Prize Giving & Closing Address | BSides Cape Town 2023

uh hello everyone so we're just getting some extra names in case people aren't here so I'm going to waste some time by talking about the AI challenge quickly so the idea is that I'm going to try and do it every year because every time you play you make it stronger so the uh AKA talk dirty to me so the idea is just there's different levels um and you prompt the AI uh you do a prompt and you try and get the password back back um we had quite a few players this year I fixed some bugs in production um but the idea is luckily I didn't tell anyone I just pushed the code but um the idea is with

this is that we still have a lot of people come every year that haven't actually done pain testing or struggle with some of the challenges so we're trying to make it a little bit more accessible and then um I'm going to open source most of this so the models and stuff will be available so you can look at how to do it do prompt injection protection those kinds of things and what works and what doesn't um while everyone's here let's quickly talk about the last one if it loads so uh the last level cuz a lot of people missed that you actually have to upload a photo as well so it's um the new gp4 vision

allows you to do both a prompt and a photo and if you have a page um that you've written on in the photo you can create a prompt out of that as well so that's kind of the idea if you if if that wasn't clear cuz I did code a lot of this at night very quickly so in my mind all of this makes sense in yours maybe not so so um yeah pretty much sorry for the emails I was lazy I used the framework um but um we had quite a few contenders a little bit of a rocky start but but um first person are you [Music]

[Applause] here I at least I know Ross knows him um so we'll probably I'll still get something to him second place I and I'll also have to say I'm starting with this because as the challenges go further the Wilder the nicknames go and the dirty talking was in this Challenge and all of this is still fine uh second person around [Music] [Applause] hey unfortunate considering the the first person got through the image Challenge and I still don't know how but anyway number three now number two um uh code Hunter at

fake number four now number three hey so just if I I am going to delete all the emails and keep the prompts because I'm going to train the evil AI again [Music] it is prompt injection it's all text I'm trusting that you're telling me the right things right uh so like the first one went we're going to see how many names we can find um I'm going to start with the Jeopardy CTF um so also three winners Jay [Music] function

hey okay these names are still okay and so far one out of three okay Toco number two the infamous Toco on hack South okay no pressure uh I don't know if that's spelled wrong Michael cier or

CER [Applause] all right so so far we've got two challenges down this one's still okay we'll leave The Best For Last uh scav hunt CTF uh number one sin

stalker very p and a good CTF

player there you heard it it's not what you know it's who you know social engineering 101 um second prize Roth

Za [Music] hey all right around okay unfortunate then uh new second place is

[Applause] blessing all the way fromi slide overachiever all the way from arari First bides Volunteer and winner of the CTF okay third place uh rafik Ron [Applause] Hey all right now for the elastic Challenge on my Reckoning uh let's start at number three and okay J G sleep with

[Applause]

me eight or nine years at bides this is uh the culmination of many years of hard work here we go again uh Second Place jerky [Applause]

beef this one spicy in being number one but glass cold

again that's it um and then just give us a second we'll hand over to Jared and thanks everyone for playing as well we know that it's quite a chaotic day lots of things going on but uh it adds to the fun and hopefully you learn something as well and if our challenges suck uh please tell it to the AI um it does respond we're not taking any [Music]

tickets hey uh so very important um I guess exciting announcement I guess so uh following the success of hexcon in Joe book we've decided that perhaps jobber should get its own bide as kind of an extension of this conference so in July of next year we're going to start uh bides uh jobber um please get involved um our Twitter handle is at bides jobber so um if you are interested in volunteering or being part of the organizing team or if you represent cental corporate and would like to be a sponsor or help out in any other way um please reach out to us like I think it's a good initiative to kind of grow and

extend our cyber security family I guess um so yeah so hope hopefully we'll see most of you at bide shurg in July of next year cool should have put everyone LED my wallpapers earlier we should have had that up right we're going to get through this it's all good right um I plan to write this earlier uh in the year and the week um I finished it like two hours ago but we should be fine we should be fine so what a day been oh me right it's been a day he it's been fun I've had fun yeah right what a day it has been a day that has been planned from early January dare I

say from the evening after bides 2022 when we were all croaking around with tired feet with all those steps uh at our back at our accommodation sitting around so many pizza boxes wondering and imagining a bigger better bze 2023 and here we are at the end of bze 2023 I wonder what the plan is for next year uh have you thought about it we have the conference has continued its rise from the dorcy of Co it is full of life and possibility the Gathering is like a child a child naughty child sometimes a child we all raise and care for and bankroll thanks to the sponsors uh and the little bugger keeps growing through all the mistakes and

missed opportunities the ideas that fell at the waistline there were many the long long long long long nights the weekends I sat aping away with a handful of likeminded people till the Twilight of the morning building sponsor packs and setting up a CTF a cfp platform it was a good idea this year but yes it was complicated to get the documentation right finding ways I put this in and I forgot to correct it it says yeah finding ways to do me be better right right to build this Gathering into something everyone would enjoy everyone would remember and a conference that left a lasting impact on those that decided to simply just show up with a valid ticket

of course is everyone wearing their badges right so in 2023 we established four pillars which I realized after some conversation ations with my fellow organizers a couple were not aware of and those were something for everyone one thing I wanted to achieve is the chairperson for this year was I wanted there to be something for everyone to do technical talks non-technical talks it's part of the reason why he B in scavenger hunting my sister was a volunteer last year uh and she had solved something where someone kept running around going who's sing who is sing and my sister was like oh that's Dominic white and then they won something with it vending machine so I wanted something that the

the not the simplest mind but people that haven't maybe got that technical might still have something fun to do and I think everyone enjoyed it uh the other one was Connecting People the nonstandard uh PG way uh uh one of the big things we've tried to do since last year was also give value back to our sponsors so sure if you want to give us some you want to give us your money and your logo and say chers have a good one you're welcome too but we really tried to partner with our sponsors this year we had phone calls with everyone I've done phone calls with Setta I call her more than my sister um and another part was I wanted

people to leave here Having learned something yes we always learn fun and interesting things with the talks but getting something tangible that you can take back to your employer or your potential future employer um you know the skill set and a new bit of knowledge so uh something could be said about why we do this I often uh often question myself this year this conference pushed me to some limits in what I believe has been my toughest year uh a tough year for many attending I believe we almost uh we almost lost it all uh my wife and I but with fleeting thoughts of throwing in the tow on B size I just never could it needs me it needs you all of

you and perhaps we need it the annual pilgrimage I thought that was going to be the hardest part I struggled with it earlier but anyway the annual pilgrimage of that con that happens at the first weekend of December every year clashing with all your yearend plans for 2023 is over this whole Gathering could not be possible and would not evolve from these many Minds to little AC y that was tasty from these many Minds to little actions one step after the next without a few key People Partners and sponsors to our Platinum sponsors obscure Technologies thank you so much for stepping up to take the big spot this

year [Applause] I don't know why I'm struggling with this one right it's actually a funny story you know big sponsor it's a lot of money you thought there'd be a lot of thought and consideration and budgetary meetings and obscure so actually it's a funny story between one of their people buying a ticket to asking you about sponsorship to their CEO Justin Lee saying I'll PG it he said full sand we wanted do Platinum must we uh it must have been about 10 minutes uh and our first thoughts were who the hell is obscure well I can tell you now that much confidence I think we all know a whole lot more about them now thank you

so much to our gold sponsors enclos and tenable returning once again a cyber reason the new kit on the bsides Block and to orangee cyber defense one of our longest standing the longest standing sponsors thank you all for your contributions and the collaborative actions you took with us this year thank

you so right do you know brtm these folks came in Mad late to help us cover AV fun fact fun fact recording the spoken word in a format of good quality costs a damn load more than I expected or budgeted for Jared thanks for all your graft on AV I know I pissed you off a lot but it looks like it worked out very well then our trusty silver sponsors you know who you are thank you for being here and still making the call to Fork out some of the Moola for the masses we really had a great variety some old faces and new just the way we like it this year we tried a few new

things we wanted to thank the workshop facilitators uh with Colin Domo from 42 crunch uh rocking API things and Marvin GMA with the crew from elastic for facilitating some sick trainings thank you all so much uh then I want to give a special thanks to OCTA also came in super late thanks to Sera here for covering the workshop yesterday today and today thank you for coming in on such L notice quick one Octor came to us and we were like we're done with sponsor my wife is like Charlie I can't send another Google form and another Excel spreadsheet I'm I'm I'm up to here and then I did the budget I'm like we might have a cash flow problem so I

called s I'm like hey your friends at octed you do she's like how much do you need I'm like I think we can do it for this and she's like how much I'm like she's like right 55k done and it was through and that paid for yesterday uh I think the Friday workshops were a good experiment and we should we should continue it 65 Minds leveled up baby right to the vaults damn you folks did a killer job can we get a round of applause for the volunteers

please we uh we had we had people flying in from zum we had people getting buses from joerg but they all just wanted to be here and every time we heard they were not within the dialing code of cave town we were like are you we're we're fun conf we're a cool conference but are you sure you want to do this and they're like full sin let's do it we hope we didn't work you too hard we are so thankful for you giving up your time to to make this special day without you us organizers would probably die right to the organizers job done thanks same time G same time again next year right so yeah seriously on that note we

had a we I'm shooting myself in the foot yeah we had a damn meeting run by the worst person to run meetings me we took minutes well sometimes deep in tooth my wife said every Thursday uh oh deep in the tooth my wife said every Thursday since late Jan every Thursday we had about 40 Google Sheets between us and a ridiculously granular Trail board which I have to say we actually use this year it helps when you do that and not the usual add all the things make it pretty and then never open it again like I did last year I literally added like 200 items last year I've broke it down so granular right to the organizers Mayan

on the interviews Mike on the vending machine magic Roberto on volts and finding that box that needed two locks that was like a thing for me and he's like we need a box for lock picking that takes two locks and he found it need a Bo

yeah right right so Roberto was on the vaults Nuno Nuno where's Nuno Nuno Nuno quote unquote the on the day Johnny on the spot organizer uh Jeff the games and CTF guy Jared the AV and machum wizard amongst other things you have done one you have one job I never want so I'm thankful for you to to my fellow directors goose and megalodon job done then then my wife my wife is an organizer a formal official with a valid organizer ticket uh shell chief of sponsors venue and snacks through the year same time next year right love the this year was not so bad before this conference of the way she's like charliie this is it I'm not

doing this again and by the end of it she's like yes that that was fun e we should do this again we have a lot of arguments about this usually about the venue but next year we're using an events planner for the venue uh I just want to highlight a few key people I've almost made it through Ross and Dale the scav hunt was epic that scaven started with me going cuz I don't understand a lot of things and I was like I said to the guys like you know what it be fun it's like an NFC type thing and then I told people like go understand nfcs and come tell me how it works to see if it's viable we realize

it wasn't and then I was like this thing is going nowhere and I was like what do I do and I was like I was like I messaged Ross I think it was like midnight one night I was like hey bro what you after he's like oh nothing much I was like you can you chat and I 100% just planted a seed in his mind that I knew he would take and in the end we had a really good scavenger hun I thought it was epic uh to Ivan and Veronica and all the helpers for the CTF thank you we wanted to move away from potentially a traditional hack the Box model this year maybe it was a good idea maybe was a bad

idea but I think everyone enjoyed it TOA from obscure you are a damn Force thank you so much I'll see you in no you we your favorite remember that right to uh Dylan from Orange cyber defense thank you for your guidance with marketing I still don't understand it but all I know is many pretty post make numbers go boom and then yes I got that right and then uh I'd like to thank uh Rogan and the whole team with the vending machine that thing I think I asked on the uh on the we had a vending machine Channel and the question I asked more on that channel was like guys what is the plan to get

the vending machine to The Venue guys what is how are we getting the vending machine to The Venue do I need to get a truck do I need to get some some strong labor like and at one point I realized oh but we can put it in the elevator and then I got the measurements for the elevator so I asked one of the guys like how how big is the vending machine and they said effing big effing tall so I was like so I was like and then I thought ENT I was like find me a picture of someone standing in front of it and there's like a photo of Mike standing I'm like Mike how tall are you

he's like tall I'm like oh so I was like just bring it and we'll figure it out uh I think everyone had fun with it and well done it worked really well this year found in okay yeah we we're taking it to the yeah that's actually a great oh the next question biggest question I asked was what are we doing with it afterwards cuz I don't want to do is circkle with that thing off this conference I think we just throw it in the sea Hy right lastly Thomas is he here Thomas Thomas Thomas the artist I think you did a beast job if you don't use him is your swag even good Thomas did all the designs and then

I I pulled him into other things I had and we sat so many nights just going through designs this for iterations were like I was like oh this looks like Dracula and and so we evolved and evolved and the three concepts we finished with in the end we actually ended up using all three everything you've seen with B Signs today he designed the coins the

t-shirts and just by the way he didn't volunteer it we paid him not pay him that much but he he he did a phenomenal job right enough of that right we have an after the party upstairs we have a b tab we have some pizzas mobus is sponsoring first round with some cool glasses I don't know whether they're going to pour the beer or the cool thing in the glass or give you the glass and just we'll figure it out it's not a not a mobus problem it's a it's a it's a it's a venue problem um Graham where's Graham I just make sure a set of sixes in my boot please uh and then our Afterparty sponsors bit crack

uh the Mei and them couldn't be here uh they let me US sow uh late last night but uh it's unfortunate they're not here they're usually here uh thanks for the Joel and the and the pizzas looking at the amount of people yeah I'm hoping we have enough pizzas but uh Uber Eats is always an option right everyone get home safely pass on the word post your swag on socials and in 2024 buy your tickets early

cuz cuz word on the street is we sell out thank you I'm

out oh one last thing I probably forgot people I'm super confident I forgot people like the meter Academy which I just thought about at the after party I'm going to make a thing about it and say dude I'm so sorry thank you so much these are the nightmares that I have