This is absolutely ridiculous. Imagine some fuckers just coming into your room while you’re with your SO making love or something.

That’s kind of silly honestly. I can see where they are coming from but the people at the conference are the good guys. If I were them I would get some of those security professionals to give suggestions on how to have better security. Also random room checks aren’t going to catch anything. Anyone who wants to cause harm isn’t going have such bad opsec. You will end up catching people with legitimate and highly dangerous stuff like routers, network switches and vacuum cleaners

Just FYI, you need very little skill to clone the WiFi access gateway of a hotel WiFi, and then blast their SSID from your router, to lure close guests into your honeypot. Once people are on your malicious gateway, the fun starts.

In a hotel with hundreds of hackers on alcohol, it’s not unlikely for people to fuck around.

There is also no requirement to be a “good guy” to attend the conference.

There is also no requirement to be a “good guy” to attend the conference.

Correct. But it’s kind of the inevitable outcome that only “good guys” attend. Why would any bad actor go there and risk being exposed / caught…

In short, untreated mental illness

Defcon is a useful resource for networking and learning. It being run by and for good guys doesn’t mean bad guys don’t find the event useful. The vague risk of “getting caught” is probably worth taking, regardless of whether that risk is tangible, especially if they follow proper security practices.

Isn’t also a game at defcon to spread a harmless package to as many devices as possible?

Hopefully that would get flagged. If you start broadcasting that will show up under rouge ap detection

Right. And then they locate it and search the rooms nearby. Exactly what their disclaimer is about

vacuum cleaners

Why would someone bring their own vacuum cleaner in a hotel room?

The automatic vacuum cleaners have lots of security issues and are often a common target at blackhat

Your title is terrible. Use the article’s title.

@lud@lemm.ee
link
fedilink
33d

Agreed. I really dislike editorialised titles.

youmaynotknow
creator
link
fedilink
3
edit-2
4d

It’s not a title, it’s an opinion. Having said that, I agree, it’s terrible as a title. Fixed (I think).

We have confiscated all the laptops we could find sir. They had a TERMINAL open. Filthy hackers!

I can also imagine some talks getting disrupted after the speakers demonstration gets confiscated

t�m
link
fedilink
54d

“is that arch Linux?!”

Bold of you to assume they know what a terminal is.

But they were hacking all the IPs simultaneously!

They had 127.0.0.1. That’s my IP!!!

What are you talking about, that’s mine scumbag!

Reminds me of the bash.org Napster entry. For posterity:

#104052 + (14264) - [X]
<NES> lol
<NES> I download something from Napster
<NES> And the same guy I downloaded it from starts downloading it from me when I'm done
<NES> I message him and say "What are you doing? I just got that from you"
<NES> "getting my song back fucker"

Mine is 127.43.3.59

TIL you can set a custom one

Well no

127.0.0.1/8 points back to localhost

Even better. If you are programming all networking H/W yourself, you can even ignore address conventions and reserved addresses.

People you dont want to piss off:

  1. Mother in-law
  2. Worlds greatest hackers
  3. The IRS

They should boycott the hotel next time. I’m sure there are plenty of other places that would accept them

chingadera
link
fedilink
225d

For real, this convention has been around for a long time without issue, we should poke the bear.

Barges into room.

Them: “Are you hacking, son?

Me: “No.”

Them: “Cool. I’m just a hotel employee, and I only have understanding of computers at an end-user level. Plus, I see you’re not wearing a hoodie and sunglasses while being hunched over a laptop. Have a nice day and enjoy your stay at the Hilton!”

youmaynotknow
creator
link
fedilink
155d

most accurate portrait

A hotel confiscating random stuff would be considered theft and the hotel employees arrested in any civilized country.

youmaynotknow
creator
link
fedilink
355d

The US stopped being civilized a while ago.

I was there. It was really weird. The people doing the inspections didn’t even know what they were looking for. What, a USB drive? It was clear to me that they had a very basic, normal persons understanding of technology.

This was mainly motivated by the MGM hacks so they could show that they were doing something in case they got hacked later for liability.

How fucking stupid.

“Resorts World Las Vegas is dedicated at all times to ensuring a safe, secure, and comfortable environment for all of our valued guests,” the statement begins.

Resorts World said the latest policy was established “in light of recent events in Las Vegas, and the increasing ransomware threats to casinos and hotels on the Strip,”

Hard to see this absurd invasion of privacy as being for anything but that last bit. Hope this results in significantly fewer guests, but it feels like the vote-with-your-wallet part of capitalism stopped working some time ago.

I wouldn’t be surprised if somebody does end up pwning them with a ransomware out of spite.

The ransomware threat is coming from INSIDE THE HOTEL!

Room service now!! or kiss your data goodbye

sunzu2
link
fedilink
24d

Thank you for your service, good sir.

This is the proper take here, IMHO

krolden
link
fedilink
95d

Fedcon

elgordino
link
fedilink
335d

All hotels reserve the right to inspect your room whenever they need to. The privacy sign just means you don’t want room service, it’s not some magical lock.

They’d still knock, not just burst into your room to catch you in flagrante.

That said seeing the black hat conference in this way is daft.

Not to mention the metal hook lock on most room doors I’ve seen that can prevent anyone from entering while you’re still inside.

Every hotel with those has a tool they can use to easily unlatch that lock.

Zoot
link
fedilink
24d

I mean if you’re in the room you can atleast stop them from doing that rather easily.

I mean sure if you wedge the door or something, but then you’re just going to get kicked out.

Zoot
link
fedilink
-14d

Or you just walk up to the person and say “Hey. I’m in here…”

Did you even read the article?

Zoot
link
fedilink
-14d

Yeah, no where did it say they will walk in on your ass having sex. Maybe you should actually read the article.

That sounds like a good way to get their employees shot.

I like to walk around with a open bathrobe, hope no one walks in.

Just put your hands on your hips and smile

Create a post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 57 users / day
  • 383 users / week
  • 1.5K users / month
  • 5.7K users / 6 months
  • 1 subscriber
  • 2.81K Posts
  • 70.6K Comments
  • Modlog