I Got Handcuffed at DEF CON
45sThe immediate action of getting handcuffed and zip-tied at a hacker conference creates a shocking and intriguing hook.
▶ Play ClipAI Summary
The video documents the creator's first visit to DEF CON, the world's largest hacking conference, revealing a welcoming community that defies its intimidating reputation. It explores various 'villages' where attendees learn practical skills like lock picking, car hacking, and physical security, emphasizing the conference's educational and community-driven spirit.
Chapters
1
Introduction and First Impressions
00:00
2
Filming Restrictions and Wall of Sheep
01:33
3
Community and Wireshark Village
02:41
4
Lock Picking and Physical Security
03:39
5
Sponsor Segment: TwinGate
04:32
6
Physical Security and Car Hacking
06:06
7
Social Engineering and Community
10:04
8
Other Villages and Closing
12:58
[00:00]
First Impressions of DEF CON
The creator describes DEF CON as 'crazy' and 'way more than a conference,' noting the initial intimidation and the advice to turn off wifi and avoid using credit cards due to the presence of 30,000 hackers.
[01:33]
Filming Restrictions and Goons
Attendees are told they cannot film anything, enforced by volunteers in red shirts called 'goons.' Despite this, the creator got special permission to film because many goons watched his channel.
[02:01]
Wall of Sheep
The 'Wall of Sheep' displays usernames, passwords, and credentials of attendees who connected to DEF CON wifi without proper security, highlighting the importance of using VPNs and secure connections.
[02:41]
Welcoming Community
Despite the reputation for 'pwnies' (newbies), the community is incredibly friendly and welcoming. The leader of the lock picking village, Riverside, immediately hugged the creator, showing the supportive nature of the community.
[03:09]
Wireshark Village
The creator met Gerald Combs, the original author of Wireshark, and learned about network analysis. The village had a DJ and low lights, creating a relaxed learning environment.
[03:39]
Lock Picking Village
The creator learned to pick his first lock with the help of 'Moose,' and also learned how to escape from zip ties and handcuffs. He became addicted and bought two lock picking kits.
[04:32]
Sponsor Segment: TwinGate
TwinGate is a zero-trust remote access tool that the creator uses for his home lab. It's free for up to five users and provides secure access without exposing ports.
[06:06]
Physical Security Village
This village teaches how to break into doors using various methods, including using a clothes hanger or cloning key cards with Flipper Zero. The goal is to educate people on vulnerabilities so they can fix them.
[07:28]
Car Hacking Village
The creator explores the car hacking village, learning about the CAN Bus vulnerability. Modern cars have hundreds of computers, and the CAN Bus broadcasts messages to all systems, making them vulnerable to attacks.
[09:19]
Buying a CAN Bus Flipper
The creator purchased a CAN bus flipper device, which can be used to hack into his own car. He jokes about making a car hacking video in the future.
[10:04]
Social Engineering Village
The social engineering village teaches the most dangerous skill at DEF CON: manipulating people over the phone. Competitions were held to see who could hack companies better via phone calls.
[10:34]
Community is the Core
The creator emphasizes that community is the biggest takeaway from DEF CON. He met fans and other creators, and even a CISO who attends to hire people, highlighting networking opportunities.
[12:58]
Other Villages and Parties
There are many other villages like Bug Bounty, Scam Baiting, and AI. The creator also attended the Red Teaming party and rode the Tesla Loop, noting that DEF CON never closes with events around the clock.
[13:28]
Prayer for Audience
The creator ends with a prayer for his audience, asking for joy, satisfaction, and community, and encouraging them to attend hacking events and network.
DEF CON is a welcoming and educational event that goes beyond its intimidating reputation, offering hands-on learning and a strong sense of community. It's a place where networking can lead to career opportunities and where attendees can learn valuable skills in a supportive environment.
Mentioned in this Video
Study Flashcards (7)
What is the 'Wall of Sheep' at DEF CON?
easy
Click to reveal answer
What is the 'Wall of Sheep' at DEF CON?
easy
Click to reveal answer
A wall displaying usernames, passwords, and credentials of attendees who connected to DEF CON wifi without proper security.
02:01
Who is the original author of Wireshark?
easy
Click to reveal answer
Who is the original author of Wireshark?
easy
Click to reveal answer
Gerald Combs.
03:09
What is the CAN Bus vulnerability?
medium
Click to reveal answer
What is the CAN Bus vulnerability?
medium
Click to reveal answer
The CAN Bus is a broadcast network, so messages sent by one computer go to all systems, allowing an attacker to see and send messages to all computers if connected.
08:19
What is TwinGate and how is it different from a VPN?
medium
Click to reveal answer
What is TwinGate and how is it different from a VPN?
medium
Click to reveal answer
TwinGate is a zero-trust remote access tool that provides secure access without exposing ports, unlike a traditional VPN.
04:48
What is the purpose of the Physical Security Village?
medium
Click to reveal answer
What is the purpose of the Physical Security Village?
medium
Click to reveal answer
To teach people how to break into doors and clone key cards so they can recognize vulnerabilities and fix them.
06:59
What is the most dangerous skill taught at DEF CON according to the creator?
medium
Click to reveal answer
What is the most dangerous skill taught at DEF CON according to the creator?
medium
Click to reveal answer
Social engineering, specifically manipulating people over the phone to hack companies.
10:04
What is the biggest takeaway from DEF CON according to the creator?
easy
Click to reveal answer
What is the biggest takeaway from DEF CON according to the creator?
easy
Click to reveal answer
Community and networking, which can lead to career opportunities.
10:34
💡 Key Takeaways
💡
Unexpected Warmth
Contradicts the intimidating reputation of DEF CON, showing the community is welcoming and supportive.
02:41
📊
CAN Bus Vulnerability
Explains a critical security flaw in modern cars that is not widely known.
08:19
⚖️
Community as Core
Emphasizes that networking and community are the real value of DEF CON, not just the skills.
10:34
💡
CISO Hiring at DEF CON
Shows that DEF CON is a place where career opportunities arise through networking.
12:28Full Transcript
[00:00] Who would want to go to that? Me. This is Defcon, This place is crazy. I got handcuffed, zip tied,
[00:12] This is way more than a conference. I went to a conference a week before that. So my goal in this video is to take you on a journey through the villages of
[00:24] but we somehow got a chance to get your coffee ready. Let's go now. which is why I've never gone, I'm not kidding.
[00:36] turn off your wifi, never turn it on ever. credit card because that happens. I mean, it kind of makes sense. 30,000 hackers in one place. So me and my team, we got ready,
[00:51] Brandon, Even on the plane, I guess there could have been hackers on the plane. it wasn't that scary. The hackers,
[01:04] nefarious stuff online. Most of them are actually pretty cool. Like sure, they do have seasoned hackers there.
[01:16] People have been hacking for millennia and they have hacked into the NSA I want to learn and they're welcome. I saw kids walking around like, for real, My editors when they saw this place were like, oh my gosh.
[01:33] Now here's one thing I was not expecting. I was told before arriving that I could not film anything and they enforce that. They're wearing red shirts and they are intimidating.
[01:45] They've got respect and they don't mess around. but it turns out many of the goons watched my channel and they were super I don't think many people have got a chance to film.
[02:01] And this is the village that gives Death Con as reputation for being scary. you're going to see a big wall called the wall of sheep. And on this wall you'll see usernames, passwords, secrets, credentials.
[02:16] If you connect to the Defcon wifi and you're not using good security, There's a room full of people who are hacking your packets and who are learning I'm looking at the wall of sheep going, is my stuff up there?
[02:29] But what's funny is that a place known for pony noobs, these people were probably the nicest people I've ever met in my entire life.
[02:41] The leader, Riverside, legendary Goon immediately gave me a hug. you're just wanting to learn and you're humble, They're amazing. And I was so surprised by that.
[02:55] but I wasn't expecting them to be that warm and open while also teaching you this place is where it's at. I mean, they got a DJ there, lights are low, they're learning how to hack with Wireshark.
[03:09] go follow Chris Greer. He's that wire shark guy. Actually, I'm Gerald Combs, I'm the original author, but by no means am I the only author of the Wireshark Network Protocol Analyzer.
[03:23] We had a taco night and I got to meet Jack Recit and hang out with him also Kit attack. And this is just the first village. It gets crazier. Like at the next one, I got handcuffed and Ziptied, let's go.
[03:39] They have a whole village for lock picking. What? Yes, this is moose. And he showed me how to pick my first lock. I was terrible at it, which was kind of weird, but then he showed me how to break out. Watch this.
[03:52] It's actually not that hard. Alright, I just had Brandon zip tie me. All you have to do is, well this, I hope this works. Kind of nervous, actually. Oh, that hurts so bad.
[04:06] But I got out ow. And then he handcuffed me and tell me how to get out of that. What if you were handcuffed? Could you get out?
[04:18] You can just walk up to a village and learn how to pick a lock, take a seat. Look at all these people learning how to break into your house. I mean, I got totally addicted to lock picking and I bought two lock picking kits.
[04:32] you should totally get some and learn how to do it. Link below. literally surrounded by thousands of hackers, I'm talking my home lab, my business lab,
[04:48] twin Gate is the sponsor of this video and what I use to remotely access all my stuff wherever I go. It's not VPN, it's different. It's better. It's zero trust. but Mike can only access the video editing servers and that's it.
[05:05] he would download some free Ram onto my main system and it'd be dead. I use Twin Gate every day. I would talk about them even if I wasn't being paid. but seriously, it's free for up to five users. So you as a Home lab user,
[05:22] that works but not great. It's frustrating. It's so stinking easy and what you can do with it is so powerful.
[05:34] I don't understand why they're giving it to us for free. Don't question it. if you're exposing any ports in your house because you're trying to watch Plex They'll keep that secure firewall barrier for you.
[05:49] trying to watch a video. So please, for my sake, Link below twin gate.com/network. Chuck, You still didn't protect me from moose, but that's okay. I forgive you.
[06:06] Back to the video. Oh, They teach you things that I kind of felt weird about people learning like the Physical security village.
[06:19] people can break into this because they're teaching people how to do it here. This village has ruined locked doors for me. Seriously. When you walk up there,
[06:31] they're teaching people how to break into doors and not just one method, multiple methods. You can put a close hanger under the door and pull the handle. They're showing people how to use flipper zeros to clone key cards and fobs to
[06:46] so I tried it on my own pool gate and it works. They showed me how to skim a credit card and not just me. People were lined up doing this. How is that? Okay? And I asked them that.
[06:59] Once you've seen how to do them, you're also able to recognize where they can be done and then go in and correct which they are vulnerabilities already exist,
[07:14] The point of the physical security village is going, Hey, That's pretty cool. What's also pretty cool is knowing how to break into doors. which not many people get to do.
[07:28] Me and my team seriously have the best time. But I'm telling you, the car hacking village. Yes, we're hacking cars. Not just breaking into them,
[07:40] Village. so we started to add electronics to them to make them more efficient, I also met this guy who had a bunch of badges on and I don't know what he was
[07:53] He even had one that helped you hack a car. Speaking of the car hacking village, They give you the basics of first showing you what it feels like to break into your car is pretty stink and vulnerable.
[08:07] I don't know who thought it was a great idea to put a bunch of smart features On the average. It's hundreds of computers doing their own specialized things.
[08:19] here's the glaring problem with the CAN Bus. The CAN Bus is a broadcast network. It means when one computer on that network sends a message, that message goes out to every single system on that network. That's bad.
[08:34] But why? Well, if I were to connect myself to that network, I can then see every single message from every computer on that network. Not just that I could send messages to every computer on that network.
[08:46] this really wasn't an issue until we decided to add 4G and wifi and Bluetooth connect to our cars and hack them. that means that part of the computing system is able to influence the steering,
[09:03] And here at the Car Hacking Village, they show you how to do it. They took all the components of a Ford F-150 and they had it in a nice travel do all kinds of stuff. He's fuzzing it.
[09:19] Oh my gosh. It's like you click on a pop-up, oh, The flag in this case is the opposite between the unlock signal counter and
[09:32] which it's not a gift shop. It's like a place where you can buy from vendors. And I bought this. It's a can bus flipper. Are you kidding me?
[09:47] So now I can hack my own car. By the way, should I make a car hacking video? And this is just one of the many gadgets I spent money on at Defcon. Disney World. If you like tech at all, you're going to have a good time there.
[10:04] I wasn't allowed to film at the Social engineering village. And they were teaching people the most dangerous skill at defcon, They had competitions to see who could hack companies better over the phone live
[10:20] on stage. Again, I couldn't film it. Here's like a little sneak peek I just want to see you there next year. Let's go. Now,
[10:34] you said in the beginning that Con is awesome and safe and welcome, I don't want my kids to know how to break into a house. Yeah, But the biggest thing I love about Def Con, and you probably saw this coming,
[10:51] you can feel it right here it comes. It's community. And I have to apologize. So I advertised at DEF Con that me and John Hammond, this is John Hammond, right here, right here, right here. We were going to do a talk at DEF Con.
[11:03] Something happened, but then something even better happened. I get to meet you and hear your stories that that is why Defcon is really
[11:17] amazing. Defcon Hi Chuck. It's awesome learning all these hacking skills and if you want to learn some stuff, that's the place to go. But community. That's why Defcon exists.
[11:32] Meeting so many of my fans and hearing your stories, that was awesome. chat, thank you. That meant the world to me. And also I got to meet a ton of cool people that I watch online that I am like,
[11:47] Zero Day Rezo, Ryan Rader, Daniel Meer, Jason Haddock, tuck ass watch, cyber, but I got to to meet all these people in real life and that's huge.
[11:59] This happened. I was writing in the Tesla loop, which is so cool, by the way, you can ride a Tesla underground through a loop. But one night as I was leaving, DEFCON Defcon, by the way, during the event, does not close.
[12:14] They're always having parties there after hours, always something to do. This is what people do, I'm sure in the Tesla with this guy. And we start talking and he turns out he's a ciso, a big boss at a company.
[12:28] I come to Def Con because I need to hire people. I'm looking for people to hire for my company. Are you hearing that? if you want to have an amazing career and get a job, this is where it starts.
[12:44] This is the secret path. This is the shortcut. Networking community. Embrace it. That was just a small number I was able to have time for. There was the Bug Bounty village, the scam baiting village, the AI village,
[12:58] I had to go to the red teaming party and that was awesome. That's my pastor Johnny wearing them. This outfit totally helped us out. I just can't tell you, or I forgot to get the full experience,
[13:13] I will see you there next year. See you there. And that's all I got in this video. you stay till the end of the video and here at the end,
[13:28] I like to pray for my audience for you. I'm a believer, that's why you can click off the video. But if you'll hang with me for a second, It's weird. I know. Let's do it anyway. Death con is weird,
[13:46] so this flows right into it. All right, here we go. God, I thank you for the person, the people watching this video, I pray over their life that they would be filled with joy and be filled
[14:02] That wherever they're at right now and their jobs and their life as they're striving and working hard, that they would just feel satisfied right now.
[14:14] And it's okay for them to want to strive to advance their career and have the goal of making money and more money and providing for their family. But also let them just be satisfied in you right now
[14:32] Let them enjoy their family right now and enjoy their friends and enjoy what I also pray over their careers that they would be able to embrace community,
[14:45] that they would be able to afford to go to con or any kind of hacking event, any of the BSides events, and that they would put anything that makes 'em afraid to go put that aside
[15:02] and just have relationships to meet people, and that through this networking, they will not only find friends, I pray for their families that their families would be blessed and God,
[15:15] I pray ultimately over them that they would know you. They would someday know you. Jesus. I thank you for my audience. I thank you for all of them. The ones that've met, the ones that haven't yet.
[15:29] I'm so thankful for them and I pray over their lives right now. It's in Jesus' name I pray. Amen. Thanks guys. I'll catch you Allall next time.
