth level of the tree (at which point there could be as many as 12 separate challenges) the subsequent "clues" could start becoming redundant... or, rather, pointing to smaller and smaller numbers of challenges... until at long last there is just one "final" challenge. the competition overall wouldn't be judged around getting to and completing ths one final item, however... i feel scoring and ranking should be based around a system of "points"

but yeah, the notion that everyone has the opportunity to reach and at least attempt the final challenge, even if their skill level isn't tip top, is cool in my mind. this could allow for the maxium liklihood of people making it "far" in the game but would still reward folks with the most innovation and skill in the end.

request for input

if this sort of a concept sounds fun for people, maybe render can make it happen (i'd be happy to help organize it and get it going with you, man... i don't want to create a monster here via my suggestions and then toss it in your lap) but i think it would be great to see what people could suggest in terms of challenges that can offer multiple clues to next steps. if you wish, think of one or two and send a PM to renderman and i (do not post in the forum since we wouldn't want this knowledge totally in the public sphere if your suggestion gets used) describing how to go from "clue" to "puzzle" to "multiple next clues"

for example... here's one i just came up with on the fly...

a team solves one puzzle (say, they pick a lock on a small box) and within that is a little MP3 player and a set of headphones. maybe this MP3 player contains...

* a single playable file which consists of a person speaking the instruction "go to Uncle Ira in the vendor area... walk up to him and introduce yourself as Uncle Bob and ask him if he is selling any swordfish." (if the team does that they are handed a sealed envelope from Ira with a seal of authenticity -- for points -- and the next clue inside.

* one or two hidden or semi-broken MP3 files that do not play (maybe they just have the wrong filename extension and therefore don't play by default) but which, if copied via USB, can be made to play and contain somoene just speaking a string of numbers. maybe these are ASCII data, perhaps sent through ROT-13. this could be another instruction on how to proceed with a different task

* maybe, for even a third path of travel, there could be a small message inscribed in the plastic underneath the battery (if the unit runs on batteries) with an instruction to go somewhere else and do yet a different thing.

that's what i mean by "multiple forks in the road" at various points. and since the locked box and MP3 player would be available almost all the time, a team could always go back and re-inspect older challenges if they want to see if there's anything they missed. this sort of challenge would also reward methodical searching and inspection as opposed to just headlong rushing from one clue to the next.

Mother
09-08-2006, 09:20 AM
OK - so, to make this sort of thing work, do we agree we'd need to leave APs running around various places in Vegas? What would be the best way to do this, try to get the collaboration of shops/coffee houses/whatever to leave the things there for a couple of days, rented cars parked with a big battery and an antenna on top...? Again, just throwing out ideas.

The WRT54s or equivalent give very wide options for setting this up - the tree could also be implemented, and if we had communication between the APs, it could be even more fun. For example, once you pick your path on AP A, it sends this choice to the rest of APs, so they can configure their paths for that particular player.

Designing this could actually be more fun that playing it... :)

Mother

Chris
09-08-2006, 12:51 PM
First off....you are forgiven...


The contest was becoming one that removed strategy and skill. It was becoming one that (forgive me Chris) could become a contest like the "WiFi Shootout" in this way:

...

The War Driving contest (driving around to find access points) was becoming a contest where people could buy really nice equipment, multiple antennas, multiple cards, and follow nearly any online docs on selection of antennas, orientation, and "installing and configuraing software" had become a simple step of adding an RPM, or using apt-get/emerge/whatever.

The early adopters solved these problems, and made it easier for those that folowed them.

It was becoming a contest where problem-solving-skills and "hacking" had almost NOTHING to do with snarfing access points.




This is really not accurate. The FIRST year of the contest was a drive only. One day (Sat) for 3 hours. The second year was the marathon year (as converge pointed out). It was also the last year of the Drive itself being the primary focus of the contest. In year three the drive was there, but we introduced the mini-games (as I said before). These were almost 100% focued on skill and hacking, and only minor DF skills were required. With the exception of Fox Hunt ALL of the WLANs were located on the Alexis Park grounds. You didn't need that great of DF equipment to find them. In fact, if anything the DF requirements were the least of the skills required to win them.

In year four...skill was the focus and again...expensive equipment was not required. To be fair, I think that both Render and PSKL had WAAAY more equipment that was required for any of the stages of that contest. An iPaq or Zaurus with a cheap yagi would have been PLENTY for the DF on those and would have probably worked better....of course once the DF was done you would almost certainly need a laptop to complete the rest of the challenge. That is all neither here nor there...the main point is that the more diverse skills we required for the games, the less interest people had in them. I think a lot of this is because people are afraid they will be embarrassed or their friends won't think they are '1337 if they don't win...which sucks.



Here is what I heard from people:
1) The original war-driving contest had no "forced" schedule. Yes, it had a start time, and an end time, but people could take turns, and schedule their driving, so certain members could attend talks. This made is easy for people to arrange time for competition.



The original contest was a 3 hour set time (man..deja vu :biggrin: ) There really shouldn't have been any need to switch out drivers. Now...the second year that would have absolutely been required.

Now...to be fair I made a HUGE mistake with the second year regarding the teams. I don't want to get into the whole thing but the short version is that in some cases people were assigned to teams with other contestants that they did not know. Big mistake...HUGE. Ruined the contest for some in my opinion.


2) The new contests had specific schedules that conflicted, or may conflict with other events, contests, or speakers' schedules.


Fair point, but if you run the games after the talks are done people either won't participate because they want to party, or can't participate because they are drunk and some level of 'Driving' is required for a 'WarDRIVING' contest.


3) Since traveling by plane has become so restrictive when bringing equipment on-board, there is an even greater problem with bringing the quipment to con.

I think this is a very legitimate point...but it is born of fear and FUD, not actual problems. If you put that shit in your checked baggage you won't notice any appreciable delay. I travel with DF equipment all the time for work and have never had one additional second of delay because of it.


4) The Driving aspect means people really far away need rental cars, and the people closer must drive or also get rental cars.

Again, that is why we placed every WLAN so that it could be picked up from the Alexis Park or within close walking distance. The fact that these WLANs were located on or close to the AP grounds was also posted in the contest info page which was placed online a full three months before DEFCON. I just don't think that transportation was a factor in people not participating.

I think your points about it not being cool or sexy anymore are better points. That coupled with the attendees general lack of confidence in their abilty and/or fear of looking stupid are much more indicative of the problem with this contest.

Mother
09-08-2006, 03:27 PM
I think this is a very legitimate point...but it is born of fear and FUD, not actual problems. If you put that shit in your checked baggage you won't notice any appreciable delay. I travel with DF equipment all the time for work and have never had one additional second of delay because of it.

This is true - travelling from Barcelona, I almost had by bowels emptied at the two security checkpoints before boarding, but in the checked luggage I carried:

- The modded WRT54G, with the PCB and the spaghetti of cables all around the inside, *that* must have been some sight on the X-ray.
- One cantenna, a big round metallic cylinder with a cable sticking out one side...uhmmm.
- One magmount 7dBi omni, with cable.
- One magmount mini-panel, with cable.
- One mini-yagi with cable and hand grip.
- Various pigtails and gender-changers.
- Chargers and power adapters for all the other shit I carry.
- A couple of pounds of Semt...naah, just kidding!

If this made it through, with one connecting flight and at least two scans, then I don't see a reason to worry.

Cheers,

Mother

TheCotMan
09-08-2006, 05:13 PM
First off....you are forgiven...
Thankks man. :-)

This is really not accurate. The FIRST year of the contest was a drive only. One day (Sat) for 3 hours. The second year was the marathon year (as converge pointed out). It was also the last year of the Drive itself being the primary focus of the contest. In year three the drive was there, but we introduced the mini-games (as I said before). These were almost 100% focued on skill and hacking, and only minor DF skills were required. With the exception of Fox Hunt ALL of the WLANs were located on the Alexis Park grounds. You didn't need that great of DF equipment to find them. In fact, if anything the DF requirements were the least of the skills required to win them.
Yeah. It is my fault for not remembering things as they were. Sorry about that.

In year four...skill was the focus and again...expensive equipment was not required. To be fair, I think that both Render and PSKL had WAAAY more equipment that was required for any of the stages of that contest. An iPaq or Zaurus with a cheap yagi would have been PLENTY for the DF on those and would have probably worked better....of course once the DF was done you would almost certainly need a laptop to complete the rest of the challenge. That is all neither here nor there...the main point is that the more diverse skills we required for the games, the less interest people had in them. I think a lot of this is because people are afraid they will be embarrassed or their friends won't think they are '1337 if they don't win...which sucks.
When you added the new contests (Defcon 13?) it seemed to include more problems for people to solve and really started to emphasize the use of wireless technology to solve problems more than driving. Was this also the year that the next of the contest was changed from "WarDriving Contest" to "Wireless Contest" or was that this year?

Now, I doubt what I remember about this contest, as far as when things happened.

The decision to remove the simple wardriving portion of the contest as a major/primary category, whenever it happened, was a very good step; it brought more requirements for people to think more about "how" to build and organize their tools (like the early adopters of war driving.)

Could the modern-day wireless contest be also suffering from the same kinds of things as the TCP/IP device contest, and embedded device contests? Your mentioning the fear-factor of people not wanting to be judged as "non-1337" by their buddies when they lose reminds me of some things that Lost mentioned about a possible reason for people not competing in his contest(s).

The original contest was a 3 hour set time (man..deja vu :biggrin: ) There really shouldn't have been any need to switch out drivers. Now...the second year that would have absolutely been required.
Doh! I get it from Pete and Repeat.
Can't... get-away...! My... mistake... has... caught... up... with-me! Bones. what... have... I-done?

[schedule conflicts...]
Fair point, but if you run the games after the talks are done people either won't participate because they want to party, or can't participate because they are drunk and some level of 'Driving' is required for a 'WarDRIVING' contest.
Yes, but adding other contests beyond WarDriving, was the "right" direction to take from my view.

[Equipments on a Plane! (Parody of title "Snakes on a Plane")]
I think this is a very legitimate point...but it is born of fear and FUD, not actual problems. If you put that shit in your checked baggage you won't notice any appreciable delay. I travel with DF equipment all the time for work and have never had one additional second of delay because of it.
/me adds more to the FUD table...
Due to wage disputes between baggage carriers and management about wages, there has been high turnover in the employment of baggage carriers. There seems to be a correlation between this turnover rate and theft of items from bags, or bags going "missing" too.

Because of this, I don't like check-ing my electronic equiment.

Even before 9/11, the addition of a laptop/notebook back in the late 1990's caused me to be delayed several times. Visual inspection, requests to disassemble parts, and power up the laptop caused delays, and then assembling and repacking it became more of a delay. My next "notebook" will probably be one of those full-featured computers that are hand-sized with USB ports for full-sized keyboard/mouse connectivity and SVGA video ports, so it is easier to transport, and would be considered a PDA by airline security people and be something I can carry on me at Defcon for notes, schedule listings, and other stuff.

Again, that is why we placed every WLAN so that it could be picked up from the Alexis Park or within close walking distance. The fact that these WLANs were located on or close to the AP grounds was also posted in the contest info page which was placed online a full three months before DEFCON. I just don't think that transportation was a factor in people not participating.
Good points. People really interested in wardriving would probably enjoy having the tech to at least show off to their buddies: "Look what I can do" and "check this out."

I think your points about it not being cool or sexy anymore are better points. That coupled with the attendees general lack of confidence in their abilty and/or fear of looking stupid are much more indicative of the problem with this contest.
(Re-stated) Your mention of people being afraid to compete because of the fear-factor of being judged by their peers as non-leet, reminds me of something similar mentioned by Lost about his contest.

Maybe this contest has more than this in common with these kinds of contests like the one run by Lost, and the one run by DC480 and others? Are there any other similarities between this contest, and TCP/IP Device/Embeded Device contests? Level of difficulty too high? Fear? would-be [layer Effort/Laziness?

Chris
09-08-2006, 05:54 PM
Maybe this contest has more than this in common with these kinds of contests like the one run by Lost, and the one run by DC480 and others? Are there any other similarities between this contest, and TCP/IP Device/Embeded Device contests? Level of difficulty too high? Fear? would-be [layer Effort/Laziness?


Perhaps. I think one thing that would be nice to do (and something that I believe Lost actually attempted to a degree this year) would be to have a (referring to this contest only in this instance) Wireless Attack and Defense 101 talk that precedes the Wireless/WD contest by 2 or 3 hours. Use that time to let people that are interested in participating but afraid their skills aren't up to snuff get a feel for the basics of what is required. These 101 talks should be very detailed and geared specifically towards the types of skills that would be/are required for the contest.

In other words, you do Wireless Attack/Defense 101 two or three hours before the Wireless contest. An Intro to TCP/IP Device Hacking a few hours (in that case maybe even a day so people have the opportunity to think about and obtain the necessary equipment) before the TCP/IP Device contest, etc.

The '101' track in general is something that I really think is missing from DEF CON and would like to see brought back.

TheCotMan
09-08-2006, 06:00 PM
Perhaps. I think one thing that would be nice to do (and something that I believe Lost actually attempted to a degree this year) would be to have a (referring to this contest only in this instance) Wireless Attack and Defense 101 talk that precedes the Wireless/WD contest by 2 or 3 hours. Use that time to let people that are interested in participating but afraid their skills aren't up to snuff get a feel for the basics of what is required. These 101 talks should be very detailed and geared specifically towards the types of skills that would be/are required for the contest.

In other words, you do Wireless Attack/Defense 101 two or three hours before the Wireless contest. An Intro to TCP/IP Device Hacking a few hours (in that case maybe even a day so people have the opportunity to think about and obtain the necessary equipment) before the TCP/IP Device contest, etc.

The '101' track in general is something that I really think is missing from DEF CON and would like to see brought back.

This is a great idea! 101 or BoF/BoaF presentations would be great! We have those skybox rooms too, and I hear even more space next year. Lockpicking/TOOOL, Wireless Attack/Defense, Robot building, TCP/IP Devices, all of these could be presentations with (likely) many people wanting to attend.

Also a great way to build a social network of people with similar interests without the pressure of competition. :-)

Maybe it would be good for me to add another "contests/event" subforum to contain all 101/BoF/ "classes" in skyboxes or elsewhere. It could also contain the announcements of skybox availability, requests for application, and discussions of any scheduled skybox events found in the main page.

converge
09-08-2006, 06:40 PM
Maybe it would be good for me to add another "contests/event" subforum to contain all 101/BoF/ "classes" in skyboxes or elsewhere. It could also contain the announcements of skybox availability, requests for application, and discussions of any scheduled skybox events found in the main page.

I think the Lockpick Village hands down proved last year that there is enough hands on, content, and learning to fill an entire Defcon with camps/villages/skyboxen with a specific topic. As mfreeck mentioned after Defcon, Hardware Hacking Hut would make a great addition.. but so would other things like Wireless Waypool would definately take well to this idea if someone.. some group .. (coughcowfcough) stepped up, planned it out, and ran it like a mofo. Hell, people could having a Programmers Paradise with adhoc sessions showing basics of rootkit programming, exploit development ... think it and do it.

Mr Moss was looking for ideas to fill more space than what we can *possibly* use ... I propose there is not a hard drive large enough to contain our intellectual synergy and goals. People just need to think it and more importantly do it.

Z^2
09-08-2006, 07:32 PM
I like the class 101 idea:

It is an education tool- Having a human explain things to you every once in a while as opposed to just a continuous google/textbook-stream is great.

It is a possible indicator of success/failure of an event- It would also help contest organizers figure out what contestants have problems with, indicating that, if necessary/possible, last minute changes could be done to make the contest more successful.

It is a recruitment tool- People who just started getting interested in [insert wardriving/hacking hut/etc. here] that year would then have the option to go to the talk as well, and that would give them a taste and starting point for their next year(s) of studying up to get to the point of being able to compete.

I think LPcon did a good job of this - holding an intro talk about 'this is a lock pick' 'this is a lock'. Otherwise, it definitely does scare people away because you don't know who does what, and the only people you *know* know what you're looking to try are the competitors, who you don't want to ask and thus bother.

(If this is incoheret, I have the martian death-flu, but I tried to re-read as much as possible.)

bigezy
09-09-2006, 02:08 PM
I agree with much that was said. The year my team won, I spent about 18 hours driving doing recon, so that when we got started the first day we had a good idea where to go. This is not a county fair, this is defcon. Its not about being fair and enjoyable, its about being clever and obsessively pursuing to your goal.

The contest will always be problematic. There are a lot of issues that have already been well stated. Maybe setting up an area and having a wifi village like the lockpick one is a good idea.

There could probably be a lot of value in setting up some kind of wireless security breakout area. I would be willing to help out. This years contest seemed to lack from not having enough information before the con.

Oh yeah, I do not compete anymore because I wanted to actually see a few things during the con.


Turning cloaking mode back on.
E

Jim_in_mesa
09-11-2006, 11:48 PM
Just trying to get a sense from people as to why it was only 2 teams in the wireless contest this year...

...So what's kept you from competing?

I did not see any announcements about wireless contests. Were there any?

renderman
09-12-2006, 12:24 AM
I did not see any announcements about wireless contests. Were there any?

Point well taken :)

TheCotMan
09-12-2006, 01:23 AM
I did not see any announcements about wireless contests. Were there any?
On the forums, we created a subforum for it about 5 months before con (If I recall correctly) but I think that the organizers were out of contact by email when the window for submissions for the program and main web-space was open. 1 and 2.

I seem to recall trying to contact thorn to pressure him to get the stuff in on time, but someone else told me he was not near a place with email access. I did not have any other organizers to contact, so I sort of stopped my peer pressure attacks.

IrishMASMS
09-12-2006, 09:35 AM
Just because the info on the WiFi contests were posted to the forums does not make it a good announcement. I just started lurking on the forums, after attending a few yeares & the RSS feed being added for new postings. If it is not on the website, is it (more) official (or rather unofficial)? Most of your outsiders that attend this party tend to think so.

I am dissapointed - tried getting a team together the last 2 years and failed. Lack of interest/wanting to catch sessions/wanting other things/etc. I figured that now as a local I could ace the wardrive - and it is not even going on any longer. GRRRRR!


What about the same, but for bluetooth?