BSIDES Bozo Security LIVE!!! - 21 de out. de 2012

Stay there, stay there, stay there.

Microphone. trolling this guy here.

You know

okay folks, first of all, thank you, right? With the people who are crazy about these Brazilian women, right? I imagine I did that in my serious lecture, right? But as an artist, you can broadcast live, it might be easier to process. No, then no. So it's better not to, because they'll want to talk more here if it's pre-broadcast. I've heard trolls here thinking, okay? So it's better not to pass it on, not to pass it on, not to pass it on, not to transmit it, that will give freedom to speak

more now, it's here for...

Well folks, whoever knows the blog of... If you start, you are good, whoever is here knows. Who knows B? It's broadcasting.

Okay, folks, so actually, today I'm going to talk a little bit about Bo's blog . We have our award, which is an initial project that promises a bright future. And the idea is also to create two more games that will populate the blog, it will make the blog popular, so there will be quite a lot of things there. Everyone's on the CISB list, except for me. No, only for me to understand this joke of mine will be cool. Ah, lawyer. Hold on a minute, taking a picture, okay? No lawyer here. The goal is to arrest him, not to help him understand? yet. Okay, folks, switched off. First, we have our famous " this is a troll" aimed at our

multimedia presenter friend. I'm not done yet, it started today.

microphone talking talking okay no it's good sing the song listening sing there there there there there next time I'll prepare to do a good one Okay. It's OK. It's OK. Okay. So now I'm going to get serious. So what was my motivation? First of all, there are many specialists at the club, in all the areas that this generally covers, folks, I'm not expressing this to anyone. There's a parallel comedy. So, it's true , it's not happening alone; there are people teaching a lot of wrong things, there are people writing a lot of wrong things, so , no, this is serious, it's happening in the market, a lot of information is being passed on incorrectly, people learn it

wrong, people pass it on incorrectly, it's a cycle of one thing after another. So, one of the ideas here regarding motivation is to try to put an end to this a little bit. There's a serious side to the story. That's what we want to do, in a funny way, but with a serious tone. Because there are many things wrong. There are many things wrong. Everyone writes things wrong. I've written things incorrectly before too. I also say things that are wrong. I get trolled too. I'm going to get trolled on VoG. Lack of patience. So, here I am, enduring, enduring, enduring. I'm not going to create that [ __ ]. So I went there and thought it would be

good to try and get some camera footage. Yes. Then we'll say: "There's nothing to be done. I suddenly have time, but it 's my time, I do what I want. And the big thing is the set, chaão. Fal. So that's the idea. Those are the motivations. Why isn't B security ? So, we're not going to direct this at anyone specific. So, there are many people who talk to me, if I could, I'd be trolling some specific people without having... So that's not the idea. The idea isn't to say, 'Wow, this loses credibility,' focusing on someone like that, the point is to focus on the security community in general, not just one person. So, logically, I don't

want to burn anyone. So, most of the blogs, I'll leave the word ' calling,' you just have to take the word and put it in the group and you'll get a keychain. But I'm not going to give away my two, you know? I'll just leave the keyword there so I can search beforehand, so the person there will direct you to the correct thing to access. So, it's not about power or... So, whoever wants to be... The author, whoever wants to participate, has any ideas, it's totally open, like I have Leo here, Leonardo Boaz de Pasquali, right? My Portuguese teacher here, who keeps correcting me, saying I write really well. And I write that way, right? The way I

think, right? There are commas, you have to do it specifically, it's the Z. Go back, go back there. Okay, someone get Leo out of here, please. So, what are we going to have today? We're going to have our famous Ward. I think everyone's expecting it, right? And the voting was really cool, guys. There were quite a few nominees. I believe I was nominated, guys. Damn, but the voting is mine. Which I also want. We're going to have Bolson. It's a joke I thought of, you know, in my free time, it's that actually, for those who don't know me very well, I do trima, right? When I'm cycling, I think about dying. And since I cycled

a lot, a lot of nonsense. So I also I wanted to, I wanted to do this, I'm going to throw ideas out there on the blog and then we can improve a lot, this will be really cool, it's the Buso Cispink Games, which is based on the Snor Drinking Games. Does anyone know the Snoring Games? No, only two. Look, people know, I wonder why right? So, first the Bom. What is Bom Mé? The math is simple, 1 plus 1 ig, but then I started thinking, how are we going to create a function to calculate a person's certification ? So I said, well, there will be certification, then with my math, I don't know , this is just an example, right?

There aren't even certifications yet, this scoring needs to improve a lot. So, like X plus del CO + L ig X, right? Then, with my mathematical knowledge, I started studying a lot, I attended a calculus course for a few years to get to this point. And then I created the bosom, which is nothing more than each certification having its own score. So, if you have LPI, you'll have Add one on Discord. If you have RHC, it will add two. If you have MCSO 7 security plus 3 certification. This is a big game, so I want to work with everyone to create a good score. The certifications from Sim are already adding up, so you have more

business. So, in other words, solving my problem, plus MCSO plus LPI, the guy has a good level of 16.

[Music] He's leaving the room because there's more because here I hide here without a good point. So what does Bev? Or level, who will tell the market? Why will he tell the market? That's what will be cool. In the blog posts, when I indirectly put it or someone else puts it, we will put the level of the guy being trolled.

And then after a while we will have the statistics and then we will be able to have a number, what is a good level and what is a bad level. So, I'm just specifying in mathematics. So , we will grow, right? We will work to That's it, right, guys? And then we'll have the statistics, and then at the next BR 2013 we'll have something very Saturday-like, that's what I actually forgot to mention, right? I got, right? Ah, he sent his palette and it was approved. I said: "Ah, cool, whatever." I go to the agenda on the website. There, B security, B security panel. That's it, because I didn't send this presentation, they sent it and then. And then I was

thinking, I didn't have any more ideas, but it wasn't going to be super, but it's still buggy. I made a script and I'm going to do a demonstration here that I'll compare the result. I got here by isolating Carlos Brando, he has few

[Laughs] him. But I found someone who had more. I said: "No, you'll have to follow." Then I took a place from Jorge,

but logically, guys, it doesn't mean, hey, I'm just teasing him, I'm joking. It means that certification is good, I said it will be according to the law. So

Okay, so first, this was my first serious topic with you all. Everyone's going to trade this, right? Then I'll take you to it. So it's still in beta, guys. So it 's not installed, you know? Be careful using it because otherwise you might get very confused. This is a joke I'd thought of several times, I'd also thought of this whole thing of always reading things . So, that's why I asked who participates in CISPR, because those who participate in CISPR will understand the joke very clearly. So what is the joke? It's based on the Snor and the Drinkam Games. So, there's an "A" - drink a drink. The question has already been answered, the documentation is answered. If someone answers, "read

the [ __ ], man." So, everything that happens on the list constantly, they took it and created levels, right, of dreams, right? So, if it's a really stupid question, you'll have three answers. So, in short, that's the joke. The whole game is on Joel Joel's website. I just put this here so you could get an overview. So, you understand what it is? So, this is a joke. Then I transformed it, right? Nothing everything here. Then, for a drink, someone might troll, but that someone is n't L. It means you can, otherwise it will be too much because I take too many people, I don't want expert defense, if someone is spamming, if they talk about

cloud is from here, it will grow a lot, right? That's it, we start to get an idea, we can improve a lot. Ask what the best security applications are. If Leonardo asks which of the

three best drinks to

deviate, he will know what we are talking about.

If someone asks about the next date of the exam , surely there are more than 30. So these are some of the three. If you ask which books to use most in the exam and if you also ask, right? Can I use the old version? And this one here is the best of all, four dramas. And this will happen with some frequency. If you received a

message every year, every year you listed a few dozen

months. No, we're going to improve that . Then I'll send an idea. Well, there are important things. The drinks are cumulative. So, if you have multiple of those things within the same email, you have to drink. If you notice that you drank something of your own making, you'll have to pay the penalty.

How do you play? Only open your inbox half an hour after it arrives. There are no tips, oh. So, if you're not used to drinking, start with drinks that are less alcoholic than the important ones I want to see from everyone. Drink in moderation. Don't open the list during work. If you get cirrhosis, I'm not responsible for this. So, guys, this can be improved a lot. There are many ideas, as some have already mentioned, and it's kind of like this: someone is telling you on Facebook, sends it to the C. list several times, right? It also sometimes appears on LinkedIn. So, there's a lot of cool stuff , I put some things I remembered, but you can work a lot on

this drinking game and make a cool game, with the camera recording. Well, and now I think the part most people are waiting for, the vote on whether to leave or not. No. The door, the door, close the door there. Now, now the jig is up. Turn off the camera. Turn off the camera. I want to make it, I want to make it very clear. I'm just a messenger of the people's voice. Because

the categories we had this year, right? In 2003. I want to discuss more categories here at the end. The boss, the blog boss, the top of mind boss, the hacker boss, the speaker boss, and the certified profession boss. Conference, okay? But we'll discuss, we'll discuss more. So the results of the

blogging, you and the talent. You can put it like that, folks. Okay, now I'm going to talk. Did you get scared? Did you get scared?

And then everyone there, the father, is with the father, is with the father, everyone. Now let's talk seriously.

Let's talk now. So, first vote of the blog. So, as it was voted, I put it here. So the nominees are... I

already know who won, man. Now it's difficult. It's

going to fall, it's not funny. It's going to fall.

That's it. I don't even know who. Yes.

And it goes by

favorite school. [Music]

of terrible.

The PW audit. How many votes? How many votes? Sorry, I didn't stop the bot right away, next

time we don't vote. We had 80 photos in total, it just wasn't 80 photos overall. Well, second category of the toar. First nominee, Sandro Rodrigo R. Already module Luiz Vieira.

It tied. It tied. Hey guys, I put everything that was put here. Rodrigo, man, I'm so... you know... There has to be

one more there too, look . No, take it out, take it out. Ramos, there aren't any more. These were just the nominees. It's after the audit goal,

please.

I think the technical space. It's the same as these. Go, go.

Luiz Vieira. I already knew, I already

knew. Put that back, please. Yes, I 'm the one who voted. Where are the bots? The bot is anonymous. Bot. The bot voted. Nominated by the hacker Rodrigo Montor, all right? Sergio Dias Luieira Joaquim

Rodrigo here, right?

Gustavo Lima.

Relança wanted to win nominated speaker

Wagner Sandro me again.

Carol Anderson Ramos Cruzeira [Applause]

died, man. I already

[Applause]

Nelson auditor, please. Nelson Briso.

You Speech, speech, speech. There

will be a couple of grat will be listed.

And the last of all the nominated professional Sergio Dias, Marcelo Moura, Rodrigo Moura, oh, you told your first test that you did

for which it wasn't even me the dog, right? I'm dating here. I didn't want to date. Dinos.

And I wanted to make a complaint because the speaker has water just because there isn't . Ah, I give that to you Anderson Ramos Nelson. It's guys, guys, some pearl names appear like that, right? But like, it didn't change [Music]

much. Run, he runs. Go drink water. Go drink water. [Music] No, go away.

Alexandreira,

[Applause]

Marbante. Please.

I want to thank everyone who voted for me. It took a lot to get to where I am . I wasn't born in the favela, but I worked hard, you know? I got to where I am. My dream has always been to be among professionals like Nelson Brito.

[Applause]

Well, folks, with that, we... and so, you know, as we are security professionals, we

need ideas. And if anyone already has a suggestion, would you like to

share it? A minority counted, so having more than 80 people legally would give us a much faster rotation.

Anyone? And thank you. You have questions, right? The only two people I saw put media on the slide were you and Nelson Brito. Right. No, you're welcome. I wanted to know who created the video of the Satan's gazelle, you two.

Who knows,

folks, thank you. Sorry for some trolling, but it will continue to happen. And the idea, folks, is to do something cool that's funny, 18+ too. For trolling, the person has to have... Trolling is part of it, like, accept the trolling, learn from it, and next time try to be trolled. It's the rule, it's life, right, folks? Nobody hasn't been trolled here. Trolling is professional growth, people.

But whoever wants to talk to me, maybe, but I have my Twitter here. And thank you. And let's go spend money now at the auction over there. And there's the bar too. Thank you, folks. [Music]

pick up the papers and go correct them live. Yeah, that's enough.