Hacker Jeopardy, Part 1, at BSides Knoxville 2019

if you have a good watch or a TI calculator okay here are the categories for this round do I hear an echo voice assistance by their name to their owner and manufacturer will name the voice assistant you name the manufacturer Google droppings these are products that have been abandoned by Google founding figures big names in the time of the bulky pipes the cloud wars cloud services that have overlapped with common military designations computer without acronyms all the answers are common acronyms but you have to expand it so you can't say the afternoon you have to stay the full thing alright and lastly o mas top tips you'll name - Oh must category for the popular

vulnerability classes all right we'll always start with team one so that's PD maybe you have the board and yes everybody will need to have the mics up and it does whoever buzzes I'll acknowledge e when they hand the mic to the whoever's gonna answer 200 do I hear an echo 200 Alexa misfit toys form of a question correct but give me a couple of those before we start doing yeah okay misfits you got porn okay in a room full of nerds that's a heart okay see a cloud war is 1000 Google service that can perform cryptographic operations on FIPS 140-2 level 3 certified modules not us in helicopter squadrons that perform anti-submarine warfare

what is Google HSM hardware security module this one routes our HSM - but they're but they're called helicopter maritime sprink yeah strike ok misfits you still have the board

penalty fingers 400 ok famously created hundreds of cryptographic bombs that search for valid settings on an enigma message misfits

all right this is the twins yes this service provides a social network for its users unlike only fathom let's new potential intervention elites and the famous cover-up decent example 2019 misfits correct just X maybe they forced it on us they think that information and they drive here we go 400 this service helps users organize and digital photos it was discontinued at 2016 to focus efforts on Google photos misfits correct okay word 600 Google droppings this much-maligned wearable device was cancelled for consumer use in 2015 but not before a new pejorative was created to describe its users this yeah we will take that yeah yeah Google glass right 800 dual iraqis this service provided a personal

web portal for users to access customized content in one place using various gadgets like many other Google services it was canned to focus on Google+ in 2013

I used this one extensively and I was very sad when it went away it was I google Tiger go down apparently not enough people used it I was very upset okay miss miss you still have for this service a successor to dodgeball allowed users to share their location with people it was canceled in 2013

what is Google Latitude lattice here okay yes so this busy stop work cloud wars 200 Google's database service to store and sync data in real time not to be confused with in canvas that provide our artillery support government shills incorrect misfits incorrect thank you for our military expert at down here he plays a lot of military video gamers okay it was a firebase firebase I believe misfits you start the board why not Microsoft simplified to Venegas cloud service not to be confused with the airborne variant of the ak-74 not a k47 that'd be scary to be everyone ok time what is a KS after kubernetes service stop like you know you must experience all these things ok

misfit okay here we go Cortana misfits correct misfits yeah 400 ok computer with a hybrid X 400 as opposed to its dynamic cannot require this volatile storage service device does not need to be refreshed government chills you got the buzzer but also yeah it has to be said misfit toys that's incorrect

the points for just trying to take on they're a long way of answering that's always what a static random-access memory okay this is you still have a Bordeaux cloud Morris 400 deeply discounted instances that might be preempted by DC tunity the tools for which might get confused with the senior member of a sniper team misfits incorrect don't celebrations give me answer long

it's like the Bucks are celebrating their falling down to the ring alright calling it yeah what is Amazon spot instances and the tool is AWS spotters spotters so misfits yeah okay here we go on print AWS service fully managed and maintained by AWS not a detachment of troops distantly station from the main force

it doesn't help if there's like 500 tools in AWS okay the answer was AWS outposts all right misfits 200 computing originally released in 1996 commonly used to attach peripherals Misfits that's correct okay

600 this technology is typically used to increase reliability for performance of two or more mass storage devices darish hills

you know

that is incorrect

[Music]

yeah it is for ice not devices okay okay this vulnerability allows an attacker to use an otherwise benign web applications in malicious code generally in the form of JavaScript to a different end user gamma shows what is an XSS acrostics will correct okay what I'm governor sickles okay this technique is used to stick untrusted data through an interpreter as part of the command or query that's acceptable yeah what does it it may also want to accept such as injection but that's that's good because I mean it's this attack relies on an on and off finicky common and authenticated users submitting an HTTP request on the attackers the Hat dispensed what is or cross-site request forgery awesome

you guys are above and beyond us

misfits you have together get bored okay in application server administrative interface that is automatically installed with well-known credentials and not removed is an example of visible our ability yes I think we have to say no because we're looking to save a for it to turn this fits all right yeah or a security this configuration or a system this configuration this more than that area yeah yeah okay this bits got for 1000 know was this vulnerability may allow an attacker to assume another users identity due to trustee an unverified input got Michelle's [Music]

[Music] all right in my house the buzzers are fine so

sorry these are like over here alright the answer is what is broken access control broken access maestro yeah okay The Misfits you have to work yeah 800 okay this network standard sometimes called X 500 light is commonly used as a central place to store user names and passwords within a corporate intranet

misfits shop you lightweight data access protocol sorry that is incorrect

[Music] all right before anybody says I'd make a set of posters except for 2015 - the person who can raise their hand and say it's you sir directories the key word there yesterday misfits are still using yes this hard drive interface announced a 2000 replaces its older parallel design standard and is still the standard and desktops

Beadie incorrect whatever stuffy is this we don't know if it's time this cheese who knows any of this anybody else know that want the answer this is the buzz that's when it's timed out the other set is more shameful sound that's more normative way now here to I wouldn t to ask the person who knows this one anybody yes very close but serial advanced technology attachments

everybody runs plug down a SATA Drive okay miss myths okay grandma COBOL creator of the first compiler miss Vince that's correct founding figures mused on the nature of an analytical engine that could be programmed to solve problems of any complexity misfits that's correct

800,000 acres publish the foundations for what is now the field of information theory in 1948 governor sales sorry that is incorrect I like seeing the gamblers play because their husbands [Music]

[Music] that's a mistake anybody else I think it's time now oh yeah who was quality

okay miss Benson here we go bounty hunters 1,000 the indc engineer who introduced switching circuit theory laying the groundwork for digital circuit design sure misfits sorry that is incorrect [Music]

okay then who was curious to know okay this fits 1000 1000 shall we look inside I meant to look at the presentation the company we need the company government seals sorry that is incorrect [Music]

what is instant there's something that helps beach as 800 echo a lychee be team that is correct and the final month 600 Bigsby misfits yes and all right thank you get all of our contestants a big hand

they're almost ready do you all have those days you can have posters for playing again okay all right Thank You mr. tortoise congratulations like when there's a piano on the street somebody just sits down okay so looks like we're gonna have three new teams is that way okay so this is you can keep play but move to the first table please and I've been more give these other teams no just a second

cher please don't eat their own tears people can pierce for you

okay we're about to see that team now we're letting our computer algorithm type 14 names in our voice assistant is named Paul this is the first thing you have to study

yes sir you know everybody just signed up today of course we organized organized mean us nice

mr. mrs. Smith a my step for chickens awesome [Music] all right so in a reminder everybody keeps giving you Michael you're answering wait are you organized chaos yet do their work on scales right now [Music]

[Music]

[Music]

what [Music]

[Music]

this is jeopardy round two [Music]

[Music] besides batch our beer gives your knowledge of this year's majesty impotent notice who's complaining in here Luke will they make product abuse no it's a company to make sense big data up bridges large corporate database for several groups all questions industries stock of docket q but I've said that out loud out you ready continue organization terms that you might be sick of hearing networking ports make the protocol officially assigned to be given port numbers yeah yes and incorrect alternate samples yeah I got a window there there's uh there's no content there it's also slash there we go miss steps you have to board so choose our first please alright we're going to start here the process of

attempting to find Bruce of work to create blocks on the Bitcoin blockchain you might listen why you do it organizing else the money is finding that is correct alright and so you have four 1s chaos

loosen play I'll leave a product you name the maker that's correct just go see us just didn't you all right ok nice you have the board you blink apply okay fornicate firewalls send the chickens I'll tell ya who is what is this coming yeah company should be people you got the board 600 just a plain beautify AC students wireless access points that's correct [Music] alright chaos you have to work okay he gave 3000 series next-generation fire

net engine series routers misfit toys sorry that's incorrect we're testing us incorrect oh sorry

all right a class or whatever to raise their hand and tell me it's a net into serious routers anybody all right it's lovely okay okay oh you have the board still big data which is 200 yes it just does that it's natural entropy yeah 200 big day everybody this company's score went down 143 to 209 million oh sorry this is 4,200 oh that's it yeah 123 to 209 million affected at 2017 expose Social Security numbers addresses forevers license numbers damper and contact info this little what is that max region yeah every every question is a briefs okay what does the Equifax breach I really built the UH sorry I didn't have that spacing here I apologize okay miss

McCoys

reaches 400 you might want to check your reservation about 500 million affected from 2014 to 2018 exposed contact info and passport number for chickens I believe that's incorrect sorry organized chaos that's correct I just had to trash I don't know what hotels on what hotels facility okay okay hackers were probably yelling this about three billion of metrics for 2013 or 2014 exposed ash has lyrics and Venus behind residents dead road security question answers misfits what is the yummy breach that is correct I love these will not be working tomorrow okay once you have the board no 8 plus plus rated here about 145 million affected at 14 exposed hash passwords names addresses campaign first seven

their chickens sorry that is incorrect

organized chaos sorry that is incorrect there's so many to choose from

solid eggplant there was the eBay for use 2014 each of us know this fencing up close about 1000 1000 you could say you were one about third and 10 million affected in 2013 exposed credit card numbers and contact information send their chickens that's correct yeah alright some of the chickens you have the board which crew okay thank you get crypto 400 in the beginning there was the first walk in a blockchain

this is one that's correct [Applause]

networking for its 200 or 300 K tcp/ip port or four four five core chaos that's correct yeah okay that's in your Samba yeah okay never divorce 600 TCP UDP 3389 organized chaos that's correct Remote Desktop Protocol version 4 seniors now report 800 TCP UDP 631

okay that's correct

that was accidental but great alright who's choosing I was keeping up okay

this [ __ ] in my kitchen Estes Mike I'm actually all those things Indians even okay well would be incorrect [Laughter]

all right last anyone you raise your hand say yes sir no sorry yes sir in the back in this IRC okay what's next chaos yeah bad start where 200 this type of screen used on this year's badge has 65,000 colors it was used in over Nokia phones

hey listen don't don't get too hung up a white in front of you this is what we care about the signals from lights Magus belongs yeah there's room for improvement on the lives it's more for books okay chaos 405 chakras maybe a typo here wait what did you just click like oh okay mines different these types of buttons are free because they came built into the circuit board became a building yeah misfits what is capacitive yeah that's correct yeah capacitive sticks or capacitive buttons together correct all right this goods you haven't worth all right 600 batch are this powerful component makes sure that the badge circuit always has 3.3 volts

he's supposed to bridge later yeah yeah the power regulator our linear regulator yes the battery definitely provides the but I can provide more all right Elizabeth 800 yeah magic hundred this type of power source has a voltage range of forces I'm sorry that is correct [Applause] the human in me wants to tell you yes every time but the host of it has to say no okay

misfits you have the board 200 smallest deployable object kubernetes definitely not a spec you should be asking us sorry that's incorrect down there are plenty they have the boat mr. play okay everybody else

yeah I've seen I've seen the picture online of the guys like it's a virtual machine I'd know how to fix this that's how I container it's what is a pot up I don't want any pies and they are the smallest winner directory within one or more containers that bypasses the Union filesystem though it won't help measure the size of the container it kind of makes it kind of makes me happy that nobody element like I'm not the only person in the world what is it Polly no it doesn't when an attacker controls the majority of the network hash rate Cellular

hey it's human yeah makes it more fun at the time also more merciful

[Music]

all right somebody give the gentleman a chair what is a 51% attack [Applause] [Music]

all right today on crypto 800 the proof of work system used by Bitcoin originally designed to look at email spam and prevent denial of service attacks not form of nominal currency

okay what is hashcash okay chaos yeah the type of encoding used for Bitcoin addresses

[Music] all right here we go shots sorry that's incorrect

what is space 58 it's a big anything can be a base to it right okay chaos the number of bits are mighty room dual-core processor uses 16 is incorrect this bits 32 in the form of a question on it's 32 minutes that's correct

that's right okay this is enough for 600 natively managed cluster of docker Nations I hope you didn't don't get overwhelmed yes what a swarm we got one okay 800 this kubernetes agent that runs on each node and the cluster might be got your cookout menu seven minutes miss miss [Music]

[Laughter]

all right what is a cubelets a cute little you know the answer anyway the real thing okay yeah I'm for a thousand years multiple virtual clusters backed by the same physical cluster in kubernetes well the people to a different acceleration sorry that is incorrect the irony here we need it so desperately anybody else to the bottom all right what is it namespace I don't know why it's like uh this is my problem that software the universe life metaphors because in their round the namespace is not a belter anyway all right thank you all for playing [Applause] everybody for playing you're great [Music] you guys are also take my slow does anybody here drinking which one

Roger is holding something different one

is gonna make it ringing drink taker

this is our final round

very high [Applause]

[Music] sorry oh come on bear Kamini let's just raise your hand they don't get okay LBT to mr. and mrs. Smith anybody okay yeah let's do the first row here oh that was the UH

yeah

yes

if the mystical sorry

that works

fired yes the actual recording

we want [Music]

one earth

[Music]

[Music]

[Music]

all of us will get started Puckett's relations

[Music]

[Music] his only weakness

there's a package of one collection what you got oh okay hey

yeah

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

as people just know yeah we [Music]

all right we've got with our brief separation [Applause]

[Music] question what answer perfectly alright standby we're just gonna have a contest of duty to the budget the best [Music] Wow my way taught never in the history of jeopardy has it begun okay we're gonna get the right rock this time round pretty we're disappointed in soda that's not a charity hello

yeah okay here are the categories the whole ham radio Tech and questions on anything operators

okay

[Music] yeah okay yeah please use your mind when you're sleeping all right you got the board last house [Music] all right the holdout 200 the seasonal extremes of VHF UHF signals greater especially north of the mason-dixon

The Wanderers that's correct what is wager yeah don't we have to stay okay Wanderers you have the board at Portland room in impersonation transmit you to observe propagation or relating experimental activities apartment Ewings that's correct and thank you for taking that music almost like to add okay Margaret is important all right hold hamsters honor the time when willful interference to other commercial radio stations is permitted chaos sorry that is incorrect

The Wanderers sorry that is incorrect

anybody else I don't feel good about this is what I didn't write it any time stations in amateur ranking of service are not protected from willful interference it was a trick question but you have any more general okay Wanderers I believe you have the board [Music]

the barbarians I'm sorry but I think once you have the board's github 2018 and 7.5 billion dollars our barrack penguins that's correct barbaric penguins st. Angelus overlords 400 what's happened 2014 at 19 billion dollars barbarians that's correct you have to work corporate overlords 600 Luke I 2014 400 million and Datalogic since 2014 1.2 billion Barbera penguins that's correct that's funny alright overlord take hundred tunnel bear in 2018 break this news to song that's correct

okay King passing heavenward let's finish it finish without virus noble calm 2012 for an undisclosed sum organized chaos judges

well that's pretty sure you know okay okay come tanks 200g make the product video games Yosemite Sierra high sierra lobby organized chaos correct yeah I know and I think therefore that in fact I would reject the Westin just yes oh no they aren't hard part trust eat are assuming the serious biotic fever cosmic oh fish nice I was hoping that the Penguins would get that one go fingers okay codex 600 Lonestar black home Vienna Aurora blue redstone chaos was myself that's correct

okay yes don't names 800 the lakes sky Katie can copy a nice barbaric penguins

all right penguins code names 1000 Newton or kata pipe Queens and rocky England's got it do any of you know that that was the 1000 on purpose I don't necessarily expect anybody to get but ok Eunice commands 200 this command returns the working directory it's correct alright

unikz to ask 400 this command can be used to copy or divert data and accidentally destroy a file systems are very pleased I'm sorry that's incorrect uh Wanderers sorry that's incorrect chaos what is T G that is correct entire file systems yeah yeah yes exactly will eight 600 Unix commands this finds sequences of printable characters movie passwords and other credentials people it's correct okay let's turn up what are you experiencing others you know this command provides a shell only by the target user when supplied with the target users password barbaric ones that's correct and feelings 1000 games to manage this command non recursively determined before that the final years here the magic fire big ones correct

all right okay England's okay hacker movies 200 a sensitive supercomputer is really carried away I can expand that a man is forced to play tic-tac-toe against itself until it understands the concept of utility chaos that is correct half correct factories flooded with 400 heckler duties teenagers on rollerblades release pack meant to prevent plagues davinci for sending the final verse of row row row your boat which was all the ruse to distract from a salami slicing worm in a garbage pile that's correct okay King Oscar baby 600 under the direction of the NSA an independent team of penetration testers investigate a telephone answering machine they are shocked after rearrangement Scrabble tiles didn't understand the true meaning

of sentient astronomy and penguins which is correct okay England's

hacker movies in the country the Stanley is that started it was so funny Stanley in sports to hack a government server at one minute at gunpoint later standing is forced to participate in a bank heist to save his daughter Stanley is then forced to siphon money to rely on faith or else have you married a shot yes yeah okay [Music] movies for a thousand a thirty plus year old supercomputer relegated to running up our grades awaken it then fights against the US government spyware adware is run by an AI that was just doing his job identifying the gamer as the kingpin of a massive terrorist conspiracy that's correct [Music] together that crews he believes in and

sing a wall wargames two or more names the dead code blue t-rex Agnes Martin news that straight to VHS I think something

okay he wins you okay the only case where hams are explicitly permitted to transmit encrypted messages okay yes yes the judges were to say yes okay the approximate formula for converting frequency and megahertz to wavelength and meters barbarous look at judges here

[Music]

what Oh so like this is specifically

okay I guess time it out audience if one person a racer cannot answer that okay we lost all our young people that are all playing all right it's a wavelength and meters equals 300 divided by frequency in megahertz okay yeah that's hot you still have the board English

okay I'll give you the three-letter acronym you get me what it stands for Emma sire it must be team wins okay start dot charge

okay yeah that's great

Hewitt's next 600 dartium okay yes Red Hat package manager yeah alright sequence

don t be gasp penguins but some of those times it is correct we want the accurate term not common street terms that people use I'm sorry if your local drug dealer setups that

okay raise your hand if you know no I'm sorry it's a weird one in actual trinkets its vbscript yeah it's one of those it's not how they do it I don't know let's see if I can alright one pound of all da XL there