{"id":25043,"date":"2022-08-15T17:29:28","date_gmt":"2022-08-15T22:29:28","guid":{"rendered":"https:\/\/www.sportsfirings.com\/?p=25043"},"modified":"2022-08-15T17:29:28","modified_gmt":"2022-08-15T22:29:28","slug":"defcon-30-notes","status":"publish","type":"post","link":"https:\/\/www.sportsfirings.com\/?p=25043","title":{"rendered":"DEFCON 30 notes."},"content":{"rendered":"<p><a href=\"https:\/\/www.battleswarmblog.com\" rel=\"noopener\" target=\"_blank\">Lawrence<\/a> (<a href=\"https:\/\/www.battleswarmblog.com\/?p=52250\" rel=\"noopener\" target=\"_blank\">who I hope is feeling better<\/a>) pinged me over the weekend about missing DEFCON 30 coverage. (At least, that&#8217;s what I <strong>think<\/strong> he was pinging me about: his email was kind of cryptic.)<\/p>\n<p>There are some things going on here.<\/p>\n<p>One is that, <a href=\"https:\/\/www.sportsfirings.com\/?p=25032\" rel=\"noopener\" target=\"_blank\">as I said last week<\/a>, I was in a mood. It takes a lot of time and effort to pull together the preliminary list of DEFCON panels, the day to day coverage, and the post-DEFCON writeups. That effort is even harder now, because Twitter has pretty much removed the ability to view more than a couple of a person&#8217;s tweets without being signed in. I just didn&#8217;t have it in me last week.<\/p>\n<p>Which kind of leads to the second reason: it just doesn&#8217;t seem that my DEFCON coverage gets the level of engagement that justifies the effort. As far as I can tell, people just aren&#8217;t all that interested in it. That may be (probably is) a flaw on my part as a writer, it may be that my audience just isn&#8217;t interested in computer security subjects, or it may be that I&#8217;m completely misreading what people are interested in.<\/p>\n<p>It also feels like DEFCON has moved beyond me in the post-Wuhan Flu world. It used to feel like a gathering of one of my tribes. Now, it costs $360 (&#8220;with a processing fee of $9.66 added to online orders&#8221;). Masks are required. And supposedly, you may run into <a href=\"https:\/\/deviating.net\/firearms\/defcon_shoot\/\" rel=\"noopener\" target=\"_blank\">trouble with the hotel<\/a> if <a href=\"https:\/\/www.ar15.com\/forums\/general\/This-JUST-happened-Raided-at-Paris-Las-Vegas-over-SUSPICION-of-having-a-gun-\/5-2577456\/?\" rel=\"noopener\" target=\"_blank\">you want to bring a legal firearm<\/a>. (Hattip: <a href=\"https:\/\/mcthag.blogspot.com\/2022\/08\/las-vegas-is-gun-free-zone.html\" rel=\"noopener\" target=\"_blank\">McThag<\/a>.) They&#8217;re also still doing that weird &#8220;semi-hybrid&#8221; model again, and I&#8217;m just not willing to spend a bunch of time hanging out on Discord.<\/p>\n<p>(I&#8217;m pretty sure I stayed at that &#8220;s&#8211;tball&#8221; Travelodge on my last DEFCON trip. &#8220;they just want their $56 per night and prefer you to not leave used heroin works in the potted plants outside&#8221; seems pretty accurate.)<\/p>\n<p>The last thing is: I&#8217;ve seen almost no other coverage or discussion of DEFCON 30 this year. At least not in the places I&#8217;d expect to see it: Wired, ArsTechnica, or HackerNews. <a href=\"https:\/\/threatpost.com\/black-hat-and-def-con-roundup\/180409\/\" rel=\"noopener\" target=\"_blank\">ThreatGrid did a round-up post this morning<\/a> if you want a different take than mine, but other than that, I&#8217;ve seen nothing.<\/p>\n<p>I went and checked the schedule (<a href=\"https:\/\/defcon.org\/html\/defcon-30\/dc-30-schedule.html\" rel=\"noopener\" target=\"_blank\">which you can find here<\/a>: I haven&#8217;t found the media server yet.) One thing that is really nice is that they&#8217;ve added much more information to the schedule entries, including links and references where available.<\/p>\n<p>And&#8230;there just are not a lot of presentations this year that I find interesting. I can see why people would be interested in &#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241831\" rel=\"noopener\" target=\"_blank\">Computer Hacks in the Russia-Ukraine War<\/a>&#8220;, but at only 20 minutes, I have questions.<\/p>\n<p>Maybe &#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241935\" rel=\"noopener\" target=\"_blank\">Wireless Keystroke Injection (WKI) via Bluetooth Low Energy (BLE)<\/a>&#8221; because Bluetooth, but that&#8217;s not so much breaking Bluetooth as it is pretending to be a legit Bluetooth device.<\/p>\n<p>&#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241938\" rel=\"noopener\" target=\"_blank\">The PACMAN Attack: Breaking PAC on the Apple M1 with Hardware Attacks<\/a>&#8221; and &#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241927\" rel=\"noopener\" target=\"_blank\">Process injection: breaking all macOS security layers with a single vulnerability<\/a>&#8221; probably have some relevance to Apple folks. So does &#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241936\" rel=\"noopener\" target=\"_blank\">The hitchhacker\u2019s guide to iPhone Lightning &#038; JTAG hacking<\/a>&#8220;. And I can see the interest in &#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241928\" rel=\"noopener\" target=\"_blank\">Glitched on Earth by humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal<\/a>&#8220;, but I don&#8217;t have a Starlink terminal to play with.<\/p>\n<p><a href=\"https:\/\/forum.defcon.org\/node\/241830\" rel=\"noopener\" target=\"_blank\">&#8220;You\u2019re <del datetime=\"2022-08-15T20:05:16+00:00\">Muted<\/del> Rooted&#8221;<\/a> has the Zoom thing going for it. I&#8217;ll confess to a small amount of interest in &#8220;<a href=\"https:\/\/forum.defcon.org\/node\/241832\" rel=\"noopener\" target=\"_blank\">HACK THE HEMISPHERE! How we (legally) broadcasted hacker content to all of North America using an end-of-life geostationary satellite, and how you can set up your own broadcast too!<\/a>&#8221; and no interest at all in this year&#8217;s <a href=\"https:\/\/forum.defcon.org\/node\/242199\" rel=\"noopener\" target=\"_blank\">&#8220;Hippy, <em>please<\/em>.&#8221;<\/a> one.<\/p>\n<p><a href=\"https:\/\/forum.defcon.org\/node\/241834\" rel=\"noopener\" target=\"_blank\">&#8220;Defeating Moving Elements in High Security Keys&#8221;<\/a> does sort of get my attention. And that&#8217;s the last thing that does.<\/p>\n<p>It just feels smaller and less interesting. Perhaps DEFCON is still finding their footing again after the last two years. I don&#8217;t know. I also don&#8217;t know if I&#8217;m going to do anything next year.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lawrence (who I hope is feeling better) pinged me over the weekend about missing DEFCON 30 coverage. (At least, that&#8217;s what I think he was pinging me about: his email was kind of cryptic.) There are some things going on here. One is that, as I said last week, I was in a mood. It [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,179,189,209,70],"tags":[],"class_list":["post-25043","post","type-post","status-publish","format-standard","hentry","category-apple","category-bluetooth","category-defcon","category-defcon-30","category-radio"],"_links":{"self":[{"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=\/wp\/v2\/posts\/25043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=25043"}],"version-history":[{"count":15,"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=\/wp\/v2\/posts\/25043\/revisions"}],"predecessor-version":[{"id":25060,"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=\/wp\/v2\/posts\/25043\/revisions\/25060"}],"wp:attachment":[{"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sportsfirings.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}