BSides Tampa Opening Remarks 2024

all right thanks for everyone coming out appreciate it uh so we're going to go through you know kind of a quick opening ceremony here from the bsides core team um and then we're going to hand it over to the keynote so thanks everyone for showing up so I'll first pass it to Josh to you know kind of talk through what bides is about and why we're all here awesome thank you Mike yeah so for anyone haven't met yet my name's uh Joshua Gro and uh yeah just been involved with bides for this is the ninth 10th year so far at bides Tampa but um you all look amazing this is an incredible crowd um just give yourself a

round of applause [Applause] please yeah thank you so much for showing up and supporting the events and participating I mean we're all so incredibly honored like you said beide stampa doesn't happen without the attendees and every and everybody else in the crew so um it's we're super excited about today and uh I mean in bsides a little backstory like you're not aware like just bsides in general is a sense of like you have like the the larger conference where you have like all these great talks people that want to share all this great information and things like that and then you end up having they have to reject talks and you have because there's not enough time

slots in a sense you know you can always do so much and uh so then the bsides in general started forming and it a space where people that submitted great quality talks which just couldn't fit to like a larger conference um you know it was an opportunity for them to speak and then so even like besides Tampa we tried to you know pick the best talks we could out of the ones that were submitted and even us we get so many great um people that want to share their knowledge and their uh their passions and everything with you and it's still hard you know selecting those but uh but that's the bsides origin story in general thing and

the bsides Tampa itself is we're in our 11th year and um yeah so yes so this is the 11th year our largest so far um which we'll get into this the specs stuff on that and everything um all right cool I hand back to Mike yeah we're GNA keep this pretty brief we're we're a little bit behind on time so if you guys see us hustling here um so you kind of can see over the last three years a lot of growth right uh hasco was a lot of fun with a virtual event um but yeah you can see where this is our biggest year in a bit so we're at over 1,900 people that have registered

for the event including today and yesterday for training um so yesterday training was sold out again so shout out any trainers in here yeah I see a couple yeah yeah so shout out to the trainers that you know they they're not getting paid for it they're coming out on their own time dedicating the time to kind of give back to the community $5 per class is pretty um pretty insane honestly so great great great team that came out yesterday and really good training day so looking forward to kind of repeating that year to year and I know anyone that did trainings yesterday AJ will be sending out a survey so look out for that um ran out into good problems this

year ran out of out of tickets a couple times so you guys may have seen that on the website and we're probably going to run out of tickets again today but good problems to have but yeah um thanks thanks for being a part of the growth and we I know a lot of the group here has been uh returned visitors too so I'm going to pass it over to Elvie to kind of break down you know some of the locations and the history too here awesome for many of you have been here since year one uh can you raise your hands I know there's a few of out there yes year one uh if you remember

we've uh pretty much outgrown our Founders here at the beginning started at the South University and we've slowly moved over into ston and then we tried Embassy a couple times we outgrew that very quickly a couple years later uh then there was that virtual one uh 7.83 and then you know for the last you know this several years we USF has been very great for us obviously we had to go from Muma now to Marshall Student Center so again thank you for those um and how many firsttime biders wow yes amazing that CL that again this is uh by the community for the community so I just leave it with make sure everyone has fun today thank

you all right so no no problem so we already got this one so we we kind of injected a couple different pictures to here from the different years so um last last year with Muma um awesome year so pass it over her to sorry sorry Lori student here who students raise your hand awesome that's no that's excellent that's awesome thank you so much for coming like we we've got more students this year than we've had other prior years too so I think we're at we had around 200 300 students register this year was almost 300 I think yeah so and then who yeah oh yeah who's well say who's been this more than two times

who's is there second or more bsides okay awesome anyone anyone five or more anyone 10 anyone perfect attendance nobody perfect oh I see all right aw okay well yeah see us we'll see you anyway yes see us after we got a little something for you then dck and Laura you can't raise your hand yeah they had to show up all right oh yeah yes a little okay thanks so so badge info so for those of you I mean if this is your second year in a row then you'll see this is our second time doing a PCB badge so uh because prior to to last year we had always we had like the PVC just you know

simple plastic beautiful badges made by ransomware which are amazing but uh uh and so this year this is our second year doing the PCB badges so we tried to every year we try to like level things up we want to make this the best experience you can for you so um uh you know it's all a bunch of little things but one of the things you know took a good amount of effort was getting getting this badge made so we've got um you know we had these ship these arrived at my house like a week ago um but uh myself and uh cold brew who is here probably somewhere or maybe he's out there but um cobw with rot 13 Labs we

work together to make these this is the second year helping us out um but you have the the you know I will say keep on the lookout for you know hidden messages and things like that we tried this last year so there might be you know some there's some things on here that might be interesting to to check out um may take you on a little journey and the the D the badge itself is a D20 which is a die for Dungeons and Dragons or whatever it's a 20-sided die we've got the LEDs in here and obviously you've seen the theme for this year is was stranger things and and if you haven't seen stranger things then the theme is 80s so

you can pick how many people have seen stranger things all right come on that team was picking on me so that that hurts all right yeah um and so so that yeah so we the stranger things in the ' 80s kind of drove everything like I said with the imagery and stuff but that's with the the die and everything and everyone has and then you have these add-ons here so obviously you have the the switch to turn the lights on and off but then we also have these called saos which depending on what you either stands for simple add-on or shitty add-on your choice but this for for those if you're not familiar there's like a whole type

badge life type thing and that's where like different cons and events have these type of Badges and you can you know mix and match Parts in a sense and like this is kind of a standard and so one thing that I just do want to call out real quick is that we have um you should have already got one but if you didn't you can go to the registration desk is we do have just a trans it's a resistor and an LED that if you want to do a an extra credit project is when you get home you can go ahead and solder it onto this this connector or onto the Sao and then you can make yours light

up um so and we yeah it's a pretty simple thing but we'll have some instructions online eventually that show you as well yeah make sure if you don't if you have one badge check out other peoples there are different badges for each yeah I think you may mentioned it but um speakers crew different badges for everyone yeah different add-ons different badges all right pass it over to Elvie um just want to also before passing to LV to do a quick shout out for our team here um we work year around and um really appreciate the crew behind us that really support us they of and and throughout the year um we'll be definitely shouting out a few people

that have consistently had a grind throughout the year just to make sure this is really successful so appreciate the core team here while pass it to kind of talk through some of the the big leads and and the team here awesome yeah so actually and I'll say it's through the LA past year it's not just this year we take almost a year to plan this event um it is absolutely amazing the core crew here uh they just hustle it we try to always take the lessons learned from last year so absolutely fill out the surveys when you get them we do read them and we do try to make sure we you know improve every

year practice makes better um so again a huge shout out to them but I also want to give a huge shout out to the this year it has taken almost 100 volunteers so a big thanks to the crew members so uh thank you as volunteer director I'm always very humbled that I don't have to do a call for volunteers they always want to come back um they have a great experience so please make sure those that are wearing the crew badges do thank them for all the hard work that they're doing they've really been hustling the last three days for us so thank you yeah no one's paid to do this we put this this is all entirely

volunteer we're volunteers you know I mean this everyone here's a volunteer like what the spirit of this bsides like the $5 training thing like Mike touched on earlier like this is all about sharing knowledge and advancing the community and each other and networking this is not meant to be competing with some kind of commercial type conference or anything like that and in that vein if you do happen to have't talk and it seems too salesy or salesy at all let us know because we want to know that but the goal here is a knowledge and Community growth and things like that but we're we're all we're all it's everyone just no one's getting paid to

do any of this stuff that sets this up so oh wait if someone is let us know that should be also amit's kind of holding down the sponsorship track so we wouldn't have this this conference without the great sponsors so please um go and you know check out their Booth ask questions um look for jobs uh buy their buy their things too um but big shout out we had a lot of a big turnout with sponsors with the different venue change things cost a little bit more money this year um but ahed did a great job at bringing in a lot of sponsors here also if you're a sponsor and you're interested or you're not a sponsor and interested in

sponsoring for next year please don't wait to reach out uh feel free to go and reach out to any of us or Amed too um but yeah Big shout out uh to a lot of the sponsors here I know we have a few so I won't go one by one um but we have a lot of repeat sponsors year to year right so you can see common names uh Amazon came in really strong with for us last year and came in again this year Orca is a new one that we have that's supporting the conference this year roly Quest has been a continued sponsor um so a lot of really good community support through the sponsors and also local

local groups right we have neon Temple um emis a lot of really good local communities that are part of the conference as well and then uh so sponsors continued so this is uh you know um want to make sure we get their logos on there sponsor sponsor con yeah south or and different groups send out also gifts that we can give away during lockpick Village so a lot of really good Community Support there [Music] um if you like your employer and they're not on here you know you should try to get them next year you don't like your employer then we probably don't want them up and uh following the event you know we'll kind of brief everyone during

closing but there will be a happy hour here right next to the sponsorship area at 5:00 pm. um which is sponsored by orca so did you have a that joke for this one yeah God I don't I'm scared gonna do it after I was gonna do it uh next but hi everyone so um with our happy hour we're gonna have some food some drinks all that good stuff so we will have some uh demogorgan Zola cheese hopefully to snack on so hopefully you enjoy that with everything else and network and have fun with everybody it to be very clear as part of your ticket you got your shirt you got your badge and all the other great stuff we

do but you do get drink tickets as well just to make sure you're not and uh I don't know if you guys remember Tyler from last year if you went and got a drink ticket that was fun um yeah thanks Tyler for uh handling the over we had a we had some overflow issues last year with the happy R um happy hour is in this building right say like yeah you need to some other place it's going to be right here yeah I don't know if afm's in here but I'll I'll cover it for her so we have um afum you know the if you see our marketing anything on LinkedIn Instagram Twitter you name it it's because of apum

throughout the year um so we have over 2,000 LinkedIn followers over 4,800 um Twitter followers or X whatever you want to call it um so as you guys are kind of taking pictures today do hasht besides Tampa and be sure if you're not following any of these to keep in keep follow them to get updates for next year and throughout today um yeah so thanks for all the support in the community kind of res sharing posts and getting visibility because this is really about the community in Tampa so we can showcase like how great Tampa is from a cyber security perspective too I'll pass it to Tyler for the agenda breakdown all right before we go over

the agenda who is excited in here today for bide Make Some [Applause] Noise awesome I'm just going to debrief us really quick on the agenda go over some important items here uh so for our tracks we're going to have five different talk tracks offensive defensive uh GRC Ai and then we also have our siso career uh in career track as well feel free to pop in just want a small plug for a lot of students in here if you brought your resume you can get your resume reviewed that also includes a professional head shot after so absolutely take advantage of it a lot of good information all of these tracks uh I know we also mentioned sponsors feel

free to go and say hi to the sponsors thank them for coming out get some swag out their booths all that good stuff um for the CTF is anyone here ever played Dungeons and Dragons awesome got a little bit has anyone ever wanted to play Dungeons and Dragons or does not know how to play all right got a good bit of hands all right so neon Temple has put on a unique and kind of never before uh captur to the flag so I would highly recommend going by their room they're going to have different tables set up without spoiling too much you'll essentially get your character sheet you can hop in at any time so there's no

required time feel free to pop in a table we have a lot of good raffle prizes at the end as well as some various Capture the Flag prizes feel free to go in there also too sometimes capture the flags can be a little bit intimidating so please understand that there's something for everyone whether it's entry level experienced maybe you've never you don't even know where to capture the flag is go and learn network with people all that good stuff they've done a lot of hard work this year so I want to give a big shout out for them and feel free to check out their essentially Village and CTF going into some other Villages here

we also have amrock fablab doing some wonderful stuff also combined with our ham radio Village we have our lockpick Village and our Network hacking Village as well as the IC Village which is in our sponsor area feel free to check all of them out a lot of good stuff from what we've seen so far they've done a lot of planning so also thank them for the time for coming out here this is all included in your ticket by the way we've had some questions of like what's included what's not included everything is included so feel free to check all that good stuff out um we also have a book signing so our closing Kyo Dr Sunny

wear does have a book so at 10: a.m she will be at the ISC squar Booth doing a book signing if you don't have her book it is a burps uh cookbook so if you don't have it there will be a QR code to scan which will link you to Amazon feel free to purchase the book Dr Sunny wear is also local in the area so if you ever meet up with her get your book signed in the future also learn a lot of great stuff uh pixel spotting so with cyber Florida is anyone familiar with pixel got a few different hands up so we will have pixel running around our sponsorship area from 11: to about 1220

is so feel free to get a photo op see who pixel is and learn a little bit more about cyber Florida and then food options so if anyone was here last year we all learned about the whole food truck thing got a lot of actually interesting feedback which was very help full so this year on the first floor we're going to have three different food options we'll have Chick-fil-A Panera Bread and Bento Sushi uh full transparency I thought Sushi they'd have to make everything they're going to have little grab and go boxes so no stress there just to make everything easy for you uh Raffles I know we talked about that a little bit we have a lot of Raffles going on we're

going to have ransomware raffling off a lot of great art also would recommend going by his Booth to see what art is being raffled off we're going to have some of our own items as well as some various items being raffled uh towards the end so please come to our closing ceremony that's where you're going to get a raffle ticket so please make sure to stay around all that good stuff might win some great prizes michaeel also said there's really expensive prizes um it costs about a million I'm just kidding um but yeah some really good prizes so please definitely come out sponsors also did give us a lot of good stuff to give away

too so definitely want to give them a huge shout out for that and then happy hour of course not going to make the joke again but uh yes please come to our happy hour is included uh for transparency it's going to be in the sponsorship area on the other side of the wall we're also going to have the arcade game set up food drinks all that good stuff anyone remembers me last year handing out drink tickets we're going to have more drink tickets again so I might be taking on that duty but please come hang out with us socialize all that good stuff okay all right so we have a little uh our Keynotes making her way over uh

so kenan's on her way so we're going to use the time so we can do kind of a deeper dive on the CTF so we're going to have coaches from the neon Temple team uh quickly kind of do a breakdown for anyone that's interested in the CTF today since it's very unique it's not a normal kind of hack the box type of CTF so we'll pass it over while we're waiting for Kenan to get in here behold [Music] [Applause] okay I don't know who you guys are cheering for but so hi my name's John uh now we'll go a little deep on the CTF while we stall for Dr Sunny to get here and I want you all to remember the

opening keynote is Dr sunny and she can do no wrong so if anything we're wrong because she's oh that's that's closing well she's also the opening keynote so oh wait yeah that's right okay yeah I swapped it but regardless uh Dr Sunny is all Keynotes and she can do no wrong you should buy her book in fact you should buy three books so last year around Thanksgiving I think elvar sits me down at the temple and tells me the theme for bides this year and that feels like at the same time three days ago and like five years ago so she tells me it's stranger things I've never watched it a day before in my life I go home and I

watch season one because that's about as far as my attention span goes and the first thing I felt was this is my childhood this this TV show is my childhood and it was a really magical feeling if almost like the first time you ever play Skyrim if that's your thing the first time somebody watches stranger things season one you feel this nostalgic feeling and knowing where elvar and the bsides team wanted to go with this I wanted to try and put that in a CTF and at the end of the day what I want this CTF to accomplish is two things the Nostalgia Factor being first I want this CTF to be as magical as the

first time you rode a bike by yourself in the 1980s or 1990s I'm a 90s baby um I want it to be that magical because Dungeons and Dragons if you've never played before can be summed up in one word imagination the world is your oyster and you can do anything that you want to do the di May punish you but you can do anything that you want to do and if you stop by the CTF room to play keep that in mind anything that you want to do if you want to stab your party member go for it if you want to drop tra in game go for it not in real life so that was objective one objective

two I am a man on a mission from God trying to figure out how do I get 100% of the people attending a conference to play the CTF and the old methodology that's been around since the 1980s and 1990s it's it's great it's great don't get me wrong but it's also really rigid and it caters to I would say 25% if at that of a conference and with that 25% it caters to 25% of that 25% who is not intimidated who thinks they have the skill set and a lot of times a CTF consists of sadistic challenge makers and people who sometimes hate themselves trying to solve those problems and I also understand that the

further I go through my cyber security career the more I meet people who absolutely wow me with their skill set and their knowledge and their experience and their ability to work super hard and they've never opened to terminal in their life and I want to cater to them those people I want to cater to the students I want to cater to the dad who's here you know the parent who's here on a Saturday morning because their freshman college student wants to come to a cyber security conference I want to cater to the parent who's here because their high school student wants to be here I want to cater to the spouse who may be here supporting their spouse

who works in cyber security and I also want to cater to those hardcore CTF players who show up with their $4,000 system 76 and they're just here to crush it and they can talk to you about how they've compiled gentu from source and yeah super exciting stuff um so the CTF this year took those two things Nostalgia and accessibility or approachability and rolled it into a D20 right in your hand here so in rooms 2707 and 2705 you'll find the D and D room if you have never played Dungeons and Dragons before if you've never played a CTF before it's okay we're going to guide you through it just play once if you have never played a CTF

before come on through if you are a CTF veteran come on through this CTF is for you so this is going to work one one way you come to the CTF room and you will be given a randomly generated character you don't know if you're going to be playing a dwarf an elf uh you if you might be playing a female half half elf uh wizard you just don't know what you're going to get those stats are all Rand everything's randomly generated and you're going to find a table and sit down there will be DMS who might be running easier campaigns and if you don't know what to do find somebody in a blue cloak that is a CTF

developer find somebody in a gray cloak that is a CTF helper or find somebody in a Crimson cloak that is a dungeon master and if you're approaching them they're probably on their bathroom break and they're going to yell at you but whatever they'll get over it find one of those people in a cloak and just ask them what to do and they will guide you from there if anybody if anybody in a cloak tells you to buzz off I want you to come personally find me and I will beat them with my belt I won't do that but I won't do that so with that I understand this is a extremely Niche CTF but just keep those

two things in mind Nostalgia and accessibility Dungeons and Dragons has given me a lot through my childhood and my adulthood it's given me my friend group it's given me new friend groups when I didn't have a friend group to hang out with whenever I was a depressed teenager because we were all depressed teenagers whenever we were depressed teenagers it gave me something to look forward to it gave me a place to be on Friday nights whenever I didn't have access to technology because I was in a weird place and I had a pen in and a piece of paper I had something to do so if you've never played D and D before you to try and if you have played D and

D before what do you say we order a pizza and let's see what happens yeah awesome thank [Applause] you yeah thank you coach e yeah I can't definitely can't reiterate that I mean this is probably the lowest barrier to entry in a sense to participate for a CTF so like if you've never done a CTF before can't can't four okay 4,000 $4,000 worth of prizes will be given out for this thing so yeah for the CTF and um again like he said it's I mean if you didn't he said DM don't know what that is don't know what the dungeon master is I mean this is it's just a great thing I will say one thing if you played D and D before

try to get someone else who's never done it and bring them with you like to go do the CTF like hop in and drop in um because you you get good prizes it's a great place Network that's one of the best things you can do here obviously we got great knowledge got great incredible speakers great sponsors we I would love it if you guys could somehow walk out of here with a job that pays you way more money that you like more or like more connections um and I guess I you know we definitely as a team encourage you to you know get as much as you can out of this conference um try to challenge

yourself like to to meet others you know obviously we've got such a I mean this room is full of incredibly weird people uh and uh and that's a good thing right like we are if you were at all if you are here you are you are weird you are strange you are a very strange unique person you are probably an engine that is powered by and fueled by curiosity in some fashion um I mean because you know I mean we are probably a frustration you encounter all the time if you're security practitioner in any way like most people are so focused on you know they don't even consider the stuff that we think of right and it's just you are

strange in a good way so like that's why we love this community I love this community um you know we are all very much you know feel by curiosity and um you know that I mean said that's one of the best things to hear this is the Tampa's we would say Premier you know Community Driven like infos type conference um so but definitely try to meet other people talk with others obviously attend the talks and stuff but you know said get the get the networking get some connections um try to set maybe a goal try to meet with a couple people you know uh if you want an icebreaker you never know that just walk and say

hey what are you excited about or what gets you excited you know or what's your favorite thing about your job you know I don't know just ask you just you just started we're all here with the same shared interest right everybody here wants to talk I just see a lot of people I mean obviously whatever is comfortable but we just can't encourage you like we all want to talk about this stuff and we want to learn so humble yourself if you've been here for a while and talk to somebody younger or you know less experienc either guide or Mentor them or help them I mean everybody we all could use tips and tricks we can all try to

improve um so you know this is a knowledge sharing thing and uh I mean that's why Again part of why we do this right we all have the shared interest and um you know again and we hope in this environment with bsides this is it's a very unique conference in the sense and if you there's bsides everywhere across the world by the way like this is I mean this is bides Tampa there's bides St Pete there's bides Orlando there's bides Vegas there's bides tons of them and they all we're kind of all unofficially linked in a sense and we're all you know kind of put together by this one goal and again it's not I mean nothing against like the

larger comp RSA is great black Hat's great but this is hopefully a very different experience in the sense I'd say more fear to the interest in The Passion of of us as practitioners and people interested in security so um yeah the mik yeah so we're uh by the way we're stalling a little bit so we're gonna um basically uh the keynote will be in here in a couple minutes so just stand by so we'll um you know bring her up in a second have Marina introduce her um so just stand by and network and we'll be getting the show on the road again here shortly thanks everyone [Applause] [Music]