[Music]
thank you so much for coming there was
so much work that went into this event
and I'm glad you guys had a good time
there was a ton of contests and largely
that is what the closing ceremonies are
going to be about we're going to go over
a bunch of the competitions and contests
and challenges that we're here and we're
going to start with Eric with the Wi-Fi
King of the Hill work that you're doing
hey everybody so Wi-Fi King of the Hill
is coming back next year bring your
wireless adapters bring your Spotify
playlists because I want to see a battle
over them we had five DJs one DJ held it
for about four hours so nice job uh and
then we had a fox finder JJ I don't know
if JJ's here JJ way in the back he found
four foxes everybody give it up for
JJ awesome again next year guys
everybody bring your wireless adapters
King of the hills coming back thank you
all right and Trent Jonathan we got we
got some other we're gonna go over the
101 space hungry hungry hackers did
everybody go and see what was happening
at the end with hungry hungry hackers
was here we
go all right so uh I got to help run the
hungry hungry hackers game uh this year
and it was a lot of fun uh we did quals
on uh yesterday
um and so I think there's like over
1,500 people here at the conference uh
we had a fairly good amount of people
sign up but only five people actually
got on the board uh so I made them too
hard that's on me sorry about that um
but of those five today we ended up
doing some demos instead of the
head-to-head competition so people
showed up and did a walkthrough of how
they solve the challenges um so thanks
to everybody that did that I think we're
going to have the recording for those
and then we did one final round where we
had everybody go head-to-head and hack
live um so the winner of that was uh
Adam log ad him here awesome so he gets
a a digital badge from that we also the
other really cool thing is that we had
two college students two juniors in
college play so Audrey and Ryan are you
guys here somewhere awesome back here um
yeah big round of applause for them so
like it's pretty spectacular so this is
one of the few if only events that I
know that have a uh a live competition
they had to plug their laptops in in
front of an entire room full of people
so that they could watch them try to
solve the challenge real time live um
and they did a spectacular job um so
thank you for everybody for
participating um really appreciate the
show this year and I'm looking forward
to doing it again next
[Music]
[Applause]
year so we had a uh aicf in the far
corner of the bowels of cyphercon if you
came and found us um we had a couple of
puzzles basically they had to hack Ai
and figure out how it worked or
manipulate in some way some there was
like a simple bot that was uh basically
you just had to ask for the flag and
that's how it would tell you what it
needed to do but um a wonderful VIP who
was the same college student solved it
in three minutes and nobody else was
able to do that we actually thought the
puzzle was broken because she solved it
so fast in literally three queries um
but anyway few people came and tried it
couldn't even barely get on the board
which was fantastic but one of the
puzzles which um some people didn't even
get to play was you had to look
like Kentucky Bravo Delta
Jaguar is Bravo Delta
jagy everybody check your bingo
cards this happens this happen like
three times a day in the middle of
everything
um but uh so very very VIP that the fact
that she was able to solve this so I
want to give her like honors because
she's just awesome so great kudos to her
like really really badass um Mike come
on so come on up but I wanted while
you're walking up I want to tell you
what the last puzzle was basically you
had to look and fake out our Ai and look
like Elon Musk but you couldn't use your
phone because our AI would detect that
so throw that out there for you coming
great job Dan's next so thank you guys
for trying it out and be ready for next
year because we have Bots creating
bots all right so I was uh running the
ISP hacking Village um in ATT turn
events we actually had someone also win
a lifetime badge So Adam congratulations
on winning that uh we had a whole bunch
of people that were uh very interested
in looking at it next year please bring
your usbd ethernet adapters it's really
useful yeah um that's pretty much all I
got on my side yeah do you want to come
up and talk about these badges that he
just mentioned over
here yeah just won this one Adam the
same so he uh come up here get get up
here please come on
down first time right we've ever we had
this
happen Mike okay yeah he's going to come
talk to us he's gonna talk all right all
right tell us what you did this is the
first time we've had this happen yes
first time someone has won two uh two
challenges yeah Cypher con so with that
I'll hand it over to you awesome thanks
I actually was trying to also compete in
the iot hacking Village but I only got
third a
oh but um so for the ISP challenge it
was kind of really cool I've never
really had the opportunity to you know
have a playground like this without you
know the worry about going to jail or
anything like that
so um do I like am I allowed to
share sure sure okay did
so the initial flag was very very
difficult the
um I guess it
was it was stupid simple but it took me
like four hours to like was actually oh
six hours yeah took me six hours figure
that out but um once I figured out how
to actually like change the
configuration of it you know it's
actually hacking the cable modem and
then trying to swim up stream and you
know hack the next thing up there and
then hack the next thing up there and
pivot pivot pivot and um it was a very
awesome experience so thank you very
much Daniel all
[Applause]
right Ben you're coming up next so how
lifetime badges work if you get one
lifetime badge it's an annual or a
analog badge for the life of the
conference if you get two of them it's
PCB badges for the life of the
conference so it's our first time we had
a a two-time winner in one year we've
had one prior person win it over
multiple years yeah so we'll pass it to
the next person that's so much ben Ben's
gonna come up and talk to us about the
iot village you said he got third place
in that yeah what a slacker couldn't get
three couldn't do the hat trick what can
I say right go for my name is Ben
schurer I uh work for Independent
Security evaluators in Baltimore
Maryland We Run The iot Village uh we
bring it all around the country uh I did
a talk yesterday about Hollywood Video I
hope uh whoever attended enjoyed uh
thank
you um first I want to just thank
everybody who participated in some of
the things we had going on we had a uh
uh it was technically a nine device CTF
although the team that won discovered
that one of the challenges had updated
itself so it was no longer uh working uh
that was uh a a group of people called
Sig Pony a bunch of students they did a
great job they showed a lot of
commitment but they are not here they
had to go back to Illinois before uh the
torrential Storms Come Down um so anyway
uh thanks again if you participate in
any of this stuff the CTF the hacking
demo that my colleague TJ ran and uh
thanks again thanks
[Applause]
Joe and uh Joe's going to come up here
and talk to us about the Espionage
Village which was right on the end of
the hall here
so this year for the Espionage puzzle we
had uh 20 packets available and all 20
went out which was kind of cool uh we
did decide to limit it uh if you still
have one of my packets please bring it
back there's stuff in there I need um I
have your names uh but yeah so it was a
pretty cool puzzle I am probably the
lowest tech One here and uh so everyone
did really really well everyone had a
lot of fun we actually had six teams
finished the puzzle so that was really
really awesome and yeah I encourage you
guys to do it we're doing it again next
year um part of the puzzle was you know
just puzzle solving and then there was
like a piece of vintage Tech in their
hint hint um so bring your floppy disc
drives and your magnetic tape and
everything else that you can drag with
you for next year so we are going to
have a winner for this there were 21
eligible individuals and the way we are
going to pick this is um I'm just going
to have Mike pick a number between one
and
21 his the fate of these guys is in
Mike's hands so give it to us got a
cheer for your favorite number I hear a
six 11 11 11 11 is Anusha go they she is
part of um Team Sig Pony they're chasing
the weather so she really wanted this to
so I'm not going to we're not going to
tell her until they're home cuz if she's
driving she might drive right off the
road so thank you guys so much for
participating and please do it next year
yeah thank you
Dave all right and with the uh we have
an auction coming up so get ready for
bidding okay we got heels I was going to
say the wrong thing I don't want get
yelled that again here you go it was
only yesterday morning got wrong um
hello everyone yeah the pieces are
falling out already so hello again if
you were here during the opening we
talked about how we Faraday and I put
together this Cipher Cube hours and
hours of assembly and prototyping and uh
I asked Mike CU some people like really
digging this thing it was like really
cool so we asked like can we auction it
off for a charity and he's like yeah but
you know which charity like which one do
you know of and there's only one right
hack for
kids three of you
laugh so um no I'm kidding I know
there's lots of cherries but so what we
want to do is see if you guys would
because we we had this one concept of
like maybe building some and selling
them but we didn't want to kind of seem
that like blatantly obviously that we're
begging for money but now we're going to
be begging for money so open up your
wallets and your
hearts for the kids um you want to start
the bidding at 20 bucks
oh we will
take I love you man we will take
cash
zel maybe
venmo and hell no
Monero Bitcoin yes Bitcoin yes right now
is a good time to get some Bitcoin all
right so we got 20 $20 do I hear four
$400 do I hear 450 450 4 yeah you just
eliminated the rest of the room wait did
I hear
500 450 so right now we're at 400 400
450 anybody 450 come on you got some
Bitcoin that you mind you want to get
rid of 450
450 yeah that's a cool shiny black shiny
black you just totally like R did you
intentionally want to ruin my fun doing
this just tank it I love you man you
45050 I love you Saki Bomb 5
anyone 500 500 anyone anyone there's a
bright light in the back he's Counting
come on 500 right now we have 450 with
Saki Bomb 450 going once 450 going twice
last chance getman 500
500 all right you got 500 500 we hear
550 no 600 screw the $50 600 600 that's
a man right there no what the hell
violence in Cy foron Shannon dies Taylor
Swift
incarcerated decapitated by
taor so 600 now 600 did you just raise
that to a thousand I think monster is B
himself you see his face all right 600
700 do I hear
700 700 going once 700 going
twice sold $700 you are awesome love you
saki amazing woohoo all right the next
part is some of you wanted to know how
this works and I actually heard them
talking about it in the cyer village
saying oh they're going to explain how
this is going to work and I really did
not intend to do that
huh no where were you 10 minutes ago um
it doesn't really matter it doesn't
really matter so this is actually a
bunch of different series of puzzles on
the bottom I don't know if you can see
it it's got some holes there were some
keys in in there that were in some kind
of orientation that you had to figure
out how to undo oh nice I see myself on
the
camera no it's okay um once you figured
that out then you use the keys you put
them in little key holes there's
actually a floating little panel in
there it set it into the right place and
once you put the last key a little
secret slider comes out with a code and
then you have he actually can hold this
up and then here there's like some other
symbols there are seven uh dials it's
like kind of cryp teex you have to get
those lined up and there's Clues all
over in the actual order once you unlock
that these two wheels which actually
decode the cipher um come out and these
can spin You' write that down and then
there's this I and inside the ey there's
actually a little tiny Rosetta Stone
that you'd have to figure out how to
like tap it and look inside write that
down decode that flip it around and then
that gives you the information on how to
unlock this part so then this locking
pin comes out this door slides off this
lid comes off and then there was
something hidden inside like a little
scroll what should we start the bidding
at
800 let's do this again so that scroll
also had um some ores and the ores was
the full bit.ly link so if you're
familiar with ores you probably used
maybe just capitals only or lowercase so
since bitly uses mixed case there was a
little bit of a challenge and it was um
it was like
cc6 um no cc6 Village or whatever we
wrote so you had numbers and letters and
mixed case it was very confusing so if
you were good at getting past
this then you got slowed down with the
ores or vice versa you might have been
slow here and then quicker with the ores
we tried to create
balance and we had some people do a
pretty phenomenal job with it yeah can I
get into that now I think that's what
we're here for yeah right let's do it so
it was pretty cool um oh and the bitly
link takes you to a guest book and when
you signed the guest book that was your
end time so we recorded your start time
we saw your end time and then we did a
little simple math and figured out how
quickly you went so it didn't matter if
you started it yesterday or today you
could still be the fastest person so
we're GNA give out three
prizes that's something to mik I'm just
watching three prizes yeah um so the
first prize is going to be the person
who solved it first and by the way this
is the first time the cipher Village in
three years had somebody actually solve
our
puzzles good job to those five people
who solved
it out of 26 that actually tried we did
have to turn a lot of you away because
you don't follow instructions or you
didn't bother to decrypt the first or
decode the first puzzle and give us a
picture of solar art or solar Punk art a
lot of people kind of handrew stuff a
lot of you guys tried to do something
that was generated by Ai and we we
wouldn't accept that because you really
didn't create it you told something to
create it it's not your art invoke
create yeah so uh congratulations
to I'm GNA say your name wrong so I
apologize um Gina adragna Gina yeah yeah
there you go did I say it right adragna
all right you finished it in about 1
hour and two minutes which without the
ores is just about the meantime time to
finish this puzzle the way it was
designed so very good you were better
than the meantime because we threw in a
curveball good job your
prize I'm G to have to get your contact
information no this is not what you guys
think it is I'm going to ship one of
these to you that's going to be custom
and that says I solve the cipher con 6
Cipher Cube first so it'll be pretty
cool it's like little trophy at work or
or school or wherever you may be so
congrats
um
second
prize Julian you're while he was beating
himself up like oh I was really slow and
I got stuck on this he actually found
the right ores it was the font that told
you the upper the lower case and any
other characters that we had in there so
he did a really nice job with that
solving it in 42 minutes which gives me
chills which is congrats so you're going
to get a custom I solv the cipher Cube
second Place blah blah blah so I'll need
your contact information to ship one to
you too and you tell me which color you
want cuz we had different colors there
was black green red
yellow
last last person in first place last and
first last and first did it in 17
minutes literally my um I work at Cisco
if you didn't know and I had some Cisco
people helping me and one of them said
um when you're done with school you're
going to call us so you can get a
job it was very impressive that was
Audrey
Audrey congratulations wa now Audrey
that's phenomenal we heard your name
before and what kind of badge did Audrey
win with your contest
saki she got a lifetime from him and got
a lifetime from us at the cipher Village
so you not only won the two lifetimes
you're the second person to be announced
at one contest or one cyphercon that won
two lifetimes PCB life PCB badge for
life did
congrats yes that's how it goes so we're
going to ship you one that said I got
first place in the blah blah blah so
congratulations you like sweeping this
this conference great job oh please come
up now we're going to embarrass you you
got to come up
here we're GNA do it you're gonna go
over there yeah over here I don't know
Mike's right
there she's like an art major
yeah thank you also saw yeah I know that
was the before the during the opening
during the opening she saw the analog
badge so you got like an extreme badge
for that
right what would you can I introduce you
to my
son he might be a little young but but
yeah there's promise there yeah very
cool congratulations it's amazing very
you awesome
[Applause]
work all right I'm ready for the Midwest
Gaming Classic I don't know about you
it's coming up thank
you all right next we have Doug and Eva
M coming up to talk about safe cracking
did you guys see what happened with the
safe
cracking I will well they will here you
go
all right so I'm Doug Rogan I run the
lockpicking village and safe cracking
Village uh as many of you stopped by and
saw evil MOG uh went above and beyond to
make sure to do everything he possibly
could to crack the safe this year and he
succeeded and and as
punishment he now gets to be a safe
cracking Village volunteer yay Vol and
told everybody Vol and told he also won
a lifetime badge and if uh want to say
something about how you did it all right
so last year I got utterly defeated by
the toy makers and i' vowed for this
never to happen again so I said hell
with it and ordered so I've got a
locksmith license in Alberta so it lets
me buy some really restricted tools I
ordered close to $3,000 worth of safe
cracking equipment including a
specialized rotary encoder um a tool
called the safe manipulator and even
with that tool that graphs all the um
things out for for me trying to crack a
safe in a contest environment in a
conference is hard when people stop by
every 15 minutes going hey what are you
doing was this thing going like how's it
going my ADD was firing super hard so
this was absolutely brutal um the
annoying part was I wasted seven hours
yesterday going down the wrong wheel
pack as it indicated in the wrong order
normally goes three then two then one
two wouldn't indicate it was three than
one then two so the rabbit holes were so
bad that I swear to God I never want to
do this
again but you nailed it I did and now
I'm stuck doing it again for Life thanks
Mike you're welcome you want to talk
about your mud oh yeah there's no by the
way I also did the mud challenge no one
submitted an area that was good enough
for the mud so the mud is unchallenged
or
unclaimed
oh as well and then to well Mike's going
to come up after this but we're going to
talk about the badges a can you tell us
about how things went with the badge
yeah
so when you're doing a badge you're
always waiting for the next shoe to drop
truly and so far we have had four
hardware issues which we were all able
to fix yes two because they I don't know
stood up too fast and the knob kind of
tweaked some of the connections one CU
they got water in it we dried it it
worked and then the fourth one I think
like a battery spring fell off now if
you have not played with your badge yet
which is totally a possibility partly
because you don't know to turn it on
everybody find your hidden switch do you
know where that is the switch is on the
right hand side when you're looking down
down is
on
yes and on the screen uh the menu I
should have explained this during
opening maybe on the on the screen
you'll see r g y whatever it's red
yellow green green blue teal Violet and
that corresponds to the LED color at the
top so you navigate to the color and
then press enter click yeah press click
and then wait for the page to load and
wait for the page to load by then
experience yeah yeah now um so this is a
little unconventional I'm going to ask
Evil MOG to come up to talk about what
they did for last year's badge the
flamingos that you guys have probably
seen
um because they did some pretty funny
things and then we'll talk about what
this team this year's team did to win uh
The Red Badge all righty so last year's
badge was the flamingos and all the
magic with the IR so we first started
off with bribing carfu car to go figure
out how the rs232 worked for some of our
serial protocol pieces and from there I
was able to go start replicating we got
a couple good captures he was bored you
know we exchanged some beer things
happened and and so we were able to go
clone um or create credits I wound up
cheating my way through all the
interactions so that I could you know
have everyone's badge by changing the
unique badge IDs that was the easy part
the hard part was actually winning the
challenge no one figured out how there's
actually two methods that are officially
or there two methods to beat the
challenge only one of which is official
officially if you cracked the crypto you
would have been just fine it was an 80
bit spec Cipher the second way to do it
that we verified with the debug tools
after cyphercon is it required three
badges one Flamingo and two virgin
badges have never been touched what you
did was you peeled the chip off the
flamingo you found the code you used
that with the infinite credits hack it
would give you negative credits so you
start with zero credits you underflow to
65535 from there what you would do is
you do that to your two other virgin
badges because you I'm not going to
solder that chip back on after I've
desoldered it I'm not that good but wire
might be able to pull it off but I can't
so they put the badge the lifetime back
one so you pop it the first time you get
nothing them's the bricks stor so if you
had two badges that were working Cahoots
you do one you do the other they both
underflow negative negative
congratulations 1 through 37 you've got
yourself a lifetime badge no one got
close but we did jackpot the um ATM or
the vending machine and grab all the
badges out so if you didn't get any
badges on the vending machine last year
I am so sorry but I'm not really
just find his place get his $3,000
lockpicking thing and like get some okay
so for this year's badge uh the Sig Pony
which has won like I think two other
competitions they won again um they
found a way to make micro python
truncate a string with a null character
to break out of the browser
sandbox to give them full access to the
adventure version of dog teeth which was
the language that I used to write the
badge Adventure this allowed them to run
arbitrary ex executable code by going to
a random website on the
badge so uh let's see so on custom
websites currently only a few dog teeth
commands are allowed to run um but the
adventure version can run the entire
allowable complement of dog teeth
commands and that includes editing user
files uh at
will so that's who won that was that
that's a lot where are they are they
here well they're they're driving it
home to Chicago right Mike you want come
yeah that mean there's so much going on
inside the badge that you could have
done all day playing like I did and
never even touched the inside of the
thing so congratulations Mike let's
close up here you got your list
all
right so you may or may not know prior
to Cipher con Cipher con is actually a
three-day event one day is essentially
invite only last year was called secret
con this year it was called sock con so
if you've seen a bunch of weird sock
monkeys and stuff around that was this
invite only
event and how to get into this event
usually has to do with how much you
contribute back to the community so run
a village if you see a village that
doesn't exist start a village that kind
of thing right speak
Etc uh one individual at saton solved
puzzles that um it started off with an
easy hex code that said underneath the
scissors underneath the scissors on the
table in front of everybody to see was a
decoy so everybody kind of went down the
wrong path there was another scissors in
the the room underneath that was another
Cipher it said cut bananas on the table
there were bananas we were hoping people
would be cutting bananas but there were
also sock monkeys on every table with
Sock Monkey Names and one of them was
bananas you actually had to take the
scissors cut the sock monkey open and
inside was a pillow that says you win so
Ally please stand up and Ellie
won a lifetime
badge and that was all inside like an
hour and a half right yeah that was so
hour hour and a half to cut cut a poor
sock monkey open butchered
it just left it there on the table guts
up it's it's guts you're going to fix
sutures all
right uh Cipher Forest returned um
Cipher forest was much less than what
like 200 puzzles last year it was too
much people were like heads down all
conference we only did like 50ish
Puzzles this year um two people
completed it they worked as a
partnership but individual so they had a
better chance of randomly generating and
myth are you in the room all right come
on
up so Cipher Forest um this year it was
the Flying Saucer that sucks up the cow
you get to go up into the Flying Saucer
and you find out that the aliens have
been collecting Wisconsin Cows as pets
on their home planet
and there's all sorts of uh ciphers
along the way uh two individuals made
essentially 99% of these ciphers Joe
Jones stand up in
wave Joe Jones and Tony Jones created
essentially all the ciphers this year
and uh you want to say anything you want
to say hi yeah uh hi uh there was a
couple issues that we noticed um I know
right to the complaint um spoilers for
anyone who's trying to figure out the
unsolvable ones uh there's web assembly
files that you can download use a god
dot tool to
unextracted
Badge go over there and get recorded
thank you
congratulations your list is
gone I just put my phone away with all
my notes and I'm
back all right well um thank you for
coming to cyphercon I hope this from my
perspective it was one of the best years
of cyphercon and uh you may have noticed
I I was nice and relaxed except for that
one dude I just had to like yell at and
kick out that was cool um but don't
don't pick locks on the venue thank
you so if Cipher con's not enough for
you um um a lot of our volunteers are
from Minnesota and there's no hacker
conference in
Minnesota so we decided to take on
another conference in the fall November
2nd and 3rd it is secret con.com
tell everybody so it is a security meets
privacy conference so if you're from the
Minnesota area this is Minnesota's
conference and the vibe is completely
different than
cyphercon but lots of Secrets
um cyphercon 7 it is the theme is Casino
Heist the Afterparty is going to be a
casino where we encourage you to cheat
at the
games we will have Pit Bosses looking
out for cheating but the ramifications
aren't as Mobby as maybe some real
casinos um I actually for the first time
ever have the dates for the next Cipher
con yay we
know like we're getting too big I have
to sign contracts a long time ahead of
time uh April 4th and
5th and lastly that's like next week
D
2024 I am sleeping on April 4th at
5th okay lastly uh thanks everybody for
coming uh such an amazing Cypher con
thank you for all the volunteers
speakers sponsors
attendees the weather is getting really
bad out there my phone keeps alarming of
lightning and I heard of tornado watches
and stuff like that so please be safe
because I need you to come back and work
one of my Villages next year okay so I
officially close out cyphercon six thank
you very
[Applause]
much
the