Al3xis Park Reservations

[Eclectic1]

I'd be really interested in seeing what people do to hack through fiewall appliances like a PIX. I beleive that the PIX has a small IDS integrated into it also. I hope you do bring that thing - I'd be interested in checking it out.

Joe

[converge]

i'd be interested to see too.. i've read up on them but never seen em in action... hehehe the config will get u though

[astcell]

PIX 515

We have two 515's now but we will replace them, they are almost impossible to reconfigure every time there is network change, and we can't work to well real time. Command line is out, and stuff like the WatchGuard Firewalls can allow dynamic changes from anywhere in the world as long as the IP can be seen. Maybe I can bring one of each, it'll be interesting.

[octalpus]

That would be mighty nice!

[astcell]

pixless?

The pix'es are being traded in, maybe I will get something better. :)

In any case I called the Alexis Park Hotel to make sure my reservations were still valid, after seeing a lot of the talk on this board. They said that the deposits are no longer refundable at all, and we have to sign a damage waiver. When I made the reservation it was refundable, but no more.

I think at the rate the mobs at Defon are going, this may very well be our last stay at the Alexis Park, and maybe even in Vegas. Talk about biting the hand that feeds you.

[Ghent]

CTF & Security Recommendations

Well for those that don't know, I'm the one in charge of the CTF network.

If you want to bring a PIX go right ahead, I'll be more than happy to show you what you can do with it (last year I used a 520 in the network design). However, a firewall does not make up for running an insecure system or conducting oneself in an insecure manner.

No matter how many times I tell people not to plug into CTF to check mail, they always do it. And within minutes their POP password is sniffed and exploited.

Given all the issues with SSH over the past year, I would not be surprised if stealing shells is not the soup du jour at DCX. Remember to upgrade to SSH2 if at all possible.

Bottom line it comes down to having fun and not being stupid. Having run and sniffed the CTF network for years it doesn't come down to skill necessarily as much as preparation and diligence.

Those that complain when the net connection goes down (DoS usually) because they can't get the tool they need should have prepared. Burn a CD of tools. Become familiar with common exploits. Don't waste your time banging on a locked door, get out and look for an open window.

Overall in encourage you all to throw your hat into the ring this year and give it a try. I'm sure you won't be disappointed.

-Ghent.

ghent@decepticons.org
High Speed News and Tools: packetstorm.decepticons.org

[russ]

Pix

haha, That would be interesting.

BTW, you dont HAVE to bring your laptop, but if you're into that sort of thing, there are thousands of others on the premises hacking, gaming, chatting, and surfing. You're not going to miss out either way. DC has just become so much more diverse than we ever imagined. It's still about hacking, but there's an entire culture and society around it now.

We're like our own little civilization. Consider DefCon citizenship! hahaha

[Ghent]

Hmmmm...

Russ,

Great idea. Maybe this year we can set up a booth to sell official DefCon visas and ID's, kind of like those folks at the SciFi/Trek cons.

-Ghent.

[octalpus]

Please don't do anything that would put us in the same league as Trekkies!!!!

[russ]

Trekkies?

And WHATS wrong with Trekkies. :-P

BTW, OP, is your sales thing working out ok? I checked out your site today... just for kicks.

[octalpus]

Actually, that's not my site... I mean, it is, but it isn't. I'm being hosted free from the ISP I work for. Network monkey was being lazy, so rather than just make a folder for me, he copied over another person's folder. And I, being quite lazy, still haven't uploaded my site and deleted what's in there. Not that my site is worth uploading... it was just a pic and a message saying I'll have more later... but I have resolved to get that up sometime this week. ;-)

[russ]

Git Sum!

Git yourself a little OctalPussy.... only $.8 bits

<sorry, couldn't pass it up.>

<naughty goon! SMACK

[octalpus]

<smacks Russ again for good measure>

Actually, it's a Bond spoof. I figure I'm the geek equivalent of a Bond babe - not quite as hot, but I can code your pants off. ;-)

[russ]

WOW!

I'm not sure I've ever had my pants removed that way before.

But yeah, I caught the Bond pun... good name.

[octalpus]

You mean you've never played Strip Shell Scripting?!?! What kind of a geek are you?!?!