← All talks

Opening Remarks - BSides Leeds Orga

BSides Leeds22:0714 viewsPublished 2025-08Watch on YouTube ↗
Show transcript [en]

Good morning, Bolth. I really wish Carney hadn't started that traditional intro cuz my voice is now as rough as Roses normally is. Um, they just get first off. Welcome. Thank you all for coming. Every year this doesn't ever feel like a real thing until I go downstairs and suddenly see people milling around. And you've turned out on what's going to be the hottest day in the country. you absolute um >> you're insane people and more on that in a minute. So welcome very very quick amount of housekeeping. We've got some great stuff lined up to you today and you don't want to listen to me talking all the time. Um stuff you need to know

about today. Um you've got your programs the programs got some info. However, if you go to point your phones at that QR code or if you don't trust QR codes the little URL above it that's got loads more infos. It's got copies of the programs, maps, access all the stuff we're doing. That's like your source of truth information. So that's >> that's one thing that's wrong. We'll get to that in a minute. >> Mostly true. >> Um no fire drills or anything like that today. So if um if if you hear the fire bell the fire alarm go off, I suggest you get outside as quickly as possible cuz it ain't test. Um if you need help at any time today,

you'll notice a lot of us with green shirts on. Grab one of us. We are here to help you. Our aim today is to make you have the best best day possible. We'll do whatever you can. The person you find may not be able to direct you directly help you, but they can at least come and find somebody who can. Um, we have a code of conduct. It's plastered on all the walls. It's on there. It's in your program. Take a second to read it. It's all about having fun, but we have to sort of keep the shenanigans ruled in. We have to This is an amazing venue. We love this place. We have to come back. So,

keep within the code of conduct. Keep sensible. You know, we are one big family, one big community. We're talking more about that later. We don't want to ruin that. Um, look after your fellow hackers. Today is hot. Today is stupidly hot. We bought a lot of extra water. The venue put water on. We wrapped up the air con so hard this morning that we've broken it. Um, we've got it to the It's now at the maximum level that we can cope with without it tripping again. If you think this room's hot, I'm going to fiddle with the air con. Please don't, cuz it trips it for the entire building. Um, so, but yeah, as the day goes on, there

should be somebody coming out. Let's try and ramp that up a bit more. Um, but yeah, look after each other. I say we've got water everywhere. If you see somebody struggling, especially the crew, just say there's water around everywhere. We we we don't want anyone passing out on us today, you know, to speak out. Very quiet. >> Hello to the people in the back. I will try and shout more. Not very often people ask me to be louder. There's no estimated quieter. Um, badge stickers. When you came in, you all got one of these lovely badges that worked really well with Sharpies, and you've all probably got them very smudged at the moment. Again, QR code on the back with

all the info. Um, one of the things that we've always done here that we've always been very big on is a sticker system to say to indicate things like you don't want to be photographed, whether you're okay with personal contact and or whether you need a little bit of extra space and whether or not you're um, you know, you're open to people talking about positions or you're trying to hire yourself. Take a look at that. Again, links off that QR, links the website. Please respect what we've got on there. I I'm not aware of people today that we particularly can't have in photographs, but there may be one or two that have chosen to do it. So, we love

photographs. We love you all to take as many photographs as possible. Just try and make sure that you're not getting people in there that don't want to be in um rings or more importantly the swag bag that you got on the way in. Every year we try and do something a little bit different. Every year we try and come up with some unique idea that nobody's ever done before. We have a load of genuine great ideas and I realized that Robin at Steelcon's done it at some point in the past. Um, this year one of the things you've got in there is a little 3D printed ring that Grom spent months now seemingly printed. It's not just a little 3D printed ring.

They were cool. We stole the idea from Jason who at Defcon last year. Gabe was giving out little Defcon um the the Defcon Jack logo on a ring. It's very very cool. Me and Gro had a phone call one day went we could put an Arid in there. We put like an NFC token in there. They could be programmable. So, all those little 3D printed rings that most, not all, if you have quite enough to grab, most of you have got in your bags have got an off token in them. You can get um an app on your phone. You can reprogram that. If you actually scan it at the moment, if you put your put your

iPhone or your Android phone at your ring at the moment, it should take you to the same place as that QR code. Very silly, very geeky. Ultimately, you're not going to be wearing these after today. But hey, >> it's something funny. And if you didn't get one and you really want one, now's your opportunity to go around talk to people because somebody there'll be people in here that don't want one. Um the other thing to talk about, perfect time to prove that in the moment. People have already been thinking about each other and um you know, sort of acting as a community. People have realized they've got a t-shirt size that wouldn't be ideal. So they've been swapping bags

with each other. However, somebody managed to swap a bag with their train tickets in. So this if if you if you swapped your goodie bag with somebody else this morning, just have a look in the bottom of it. Make sure you haven't got somebody else's tickets. And if you have, the lady down here on the front row got go find her because otherwise it's a long walk home if we don't find those tickets. >> Plastic wallet which has got the tickets for today and there's the orange tickets to Lancaster. >> So people, it's not just people swatched a bag. It's took it back on that experience. >> Oh, I didn't know. So, yeah, >> if everyone could just have a look in

the bag at some point. >> Look now, it would be great. >> I'll tell you what, whoever finds it and it's >> immediately an extra 10 points on the scavenger hunt. Yeah. >> Gio in the corner raging just >> Yeah. Yeah. Gio's going through everyone's bags right now. >> Um,

[Laughter]

>> right. Um, obviously we want you all active. We want you all participating. We want you all to have fun. We're aware that sometimes events can get a bit much for for people. Um I imagine on a hot day like today even more so up on the third floor we've got a chill out room, sort of a quiet room and a prayer room up there. Great if you if you just want to go and take half an hour's break and just disconnect from the world. That's what it's there for. That's the point of it. Um don't just do what people have done in the past and use it as a meeting and go and take phone calls in. That's

not what it's there. It's just a place to go and decompress and um get your head space back. Um food. Um we've got two lunch sessions. As ever, the the big constraint with this place isn't so much this room, it's the area down there with the food. So, we've purposely got two lunch sittings. So, don't feel that you have to rush the second the food's on that there. We've got absolutely loads of food. We've got great speakers on during lunch. We purposely put good people at lunchtime to try and drag some people away from the food. There is enough for everyone. It's quite a length of time. It will be topped up. So, you don't need to rush at

the beginning of that. As I say, keep keep hydrated, keep refreshed. We've got We normally make a big thing of having coffee out. Today, the water out's much more important. Um later on after this, we've got Nation Shopkeepers um for the after party. If you look in your goodie bag, there should be a um a festival style wristband on there that gets you access to the the bar tab nation. Unlike other years, we haven't got a specific um sponsor for the afterparty. So, the the money we've got there has kind of been pulled together from a few different sources. So, >> don't I'm trying not to swear for one. So, just in case the crew had Yeah.

Don't don't don't take the mick with it and go ordering bottles of wine with it. It's But we have got a chunk of money behind that Nation. Again, if you're wondering where Nation is and you weren't there last night for the pre-party, that same QR code, there's a little Google map showing you how to get up there. about 10 10 minutes walk at the top of town and unlike last year it's a properly accessible venue that's got an indoor and an outdoor. Unfortunately on hot days it gets quite popular in Leed and we haven't got exclusive access to it so it might be a bit busy but we we've got a whole bunch of seats

reserved up there. Um what we've got on today three tax tracks of great tools. We every year the CFP is getting harder and harder and harder cuz we're getting higher and higher levels of you qualities of torch. We have to light a lot of um turn down a lot of great looking torches this year. So, we're really proud of them for that. Um, again, because of the way the sponsors worked, we've taken the normal Friday careers um thing that we do and brought it from the virtual world in in house. Now, over that lunchtime period, we've got some separate careers talks. Again, on the websites, on some of the posters on the wall, things like that, details

about that. Four or five great speakers for that. We've got Minty upstairs doing the car hacking. For those that don't know, Mincy's um he premiered the UK car hacking village at the very first besides Leadeds. Um he's at the last couple years. He's not been able to be here for for medical reasons and it's wonderful having him back. He's absolutely great. Go and spend some time. Car hacking sounds amazing. Oh, he's out back Halloween. Um it is absolutely wonderful to have him in his back. He's he's kind of very much part of the family here. So it's um go and see him and also car hacking sounds really intimidating. It isn't. Go and spend 5 minutes talking to him and show

how easy it really is. What is got there is an entire car built in a box. Well, not the body of the car, but all the electronics for the car all mounted. We can literally go and play and hack it. Lock picking. We've got Kai from K who >> has gone and got food. Good lad. Um again, Kai does a lot of these events. If you haven't ever learned to pick a lot before, Kai is great and will spend a lot of time teaching you through that. Um, one of the reasons that he does a lot of these events is he also actually sells all the stuff. So, he might not have it with you, but it point you to

his website afterwards if you get addicted to a lot of people like most of us have at one point. Battlebots, Ben, again, not around, >> but yeah, the end of this corridor down there. If you've seen Robot Wars on TV, it's nothing like that cuz that's very much copyrighted and we can't ever imply it's anything like that. But these are what they call their ant leads. They're little robots about that big. Ben um he's got half dozen ones for people to go within there. He also provides plans to go and build your own 3D print your own up later if you want to. Um sticker and book stores. Obviously the sticker store it may start

at the steelcom but um you know it's been a big thing at all the UK conventions for a long time now in reception I think is it? Yeah. So, in reception, again, if you're new to these sort of events, the idea with that is that we go around all the vendors that give out cool stickers and all the people like Grom that spend far too much money just making cool stickers for the hell of it. And we we put them in the sticker store and then we ask for a small donation in return. You get awesome stickers to put on your laptops. Some charity cancer research gets some money out of you. Everybody wins. >> Um, we'll break a thousand easily.

That's it. You think we'll break a thousand? >> So there's your challenge. Grunt thinks we'll easily break a thousand. So your target is 2,000. We've got >> We've got 400 450 people in the building today. That's two quid each and a bit. >> 390 people in the building today. >> Yeah. If anyone asks um >> 189 [Music] also first time I don't know if it's the first time a con certainly the first time I've been involved with we've got a book stall um James whom many of you may know from speaking and helping events like this for many years has now got into publishing. Um I've read his first book that he wrote. It's brilliant. He's

got a new book that he's he's just there. So he's got a book stalled. Where is James actually? I mean where's he? I think >> he's in with Minty. So, he's in with in with the car hacking. Go say hello. Go buy his books. They're great. Um, scavenger hunt. It wouldn't be beside le without a scavenger hunt. This started as a little silly side project and now where it's um it's it's grown and it's grown and it's grown and th this year um James couldn't um >> Holly. >> No Holly this year. >> Holly. >> Oh, it's the first one. It's the first part of it. >> Yeah. Yeah. Yeah. That's the first time trying Holly. Yeah. So, for those that

don't know, scavenger hunt list 100 tasks, 100 things to find, 100 things to achieve. Um, and we arbitrarily give points as it says in the rules. We have no desire to be fair or consistent, but we are right. Um, we're try we've got me and Sam are going to be your first point of contact with that. We are we have tried to get a few more people involved than we've said all along. The point is to impress the judges. We don't care how you do it. Well, we do care. There was a lot of ambiguity, >> but there's a lot of ambiguity actually. How you interpret the question is half the fun. Yes. Um I say it started out as

just a little silly side thing. It's now taken over this to the point where in other years we we've got so many great photos from people doing so many great things in and around the venue from that. So if you want to break all the technical stuff in the point of scam isn't to win. >> It's great if you can beat Gio who's hardcore player. Point of scam is to take part. >> Have a look at the list of things. Pick two or three of the things. Some of them are really silly. They're all open to interpretation. The fun is trying to convince us. Ideally, everyone try and get at least one point somehow during

the day. It's good fun. >> Ridiculous. >> The whole point is just take part and take pictures cuz for us lot this goes by in a blur. We don't remember this bit. It's tomorrow morning when we sit and look through the pictures and realize the fun you've had and the scavenger hunt. You you mentioned Holly. Holly last year turned up keynote speaker had never done anything like that and yeah >> she she never she she didn't speak about a talk afterwards all she talked about was the scavenger hunt she had so much fun >> techical not technical at all >> yeah because most of them are deliberately untenical >> there's a technical in there >> yeah

there could be ones that have technical solutions or they could be >> how do you take part >> how do you take part >> like everything Like everything else, QR code on there, takes you through the website. >> Is it live now? >> It's live now. It's password protected. >> Um, list of challenges up there on the web. Um, >> teams of up to five. >> Teams of up to five. There is is a set of rules. Make sure you read the rules beforehand, but they're basically a convoluted way to say don't be a dick. >> Um, >> there are prizes. >> Yeah. >> Are there? >> Yeah. >> Awesome. We have Rosie. You can

>> take Rosie home with you tonight. a surprise. >> No, I'm not. >> I'm going to get worse. >> Um, right. Moving on from the scam. Anyway, um, yeah, I say I think we're Yeah, >> fun thing. In your programs, it will say, um, come to the crew room. >> That's wrong. >> It's wrong now. So, there are people who will be down by reception of my lovely volunteer where you check in. >> Do score. Um, and then me, Glenn, if you find an organizer, we've got access on the on the sheet. That also works. >> And you don't just need to check in once with all your answers. You can keep coming back time and time again. So,

it's Yeah, >> just be friends with us. >> Yeah. Come and talk to us. >> That's all I want for everything. So, it's fine. >> Vendors and sponsors. Um, this is the point where I point out to you that these are we size conferences are very different to your commercial conferences. >> We reckon now it's what £75 ahead. I think to put this on now about 75 >> probably over that now. >> Yeah. And and you got in for >> emotionally. >> Yeah. >> Yeah. >> So that that big sort of 60 70 80 possibly pound shortfall for each of you is made up entirely by our vendors and sponsors. Unlike the big conferences where they um pay but where in return

they get all your contact details. You're constantly scanned. You're constantly sorted. We don't do any of that. We do not sell on your details. They have come here solely to support us and to build relationships with you. That's awesome for you cuz it means that if you want to be private, you can. They don't get a lot in return for this. So, what we do ask is take time, go and talk to them, go and spend time with them. They are as much a part of our community as anyone else. You're not going to get the hardcore sales pitches. You're going to get people that actually are, you know, would be attending Bides anyway. And most of the relation sp

sponsors down there. We've built a peaceful relationship with one thing. >> One of the differences between bides and other conferences is none of the sponsors and other vendors get your details by default. We don't pass over any of your details. So >> you won't get spammed. >> Please do go and talk to them because they get a lot less from a marketing point of view than they normally do. So please go and talk to them. If you hand over any details to them, you're absolutely welcome to. Um, but just to be absolutely clear, you will not get spammed from Bites events. We don't give the sponsor over. That makes it even harder for us to get sponsors to give us

money. >> So, please, please go and speak to sponsors. Be nice to them. I've been trying to get to wear that hat already. >> That was such we don't expect anyone to actually get the reference for that now, but have a look at the scavenger hunt. >> It's in there. >> It's in there. There there is a clue. It's an obscure YouTube video, but it's brilliant. So, yeah, go talk to the vendors, go talk to the sponsors, please. They are our friends. >> You do want to buy stuff from them. Remind them that you saw them at BS size leads when you sign that PO. Really important. >> Yeah, definitely. >> Um >> Oh, yeah.

>> There they are. >> There they are. That That's all the people. So, all these people we absolutely love. They're absolutely awesome. I think for the first time ever, we've actually been paid by them all before we've got That's never ever happened before this week. Um, >> yeah, I was going to say it's >> big companies, corporate money moves slowly, but yeah, they are all absolutely wonderful people. We could not do it without them. Go talk to them. Um, did we end up leaving anything with them this time? >> Uh, there was a couple of the pride, >> right? Yeah. So, I think in most of your bags, you should have some normal besides lead stickers. There are some

shiny pride ones. They they almost certainly aren't in the bags, but they sound like they're with the vendors. So, if you want a shiny pride besides the leads, um stick out go talk to the vendors. Um and basically that's it. I would 3 minutes under. [Applause]

>> Yeah. Oh yeah, that's another thing. Don't forget obviously all these talks are recorded which is great because it means that um >> it means hey we can see them and you can see the ones you missed and say it's an absolute cracking light this year. >> Oh is yours not recorded cat? >> No yours isn't >> oh okay in that case >> you really want to catch cat's talk to me any talk that is not recorded is generally worth seeing. So almost all talks are recorded. Um, but that does mean that if your phone goes off in a talk, it's not just going to be the people um in the room that are annoyed

by it. It's going to be everybody watching it back on YouTube for years to come. So, turn your phones on to silent in talks. Please, >> if you just wandered in, everything you need is on that QR code. There is a link. >> Say it's We realize that pro programs are rubbish because we we've changed so many things since program. That QR code is great cuz we've been updating that hourly for weeks now. Um, and yeah, all the spelling mistakes and stuff are all too >> late. You doing the scavenger hunt as well? >> Oh yeah. >> Mentioning no mics, >> right? >> Two two minutes max to go grab a drink if they want to.

>> Right. >> You don't want to go straight into it. Okay, >> I'll take it straight into it. >> Right after there's a break. So the the reason we had a discussion there about whether I give you two minutes break before I introduce um our first keynote speaker um or not is because I didn't I want to see this is every year we try and outdo ourselves with keynotes. Yeah. But I hope you all agree that in the past we've had some really interesting you know offthe-wall keynote speakers that that have been really you know aren't what you expect. This year we're talking about who we'd want. We were talking about, you know, if we if if we had unlimited um access,

who would we want? And one name came up and S went, I can get him. I think I can get him. I like no way. No way can you get Jason to come over here. And few of us were lucky enough to meet him at Defcon last year and the >> I with him in Japan and honest to God, it was it was the best thing. >> So it it wasn't until I actually saw the receipts go through for the airfare that it's like we've actually got Jason. So, for those of you that don't know Jason, what the hell are you doing in this industry? It's kind of hard not to know Jason, but he he first came on my radar

probably what a decade ago doing um YouTube well doing TV things that ended up on YouTube about breaking into banks in um in comedic ways. I mean, I I still talk about the one of the first ones you did with the um the was it Israeli bank with the Defcon hoodie and the the bloodat sneakers? >> Lebanon. >> Lebanon. Yeah. and um walk walking around hospital uh sorry um hotel kitchens in your in your jams at at 3:00 am see he's got a million stories um he is absolutely wonderful he is the absolute heart of this community they and I can't believe with that with no more ado I would like to bring to the

stage Jason straight Jason [Applause]