#hackersummercamp — Public Fediverse posts

Tune in Monday for my #HackerSummerCamp report (@defcon + @BSidesLV) including mini interviews with:

@thedarktangent
@[email protected]
@joshcorman
@boblord

Subscribe here:
https://firewallsdontstopdragons.com/podcast/

I attended my first Defcon and in the last 100 hrs, I've met Gibson and Dildog from hacker.town, Cooper "Cybertiger" from EFF, been invited to tour ifixits local facility, and dm'd with Andrew bellini, got permission to teach his UART intro lab at our next meet-up. The hacker community is thriving. So excited to have had an opportunity to plug in, IRL

Then xR just tells me he's been corresponding with Gibson as well. Don't tell work, but maybe there's something to inperson

#hackersummercamp

I got ringworm in the Bellagio fountains

#Defcon #DC34 #HackerSummerCamp

Thanks everyone for your lookup.disclose.io feedback at #hackersummercamp this year, we got a TONNE of it and have made some pretty tasty updates over the weekend... 👀

• Owner-first routing: results lead with the owner's own reporting route
• New evidence panel: see why we attributed an asset
• Provenance + confidence on every contact
• One clear recommended next step
• Live progress instead of a spinner

Free, no login: https://lookup.disclose.io

IMO, the most interesting thing to come out of #HackerSummerCamp is that no one should be using AI to patch vulns

https://1password.com/blog/why-ai-generated-patches-still-require-human-review

Back to the real world after #hackerSummerCamp aka Defon 34. Not ready for it. @defcon it was great! Thanks for a great con to all the goons, speakers, villages and genuinely nice funny people I met.

Behold my restraint

All these gadgets could have come with me to #hackersummercamp but I left them home because I have so much restraint

made it home everyone. great to see all of you at #hackersummercamp

id like to put together a hacker oasis next year. a little place somewhere in vegas Thursday, friday, and/or saturday for hackers overwhelmed by defcon or who just dont want to attend and would like a place to chill and maybe do some activities (boss ross mspaint competition anyone?)

would probably be a vrbo or something similar and possibly have a pool.

is that something youd be interested in doing in 2027?

Here’s why Black Hat meeting pitches are almost always doomed with me

My seventh year of Black Hat is in the books, and once again I fought a losing battle with my own schedule. Which I would have lost by a much larger margin if I’d accepted more than a tiny fraction of the meeting requests I’d gotten from PR reps for various information-security companies exhibiting at that conference.

This collective quest for my in-person presence seems to happen every year with Black Hat (see also: CES), regardless of whom I’m writing for or how recently I’ve done any extended writing on infosec. I have to assume that it must work for some journalists and companies, but it almost never does for me.

First, there’s the onstage content of Black Hat: Most large conferences feature a lengthy series of panels, but Black Hat’s tend to be much more info-rich. That makes them easier to turn into posts and therefore into money–when I can find time to write.

Second, there’s the short duration of this event: After some opening pleasantries on a Tuesday afternoon and evening, everything is crammed into Wednesday and Thursday.

Third, this year’s edition of Black Hat gave me even less free time than usual because I was bouncing between that conference and another about two miles north on the Strip–Ai4, which ran from Tuesday through Thursday at the Venetian and paid me to moderate one panel Tuesday and another Thursday.

And some publicists compound their clients’ problems when they wait until the run-up to Black Hat to try to introduce me to these companies instead of picking almost any other time of the year besides (ugh) CES Advent.

Three weeks ago, I felt compelled to vent on LinkedIn: “PR friends, can y’all please explain this obsession with booking meetings at Black Hat? The conference only runs two days and change, with more than 100 generally info-dense talks and presentations filling the schedule Wednesday and Thursday while we’re also supposed to be writing and filing copy. How much free time do your clients think journalists have there?”

The replies I got were more enlightening than I perhaps deserved. To paraphrase a few:

• Well, some journalists do take meetings, so we have to ask.
• Developing one-on-one connections means a lot to us.
• Some of our clients insist on this, even if we tell them it’s a bad tactic.
• You can always say no.

About that last one: It is true that I can always reply to a PR pitch to say “sorry, no interest” and maybe even say why. But then I would spend a large fraction of my workdays doing just that–and no, I don’t trust Gemini, or at least the implementation of that AI service in the Google Workspace version of Gmail that I pay for, to send those replies for me. Sorry, but the lack of a reply remains the reply.

And as I noted at the start of this post, I did accept a few meeting requests. All but one had one thing in common: They were for events in the evening. (I would have accepted breakfast invites too, but nobody sent me any.) Everybody has to eat, and while Black Hat provides a wealth of exhibitor-subsidized dining options, ones that allowed me to have a useful conversation with somebody at a company of interest got my attention over others.

(Free advice to companies looking to get time with journalists at large conferences like Black Hat, CES or MWC: Most of us aren’t parachuting in for a single day of coverage, and you will vastly improve your odds of us going to your event if you don’t schedule it on the same peak evening as everybody else.)

But no matter how well PR types optimize their meeting pitches, there’s no escaping one crazy-making aspect of this quest for journalists’ attention: how the volume of these requests keeps suggesting a far higher value for our time than our compensation indicates.

I love #hackersummercamp

Went to Penn & Teller last night. Not a big deal,except it was with an ex from 13 yrs ago. We are still friends, and well it was a wonderful evening. Always funny that you end up asking, “So, why did we break up again?” We will stay friends… 😬🤷‍♀️💋

#hackersummercamp

I've arrived at #hackersummercamp (@rnbwkat is here too)

We survived LineCon.

We survived MerchCon.

We roamed around for Reg/Setup Day, observing humans carrying boxes, untangling cables, losing badges they received twelve minutes ago, and saying things like, “This worked perfectly last night.”

I would be enjoying myself immensely, except Las Vegas has apparently been relocated directly onto the surface of the sun!!! ☀️

For the record, I hate this heat more than cobblestones. Possibly even more than the organized criminal seagull syndicates of Portugal, and those feathered racketeers know what they did.

Kat keeps saying, “It’s a dry heat.”
So is an oven!!!

Tomorrow the conferences begin. Today, I hydrate, drink tequila and visit relatives at Flamingo.

I have entered the threat landscape. The threat landscape is 43°C. For you Americans, that's much too hot for even a Flamazing Flamingo like me. 🦩🦩🦩#cybersecurity #infosec #sashatheFlamingo

PursePot is Live!!!
#hackersummercamp

Oh the fun(?) of #hackersummercamp is real for sure. Seeing all your friends IRL FTW!! Except when your health issues decide this week they are going to rear their ugly heads - UGH.

On the positive side, I gave my first ever Skytalks and think it went very well!!! Thanks to everyone who came and so many awesome questions!!

Will it be four nights in a row for me and Pub365?! #defcon #hackersummercamp

#HackerSummerCamp is in full swing! BSides LV first. Already met some amazing people, saw some killer talks, and learned really cool stuff... such an amazing week... (sporting my new #FDSD500 swag, no less)

@BSidesLV @VeilidNetwork #UnDisruptable27

i gave my self permission to appear in this photo and to publish it wherever i like.

#BSIDESLV #HackerSummerCamp

Headed to #DefCon? Have a #meshtastic node? Get the event firmware here and settings https://defcon.meshtastic.org #hackersummercamp

Brunch at Esthers is pretty delicious

#defcon #hackersummercamp #bsideslv #bslv

#DEFCON week has commenced. The annual migration is underway. Don't forget to share your #roadtodefcon posts as you make your way to our desert rendezvous. See you all soon.

Real soon.

#defcon34 #hackersummercamp #lasvegas

More random #hardhatbrigade YouTube Shorts!!! #defcon #hackersummercamp

https://www.youtube.com/shorts/5Z9bgz3yeAY

"You don't need pentesters anymore." - Every hype cycle, ever.

While the AI debate continues in Vegas, we'll be busy finding the bugs it missed and proving which "findings" were never vulnerabilities in the first place.

Happy Black Hat & DEF CON!

#BlackHat #DEFCON #AppSec #AI #CyberSecurity #HackerSummerCamp #doyensec #security

Gotta start getting packed up for Summer Camp!
#defcon #bsideslv #hackersummercamp

https://youtube.com/shorts/EYwEmQAmQCQ?si=kTk7g1bf5Q6s_XiB

Packing for Hacker Summer Camp.

@rnbwkat is handling the boring things like clothes, shoes, chargers, and “travel logistics.”

I am packing the essentials:

🦩 Sarcastic wit
🦩 Emergency pink feathers
🦩 Lots of stickers (of course)
🦩 One deeply suspicious USB cable
🦩 Some serious Flamingo attitude

First, I shall visit my distinguished relatives at the Flamingo. Then BSidesLV, where the humans pretend sleep is still part of the threat model. Then Skytalks, where I will return as a Grunt and be patrolling the aisles watching for illegal recording devices.

And finally, DEF CON.

Kat says we are going to “attend responsibly.”

I have reviewed this proposal and marked it *WON’T FIX*.

Vegas, prepare your incident response plan, Sasha is inbound!!!

#CyberSecurity #Hackersummercamp #SashaTheFlamingo

Packing for Hacker Summer Camp. 🦩

Lessons learned from last year:
* Vegas is too hot.
* Battery packs lie.
* /tmp is not a database.

Some experiments deserve a sequel,
and some purses require version control.
@sashatheflamingo #hackersummercamp #cybersecurity

UPDATED VERSION! And here's an easy schedule of Miss Jackalope gigs to save! I'll be at the #DEFCON Vendor area, too. Https://www.MissJackalope.store

#bsides #bsideslv #hackersummercamp #defcon34 #jackalopearmy

RE: https://infosec.exchange/@init_6_/116976200966474073

Last call! #badgelife #hackersummercamp #defcon

Here's my Hacker Summer Camp Appearances! There may be some surprise ones too!! Watch for me everywhere!

#fun #defcon #bsideslv #hackersummercamp #Jackalopearmy #defcon34