Live data from Hacker News

When Security Compromises Security – The Caesars/Defcon debacle

defiant.com

41–50 of 133 posts

Re: When Security Compromises Security – The Caesars/Defcon debacle

#41
post #39

Earlier quoted context omitted.

Strange theory, why not just charge people retroactively for the damage and then repair it? Is that not how hotels usually work?

The last time I went to Defcon, someone drove the security golf cart into the pool. Others were flushing bags of concrete down the toilet. There's damage, and then there is Defcon.

Why the hell do people act like that at the conference? That sounds like children running amok, not a security conference.

Re: When Security Compromises Security – The Caesars/Defcon debacle

#42
post #34

Earlier quoted context omitted.

Sadly, it's around Christmas an I have a definitive veto from wife and kids.

The good news: you can watch practically all sessions on youtube: https://youtube.com/user/mediacccde/playlists

While this is nice if you are just interested in some of the talks it's not really a substitute for being there, meeting people and taking in the atmosphere (for me at least. There's a lot of things you don't see in the streams, like the venue, the tents and all the small cool things in the assembly area.

Re: When Security Compromises Security – The Caesars/Defcon debacle

#43
post #39

Earlier quoted context omitted.

The last time I went to Defcon, someone drove the security golf cart into the pool. Others were flushing bags of concrete down the toilet. There's damage, and then there is Defcon.

Why the hell do people act like that at the conference? That sounds like children running amok, not a security conference.

The age requirement for Defcon is 18. There is also a large cross section of counter culture and drug culture. There were many parties happening. I recall smoking salvia out of a hooka, which later tipped and burned the bed sheets. A random guy came in to the party with a 50 gallon trash bag full of dried salvia.

Re: When Security Compromises Security – The Caesars/Defcon debacle

#44
post #32

Earlier quoted context omitted.

Warrantless search only applies if it was the police going in there; if it's hotel security, and if the terms and conditions of said hotel indicate hotel security can enter your room at any given time, then you'll have nothing.

Unless you‘re in Europe (or at least Germany) where Hotel staff is only allowed to enter on your invitation, no matter what the ToS say.

It's in America and recently also China

Re: When Security Compromises Security – The Caesars/Defcon debacle

#45
post #22

On the other hand Black Hat Asia is freaking awesome and pretty much the best BH I've been to and I keep hearing about CCC being way better thsn Defcon. There are options outside the US! Also if you're into crypto you should go to the summerschool in Croatia or the workshops at Eurocrypt!

Do you have a link to the summer school? That sounds super interesting.

Seems like he's referring to this: https://summerschool-croatia.cs.ru.nl/2019/

Re: When Security Compromises Security – The Caesars/Defcon debacle

#46
post #34

Earlier quoted context omitted.

Sadly, it's around Christmas an I have a definitive veto from wife and kids.

The good news: you can watch practically all sessions on youtube: https://youtube.com/user/mediacccde/playlists

Do people go to cons for talks?

Re: When Security Compromises Security – The Caesars/Defcon debacle

#47
post #39

Earlier quoted context omitted.

The last time I went to Defcon, someone drove the security golf cart into the pool. Others were flushing bags of concrete down the toilet. There's damage, and then there is Defcon.

Why the hell do people act like that at the conference? That sounds like children running amok, not a security conference.

Because it's defcon, not blackhat. Defcon is the Saturday before graduation at a frat house. Blackhat is a the 4th of July at a country club.

Re: When Security Compromises Security – The Caesars/Defcon debacle

#48
We've[1] had a few back and forths with people who were there. It's hard to say what the impact will be on DEFCON but the thing that was clear to us was that it's safety that's important.

To that end I've written to our venue and we'll be putting out a statement regarding exactly under what circumstances the hotel may enter your room, and what to do if you don't want to consent.

This isn't an easy thing for events in the US to deal with, and while we're based in the UK we get a lot of US citizens attending. The rules are different here, hence the decision to find out the rules and put them up so everyone's clear. In that respect, I think Marc Rogers was right to make a comment as it's clear a ball was dropped somewhere, and it came under his bailiwick. I don't believe for a second that he should resign, especially when I'm certain he'll double down on making sure things are better next time.

I was utterly horrified with Katie Moussouris' situation and absolutely will not stand for something like that happening in London. There'll be something up on the blog and mailing list once we hear back from the ILEC.

[1] - https://44con.com/

Re: When Security Compromises Security – The Caesars/Defcon debacle

#49

I am not part of the DEFCON community, but every year I hear about warrantless searches, equipment seized art the border and hacker arrests. I wonder why anyone, not least security researchers, would take the risk of going there. Just so as you guys know, we have conference facilities in Europe...

people go because its a community. they face the risks because this community and the work they do is important.

Re: When Security Compromises Security – The Caesars/Defcon debacle

#50
post #8

Surely this is at the very least a breah of privacy, and possibly a warrantless search? A hotel room, while occupied by a paying customer, should be treated as private property.

Warrantless search only applies if it was the police going in there; if it's hotel security, and if the terms and conditions of said hotel indicate hotel security can enter your room at any given time, then you'll have nothing.

> Warrantless search only applies if it was the police going in there; if it's hotel security, and if the terms and conditions of said hotel indicate hotel security can enter your room at any given time, then you'll have nothing.

I doubt those terms are legal enforceable if they exist. Even apartment building owners in the US can't enter arbitrarily, especially if you're not present.

Post reply on HN