BSides Iowa 2018: Opening Remarks

alright alright we appreciate everyone's patience were we're ready to get started so my name is Greg Hetrick last year we formed a 501 C 3 and myself and John COBOL and Chad Smith we were running around here you know form the board and we kind of helped run it and then I've got a bunch other organizers that helped out this year and all the whole point goes in a minute so first off welcome for those who are here last year you know ran out of coffee like 13 seconds it was it was quick like I ordered they're like how about 6 gallons of Kaka Mike that's a ton of coffee I'm thing like a big like got cooler full of

comics comic that so this year they're gonna come keep checking it for us the other question I got a lot of us why did we charge this year and you know we ordered t-shirts and this year we want to do electronic badges and so all that kind of cost a little bit of money so we decided this year what we'll do is we'll discharge a little bit for for those who can can do it students were still free and then we had a kind of a free-will donation thing so that's why we did this year kind of give a little skinny game help you know help support some of the cost that we had so hopefully hopefully

nobody was offended we actually did have 228 register we've had several pay at the door so our numbers went up I don't suspect we'll change that next year at all I think it worked out pretty well a little bit about our history so I've talked about this last year so Ken Johnson ran 'besides for several years and then Gruber mistook it over in 2017 so that's kind of what our numbers have looked like I want to point out this year so last year we had just enough talks to fill our schedule this year we had 30 it was amazing we had some really really good talks there was a group of about seven of us who went through the CFP

knows how we did it we stripped out all the names on the bio information just looked at talk titles and abstracts and then we just voted on and the ones that are presented today there's 18 of them were the ones that we all voted you know in the top 18 so there's some fantastic talks there was some really really good talks that we had to turn down and we feel really bad about that next year depending upon attendance we may open up a third track but I think we might try and keep it about this size just so that we can keep keep everything rolling so one of the things that was asked is your 501c3 and money was Wes can we just

kind of give some financial transparency I was like sure no problem so at the end of last year we finished with about three thousand dollars in the bank this year is the next line there so we had about three thousand dollars an in-kind donations so we got stuff from hack five we got stuff from no starts brass we have an attorney that works with us that kind of helps the the corporate side of things when we need help and those were all you know in-kind donations that we accepted we got about nine thousand dollars in cash from our sponsors who Pratt ins outside they're the only sponsor that that had a booth this year so make sure you stop out and

talk to those guys and then we had about twenty six hundred dollars in the donations ticket sales if you sign up for a ticket if you weren't a student it was $15 where you'll take it over we had another ticket that was just like a free-will donation to over twenty dollars and so we end up about $2,600 that way it was which was awesome and then our expenses so far for this year t-shirts caucus just over two thousand dollars badges were twenty something like that assembled and everything and oh I forgot to add batteries batteries or like 60 bucks rated by 300 the venue charge us 895 dollars which is really nice the signage that we have put up was

310 we ordered more stickers we had a speaker dinner last night the meals are provided so just a quick note on that everybody still got a lunch voucher if you did not get a lunch counter don't worry we still got your lunch for you just check with the registration desk and just let him know you didn't get one and when you go through the line just tell them you don't have one and we'll give them a count at the end and everybody good afterparty so there is an after-party I'll talk about it in a minute we'll spend some money there and then we just got some miscellaneous other expenses as of last night we have about $3,200 in

the bank so we should be in pretty good shape to get something rolling for next year so badges this is great Bryce great whatever [Music] Thanks so you might ask let's make something educational many of the larger cons have a hackable badge of a year with some sort of embedded controller on it generally it's got LEDs maybe a few peripherals maybe there's even things like CTF contests as part of it but we wanted something that was educational where people could learn the code they could potentially there's a little header on here you could start soldering on peripherals so it's a potential to learn the solder potential if you're new to digital electronics there's potential here to kind of explore that as well

it's also customizable so there's a default set of code on your badge right now you are welcome to open up a code editor today I programmers in the back that you can use you're welcome to program your own LED pattern that's probably the simplest thing you can do to the badges to make it your own the final criteria that I kind of set up for was well this is going to be a little risky for us right to mean we're gonna have these badges made it's a it's a big investment for us this Greg just show the finances it was so what did we end up with well your badge has an 18 tiny controller AVR is the instruction set

architecture you're probably more familiar with the more popular term Arduino the 18 25 is a one of the most simplistic Arduinos you can see right here it's gonna be bit processor about 8 kilobytes of in memory flash right now the code maybe uses about K of that so there's plenty of options to add more 512 types of SRAM and it's got lots of lots of building peripherals like temperature science they're a 2d controller spyboss and it's very low-power your chips run in sleep mode today it draws maybe I'm the order of like tens of micro amps and it runs off a three volt battery if you leave this badge running it should last a little over a week on its present

watch battery it has a programmable header you can pick up an AVR programmer for like 15 20 bucks you can build your own so it's it's fully programmable as well designer manufacturer you can find if you look down the back your badge there's everything so cymatics the PCB layout the code all available online you can take a look at that and and start to muck with it there's a readme file there that I think is helpful hardware if you wanted to play with the circuits in the future it's also very easy to use you can use that on Linux windows I don't know if it runs on Mac software Arduino IDE is probably what I would suggest if

you're using Windows Linux AVR is your friend to compile this code AVR dude is what you would use to actually program the badge seed is a great if you're familiar with like spark fun or Adafruit right seed is a similar outfit they a few years ago set up a Chinese computer-aided manufacturing team today they specialize in small maker projects through actual manufacturing of the badge because I wasn't about to solder 200 badges words of caution with the badge its surface mounted parts so I wouldn't like peel at the battery or pick up the chips it's not working just hit the reset button that should reset it in the event that it's still not working do what most computer people do

pull the battery and and reboot it if it's still not working bring it to me III will I have some material on the back today we can we can debug it together to reduce power it's pretty easy to read the microcontroller does go to sleep though to to reduce power if you want it to if you start looking at Arduino resources the easiest thing to do here is to start all run over three i/o ports using a technique called Charlie flexing you can look it up on Wikipedia there's a nice description of how that works with pulse width modulation it's relatively easy to read you can not you can pretty easily modify the code to do new LED light patterns

you could also have different actions

used to push push new code to your badge you have problems that I'm set up in the back today I have a few soldering irons as well if you'd like to Satur a header on to your board for future use the other thing I'll note here is that you don't have to solder a header onto your board I have headless Pogo programmers as well so you'll technically need the pins any questions about the badge awesome thank you alright so last year we did a CTF we were asked to come back and do it again this year we had a great time doing last year so we definitely wanted to help out so besides Iowa tech DSN org is the URL

that you want to go to to get signed up our room is located in the back it's a pretty chill room we got music playing come hang out learn some things and if you've never played a CTF this is a great one to do it we've actually had Zach bring some additional computers so even if you didn't bring a computer but you still kind of want to get some experience fine Zach Zacks in the back there Thank You Zach find him and and he can help you get started for attending today just to kind of give you guys a flag there's a flag that is what you will need to submit to the scoreboard to

score points so the people that didn't show up to opening ceremony that are still playing the CTF or think they're playing the CTF they won't get that flag so I thought that's kind of fun so we this year we had a lot of people help out with the challenges I think the count is 59 challenges which is a lot we had seven people involved with bringing up seven SEC DSM members with either submitting challenges managing the infrastructure and just kind of getting going so I'll talk a lot more about that and closing ceremonies about who those people were what they did all that but yeah come check it out it should be a really fun time thanks

so when I mentioned the in-kind donations ESM's actually sponsored besides Iowa because all the work that you honor on the CTF which is just fantastic and I keep hearing about how much time they've been putting in so it's great especially thanks these organizers really helped out John helped out with t-shirts Greg of course did the badges Antoinette did the volunteers and just helped out around and Brandon helped us find the venue and the after party vendor so thanks for those guys and there was more that helped but and then again special thanks to our sponsors without them we couldn't we couldn't put this on so we really appreciate them so you know and you know talk to the guys

that are outside and I know there's a serve I t's floating around and the pro circular guys are floating around and I seen the SecureWorks one of them to talk today so just say thank you and a spend principle as well housekeeping so the restrooms were just straight down the hall here lounges we can use all these lounges there's one upstairs that we can use as well so feel free to hang out can they get to the CTF from the lounges to in the room okay recording so one big question all the talk to be recorded as you can see we'll have a b-sides iowa youtube channel they'll all be posted up there evans awesome about

it we appreciate him coming up and helping us out wednesday sometimes even before he leaves town so he's really quick we do have some free stuff to give away some books and there'll be some CTF prizes so if you compete CTF there's a chance for prizes Wi-Fi if you really dare to get on it there's the GV events and the go to GB uq4 is the password twitter handle so there's some confusion right we actually have two twitter handles so when i first took it over we didn't have access to the app besides iowa all spelled out twitter handle so we created at besides IA but over last year i was able to get twitter to give

me access to the other one so in a week we have it now so if you can all move over a besides Iowa that's where we'll get it because I've been trying to track to and tweeting people are tweeting us on that one so we're gonna move everything over to b-sides I because it just makes more sense I think and the last thing is just you know we're here to have fun learn a lot we're here to network so you know be nice damnit lunch we want to give a special shout-out to Principal Financial when when we get a company like principal that comes in you know they don't sell a product they don't sell a service they're really just doing

it to help out the community and they they put up a fair bit of money to help put on the event and pay for lunches so we really want to thank them for their support both last year and this year after party so there will be an after-party at 5:05 brewing who's actually an impost that guy right there runs that runs five on five so we had one out there last year so if you're in town if or if you get snowed in baby okay come on down to wives and beers and then keep the partying on all year so you know we're big about community and here in Iowa we're blessed to have three

groups throughout the state that do this sort of thing on a monthly basis so we've talking about Sec TSM SEC IC is in Iowa City area and we are a chapter of SEC DSM I'm involved in that and we have a monthly meetup we get together have drinks pizza and then there's SEC Midwest those guys are in the back right over there they are up in Cedar Rapids at the True North building they need the second Tuesday right of every month so they have the same thing beer pizza learn hang out right so it's a good time so the point here is you don't have to just come here once a year find one of

these groups SEC tsm's the third Thursday of the month and SEC I seize the third Tuesday of the month so I find a sec I see org SEC TSM dot org and SEC Midwest done over the websites right all the informations out there oh yeah slacks everywhere slack to your heart's content the last thing I wanted to mention so I mentioned Ken used to run this there's a scholarship in his name for the sands digital forensics track so if you're a student this is for you so write it all down this is a fantastic thing that they do there's two sands DFR classes if you haven't looked they're like sixty two hundred dollars a piece

now that they provide to the scholarship winner they have entry to the dfi our summit every year and then you get coached by two fantastic individuals to kind of help boost your career and a chance for an internship there's the link up there you know that trainer Google since 10 Johnson scholarship it'll show up and the deadline is May 18th I think the only stipulation is you have to be a full-time student I remember it so anyway check that out because it's really fantastic thing they do for them so we are a little behind we'll welcome we won't compress talks or anything we'll probably try and make up some time at lunch we'll probably start right at

1:00 just depends where we finish think we'll be okay though and then I gave a half hour for the closing ceremonies it doesn't take that long so we'll compress their but we'll just keep things rolling from here on out so stay tuned track ones in here track 2 is right next door CT up room is down the hall and about five minutes we'll get started with the top