What are /r/Defcon's favorite Products & Services?

From 3.5 billion Reddit comments

Amazon sells small cameras that look like USB wall warts. Trust but verify, keep an eye on things etc. Not just a vegas/Def Con thing, I use this at any hotel i stay at.

USB charger - hidden camera

You can also get a functional PICkit 3 clone for 19 bucks from Amazon: https://www.amazon.com/XCSOURCE-Pickit3-5-Emulator-Programmer-TE239/dp/B011BBQQEK

Programming will be slower but it's also less than half the price

Hacker Tracker, although it hasn't been updated for this year yet. It is up on Github though which the link is in the description.

Alright, after fiddling for nginx for a while and then realizing my DigitalOcean server doesn't have enough space for it I am uploading a copy of it on MEGA

SHA-1: 135852ad5abde471b49ba839353ca0094b30e257

Here are a couple of places for the ESP-WROOM-32 Development Module. Looks like the exact one.

https://www.amazon.com/HiLetgo-ESP-WROOM-32-Development-Microcontroller-Integrated/dp/B0718T232Z

https://www.ebay.com/itm/294826340772?chn=ps&mkevt=1&mkcid=28

I put a carbon fiber vinyl on the cover and then put the stickers on that. Easier to remove them all if you have to. On rare stickers I scan them and then print a copy on sticker paper that way I keep the original plus I can resize them too.

https://www.amazon.com/VViViD-Black-Carbon-Release-Technology/dp/B00L9J4JRG/ref=sr_1_2

I'll be following my company's official guidance. All devices going to Vegas will be using ProtonVPN for all internet connectivity.

While I am generally trusting of the official defcon wifi, I'm mildly concerned about the iPhone's relative promiscuity when it comes to connecting to "known" SSIDs.

Good to know thx! Would you recommend this book for security +

https://www.amazon.com/CompTIA-Security-Certification-Guide-SY0-601/dp/1260464008/ref=mp_s_a_1_1?crid=21YYQAWCE0ASI&keywords=comptia+sec+%2B&qid=1651463110&sprefix=comptia+sec+%2Caps%2C444&sr=8-1

My friend did the design on this. Hackaday did a post on the badge showing the tetris secret that no one figured out. Tetris uses the trace going to one of the led's as an antenna to transmit the tetris song at 550khz. :)

Check it out here: http://hackaday.com/2015/08/10/all-the-unofficial-electronic-badges-of-def-con/

Youtube Link: https://www.youtube.com/watch?v=jwpgpRm15kM

Do you have a makerspace near you? There might be people who can help you do what you are trying to do. I went from being a software-type person to learning arduino to designing PCBs for fun (and no profit) in the span of a year or so thanks to my local makerspace.

For easy designs, check out circuits.io.

For more complex PCB designs, learn KiCAD.

Prototype everything with a breadboard, and then draw out your schematic in one of the above tools. The tools take the schematic, map it to part footprints, and then you layout how you want the board to look.

For prototyping there are a few methods out there for doing your own single sided pcbs, but you are limited in terms of complexity because it's single sided. OSH Park is what I use; in the end 3 weeks isn't that bad, considering i then have a legit PCB in hand. THAT I DESIGNED. it's still very cool to me.

And yes, you'll make mistakes and have to redesign and reorder. Just give yourself enough lead time. That's the thing I am the worst at, i'm usually placing my final PCB orders so late that they show up with maybe a day to spare.

I think there's a lot of promise in automation that's been spun off from the CTF community. Angr and Binary Ninja are both very much spinoffs from contest hacking, and are pretty great for helping a skilled hacker find flaws in software.

On the other hand, CTF has made it abundantly clear to me that C and C++ aren't sustainable for software development. We've definitely made our fair share of challenges with unintentional flaws that players pick up on.

At the end of the day, it's like exercise vs. dieting. You can't out-run a bad diet, and you can't out-fix a bad development process.

Wow that'd be great! Also, I think using Mega isn't safe anymore. I came across an article about Kim DotCom saying so, and isn't he the founder of Mega too? I assume he has intimate knowledge of Mega too. I suggest Onionshare though, I think it's really safe. AFAIK one can upload any files of any size but users can only access the .onion link generated after upload via Tor Browser - AFAIK too.

> Private Internet Access. (At least, I haven't heard anything horrible about them)

FWIW I haven't had any significant issues in the year or so since the acquisition. More Recaptchas and more sites blocking PIA's networks, but that's not on Kape and it's usually possible to find at least one endpoint that isn't banned.

Mullvad hands down. I’ve used Nord, Proton, and PIA previously, but none compare IMO. Mullvad performed the best by far for me and security / privacy is on point. No account creation needed, BTC accepted for payment, and they offer the Wireguard protocol on a few hundred servers around the globe.

Ya, I had plans on nailing all that down once I got my radios in. (I had noted that in the "Spec")

Pretty much I have two of these and one of these and I was going to figure out some settings that would allow all three of them to behave.

Edit: Suggestions are def welcome, Mostly we are looking to do a blast and forget network, not a whole ton of two way traffic. (And def not doing LoRaWAN, that looks like too much work)

I had BT and NFC disabled. LTE was on the whole time. There was times that WiFi was on, and I did attempt to connect to the con network, but I couldn't immediately figure out the security cert so I didn't bother with it. WiFi should of been off /most/ of the time. I did have NordVPN on, but it may have been off at times especially right when connecting to LTE after times when I didnt have service (including when I lost service in Caesars due to being deep in a building or the cell tower overloading)

Leave your bits sealed in these in your room.

https://www.amazon.com/Large-Plastic-Evidence-Bag-100/dp/B013VP0LBS/ref=sr_1_5?ie=UTF8&qid=1535380467&sr=8-5&keywords=evidence+bag

Have you tried the Hacker Tracker app? You can favourite talks, parties and other stuff and add it to an in-app schedule. Android version here: https://play.google.com/store/apps/details?id=com.shortstack.hackertracker