Slashdot Mirror


Linux Top Gun Hacker Contest Report

A semi-anonymous reader writes with this account: "Kyley and I drove up to Austin for the Linux top gun hacker challenge event. We weren't sure what to expect, but looked forward to seeing a theatre with wireless internet, meeting security geeks, and learning new tricks at this hackfest. In the end, most people left early and unhappy, but I'm still glad we went." Read on for more on what was worthwhile about this event, and what left some of the audience disappointed.

We heard about this from a slashdot article ("Computer Attack and Defense As Spectator Sport").

Tough Audience The event was held at the Alamo Drafthouse, a movie house with tables and a wireless network. The theatre was packed, and there was a waiting line going out the door. I talked to an admin who had driven in from Brownsville (South Texas) for this event, so obviously there was a lot of interest, although we didnt know what to expect. Many attendees, maybe 10%, had computers with them.

The event was supposed to start at 7 p.m., but because of technical difficulties, it didnt start until 9 p.m. In the outer lobby were vendors selling metal bras and edgy political/sex books. Very Austinesque.

The Event Itself When the Top Gun event itself started, it went like this: there are a few registered teams; each team is given the 'target' box, and has ten minutes to secure it. After that, everyone in the room has thirty minutes to try to hack into the box. A few services had to be enabled -- http, https, ssh, smtp, and ftp. The defenders start with 100 points, and points are deducted if any of the services seemed unavailable, or if judges determined the box was compromised. DoS attacks are not allowed.

Already the idea sounded weak. On the big screen, they were running a homebrew GUI app that showed the score, time, IP addresses, and the services on the target. The services were being polled by a monitoring machine, and the response time was displayed. If the response time increased, i.e. the service was laggy, then points were automatically deducted from the defender's score. Laggy web server performance? That's a strange definition of 'hacked', but it is (or should have been) easy to monitor, which is probably why they did it.

Part of the draw to this event was that they were going to use "video animation" to "show how network attacks happen." I didn't have my hopes up for this, but I was still disapointed. They used their (Linux-based) homebrew GUI, which looked like it just used some libraries from etherape to draw lines from ips to the services on the target they attach to. That was it for the visualizations. The list of services was supposed to turn from green to red when they went slow, but for most of the night they stayed red and displayed just zeros, no readings. Their software appeared very buggy, hardly ever working, and windows in the background showed them fixing it as they went.

The commentary was sparse and uninformative. "Yes, that line shows connections to http, and it is taking a beating!" There was no discussion of exploits, security, concepts, attacks, what is currently happening, etc. After the attack session ended, the defenders were brought up for a brief Q&A, which reminded me of a post-fight boxing interview. "Uh, yeah, we felt good, we had a plan. A lot of things happened, and we applied patches."

Before, during, and after the attack session, no one knew what was happening. It seems that despite hours of trying by different teams, the target box was NEVER compromised. During the second Q&A session I stood up and asked, "Was the box hacked in any way whatsoever?" The reply? "Probably." But no one knew. If it had been hacked, I believe the person doing it would have said something, or at least bragged on the irc channel for the contest.

The entire operation seemed very amateurish. Technical difficulties occured during the event, giving one team a higher score becuase the monitoring software wasnt working to remove points. Most attendees left early, and a highlight of the evening was when someone posted ascii porn to the irc channel.

On the upside, the DJ had a good stream of music, there were more women than you'd expect, and some in small metal bras. And it was a gathering of a lot of smart geeks, a great opp to meet people.

Room for improvement. The longest topic of conversation in the audience was how to fix this mess. We came up with some ideas:

Visuals

They should have used proven, off-the-shelf network visualization and monitoring tools for the event. We were _dying_ for some snort output, to see what exploits were being attempted. A tool like Demarc would have been perfect to show the events as they happened. Or at least snortsnarf or acid. The screen should have rotated between different monitoring tools to give an idea of what was happening.

Contest Format

The format of the event was flawed. The truth is most hackers take advantage of easy targets. Defending a box is not that hard. Simply applying the latest patches and configuring a basic iptables firewall about does it. After those steps are taken by the defending team, only truely leet hax0rs with 0day exploits are going to get root in thirty minutes.

A better format would be this: Bring an unpatched or lightly patched Linux server for everyone to attack. As soon as someone gets in, stop the show. The hacker gets a prize, and has to explain/show what they did. Then that vulnerability is patched, and the contest starts up again.

All in all, the event was a let down. Austin is a cool town, and lots of smart geeks came out. There is obviously interest in an event like this, but the execution didn't result in any entertainment or learning. If this is a PR event to generate publicity for the sponsors, I think it failed, because if this is an example of their organizational and technical skills, I would not hire them myself. But then, they're probably better at security than they are at public events.

Slashdot welcomes reader-submitted features; thanks to marc for this one.

179 comments

  1. Dead Link? by Bush_man10 · · Score: 1, Funny

    Did someone hack this page? Seems it won't load for me :)

    --
    "I believe in everything in moderation. Including moderation." -Dean DeLeo, Stone Temple Pilots
    1. Re:Dead Link? by gomiam · · Score: 1
      Yes, it was hacked allright - ooops, I forgot DoS did not count. OTOH, is Slashdotting considered DoS?

      Somehow I find the idea of showing the video&quot of http connections right now strangely enticing.

    2. Re:Dead Link? by Bisifiniti · · Score: 1

      I think it would be more of a DDoS...

  2. Overall impression? by Chocolate+Teapot · · Score: 5, Funny
    On the upside, the DJ had a good stream of music, there were more women than you'd expect, and some in small metal bras
    So all-in-all, the evening was a resounding success then?
    --
    Modest doubt is called the beacon of the wise. - William Shakespeare
    1. Re:Overall impression? by chas7926 · · Score: 1

      Flamebait? This is funny people. Women in small metal bras at a linux convention. Hell I wish I had gone just for that.

      --
      Linux User #296508 Get Counted!
    2. Re:Overall impression? by Shadow+Wrought · · Score: 1
      Where'd you get "flamebait" from?

      Its Funny! Laugh;-)

      --
      If brevity is the soul of wit, then how does one explain Twitter?
    3. Re:Overall impression? by mgs1000 · · Score: 1

      yeah! Where are the pics?

    4. Re:Overall impression? by Anonymous Coward · · Score: 0

      "small" metal bras implies small breasts. How ais that a 'success'? :)

    5. Re:Overall impression? by DNS-and-BIND · · Score: 2, Funny
      It's a sad day when women in small metal bras and political flamage is considered 'Austinesque'. Used to be women in rumpled cowboy hats and gentle leftist politics were 'Austinesque'. I bet you few people there even knew who Willie Nelson is, and the ones who do know would look at him with scorn because he's a 'country' singer. Reminds me of a quote from 'Half-Baked'...

      Willie Nelson: "Man, I remember when a dime bag cost a dime. You know what I mean? You know how much condoms used to cost back in them days?"
      Thurgood: "How much?"
      Willie Nelson: "I don't know. We never used them."

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    6. Re:Overall impression? by berzerke · · Score: 1

      I was there, and I'd call it a failure. The music wasn't very good, it was way too loud, and the metal bras didn't have to be big to cover the models. I left about 8:50 PM in disgust. Overall, it sounds like I made a good decision.



      The whole thing was a good idea, just poorly implemented. From the discussion of the people there, this was apparently a second attempt at this sort of thing. I heard that 2 weeks after the first attempt, they still didn't figure out who won.

  3. lol by Anonymous Coward · · Score: 1, Funny

    Amateurish? From the site...

    "Everyone join #ltg on efnet for some Paco bashing, and to witness Dick Hunter in full rantitude.

    What are you expecting?!

  4. Hacking by burgburgburg · · Score: 4, Insightful
    Another private activity that doesn't translate well to being a live public group activity.

    After the excitement of all of those hacker movies and TV shows, I'm suprised at this result.

    1. Re:Hacking by JoeBuck · · Score: 2, Funny

      Just remember, you look at the screen intently, type really fast for 20 seconds or so, then shout "I'm in!"

      Or try the Russian variation: type really fast with one hand while clicking a ballpoint pen with the other, just so James Bond can give you an exploding pen later in the movie.

    2. Re:Hacking by kperrier · · Score: 1

      Or try the Russian variation: type really fast with one hand while clicking a ballpoint pen with the other, just so James Bond can give you an exploding pen later in the movie.

      Don't forget standing up, after the big shoot-out/movie climax, shouting "I am invincible!" just before having hundreds of gallons of LN2 poured over you.

      Kent

    3. Re:Hacking by SnowDog_2112 · · Score: 5, Funny

      I have this mental image of something like The Iron Chef. I think the commentary style would work well :)

      Male Voice: "Iron Hacker Ginsburg is opening another xterm. I wonder what's going on?"
      Female Voice: "Is that kshell?"
      Male Voice: "Hrm. Well, I don't know...."
      Male Voice (from floor): "Sysop!"
      Male Voice: "Yes?"
      Male Voice (from floor): "Ginsburg is indeed opening another xterm, and it's not kshell, it's a special shell he's written himself. When I asked about it, he told me it has a custom completion tool and command substitution algorithm."
      Female Voice: "Oooh.."
      Male Voice: "Very unusual. Let's see what challenger Fordham has up his sleeve...."

      --
      Not representing or approved by my company or anybody else.
    4. Re:Hacking by Anonymous Coward · · Score: 0
      Another private activity that doesn't translate well to being a live public group activity.

      Oh man....that list is looooong

    5. Re:Hacking by Tumbleweed · · Score: 1

      My mind had images more along the lines of the movie, "God of Cookery":

      "Nice use of folding-chair!"

    6. Re:Hacking by m_xiphias · · Score: 1

      Instead of Iron Chef, what about a show like Discovery Channel's Monster Garage? It might actually be a little boring, and boggling to non-geeks, though. 3 or 4 programmers with certain skills are put into one area to program for 5 days, with one head honcho (whoever we want to elect with the equivilency of Jessie James on MG) to oversee it. Highlights will be testing it at each end of the day, explanations of how they're doing things. They'd get the first day to plan. On the sixth day, they have to present their work whether it is in working condition or not. I dunno, it seemed kind of cool when I first thought it up. Ideas for what to program might not be that easy to come up with. And, rules would have to either be very lax (use any existing sourcecode, any libs you want) or very specific. Maybe the Monster Garage type show would work better for a casemodding thing, though.

    7. Re:Hacking by Anonymous Coward · · Score: 0

      d00d u r 14 minutes 2 lat3

      that is 840 seconds
      0.23333 hours

      g3t w1th the tiems

    8. Re:Hacking by Master+of+Transhuman · · Score: 1

      This is Howard Cosell, from the Hack-Attack-A-Thon in Austin, Texas. Now a word from our sponsors...

      This is Howard Cosell, back at the Hack-Attack-A-Thon in Austin, Texas, where it seems the first team up has determined that the target box is running the unpatched version of SSL. That's a no-no, sysops... And now, a word from our sponsors...

      This is Howard Cosell, back at the Hack-Attack-A-Thon in Austin, Texas. You know, I always wondered why quarterbacks never just kept the ball and ran with it... Well, it seems the first team has run out of time for their attack, and the box is STILL unbroken! And now, a word from our sponsors...

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    9. Re:Hacking by Anonymous+Hack · · Score: 1

      I think it'd be a lot more interesting if they set it up like Red Hat's certification test - you get a really, really broken computer and you need to fix it. In the case of this it would be you get a really, really broken computer which still happens to be running TCP/IP, someone yells GO, then you need to get your webserver and mail server up before the bad dudes break in... I.e. both people start from 0 points and move up in real time, not someone starts with a 100 and it goes down.

      --
      I got a sig so you would remember me.
    10. Re:Hacking by darkfrog · · Score: 1

      This has to be THE single most hummorous comment I have EVER seen on slashdot!!!!

      roflmao

      mad props to you.

      --
      --DarkFrog
      If the dead rise again, we're going to have some serious population control issues.
    11. Re:Hacking by Anonymous Coward · · Score: 0

      Actually, it translates quite well. The CTF contest at Defcon is always very entertaining, and last year's contest, having been taken over by the Ghetto Hackers and restructured, was yet another evolutionary step foward. New attendees got a chance to see that things don't happen after a few clicks on a pretty GUI screen (like the movies would have you believe), yet the interface was lively, and gave updates in an amusing simulation environment.

  5. Like the movie Hackers, or Swordfish... by KDan · · Score: 5, Insightful

    Yet another event trying to make it look like hacking into computers is really cool and a fun activity... when in fact it's long, boring, solitary and quite pointless for most people when you think about it (especially pointless for those 14 year olds with too much time who would do better to go out and get laid than to DoS someone they don't like on IRC with one of the boxes they got into courtesy of code red or whatever). Daniel

    --
    Carpe Diem
    1. Re:Like the movie Hackers, or Swordfish... by unicron · · Score: 2, Insightful

      It was always fun at Defcon to watch. Maybe because they didn't try to make it look like someone was bringing down a Gibson with a GUI virus. This Topgun show sounds pretty damn lame, IMHO.

      But Defcon is slipping. This year they did some wardriving stuff and a friend of mine had his antenna snapped off of his truck. Fuckers.

      --
      Finally, math books without any of that base 6 crap in them.
    2. Re:Like the movie Hackers, or Swordfish... by Anonymous Coward · · Score: 0

      especially pointless for those 14 year olds with too much time who would do better to go out and get laid than to DoS someone they don't like

      I'm sure that if going out and geting laid was an option for these people then that is what they would be doing.

    3. Re:Like the movie Hackers, or Swordfish... by mike_sucks · · Score: 1

      Christ, I hope they aren't out there getting laid; they might reproduce.

      There's enough wankers (literally *and* metaphorically)in the world already.

      --
      -- "So, what's the deal with Auntie Gerschwitz et all?"
  6. hey by anotherone · · Score: 5, Funny
    there were more women than you'd expect, and some in small metal bras.

    pics plz

    --
    Username taken, please choose another one.
    1. Re:hey by Anonymous Coward · · Score: 2, Informative
    2. Re:hey by anotherone · · Score: 0, Flamebait

      Holy motherfuck, I don't know which is worse, the background on that page or how those things must feel...

      --
      Username taken, please choose another one.
    3. Re:hey by jgerman · · Score: 1

      Anyone else disturbed by the fact that the parent (at this time at least 1:54 EST), is modded +3 Informative, instead of Funny, or at least Interesting? ;)

      --
      I'm the big fish in the big pond bitch.
    4. Re:hey by kperrier · · Score: 1

      Talk about an impossible page to read. Yeah, you can see the pictures, but the text is impossible to read.

      Kent

    5. Re:hey by GT_Alias · · Score: 4, Funny

      Yeah, and everyone goes to that page just for the articles.

    6. Re:hey by Anonymous Coward · · Score: 0

      there was text?

    7. Re:hey by Master+of+Transhuman · · Score: 1


      Come on! With a set of tits like these, you KNOW these chicks were HIRED by the sponsors to work the show! That's probably how the show was financed - by a percentage of the proceeds from the hookers working the geeks...

      Come on, geeks! 'Fess up! How much did YOU spend on these babes?

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    8. Re:hey by Coplan · · Score: 1

      I just have to laugh at that comment. I now know that you're a true 100% geek. Who else would ask to get their porn on slashdot.

    9. Re:hey by vsprintf · · Score: 1

      RFC 102.1

  7. Uh HUH by LordYUK · · Score: 1, Funny

    "and a highlight of the evening was when someone posted ascii porn to the irc channel.

    You say that as if the highlight of ANY geekfest ISNT pr0n???? Just where are your priorities man!!

    --
    This is my sig. Its pathetic.
  8. Austin humour by binaryDigit · · Score: 5, Funny

    On the upside, the DJ had a good stream of music, there were more women than you'd expect, and some in small metal bras
    One of the women was probably Leslie.

    1. Re:Austin humour by FIT_Entry1 · · Score: 1, Funny

      Leslie rawks.

    2. Re:Austin humour by Anonymous Coward · · Score: 2, Informative

      lol!

      Okay, for those who don't know who Leslie is or what makes this comment hilarious as all get out, I'll try to explain.

      Leslie is a real person, a very well known of person. Washington, DC has Bush, Austin has Leslie.

      Leslie is a crossdresser, often seen on 6th street on a friday night banging a bucket in a non-rythmetic way and other popular venues. Which the parent poster is stating here.

      There was a mayoral race a while ago, I've been told, that Leslie got his name on the ballot to be voted in, as a joke, I presume. I don't know how well he did, though.

    3. Re:Austin humour by JJ22 · · Score: 2, Funny

      austin humor i understand, and me with no mod points.

    4. Re:Austin humour by pyros · · Score: 1

      Leslie. Ugh. I'm pretty sure the scragly beard would have given him away. It's so frustrating to know he has a book published (after gaining noteriety as a cross-dressing bum on 6th st.), and there was a time when "Leslie for mayor" bumper stickers were going around.

    5. Re:Austin humour by Anonymous Coward · · Score: 1, Funny

      Yikes, as someone who lives in the Austin area, the thought of Leslie (well known local dirty homeless transvestite) in a small metal bra makes me want to lose my lunch.

    6. Re:Austin humour by binaryDigit · · Score: 1

      I'm pretty sure the scragly beard would have given him away

      Yeah, but how much do you want to bet that many of the, uh, affection starved attendees still hit on him/her/it anyway ;)

    7. Re:Austin humour by parc · · Score: 2, Interesting

      For those not familar: Leslie is a (pseudo) homeless cross-dresser in Austin. He/She has run for mayor in every election I've witnessed, and consistantly pulls in some votes. He/She is a true example of how Austin still holds on to some of what makes it special. For a little slideshow of leslie, go to this slide show

    8. Re:Austin humour by dallask · · Score: 1
      --
      The Code Ninja is swift with his tool, precise in his delivery, and deadly accurate in his execution.
    9. Re:Austin humour by einTier · · Score: 1
      Umm... the guy bangs the buckets on sixth street is not Leslie. I'm not even sure that guy dresses in drag.


      Leslie is the dude that rides a bicycle that pulls a cardboard and metal contraption he calls a home. He does indeed cross-dress, usually in a bikini top and thong. Just another example that in Austin, there is always someone weirder than you.

      --
      -------------------------------------------------- $665.95 -- retail price of the beast.
  9. metal bras do not make a hip party by Anonymous Coward · · Score: 0

    this sure sounds terrible. i would be sad if i had to pay to go to this event. i guess you cant expect a bunch of geeks to know how to throw a good party.

  10. and the real hackers... by MarvinMouse · · Score: 5, Insightful

    Won't even be at this show. They are too busy elsewhere.

    Personally, the idea of a hacking competition is interesting, but it would have to be done over a long period of time, and set up more like a war game than a boxing match.

    Skr1p7 k1dd13s treat hacking as a boxing match. Real hackers are far more efficient and skilled at it.

    An idea for a real hacking competition (Almost like capture the flag): Two sides to the fight, different locations for both. One side will have multiple targets, the other side will have multiple attackers.

    The goal of the attackers will be to get specific files from the targets, using any technique desired. (Including Social Engineering) The goal of the defenders will be to catch/name/etc the attackers, and thus completely neutralize them.

    Do this over a course of a month or a year, and make a TV show with the highlights of battle. Now that would be excellent viewing.

    ** NOTE: the term hacker above can also be translated as cracker for those who are offended by this use of the term hacker, thank you **

    --
    ~ kjrose
    1. Re:and the real hackers... by buswolley · · Score: 1
      doesn't this violate the dmca?

      .oh yeah fuck the dmca.

      --

      A Good Troll is better than a Bad Human.

    2. Re:and the real hackers... by buswolley · · Score: 1

      i meant to say if it were a contest that included a M$ system

      --

      A Good Troll is better than a Bad Human.

    3. Re:and the real hackers... by zmooc · · Score: 1

      So? Just do the show in a free country. Or let the contestants tape themselves and communicate over a free network like freenet in which everybody is anonymous and everybody can put things online. And fix that law.

      --
      0x or or snor perron?!
    4. Re:and the real hackers... by Anonymous Coward · · Score: 0
      Two sides to the fight, different locations for both. One side will have multiple targets, the other side will have multiple attackers.

      how about a third side that does monitoring/forensics? at the end of the competition they go first with a rundown of what happened, then that gets compared to what the other sides actually did. give each side 3 months: 3 months to prepare, 3 months to hack, 3 months to analyze. score according to goals achieved, present everything as a talk at one of the many security conferences. get the major OS vendors to donate a server for the time, and a couple ISP's to donate the access. use these for the defense team, and get some machines for use by the analysis team as well. attackers get to use their own equipment.

      might be difficult to come up with rules for how the defended servers should be setup. maybe have a variety (i already would want to see every OS represented, hence the aforementioned vendor contacts) of setups, some with stuff like ftp access to anyone, some with RO setups, etc

      thats lotsa work. im glad all i need to do is talk about it.

    5. Re:and the real hackers... by Madcapjack · · Score: 1
      I was thinking that it would be better to have the show be just a little different: Survivor Hack

      Hey what can I say? the shows would have to better with beautiful bodies on beautiful beaches!

    6. Re:and the real hackers... by superflippy · · Score: 3, Interesting

      Your idea sort of reminds me of a game we used to play in high school called "Assassin". The game master assigned each player a target whom they were supposed to "assassinate" (via disk gun, toilet-paper garrotte, sticky-tack contact poison, alarm-clock bomb, etc.). So everyone was both a target and an assassin, but you never knew who was out to get you. Once you eliminated your target, you inherited their target. Last one left alive wins. Each game generally lasted for 2-3 weeks, depending on the number of players.

      (Naturally, this was several years ago. Any high schoolers caught doing something like this today would probably be locked up.)

      --
      Your fantasies contain the seeds of important concepts.
    7. Re:and the real hackers... by cvande · · Score: 1

      That sounds to much like work and not enough like a game. To spice things up why don't they let the attackers utilize pyrotechnics to indicate a compromise...yeah .... that might be cool. And the defenders could administer minute electric shocks to the attackers if they get caught snooping. Or better yet in the case of caught redhanded in an attack charge them fifty bucks to simulate their ISP pulling their account...Yeah that would make me feel better....errr ... I mean...that would be cool.

    8. Re:and the real hackers... by Anonymous Coward · · Score: 0
      The DMCA is a copyright act. They weren't copying anything.

      I'll assume for a second that you are smart enough to know the DMCA doesn't apply here and only making a joke. These kinds of jokes don't help. They only add to the confusion.

    9. Re:and the real hackers... by einTier · · Score: 1
      We used to play that as well. However, our games typically only lasted about a week. But, we were ruthless, and almost nothing was forbidden. The only rules were that any attack had to be described to the GM before it happened, and it had to be something realistically buildable.


      I must have been blown up by a half dozen "car bombs" my senior year in high school. Of course, this was 1992, I'm sure that in today's political climate, this game would be viewed as extremely dangerous.

      --
      -------------------------------------------------- $665.95 -- retail price of the beast.
    10. Re:and the real hackers... by maxpublic · · Score: 1

      Hell, we played that back in 1983, complete with a nice black book of instructions detailing all the 'valid' methods of eliminating one's target. I believe the book was called "Killer", but I no longer have it so I'm not sure about that.

      The most popular method was to simply walk into a class your victim had and shoot him with a dart gun. But I bet if you tried that today you'd be expelled and given a court order to see a psychiatrist.

      Max

      --
      My god carries a hammer. Your god died nailed to a tree. Any questions?
    11. Re:and the real hackers... by fuzzybunny · · Score: 2, Funny

      Sleeveless t-shirt under your other clothes marked 'bulletproof vest'. "Hey, I shot you!" "No, you didn't." *BANG*


      Cardboard box inserted in someone's locker, with label 'thermonuclear device'.


      Master the possibilities.

      --
      Cole's Law: Thinly sliced cabbage
  11. This sounds like ... by mustangdavis · · Score: 2, Insightful



    ... a LAN party gone bad ....


    Speaking of which, did anyone get tired of the poorly thoughout contest and break into a game of Quake, Counter Strike, or War Craft III???


    Honestly, this event sounded like it had potential, but the organizers just didn't plan things well enough ... they obviuosl have never been to a well planed LAN party .... or maybe these are the guys that you get pissed at when they throw a reall bad LAN party :)

    1. Re:This sounds like ... by The_K4 · · Score: 1

      See i would have expected SOMEONE to get bored enough to crack into the system they were running sorice system from and start messin' around with that. :)

    2. Re:This sounds like ... by The_K4 · · Score: 1

      sorice SHOULD read scoring. Must learn to use keyboard.

    3. Re:This sounds like ... by kperrier · · Score: 1

      sorice SHOULD read scoring. Must learn to use keyboard.

      Or, perhaps, the PREVIEW button?

    4. Re:This sounds like ... by carlos_benj · · Score: 1

      How in the world could you type 'sorice' instead of 'scoring'? I mean your 'c' winds up clear at the end (or nearly so) and 'ng' is replaced by 'e'.....

      --

      --

      As a matter of fact, I am a lawyer. But I play an actor on TV.

    5. Re:This sounds like ... by The_K4 · · Score: 1

      It's just one of those weird things taht happens when your right hand types faster then your left, and your already thinking about the next word, and that one just comes out all wrong. I SHOULD preview, but slashdot always seems to take forever to load, so i just get lazy.

  12. true by Anonymous Coward · · Score: 0

    To me this seems true of all 'wargame' style events, and was the same at HAL (www.hal2001.org), any half competant admin can secure a box to public exploits, and no-one is going to use 0day during a wargame, but, can anyone think of a decent alternative? The idea in the story seems ok, but it would just be a case of someone using one public exploit on one service, until all services that are publically exploitable have been 0wned and then it gets boring again. Any suggestions on a decent way to do a wargame?

  13. Cracking is boring by PD · · Score: 1

    Boring, way boring.

    But, the format they used, while it has some problems, might be useful. I think a show-off night would be more fun. Everyone brings their laptops with their code on it, and they take turns showing off what they've done to the group on the big screen. While I wouldn't want to try this with a full theater, it'd be fun with 30-40 people.

  14. Or what about... by rusty+spoon · · Score: 2, Funny

    An alternative would be a case-mod contest with action packed 3-D live animation of the modifications in progress and quotes from the contestents; "Um yeah, like we hacked the case with a jigsaw and added some blue neons right, and now it runs and looks cooler".

    Maybe even a contest to make the smallest distro right from downloading the latest mandrake linux to booting up on a 486DX66 with 32MB ram. Should be a fascinating spectator sport.

  15. Demoscene and Linux. by Anonymous Coward · · Score: 0

    Over the past few years I have tried convincing my ole demoscene buddies to convert (or atleast try out) Linux, maybe only for the fun of it. They have good technical/mathematical knowledge and can code assembler even in their dreams (did some quite good 3d-demos in C/asm back in the old days). But they seem to be stuck in the Windows-mud forever and hate everything that doesnt smell MS. What should I do to help them convert? Is the demoscene as a whole _completely_ stuck with windows, and is that because of lacking linux 3D-drivers? I really need them to open up their (very closed) minds.

  16. The contest by ChiefArcher · · Score: 5, Informative

    Being on an actual team at the contest, It was a lot better than their 2nd attempt.. Every time LTG throws an event. it gets better..
    Although #2 required you to run a specific application on the webserver.. this one you could put anything you want.. (aka a static page with hello world).

    But all and all it was good.
    I came in #1 for the 2nd contest.
    Team 2600 came in 1st this time
    (We, team penguinati, came in second this time).

    but oh well.

    It was fun.... the best thing is the food and beer...

    ChiefArcher

    1. Re:The contest by einTier · · Score: 1

      Hey! For someone with such a low UID, you don't post often. Anyway, just saying hello... I've got karma to burn.

      --
      -------------------------------------------------- $665.95 -- retail price of the beast.
    2. Re:The contest by pabs · · Score: 1

      What does a low UID have to do with anything?

      --

      Odds of being killed by lightning and winning the lottery in the same day: 1 in 2^55

  17. Re:I don't condone these types of events by Bisifiniti · · Score: 2, Informative

    I agree wholeheartedly. I also plea to Slashdotters, avoid gun shows!! They just encourage people to go and shoot random bypassers. While you're at it, never go to a bar again, because they promote drunken driving. Designated driving is just a way to make it LOOK like they aren't. Oh, and never play a computer game again, because you know those crazy Everquest addicts that haven't seen the sun in 14 months... you could turn into one of those. Geez... it's just a convention. It's not a cry to go out and 0wnz some b0x3s. If you can't find a stable job, that's too bad. How's telling people not to go this convention gonna fix that?

  18. My geeek card by Anonymous Coward · · Score: 1, Insightful

    Take it, just take it.
    Seriously. I am not worthy of the title, because there is no way in hell you could ever drag me to one of these events.

    It turned out to be pretty boring?

    Gee, I wonder why.

    Hacking IMO isn't a spectator sport.

    Kinda like eating oatmeal isn't a spectator sport.

    Uh oh, here come the flamebait mods.

    Hey, it's my opinion folks. Don't like it? Reply with why. But you know I may just be the first to say it, but I'd be willing to bet many here are thinking the same thing.

    1. Re:My geeek card by Anonymous Coward · · Score: 1, Funny

      It's like the fishing channel, only with geeks instead of rednecks.

      It's like the golf channel, only with geeks instead of Republicans.

      It's like the NASCAR channel, only with geeks instead of trailer-trash.

      It's like the gardening channel, only with geeks instead of Aunt Lulu.

      One man's boredom is another man's thrill.

    2. Re:My geeek card by Anonymous Coward · · Score: 0

      thank you for distinguishing between a spectator sport and a participatory one.

      hacking can actually be quite fun to do, if you like that sort of thing (which i do). the pitbull linux competition was fun even though nobody won in the US. i bet the polish guys who won the european contest were having fun

      and you can keep the card if you enjoy doing it - you don't have to like watching someone else do it (that is just lame as far as i am concerned)

  19. Re:I don't condone these types of events by paradesign · · Score: 0, Troll

    its not our fault you cannot get/keep a job, so stop bitching. If you want handouts, go on welfare, but stop bitching please. Its such a buzzkill, just let others have their fun in peace, you know that individual right to 'pursuit of happyness' thing.

    --
    I want 2D games back.
  20. Pics? by geekfiend · · Score: 4, Informative

    http://www.gbronline.com/brooksdesign/

    Yah... People asked... I found... it seems...

    1. Re:Pics? by jellyware · · Score: 1

      Is this a TSA fringe benefit at your local airport scanner station?

      --
      In cold weather, my other computer wears gloves.
  21. my sugestion by paul_cairney · · Score: 1

    perhaps a lightly patched server to begin with and teh team/attacker who comprommises gets to take over defending the box till it is compromised again..

  22. Sir, IANAL by Anonymous Coward · · Score: 0
    and it is clear that UANAL so

    let's get together and start hacking each other's backdoors!!

    -Pete T.

  23. Crackers!!! I'm offended! by Anonymous Coward · · Score: 0

    Hey man! I'm white, so I am offended by people calling me a craker ... oh, sorry, that is a cracka ...

  24. yeah but by pummer · · Score: 0, Offtopic

    did the ref take 3 seconds to throw a flag if there was an infraction??

    3 seconds = to a Miami fan

    1. Re:yeah but by pummer · · Score: 1

      damn. that's what i get for trying to use the infinity symbol in this forum.

    2. Re:yeah but by Anonymous Coward · · Score: 0

      funny,
      you'd think the best team in the country could score on 1st and goal on the 1

    3. Re:yeah but by Anonymous Coward · · Score: 0

      OSU won, get over it.

    4. Re:yeah but by Anonymous Coward · · Score: 0

      assh4ts. did i say i was a miami fan??? no. osu is the best of course. i was just pointing out the obvious miami inferiority complex.

  25. "there were more women than you'd expect" by stratjakt · · Score: 5, Funny

    What was her name?

    --
    I don't need no instructions to know how to rock!!!!
    1. Re:"there were more women than you'd expect" by Anonymous Coward · · Score: 5, Funny

      "What was her name?"

      Mom

    2. Re:"there were more women than you'd expect" by Zak3056 · · Score: 2, Funny

      What was her name?

      Yeah, right, as if ANYONE in that building would ask...

      --
      What part of "shall not be infringed" is so hard to understand?
    3. Re:"there were more women than you'd expect" by HarveyBirdman · · Score: 1

      Just buy a vowel to add to the end of their real male name. This only applies after 8pm.

      --
      --- Ban humanity.
    4. Re:"there were more women than you'd expect" by Anonymous Coward · · Score: 0

      What was her name?

      Pat

  26. Re:I don't condone these types of events by Anonymous Coward · · Score: 0

    How do you do it? You actually got an "Interesting" mod for that despite springing "terror" in the second word and using the phrase "poor Telnet." I bow to your trolling skillz.

  27. Re:I don't condone these types of events by mark_lybarger · · Score: 1

    go home troll and get yourself that MCSE or whatever cert you want.

    this isn't crime any more than a gun show is inciting terrorism, or flying on airplanes is inciting terrorism. it would be really nice if this society could get off this whole terrorism soap box, but i guess GWB will ensure that doesn't happen for a few years.

    attempting to crack a box is entertainment for lots of people. some like to spend their saturday afternoon watching the nfl playoffs, some like to try to crack into another's server. it's not like they don't have permission to the box or anything.

    trolling, trolling, trolling..

  28. Call that secure? by Chocolate+Teapot · · Score: 1

    I could gain root access any one of those in a few seconds with a can opener. All I ask is the opportunity to prove it.

    --
    Modest doubt is called the beacon of the wise. - William Shakespeare
    1. Re:Call that secure? by oliverthered · · Score: 1

      I think you'd take a hard core dumping if you did.

      --
      thank God the internet isn't a human right.
    2. Re:Call that secure? by SpaceJunkie · · Score: 1

      Dude - did you see the thongs... Replace /bras with /thongs..... hehe....

      Obviously more interesting than a badly pulled off attempt at showing hacking as cool and fun...

      --
      OrionRobots.co.uk - Robots From sol
  29. Local information by chrysrobyn · · Score: 4, Informative

    Since this is in the Austin area, I recommend checking out the Austin area slash based GeekAustin. They had a head's up on this event a while ago. I haven't seen a followup yet.

  30. Re:Neither do I, for different reasons by zanerock · · Score: 3, Insightful

    I don't condone it because it couldn't help but be bad or boring. Hacking, for whatever purpose, is tedious if anything, and tedium rarely makes for exciting stuff. Having a technical discussion afterward might be neat, doing it as a demonstration, but mixing in DJ's and scantily clad women just comes off as silly. You might as well hold your next math convention at a strip club.

    As far as terrorism goes... please! There's nothing illegal or "black hat" about breaking into a box you've been told to break into. What better way to find bugs or flaws, so that you can then close them? I'd be a lot more worried about gun shows before I worried about hacker conventions cause last I checked, the gun to computer related death factor was still INFINITE.

    The more people banned (or are bullied) into stopping completely legal and (possibly) worthwhile activities, the more I'll seriously consider moving to Canada... or running for office. Neither of which I'd really enjoy, BTW.

  31. Hacked Comp? by mugnyte · · Score: 2, Interesting


    Any hacker worth the time wouldn't shuffle off to an ACM-esque programming comp. Just doesn't seem to be what's cool to me. I'm much more inclined to believe the monitoring box was hacked to flop-like-a-fish all night.

    As far as hacking, why not run a box per team local to the gathering all night. They all have the same holes, and the team that can exploit it best wins.

    For the majority of my time though, I'd prefer to simply watch presentations about known hacks and documented exploits. Esp. given the mystery about the GOBBLE and such latests dealing with P2P.

    mug

    1. Re:Hacked Comp? by evil_qwerty · · Score: 1

      I found a program that claims to be the gobble exploit for mpg123 at http://www.security.nnov.ru/files/jinglebellz.c

    2. Re:Hacked Comp? by Anonymous Coward · · Score: 0

      You people are idiots. There is no GOBBLES exploit. Apparently, the sarcasm is wasted on your feeble minds. Did you even get to the end of the "report"? Did you read the "disclaimer"?

  32. How does everyone know what "real" hackers do? by multiOSfreak · · Score: 1

    A bunch of geeks sitting around trying to compromise a remote machine sounds like "hackers" to me.

    I assume that all of the people that posted something about "what real hackers do" must be the real thing. How else would they have insight into such an elite and presitgious field of uber-nerd malevolence?

  33. You were surprised? by Anonymous Coward · · Score: 0

    I'm amazed the writer of this article was SURPRISED it went poorly and was badly organized.

    Did anyone actually look at that disgrace they call a web site? What is that PHPNuke? If it is...they have no business doing any kind of security work or running a "hacking competition" unless it involves hacking the web page.

  34. Explain to me the connection by Mothra+the+III · · Score: 1

    between Hacker contests and the poor job market for computer geeks. It seems to me that this would actually help to publicize the problems out there that many people don't know exist. As more people are educated about computer crimes, more security oriented jobs will be created. Novell certification? No wonder you are working at Staples.

    --
    Worst. Sig. Ever.
  35. Ineffable by andbutso · · Score: 3, Funny
    the DJ had a good stream of music, there were more women than you'd expect, and some in small metal bras

    All elements meant to distract you from the fact that there is nothing going on in the room and you wasted gas and money driving there.
    I'm heading off to a dog show now...

  36. You're forgetting the ironic exclamation: by burgburgburg · · Score: 1
    I am Invincible!

    Best shouted just before being doused in liquid nitrogen.

  37. More than the format... by Ryan+Amos · · Score: 4, Insightful

    The entire idea of this contest is flawed. Like the article said, securing a box is trivial. Apply the newest patches and set up a simple firewall, bingo. But if everyone knew what was going to be open ahead of time, it'd just be a race to see who could run their exploit scripts first.

    Truth is, hacking in general is not rocket science. Anyone can do it. Securing a box is not hard, however the reason so many machines get hacked is ignorance and/or apathy to the situation. Hell, the hardest part about hacking is finding a box with holes to exploit. If you already know the box has holes, you can run a script to find them. I went to the first Linux top gun and it was a total washout as well. This one sounds a bit more organized (at the first one, half the attendees were bums there for pizza) but the entire idea of this contest just sounds stupid. Anyone can be a l33t h4x0r, it takes intelligence not to want to.

    1. Re:More than the format... by Anonymous Coward · · Score: 0

      uhhmmm, since the first event didn't have any 'pizza' as it was hosted at a coffee shop, i seriously doubt you were there. if you can't give honest feedback, then perhaps you should refrain from posting.

      p.s. can you post a link to that ultra l33t 'hole finding script'? i want to be a kiddie like j00.

  38. TOP GUN PHOTOS!!! by dallask · · Score: 5, Informative

    http://www.espressowebdesign.com/gallery/gallery.p hp?gallery=16

    --
    The Code Ninja is swift with his tool, precise in his delivery, and deadly accurate in his execution.
    1. Re:TOP GUN PHOTOS!!! by dallask · · Score: 1
      --
      The Code Ninja is swift with his tool, precise in his delivery, and deadly accurate in his execution.
    2. Re:TOP GUN PHOTOS!!! by jgerman · · Score: 3, Funny

      Hmmm, inaccurate description in post, should have read "and some UGLY ones in metal bras".

      --
      I'm the big fish in the big pond bitch.
    3. Re:TOP GUN PHOTOS!!! by Anonymous Coward · · Score: 0

      I'm not sure why she needs any bra, especially a metal one.

    4. Re:TOP GUN PHOTOS!!! by doomicon · · Score: 1

      Here's a clue! If you are selling Metal Bra's at a predominantly male event, then have a model that is more than an f'scking A Cup! DUH!

      --

      Awesome!
    5. Re:TOP GUN PHOTOS!!! by vsprintf · · Score: 1

      And what do these nerds do with the metal bra when they get it home?

  39. Team Penguinati by ChiefArcher · · Score: 4, Interesting

    If you left too early and missed the penguinati presentation.. Check it out

    http://www.penguinati.com

    we did an "odd todd" ripoff to present our information.

    ChiefArcher

  40. Hacker==Cracker? by Carbon+Unit+549 · · Score: 3, Insightful

    OK, I guess it's official now.
    Hacker = Cracker
    and good linux programmers are just good linux programmers.
    It's sad that mass media has finally triumped over the geeks.

    --

    nohup rm -rf ~/. >& zen &

    1. Re:Hacker==Cracker? by Anonymous Coward · · Score: 0

      " OK, I guess it's official now.
      Hacker = Cracker
      and good linux programmers are just good linux programmers.
      It's sad that mass media has finally triumped over the geeks."

      Well run off crying to ESR then.

      "They don't follow the jargon file!"

      Blerg Blerg Blerg- Knuth is so leet. Knuth is so leet. All programmers despise smoking. Cracker not Hacker. All hackers are ultra-uber intelligent and like science fiction, mathematics and vegetarian cooking.

      Grow the fuck up!

    2. Re:Hacker==Cracker? by vsprintf · · Score: 1

      Yup, it's been a losing battle for a long time.

  41. Small metal bras by Ctrl-Z · · Score: 1


    On the upside, the DJ had a good stream of music, there were more women than you'd expect, and some in small metal bras.

    Come now, don't disappoint the Slashdot community. Where did you post the pictures?

    --
    www.timcoleman.com is a total waste of your time. Never go there.
  42. Latency and DoS attacks by argmanah · · Score: 2, Interesting

    Does anyone else find it amusing that they are not allowing DoS attacks but are awarding points based on service response times?

    It seems to be that the most legitimate measurement that response times provide in a hacking contest is how effective a DoS attack is.

    Past that, all the majority of that result comes from how much traffic you have. Last time I checked, this was a hacking contest, not a web server benchmark.

    --
    Overrated Moderation: This posts sucks... because.
  43. Re:Neither do I, for different reasons by EatHam · · Score: 2, Funny

    Computer-related death is non-zero, so the gun to computer related death is not infinite.

  44. I need to upgrade my browser... by desertfish · · Score: 0


    ...that frameset is way 2 1337 4 m3.

  45. Geeks and meeting planning by Brent_Litzer · · Score: 2, Insightful
    There is a big difference between what is enjoyable to a single being and what is enjoyable to a group. The movie industry is batting less than 10%.

    Expecting geeks to know what is entertaining in a group format is asking a little much. Also, the more intellegent the audience, the harder it is to satisfy them.

    Some real thought needs to be put into the venue. Conduct some tests and trials for christ sakes. That would have exposed the weaknesses of the format.

    --
    - Just because you can't, doesn't mean you shouldn't
  46. Re:and the real crackers... by kolombangara · · Score: 1

    ** NOTE: the term hacker above can also be translated as cracker for those who are offended by this use of the term hacker, thank you **

    I was telling that to some homey's on the South side last night about 2AM. They was strutting in there NFL jackets/NBA shorts with gold chains and giant medallion and a stocking caps. The was like like "This muthuh fnck1n cracker iz just aksin for a cap in his muthuhfnck1n a55!"

    I replied, "Sir, I appreciate that. Most people call me Hacker. And I much prefer Cracker."

    What swell fella's.
    (writing in from hospital)

  47. small metal bras? by AssFace · · Score: 3, Funny

    tell me more about these bras that you speak of and that which they contained

    --

    There are some odd things afoot now, in the Villa Straylight.
  48. Isn't ESR the top Gun-Hacker around here? by billstewart · · Score: 1

    There are a bunch of firearms enthusiasts in the open-source software community, but ESR's probably one of the most vocal :-)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  49. Only visual? by SenatorTreason · · Score: 1

    Okay, so they failed on the visual aspect of the show. Good idea, maybe next time, keep it up. What about aural effects? Say a chime every time a packet was received by the target machine, or every 5th packet, etc? Different sounds for different packets. Maybe different sounds for packets aimed at different services. Each team could provide a "themed" sound board, and thus you could tell which team was attacking which service merely by the sound. Depending on how many teams are simulaneously attacking, it could be neat, or just really irritating. In addition to some good graphics, and actual possibility of a hack, it might a better night out of a bad night.

    1. Re:Only visual? by edbarrett · · Score: 1

      Or you could put a badly scratched Aphex Twin CD in an unreliable player.

  50. Spreadin' tha luv wit mah niggazz by Anonymous Coward · · Score: 0

    Enjoy:

    http://www.jerkcity.com/jerkcity1556.html

  51. Idea for next year... by ryanvm · · Score: 1

    They should have taken a page from Swordfish and let the contestants receive blowjobs as they hacked. That would of spiced things up.

    1. Re:Idea for next year... by Anonymous Coward · · Score: 0

      "Would have," moron.

  52. It should have been titled... by Anonymous Coward · · Score: 0
    Linux Top Gnu Hacker Contest

    HY: In a lecture, you mentioned that you didn't use passwords, and had no security for your computer.

    RMS: Uh-huh. Security might make sense with banks and military facilities, but in a computer lab, that is a sign of a social breakdown.

  53. Top Gun, eh? by VistaBoy · · Score: 1

    This event BETTER have had Tom Cruise in it, and in the most intense parts of the action, they better have played "Danger Zone"...

  54. How do you improve the event? by cornice · · Score: 4, Funny

    Use real targets.

    Create a points system based on method of entry and create a rating system (open, hardened, impossible, etc.) for targets. Scores are created by combining the various entry levels with the various target ratings. Targets could be selected by the audiencs, the teams or the event coordinators. Targets could be published before hand or not.

    Granted this would be shut down so fast. All involved would be sent to Guantanamo Bay for being terrorists but it would be _really_ fun to watch. I also think that it could be done without causing real damage and in fact would _increase_ security. It would still be shut down though.

    1. Re:How do you improve the event? by Alsee · · Score: 1

      Use real targets.

      And live ammunition.
      AP rounds, HE rounds, Incindiaries, and Fuel Air Explosives.
      Expecially Fuel Air Explosives, those are SOOO awesome!

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  55. Take some tips from the Ghetto Hackers by Anonymous Coward · · Score: 1, Insightful

    Sounds like the people putting this event on should have paid attention at Defcon 10. The Ghetto Hackers put on an excellent Capture the Flag event.

  56. Similar even: SANS IDNET (ne by UnderAttack · · Score: 1

    on March 7th/8th, SANS is having another 'IDNET'
    event. The target boxes are preconfigured with
    known vulnerabilities for this even. It is part
    of the vendor expo at SANS 2003 in San Diego.

    usually, there are some nice prices and admission is free or cheap ($10-20).
    details

    --
    ---- join dshield.org Distributed Intrusion Detec
  57. yup, I was there and you're right by SethJohnson · · Score: 2, Informative


    I went expecting that it would be a demonstration of common cracking techniques and defenses. Unfortunately, everything was left to our imagination as to what was going on. Here's how they could have improved on this:

    1. Interview the attackers and ask them about the techniques they're applying.

    2. Have all the defending teams prepare their fucking boxes ahead of time. After the event starts, they can't touch them. That way information divulged by suggestion 1 can't be used to protect the boxes.

    3. Let people attack all the boxes at the same time.

    4. Improve the visualization using snort.

    5. Have web apps running on the server. Let them be simple and of the defending team's design (whatever apps they want), but they have to accomplish a specific task such as threaded discussion board, etc. Just a "hello world" web page is unrealistic for real-world comparisons.

    This was a fantastic disappointment for myself and the several hundred other people in attendance. I think the event was intended to provide the security company sponsoring it with research about current cracking techniques. I don't think they were so much interested in the educational opportunities that could have been made available to the attendees.
  58. What more would you expect from Austin? by Heretic2 · · Score: 1
    On the upside, the DJ had a good stream of music, there were more women than you'd expect, and some in small metal bras. And it was a gathering of a lot of smart geeks, a great opp to meet people.

    Well, duh... of course there would be lots of women, some in small metal bras. Aren't those everywhere in your town?
  59. You're on to something here, but. . . . by kfg · · Score: 1

    I think it needs a bit of expansion. I'd set it up as an industrial or military espionage situation where *both* sides are trying to access vital data the other team has, while protecting their own. Even more like capture the flag than your suggestion.

    Each side would have three boxes with "hot" files on them. The goal of the game is to capture as many of your opponents hot files as you can while protecting your own. You get points for every file captured and, obviously, also loose points for every breach of your own security, even if some of those breaches don't result in the loss of a hot file. Points would also be given for every attacker "captured."

    Thus each side would have two squads. There would be the security team protecting the files, as well as a "tiger team" trying to gain access to the opposing teams systems.

    In fact, rather than calling it a "hacker's contest" I'd call it a Tiger Team contest.

    If nothing else it makes geeks sound more "macho."

    KFG

  60. a resounding success then? by kfg · · Score: 2, Funny

    Nah, it'll be a, ummmmm, "big" success when it starts attracting women with *large* metal bras that just *look* small.

    I can't help but wonder though. Are the metal bras protection against the aliens beaming messages to their "assets"?

    KFG

  61. The event was so bad.. by Gortbusters.org · · Score: 2, Funny

    I was disappointed even reading this article!

    --
    --------
    Free your mind.
  62. hacker-cracker.....ahaaaa by Madcapjack · · Score: 1
    oi oi for all those with preferences!

    the crackers will be on one team and the hackers on the other.

  63. LTG - The problems, the boredom by Anonymous Coward · · Score: 1, Insightful


    I was undecided until the last minute this time around if i would go at all to LTG. However I ended up going, and spent most of my time in the back doing installs and configuration on my laptop since I was bored and had nothing much else to do. This was once again proof that the people who manage and put on the LTG event are incompitent, refusing to listen to the feedback that has been given.

    I must point out once again that an individual makes most of the decisions for this event, his name is Paco Nathan and as an individual he really is unorganized for this type of thing, he's been through a lot of jobs and companies for a reason. The security company backing this is one he chairs and as far as i've seen evidenced, these guys don't really have much in the way of security knowledge.

    Enough critisim of that though, its old news. The LTG Suffers from issues which could be fixed, and LTG could be actualy turned into something worthwhile, imo. (I'd like to see the name changed, the logo of the penguin wearing a pilots mask and invoking images from that stupid top gun movie really doesen't do it for most people)

    The biggest flaw is the competiton style, its weak and really doesen't do much for teams defending, attackers, or the audience, there are many other types of attacks/defense that could happen at an event of this nature and happen at other events like Defcon that would work out much much better. In addition to that, the audience needs something better, and having two girls stand around this time in some metal bikinis trying to hock their services for some Geek Dating/Makeover/Social scene service that no one cared about then showing a broken boring visualization with no explanation to the general audience of what was going on was just not fun.
    The other issue is this time they neglected to even tell people (including teams) exactly when certain things had started or ended or other critical issues, communication was pretty dead overall. A lot more could be done with a mix of visualization tools and videos and music and live commentary to make it exciting, even for those who are not participating and who don't even know that much about the topics at hand.

    Anyways, the event is still kicking it seems and is on target for a big show at SXSW, sounds like it will still be a mess and failure though. on a last note, my biggest irk with this one was the fact they where hours late getting things started.. and why? because they had to setup all this equipment and configure the server, etc.. obviously not enough forethought and rehersal of setting things up. I certainly know they could get all this set up at one location, then break it down and move it to the event within a matter of two hours before the event's start time rather than do it all while people are waiting around bored.

  64. Naw, anotherone was right by Glonoinha · · Score: 0

    Mod, did you even click the link? I clicked it and my eyes damn near popped out of my head. The background is about the most evil thing I have ever seen.

    Nice boobies though.

    --
    Glonoinha the MebiByte Slayer
  65. Re:Neither do I, for different reasons by Anonymous Coward · · Score: 0

    who said canada would take you?

  66. The Secret Weapon by incongruent · · Score: 1

    you've uncovered out secret weapon!!
    sh-2.05a$> send spike
    i am invincible!!!!
    NcongruNt (Team Austin 2600)

  67. Amazing by cranos · · Score: 1

    They talk about women in small metal bras at a hacker event and there is at last count only one Root Access joke. Come on people your letting the side down.

  68. Re:I don't condone these types of events by Anonymous Coward · · Score: 0

    Well done, sir.

  69. DUDE YOU ARE COOL by Anonymous Coward · · Score: 0

  70. Were hacking each others machines... by Anonymous Coward · · Score: 0

    Let's be honest, this was a moot point to anyone with the skills to actually get a hack in on that box. The really nefarious and brilliant crackers were sitting right in the back of that auditorium where no one else could see their laptop screen. Why? Becaue they were probing all the other machines they could find on that network looking for holes.

    What could be more fun than cracking a hacker? Plus you didn't have a window of time to do it in, you could probe and play as long as you like (and that is how we really work).

    In any event the real bad asses don't go to public events where their face can be associated with "hacking" for all posterity. Now a "security professional" would check his hair for the shot...

    FYI-
    USA has given USD 90 billion to Israel 1949

  71. Metal bra by vanguard · · Score: 1

    Umm, high gain wireless antenna?

    --
    That which does not kill me only makes me whinier
  72. Real World TV series of hackers by Linuxathome · · Score: 1

    This type of event is like golf--sucks to watch, but fun to play. However, if you want to host an event that is fun to watch, how about a reality TV series? Put a handful of the most l33t haX0rs you can find in a hooked up pad and see how they work and interact with each other. Think it will work?

    1. Re:Real World TV series of hackers by Anonymous Coward · · Score: 0

      first of all that any real hacking event would not have "hacking windows 2000 exposed" as a door prize. second i bet most those ppl eat this cereal for breakfast http://www.monolithictechnologies.com/images/l33t. jpg

  73. Let's compare - post your pic (with metal on). by lukme · · Score: 1

    why not let the slashdot community vote who is UGLY, you get into your revealing metal outfit, and we'll vote.

    1. Re:Let's compare - post your pic (with metal on). by jgerman · · Score: 1
      1) I didn't get into a revealing metal outfit and go out in public.


      2)It's unlikely that the slashdot community at large would turn down any girl, ugly or not.


      3) Cowboy Neal.

      --
      I'm the big fish in the big pond bitch.
  74. Re:Neither do I, for different reasons by Black_Logic · · Score: 1

    'You might as well hold your next math convention at a strip club'

    As if this is a bad idea? Sheesh, I might even go. :)

    --
    Ansi's and stupid tricks!
  75. A possible better activity by DRACO- · · Score: 1

    I used to do a lot of virus removals on an undernet irc channel. We always had spectators, people wanting to learn what we are doing how we are doing and what we are doing to tackle new viruses (note new as in now causing problems).

    I personally have ran across a few viruses our team was not famillar with and typically could have a complete cure within an hour, or within 2 hours I could be taking advantage of code that created IRC drone bots that come as payload with a few viruses.

    One I received in particular was attached to leaktest.exe from grc.com. Before testing it on my near dead laptop I searched for leaktest.exe via google and found it was in connection with grc.com. I downloaded a fresh copy and checked the md5 checksums.. Totally off.

    I then took the infected one to my guniea pig and executed it and watched my tcpdump on the linux box, noticed an outgoing irc session to an unfammilar network. So I tuned my client to it. I couldnt find anything. So I just idled around for a little bit in a main channel (had like 6 ppl) while I examined the laptop for out of place files.

    I found something in windows dir so I took the files back to the linux box and ran cat file | strings, didnt see anything useful then took a hex editor to it and found a name and a version number. I googled for the name and version and found an exploit site with packages and control information as well as a little file that explained, nowhere near in laymans terms, how the setup information was obsfuscated, just an 8 char pad. So I looked at the setup trojan and the original trojan in hex and located where the setup info was, and tried decrypting it. Took 8 passes (needed 8 different things to get full control) to get the info i needed. I found out the commander needed elite in their userid so i created a new account on the linux box and irc'ed from there. I joined the channel I had unobfuscated and sent the bots the master password and got reconized. I was so sure I would get dossed off the face of the earth. I then executed a file delete command on all the drones and then commanded them to all die. Then left with a message saying they really should have made it harder by using newer trojans! I then published all my findings and logs, omitting my last message, to the group I worked with.

    A few months later I got kicked from the group and 3 weeks after that I got contacted by a member that got canned as well and started her own chan. She was trying to break open the door on the same trojan but couldnt get anywhere with it so she googled and ran across a reply I placed to a virus examination technique article I commented on. She said out of everything she has looked thru I was the only person that had much information on the virus.

    I think a better show would be to invite 30 regular users that easily get infected with things to be handed pc's and have teams have to protect and disinfect their own number of users. Have the court open to having team members attempt to infect other users. It would be good to show the techniques teammembers use to identify, stop and disinfect trojans and viruses. Anyone who administrates multiples of pc's could benefit from learning the techniques. It's mostly research techniques and trial and error on guinea pig machines. I wouldnt do the infections/disinfections live, I would instead run a week or month trial and have them documented by paper and video and show the good cleanups in the show 30min-1 hour in 13 min spots with 2-3 min explaination spots then at the end have a free for all Q and A session for 30 min to an hour (possibly with demonstrations).

    DRACO-

    --
    Consider yourself blessed if you are sneezed on by a dragon and only get wet, it could have been a fireball.
  76. The aftermath by SoVi3t · · Score: 1

    there were more women than you'd expect, and some in small metal bras.... None survived.....

    --
    Defender of Microsoft and Communism!!!
  77. Metal bras & lack of cover charge by sheilagh · · Score: 1

    There was no cover charge. That's one of the initial requirements.

    The hottie in the metal bra runs a bookstore, so you dreamers who would be intimidated by a Viking shaped lass in person, in metal, might acctually enjoy a conversation with the one wearing the dainty dragonfly. Having avoided the contest, you'd also miss her serious questions about what was going on on-screen.

    I'd say there were more than 10 women in attendance, but maybe not more than 20.

    Please, someone get informative and tell me where else on a weekend night can you find as many thinking, technically oriented, conversational individuals enjoying a beer in a non-smoking room, in Austin? Don't try to push your Dave & Busters claims on me, that place is fun, but not conversational, and has fewer coin-op video games than Alamo has. Super groovy would be getting the owner of this place north of town involved somehow, he doesn't have the arcade open over the winter season.

    Maybe linuxtopgun can get a game console company involved, one of the ones that has linux-ability (that discounts Xbox, yes?)

    The technical difficulties decidedly do need to be addressed exponentially better as the event continues to mature.

    Personally, I miss the glory days in Austin, when there were weird cool venues to dress-up for on a closer to weekly basis. Planet Austin, Proteus, Paris25... Places you could get a mix of danceable music, see interesting and even well done fashion efforts, with a few nooks where you could talk without having to shout.

  78. New /. vote by Antity · · Score: 1

    Chicks in metal bras are:

    • Beautiful blossoms of a 21st century world
    • Ugly, even in beer and in speech
    • Conducting
    • What's a chick?
    • Cowboy Neal incognito
    --
    42. Easy. What is 32 + 8 + 2?