defcon 2012

Pwned or paranoid? Phone weirdness at Defcon

Every year at Defcon there are rumors of some network being hacked. It would be unusual if such tales didn't crop up at the world's largest hacker conference. But this year there were reports from a number of credible sources of strange behavior on phones -- reports that had people more paranoid than normal.

Here's what people said they were seeing last weekend, along with some possible explanations for the scenarios:

• Voice mail messages that led to unknown numbers instead of to the standard phone number that points to the user's automated voice message recovery system.… Read more

Hexcopter robot takes to the Defcon skies

LAS VEGAS--Parallax is the company that makes the hackable Defcon badges, but it's even better known for another hackable product: its ELEV-8 robotic quadcopter, soon to be expandable to six rotors.

The hexcopter kit adds more lifting power to the ELEV-8, doubling the payload thanks to an extra battery along with the extra rotors. It can now hold most cameras, for remote robotic airborne surveillance. Parallax representatives said that it also makes the ELEV-8 more stable in flight.

Parallax says that the kit is likely to be available around the end of August, and will run you another $200. … Read more

Defcon vending room showcases tech of all ages

LAS VEGAS -- While ninjas inhaled much of the available oxygen in the vendors room, with its truck-based Ninja Tel mobile network, other vendors offered a more esoteric menu of hackables at Defcon this year.

Vendors at the hackers conference came in all sizes. Some signed up hackers to donate their skills to impoverished communities. Others appealed to sartorially minded hackers, with unofficial Defcon 20 T-shirts and other wearables.

In this gallery, CNET showcases three vendors who were offering something interesting or unexpected: Hak5's Darren Kitchen and his penetration-testing tools; Meco proprietor Ira Moser and his collection of antiquated … Read more

Cell phone battery catches fire, burns hacker's tail at Defcon

LAS VEGAS -- A cell phone battery spontaneously caught fire today, burned through a Defcon attendee's back pants pocket, and fell on the floor, creating burn spots on a carpet and leaving a burn-hole in the attendee's chair.

The man, who asked not to be identified, was not harmed but his trousers were ruined. He told CNET that he was sitting in a mid-day session at Defcon when he started to smell something burning and felt some heat underneath him on his seat. He stood up to find that his back left pocket was on fire.

"I … Read more

Hackers build private 'Ninja Tel' phone network at Defcon

Hackers who spent their teen years phone-phreaking -- breaking into telephone networks and making free calls -- have created their own GSM network at Defcon and are using creative and silly apps on highly customized Android phones.

The Ninja hacker group is giving the phones away to people who have contributed to the community, and to their lucky friends. The phones and accompanying lanyards serve as "badges" that provide entrance to the annual Ninja party tonight. (Defcon attendees can also get in by donating blood or signing up to donate bone marrow, or donating money to the Electronic … Read more

Laws on Wi-Fi sniffing still up in the air, say specialists

LAS VEGAS -- Got a Wi-Fi network? If someone, say Google or the government, sniffs your open network, you may think you're legally protected. Don't be so sure.

It remains unclear whether the law protects your unencrypted Wi-Fi from interception, because there are differing interpretations and lack of court precedent, Kevin Bankston, senior counsel at the Center for Democracy and Technology, said in a session at Defcon yesterday.

The federal wiretap statute prohibits sniffing of contents of communications by a device unless the contents are readily accessible to the general public. If the network is password-protected you're … Read more

NSA director finally greets Defcon hackers

LAS VEGAS -- Over the past two decades, hackers at Defcon and the feds have been circling each other suspiciously. The nation's top "spook" -- National Security Agency Director Gen. Keith Alexander -- giving a keynote at the hacker confab, shows just how much tensions have mellowed.

"I've spent 20 years trying to get someone from the NSA" to speak at Defcon, said Defcon founder Jeff Moss, who serves on the U.S. Homeland Security Advisory Council and is chief security officer for ICANN. "It's eye-opening to see the world from their … Read more

Hacker delves into secret world of warranties

LAS VEGAS -- A young hacker here at Defcon 20 has pulled back the dense curtain of text and ambiguity surrounding warranties to show consumers how they can hack the warranty system -- and to tell companies how to improve their warranty management.

"Darkred," as he prefers to be called, explained to a standing-room only session that it's the way manufacturers manage serial numbers and warranties that allows the system to be hacked.

"The serial number makes you the owner of a product," said the 17-year-old, a high school senior from Texas. Darkred declined to … Read more

Facebook aims 'bug bounty' at in-house network

Facebook is to widen its "bug bounty" program to reward researchers who spot holes in its corporate network.

According to a Bloomberg report today, the move will be announced at the Defcon hacking conference in Las Vegas.

Facebook already pays a bug bounty to outside hackers who report weaknesses in its products, but the move extends the program to its own infrastructure, too.

Rewarding "white hat" companies and individuals who unearth vulnerabilities in Web services and report them, rather than exploit them, is "not a new concept. The reasoning is thus: entice individuals with cash … Read more

How to stay safe at Black Hat and DefCon

LAS VEGAS -- From journalists hacking the press room Ethernet to RFID skimmers swiping your ID without even touching your credit card, the war stories you've heard about Black Hat and DefCon are true more often than not.

The best way to avoid getting hacked at the annual security conferences is to not show up. Go somewhere disconnected, like a nice mountain retreat, instead of hitting the paranoia pills with several thousand other security professionals and obsessives in Vegas' urban playground.

But if you must go to Sin City, there are some actions you can take to protect your … Read more