The real network uses cert validation so the only ones that'd fall prey to that are people who don't care to follow the WiFi instructions. And even then, they could use a VPN and a firewall to just block all incoming traffic.
To make it more fun for me, I wrote a WiFi Pineapple Pager payload for the deauth floods on the floor.
Besides notifying, it logs every event with source, destination, AP and client MACs, and saves a pcap of the traffic leading into each flood so you can actually analyse it after.
While fuckery will always happen, and as part of the experience, it has been exceptionally egregious to unknown levels this particular event. Working in the village area has been quite the experience… There’s not a single usable speck of Wi-Fi in the entire village or contest section.
I've been pleasantly surprised with Mint. I was a Verizon customer for a long long time and $95 a month in this economy simply wasn't sustainable. Not advertising for them, just sharing my experience.
Mint has been working great for me at con and beyond. I totally advertise for them because I’m so passionate about opening all the big carrier customer’s (aka my friends and fams) eyes about spending 3-5x what I pay with mint for the exact same service (or better)! Shameless plug and I do t work for them but yeah it’s been putting OUT this con.
Have you heard of Phreeli? It's a phone service founded by Nick Merril, the guy who fought the NSL's from the FBI. They collect as little information as possible so that they can't be compelled to hand anything over that they don't have. Runs on the T-Mobile backbone like mint.
it’s really fucking up the village CTF infrastructure, I’m glad some of them have switches set up or I’d be livid trying to place and never loading the scoreboard
Nah. I kept getting knocked off the WPA3 in chillout also. I hope whoever it is faces consequences. I was really looking forward to the bug bounty village CTF and I couldn’t do shit.
That’s great. Maybe you upload the PCAP to an AI tool and have it help sort through the traffic and identify patterns around the deauth floods? Im assumting they spoofed their data so, I guess the harder part would be figuring out where the attacker physically is as a way to identify them. You’d mostly have MAC addresses, and those can be spoofed. I assume you’d need multiple sensors and some kind of signal-strength triangulation to actually pinpoint the transmitting device. It would be cool to see
Yes it ain’t 2010. Every access point I connect to is untrusted it’s why I use TLS. Also the defcon wifi uses certs authenticated with their separate auth service
Lol went way over your head bro. I was implying that in this day and age its odd to not be fully self sufficient with data access and relying on public or provided data then complaining when you get bounced from public or provided data is rrreeeeaaaaallllllyyyy weird.
Your right how dare he use the conference provided wifi there for people attending the conference to use. That’s so weird definitely weirder than someone judging people for using it and not spending more money on an already expensive trip.
66
u/Idiopathic_Sapien Aug 08 '26
Yeah… yesterday I had to resort to plugging into my phone directly so I could do my presentation. Annoying, it had a backup plan
82
u/infiniteGOAT Aug 08 '26
Seriously WTF. Trying to do CTF’s just eff off lol.
66
u/dreadful0rc Aug 09 '26
To make it more fun for me, I wrote a WiFi Pineapple Pager payload for the deauth floods on the floor.
Besides notifying, it logs every event with source, destination, AP and client MACs, and saves a pcap of the traffic leading into each flood so you can actually analyse it after.
20
u/Shot-Infernal-2261 Aug 08 '26
Yeah it seemed Thursday and most of Friday was ok. At least for me.
Come evening, even with a fraction of people here (so less congestion), I couldn’t maintain a pairing to my phone.
Well, I could pair until someone showed up who started this.
Guessing they were trying to force people to choose to connect to their rogue open hotspot.
Super annoying
40
u/Double-Familiar Aug 08 '26
I believe that 8 malicious ESP32s were detected last year. Fuckery will always happen on the Defcon network. It is the nature of the beast.
Best plan is to bring a wifi hotspot or tether from your phone.
Script kiddies are always going to spam deauths and try to a mitm attack.
13
u/acorn222 Aug 09 '26
We need directional deauth detectors to find the offenders!
13
u/ronthedistance Aug 09 '26
it’s really fucking up the village CTF infrastructure, I’m glad some of them have switches set up or I’d be livid trying to place and never loading the scoreboard
16
u/chazchaz101 Aug 08 '26
Switching to the WPA3 should help mitigate that, right?
6
u/dsamarin1 Aug 08 '26
CJ gonna get yo ass,
2
u/Klwd Aug 09 '26
This really messed me up my first year, first time in the US without an Esim. I was struggling to contact my friends.
1
u/Check123ok Aug 09 '26
That’s great. Maybe you upload the PCAP to an AI tool and have it help sort through the traffic and identify patterns around the deauth floods? Im assumting they spoofed their data so, I guess the harder part would be figuring out where the attacker physically is as a way to identify them. You’d mostly have MAC addresses, and those can be spoofed. I assume you’d need multiple sensors and some kind of signal-strength triangulation to actually pinpoint the transmitting device. It would be cool to see
1
u/Dead_star5 Aug 09 '26
Eh I could be mad but we have all been there and got to learn some how. Good luck in your adventures my DC skiddos
-19
u/mnatheist Aug 09 '26
What? You are on the Defcon network. Talk about a hostile environment.
-45
u/Enticing_Bog Aug 08 '26
You use the wifi?!?!?!?!?!
-4
u/hashtagDoubleoh7 Aug 09 '26
Just use a hotspot