BSidesNYC 0x05 - Closing Ceremonies (Huxley Barbee)

All right. Uh hello everybody.

>> Yeah. Uh throughout the day, people have either told me that I'm looking really unstressed or that I look really tired. So, I don't know which one it is. Uh but yes, as you can tell, uh based on my name tag here that the Ian are strong at this conference today. Uh guys, go ahead and cheer. Yes. [cheering] [applause] Uh but of course, my name is Huxley Barbie, and of course, it's been my honor to uh organize this conference with many of my my comrades here. Uh I know everybody wants to go to the bar, so let's get right to it. Here, next one. All right, we're going to start with uh sponsors giving away

prizes. We start with Code Red Partners. [applause]

Yeah. 30 seconds. Go. >> Oh, okay. Uh, thank you. Okay. >> Thank you. The warm words. Uh, Code Red Partners is a cyber security search firm. We help companies uh build teams and talent and we also help people across the cyber landscape land a job. I got the honor today of running the careers village for the first time and if anyone attended it was a roaring success. So, thank you to Huxley, the amazing team, uh and everybody that helped out in the village today. Thank you. [applause] >> Can we break out from here? >> Okay. Go ahead. All right. So, let's see. We can call out this number here. >> Okay. >> Uh, the first winner of the day, which

is a Bose headphones, the number is 1053. Do we have a winner in the room? >> 10530. [applause]

Congratulations. Well done. You're very welcome. >> All right. Uh, up next is Dashane. Come on down. [applause] >> All right. She's on her way.

>> Okay. I've got a Nintendo Switch 2. But first of all, can we get a round of round of applause for the volunteers? [applause] It's my first time at Pside Net. It's an amazing experience. So, thank you all. Um, my name is Joanna Chen. I'm the chief information security officer of Dashlane. So, for those of us or those of you who aren't familiar with us, our claim to fame is a password manager. So, we help you generate, store, use your credentials safely. On the other end of it, if your credentials are leaked in a malware dump or a breach, you can use our product to know that as well. So, I know a lot of you are students. We have

Dashlane Premium for free if you sign up through our student page with a.edu address. So, you can get a year premium for free. Um, if you work for an enterprise or a company and you want to get that same password health confidence for your workforce, please let us know. We've got something for that as well. So without further ado, do I choose or do you choose?

>> There we go. Should be a number written right here. >> Number one 0621.

>> Is there a name on it? >> Uh there is a name on it. Piml. >> Oh my gosh. >> They have to be here. >> Three. They're not here. Two. One. All right. Nintendo Switch coming near you. >> All right. 10595. >> There we go. [applause]

You saw winner switch two. Congratulations. >> Oh, I should probably check this. [laughter] >> They're good. >> Yes, that's good. All right, >> there you are. >> All right. Um, next sponsors. Please keep your comments shorter. Thank you. Next one. Next force.

>> All right, there we go. Moving on. Gecko, come on down. [applause]

Hey everyone, I'm JJ from Gecko and we're building an LLM static analysis tool to find business logic vulnerabilities. Firstly, thanks to all of the organizers for putting on this event. We had a lot of great conversations and let me pick the one from Okay.

>> Number 10694.

[applause]

All right. Thank you, Gecko. Let's go to healer. Oh, wait. We're doing healer, right? >> All right. Um, healer couldn't make it, so we're going to pick the four. Y

>> number 10539.

>> Y [applause]

[applause and cheering] got the ticket. >> [laughter] >> I wasn't going to check. I was gonna >> um Okay, next one we got Convu. >> Yeah, >> Luke. All right. [applause]

>> Was great to be here. Thanks uh to all of the organizers. Uh so I'm Lucas Mason, the CEO of and co-founder of Congo. We're building a agent v vulnerability management platform uh that helps companies burn down burn down their security backlog.

Number one 0534. [applause]

Thank you, Luke. >> Layer X. [applause]

>> Hey everyone, we're Layer X. We're an enterprise browser security company. We give you web and SAS security controls, DLP, fishing prevention, similar to traditional web proxies, but we just do it natively in the browser because most web and SAS activities happen in the browser. Uh we also help against malicious extensions. They're like the flash drives of 2004 business productivity tools, but a lot of risk. I advise you all to go to extensionpd.com and see how malicious your extensions are. Thank you. [applause] What are you giving away? >> Oh, >> we are giving away Ray-B band Metaglasses. Rayban metag glasses

>> number 10613. [applause]

[applause] All

>> [applause] >> right. Thank you, Mayor X. Let's go on to Red Canary. Red Canary. No Red Canary. All right. Moving on. Strong DM. Strong DM couldn't stay. Um, so they have their own tickets that they wanted to give away. And this is a conicit Raspberry Pi 4 starter kit in a premium black case. >> Right.

>> Radzik. [applause]

Okay, we are done with the sponsor prizes. Um, Red Team Village.

Uh, Red Team Village couldn't stay. I was supposed to say a few words and now I can't find where those words were. Sorry.

>> Wait. Yeah, sorry. Okay. Well, anyway, uh we were very happy to have Red Team Village come this year. It's the first time they were here and we were so happy that they were to um they also did a CTF for us. Uh so much thanks to to Red Team Village. We're so sorry they had to leave uh early, but anyway, hope to see them again next year. Okay, AI Village. >> [applause] >> Hey everyone, I'm Puy. I represent uh Align and we were had the opportunity to host the AI village, AI security village today. Um we had a tight finish for the first first spot and the second spot in the CTF. Uh the second spot winners are

uh it's TCK Soccer. TCK Soccer. >> We have cash prize. [laughter] >> All right. Uh okay. >> My name is TC [laughter] Yes. Okay. Looks like we don't have TC. >> Yes. And we uh we know who the first prize winner is. It's Shrihari. Uh but they're a student and they've already left and they have collected their gift. [laughter] But thank you very much for participating in the CF. [applause]

>> All right. Next up we have CTFD.io. CTFD.io has been a supporter of this conference uh since the beginning and every year out of their own pocket. Uh they provide prize prizes to anybody who wins their CTF. So thank you. Thank you. >> Hi everyone, my name is Christian and here we have Kevin and uh we were here today for CTFD. Thank you to everyone who came out to play. Um we're going to award the top three winners from today. Uh, starting with third place, who won a lockpicking set. So, can we please have Renbau at knee blocks come out? >> All right. Thank you. [applause]

>> Congrats. >> Awesome. Thanks. But I don't think the customs will let me [laughter] go with this. So, could you give this to the fourth place perhaps? >> Okay. Yeah. >> Thank you. Awesome. [applause]

Thanks. Thanks. [clears throat] >> So, and now for our second place winner, we have a Raspberry Pi 5 >> and this goes to Coral. If you could please come up. [applause]

>> Congrats.

So now for our final prize for the first place winner, we have a Raspberry Pi 500 plus keyboard and this goes to the Cybears. Please come up. [applause] Congrats. [applause]

>> And I just want to say a final thank you to all the volunteers that wrote challenges for this competition. And then if anyone wants to volunteer for next year, just email bsides@ct.io. Or if you're also interested in having a CTF run for your organization or company, you could also reach out to that email. And thank you again. [applause]

>> [applause] >> Uh, last thing, if you want a prize, just see me at the uh afterwards so we can give you a shirt and uh double check that you actually won your prize. Yeah. >> All right. Thank you so much. So, this is the second year that we had pros versus Joe's come to BSI New York City. Uh, they are the hands-on offensive def defensive um capture the flag. Um, dichotomy. Why don't you come up? Thank you so much. Um, [applause] >> we look forward to seeing PBJ in future years. Protect. >> Yes. >> Excellent. >> All right. Thank you. Uh, my name is Dichconomy and I run Pros versus Joe's with the help of my amazing staff over

there. As Pier said, we are, excuse me, as Huxley said, we are an offensive defensive CTF kind of modeled after CCDC. We give our blue players in teams. We give them ranges to defend that are heavily infested with a red advanced adversary that our staff and they spend the time just trying to keep the adversary kick them out, keep their services up and running, learn and have fun and do all those things. So, um you know, our emphasis is really learning and this year was an amazing uh CTF. We we were very happy to be here. The players were fantastic. I want to thank Hux Pierce and excuse me, Huxley Pierce, Hawkeye, and the rest of this team here

at Bsize New York. Uh, I'd also like to thank my staff, uh, Punchain, Rex Manning, Exum, Luig, Stray Chief, Misfit, Bob, No Rage, Gabe the Engineer, Newbie, Glitch, Cyber Sword, Dio, Founded this Way, Promea, Ka, Zeus, and Tectonic. There are many more, but those are the ones who helped with this CTF. Uh, it's been a pleasure and an honor, and we look forward to coming back next year, and I want to thank our players as well. So, thank you. Take care. [applause] >> And of course, many thanks to Dichotomy. All right. Apparently, we have one more sponsor prize to give out that I was uh um remiss on uh Google Cloud. Come on down. [applause]

>> Pretend it's a Google Cloud Slide here. >> You know what it looks like, right? Yeah. Um my name is Gina Moren Gambe. I work with the cloud CISO security engineering team at Google Cloud. Some of my teammates are here, the guys who do the actual security engineering. Um, and it has been great to get to meet some of you all today. Thank you to everyone at Besides New York. This is a fabulous event. I just got a bag of some cloud merch. So, I thought I could hand it off to anybody who's still still here. Oh, I picked two. What do I do? This is 10680680. >> Yeah, [applause]

>> all right. Thank you, Google Cloud. And let's go to the prizes that we are giving out. Uh this is based on the folks who uh did the the 15 start or 15 stickers. Um and yeah. Okay.

First up, we have the Nvidia Jetson Orin Nano Generative AI development kit. [applause]

>> And the winner is 1 Z5. >> [laughter] >> What is >> 10585? >> 10585. [applause]

Next up is a Lily Go T deck programmable microcontroller with a long range radio. Oo.

>> And the winner is 10688. >> [laughter] [applause]

>> Thanks. >> I think this is the last one. So, this is your last chance. Here we have a spell lockpick set. Ooh, >> I see somebody excited back there. [laughter] >> All right, let's see. Do you want to do the pickings? And the winner is 10614.

>> Going once, going twice. >> Okay. Next.

>> Okay. 105 87. 10587. >> [laughter] >> Uh yes. Yes. >> YEAH. [applause]

[laughter] >> All right. Um does this play? I wonder. >> Hey there, sir. So here is >> so um >> the uh >> basic. >> So there was actually a riddle in the badge. >> Do do you know it >> again? It's uh random. >> You want the kid to go first? All right. Go ahead. >> Then if I press the button, it changes to that. That you have all the same modes. You're still there, but it'll go back. >> I see. Uh a good guess. Let's do this. >> [applause]

>> No, sorry. Yeah. >> Yeah. >> Oh, no. Yes. >> The lights blink funny. [laughter] >> Yes. Yes.

>> It is not a song. No. Okay. >> All right. Uh, I guess the prize will not be given out then. >> What are you? >> Another raffle ticket. >> All right. >> Do you want to give another raffle?

>> Uh, all right. So, this is a USB rubber ducky. >> Looks like a flash drive. Types like a keyboard. One 070

[applause]

[applause]

>> you folks man. [laughter]

It is the first 47 digits of pi in base 6.

>> All right, we're done with stuff. >> Now it's time for us, the volunteers, to talk ourselves up. Uh we have accomplished something wonderful today with all a whole lot of hard work over the past 364 days. Okay, our technical talk tracks uh have gotten better over time and better than last year. Our acceptance rate this year was 12%. Which is 2% better than last year. So, a better programming. Our technical workshops, we've gotten so many submissions this year that I'm no longer going to do the CFP for the workshops myself. I'm actually going to spin up a new CFP team to handle that going forward. uh our entrepreneur tracks we got uh 25% acceptance rate which is better than

last year. Uh last year we had two CTFs now we have four again massively improving the quality of our programming year after year after year um based on your feedback and also uh for you once again we were able to continue the $0 tickets [applause] Many [applause] many security conferences out there range, you know, even even like grassroots one like ours, they'll they they're charging $75, $85 all the way up to $560 something uh last time I checked. Um so, you know, I we are certainly an outlier in that we're trying to make this conference as accessible as possible to everybody who's interested in cyber security. Um, one thing that we did a really good

job of this year and not that last year was making sure that all the leftover food and t-shirts get donated immediately. So, nothing has gone spoiled. [applause]

Um, and of course, we were able to increase our attendance count once again uh 14% over last year. Right? Year after year, we've gone up and up and up. And who knows what's going to happen next year. [applause]

[applause] Uh there. Okay. All right. And so now I want to uh just uh thank everybody who uh has played a part in uh putting this on. Um I definitely want to thank uh first my family. uh all the swag that you have uh hanging around your neck or in in your bags. Uh a lot of that was sitting in our apartment for quite some time and my family really put up with all that stuff. And this year, actually, even my 5-year-old uh was helping to bag all that swag in the rush bag. So, uh much thanks to my family, but also, you know, my my partners are crime here. VSSs, um, Pierce and Pierce W, Aaron, OG,

Dave Ashley and all the other folks. Uh, Brad, Brad's not here today, but yes, thank you all so much for making this possible. Their names are all up here. I'm not going to read all them out, but uh without them and their help throughout uh the year, uh this conference would not be possible uh or I would look very very tired. which I already do according to some. So, uh thank you all so much for for making this happen. I hope everybody all here I'm sure everybody here all appreciates all the work that you do. Yeah. >> And that is it folks. The next stop is the bar. I will see many of you there.

Thank you so much. [applause]