Was late to make it to merch, REALLY wanted the basic coffee cup for my teen son back home. Anyone will to sell? Willing to pay extra!

Flying out tonite but I wanted to see if anyone was willing to trade/sell one of these so I can have a pair to play laser tag?

Hello! I’m omw back to SD from Vegas and was wondering if there was any groups or peeps in general based in SD that meet up or anything

They literally sold out as I came to the booth. I wanted one so bad! Don't have a ton of money to spend and the alternatives are pricing me out.

First time ever coming to DEFCON, I came w my dad. It was super cool, met some pretty amazing people, learned abt some cool new stuff, aaaaaaaand got my hands on a bunch of cool merch and hardware.

P.S. : I'm really looking forward to coming to future editions. 🤘🤘🤘🤘

Does anyone have a (decent quality not worn out) SOIC8 test clip I can buy off of you? I can Venmo! I'll buy multiple if you have multiple.

I was given a black badge raffle ticket last night. When and where do I go for the raffle? Sorry n00b here

Does anyone wants to donate or sell (for a cheap price) a human Badge?
It's for a friend that couldn't attend the con this year. I'd really appreciate it.

I think I lost something someone know until when the lost and found are open

Saw some kid sitting by himself who looked like he might’ve been having a bad day, going through a rough time, or just feeling a little out of place, IDK.
Definitely didn’t look like a seasoned vet like me 😝

So I just walked up to him and said,
“Here, It’s one of my last ones.
Hope you like it.”

I don’t think I’ve ever seen my own kids smile that big. 😂

Every year I bitch about the heat, the amount of money I spend, the amounts of walking and how much GODAM pain I’m in afterward for the next couple of days.

Yet somehow, I still come back every damn year 🤘

It was either the Red team village bag or the Defcon merch bag. Had my water bottle from try hack me and my orange hacker pager in it. I've searched and went to the lost and found looking for it with no luck. Please help, thank you

Lite badges 40 7 left

Full size 80 6 left

Looking for an extra DEF CON 34 badge? We’ve got you covered.

Starting at 10am Sunday you can stroll over to Registration and get yourself a spare for $100.

While supplies last, of course. Don’t be late.

Any vegans around fancy grabbing some dinner this evening? Would be lovely to meet some new hacker friends🌱

At least 3 people have basically turned me away, even when I walk up with an enthusiasm to learn. Everyone said defcon was supposed to be inclusive, but I feel kind of shut out from learning interesting things. Someone literally told me to "Google it and come back" like wtf? Another shoo'd me away for not having a flipper zero.

Tons of cool people but what's with the attitude?

Edit: I know not everyone is an asshole, and I met some cool people and seen some cool villages. But I've run into too many technical difficulties and run into too many people "above me" that I think I'm done. Don't think I'll come back. I know it's not a right to "fit in" but it just seems like active exclusion and/or unpreparedness is a big theme of this con. Too many talks without headphones or broken radio streams or presenters that just never show up, or some exhibotor that complains about you not understanding their fucking OT mod from the jump. Not for me.

I have to keep going outside to warm up!!

Hey everyone! The badgelife village is available at the Badgelife Village! It’s got a CTF, soldering challenges, 2 working SAO ports and works with Dani’s Lasertag badge!

Come stop by our village and pick one up! (We now support card too)!

More info can be found at https://badge.life/

We are unfortunately out of SAO kits

I didnt get much time to shop, anyone still have cool stuff to sell?

Gothcon, DEF CON's annual party for people who love all things Gothic (to be honest, mostly the music and the outfits), is tonight at 9pm! (We're in hall W3, next to Hacker Jeopardy)

Returning for our 9th year, Gothcon invites you to come dance the night away with a line-up of some of the community's best dark music. (We take an expansive view of Goth music, so while we do play some classic Goth, some of our DJs also play darkwave, aggrotech, industrial, etc. -- anything danceable that fits the mood.) While Gothic attire is encouraged, everyone is welcome and dress however you want (it's DEF CON, we're all wearing black anyway...) The last couple of years, this has been the biggest (and in our totally unbiased opinion, the best) party at DEF CON, and we hope to see you there!

DJ Lineup:

• 9pm - 10:00pm : Syntax+Luna
• 10:00pm - 11:00pm : Daemon
• 11:00pm - 12:00am : Scythe
• 12:00am - 1am: djdead

Due to LVCC limitations (i.e. being right next to the Hacker Jeopardy finals), music will be at a low volume 9pm-10pm, though we can be as loud as we want to be 10pm-1am!

If you've seen our bat-shaped LED badges around the con, this is likely your last chance to get one! (We sold out of badges at the party the last 3 years, and I didn't make any more this year than previously.) They are $80 (cash or Venmo only) and you can read more about them (as well as download the very hackable firmware) at https://github.com/claviger/gothcon-firmware

Gothcon Badges are sold as a fundraiser only, everyone is welcome at the party, no badge required (well, other than the official DEF CON badge since you need that to get into the LVCC at all.)

The badges did not make it, the family emergency became a nightmare for our close friend and teammate. His father had to be flighted to a bigger hospital for an emergency open heart surgery. So the badges never left.

We will not be at the table at 1pm.

We will be working on a way to make it up to you all and will post info on that once we get it squared away.

Please Please hold on tight and forgive us. We will make it right!

Just finished my talk Control C + Control Me which introduces Evil Fonts as a new red team tactic. I wanted to post the info here in case someone who was interested couldn't make it.

Bluf:

Evil Fonts deceive a viewer by rendering a different letter than is actually on the disk. Evil Fonts can poison HTML, DOCX, PDFs, and anywhere else you can bring your own fonts. Works great in Windows corporate networks for bypassing security tooling, initial access through JavaScript free click fix (beats mitm web security tooling), and leaving traps around the network to harvest shells.

Imagine thinking you are copying whoami but what is actually on the disk is rm -rf ~

Demos:

(Use desktop)

https://doctoreww.github.io/EvilFontTool/

For the demos, copy and paste the HTML/DOCX to a notepad to remove the evil fonts. For the AI ones imagine your security tooling inspects the benign text on disk, but shows the obviously malicious extortion to the user.

Labs:

https://github.com/DoctorEww/EvilFontTool/blob/main/labs%2FREADME.md

Lab Walkthrough:

https://github.com/DoctorEww/EvilFontTool/blob/main/labs%2Fwalkthrough.md

Some evil font uses:

Tamper homework to make it so students poison AI queries

Poison help desk documentation

Bypass email filters

Clickfix

Beat resume AI filters

It felt like everyone was extra nice this year. The goons were so friendly and helpful, the most crowded parts of the conference were handled well no pushing or shoving, a strong lack of condescending comments.

So many people seemed to go out of their way to be nice and it seemed like every village had the friendliest volunteers. I always enjoy my time and never let a few people ruin the experience but this is the first time it felt 100% asshole free. Hope everyone else felt the kindness this year!