Author: Frank Lee

Posted on

March meeting wrap-up, April meeting LOCATION CHANGE!

We had a fun March meeting in the Burg. Pre-game at Red Dragon again, it was open mic night, had to get out of the way of the drunk dart players, and the UFO food truck was in attendance. Then we headed over the library where we had another new member attend. We did the usual spiel, break out the locksets, let him play and learn a bit, talk about Defcon, show off all the badges, blah blah blah, and soon enough it was over.

For the April meeting, we’re going to do something different. We’re going to hold the meeting up in Stone Ridge, VA (near the Dulles Airport, off of Rt 50 between South Riding and Aldie). RSVPd members on the Meetup page will get the specific location.

We’re going to have a group workshop on Hackerboxes. Specifically, a couple of us are going to work on Hackerbox #0037 WaveRunner. If you don’t have it, you can order it now to be sure to have it in time for the meeting. Also a good time to check your soldering kit and supplies for completeness. Alternatively, you can bring another hackerbox. Even more alternatively, you can just play pool or Galaga and drink beer with us. Just show up and be part of this thing.

Posted on

BSidesNova, here I come!

At BSidesDC, I registered for “CTF for Noobs.”  I had done a couple of CTF exercises on my own and with my employer, but never in a competitive environment, so I thought that’d be a good test. And it was. I did very well, scored a lot of points for my group/table, but managed to find some weak spots.  

One of my weaknesses is in quickly pulling information out of Wireshark. So I left there with the intent on improving my Wireshark fu.  

Lo and behold, I look at the BSidesNova course listing, and there’s a session on Wireshark.  So bitches, I’m in.  Who’s in with me?

Posted on

And on to the next meetup!

Tonight was another fun evening for DC540.  Three of us pregamed at Red Dragon Brewery, then headed over to the library, where our three became five.  We played show and tell with the CrowPi and the TS80 solder iron, and shared our experiences with the Pontifex crypto scheme, designed by Bruce Schneier for Neal Stephenson’s excellent book Cryptonomicon.

We decided that even though there’s no meeting on the 4th Monday of December because the library is unavailable for Xmas eve, that we’re going to go ahead with a social meeting at the brewery on Tuesday, December 18.  

Interesting upcoming events: Shmoocon tickets – next round Friday.  BSides Philly February 1.  If anyone has extra Shmoocon barcodes and is looking for worthy buyers, look no further.

Posted on

Meeting #2 was a success!

Last night, Meeting of DC540 was held at the downtown library meeting room.  Four attendees (plus the host) had an interesting time talking about lots of hacker culture topics.

Emery handed out decks of cards and encouraged people to learn and apply the Solitaire cipher (Pontiflex) described in Neal Stephenson’s novel “Cryptonomicon.”  

Here’s a link that describes the usage of the cipher: https://www.schneier.com/academic/solitaire/

Sounds like there’s a consensus for pregaming at a local drinking establishment prior to next month’s meeting.  That will be announced prior to the meeting.

Posted on

Working with SMD parts? TWEEZERS are everything.

When I first started taking solder seriously, I used household tweezers when I needed.  That took about ten minutes before I realized they sucked.  So I bought a manicure set, hoping those tweezers would be better.  After one session, the two arms broke apart.

So I bought a generic set of “technical tweezers” from Amazon.  Then I was told by a good friend that you really need to look at “precision tip” tweezers, and he sent me a link to McMaster-Carr’s stainless steel tweezers page.  I ordered a set of Aven Technik tweezers ($33) for comparison.

On the left is the bite of the generic Amazon tweezers, which are clearly simply far lower quality tweezers designed and marketed to look like precision-tip tweezers.  Look how misaligned the bite is, and how little surface area is actually making contact at the bite, compared to the Aven Technik on the right.  When dealing with near-microscopic parts, the Aven will grip the part solidly, while the tweezer on the left is likely to twist it around and send it flying across the room like a clipped fingernail.

Posted on

Gift Card Security

Do you use gift cards?  Some people use them to anonymize their purchases, others because financial situations have forced them to.  Take a moment to think about securing them.

Stopped at Wawa on the way home last night, spotted a Vanilla gift card on top of the recycling bin.  Why the owner didn’t put it completely in the trash I don’t know, but because I’m dabbler in magstripe and RFID card security, I always pick up stray cards. 

So I took it home, and was able to log into its account, which had not been secured.  It painted a sad picture.

10/8 2:05PM – bought gift card $100
10/8 9:50PM – “Any Lab Test Now” $40 (going rate for a 5-panel drug test)
10/9 2:05AM – Target, $42.90
10/9 10:48AM – Chick-Fil-A $8.43
10/10 6:11PM – Wawa $8.27

So this person bought (or received) a gift card, paid for his or her drug test, bought something at Target, ate at Chick-Fil-A, then spent his or her last $8.27 on gas, zeroing the card out in two days, and then leaving it in plain sight.  

Posted on

The latest Humble Bundle

Can I assume you’ve all seen this already and bought in?  The Make: Electronics Humble Bundle?  For $20 you get over 20 ebooks on a wide range of topics for makers and electronics tinkerers.  

Also, anyone up for a happy hour Tues or Wed?  Hit me up on Twitter @dc540baab or email [email protected]

https://bit.ly/2Pcvdi3
Posted on

What evil have you brought upon us?

One of last month’s meeting attendees, bless his heart, and I will hereafter refer to him as HE WHO SHALL NOT BE NAMED, because I haven’t asked his permission… Gave these lovelies out at the meeting.  I finally got around to looking at it, and SAVAGE!  Good thing I got new tweezers.

Posted on

DCZIA badge interactions…

So one of the menu options on the DCZIA badge is a BLE scan.  I ran it with all my badges lit up, and it recognized TWO DC26 badges.  I suspect that one of those is the TransIonospheric badge, because that one reported seeing the DCZIA badge…

DCZIA badge closeup
Trans Ionospheric Badge closeup
Posted on

Shenzhen IO

What a badass little game.  Found it by accident on Steam.  You’re a hardware hacker/coder taking over for someone who left or got fired, and you have to figure out how to design circuits and write machine code to make them meet specs.  Fun and challenging, and well-designed.  Exactly what I needed right now.

Posted on

Tubular picking

No, this isn’t about radical bluegrass.  I acquired a set of tubular lockpicks some time ago, but never got around to trying them out.  After our first meeting, I was inspired, so I ordered a few locks to try them out on.  

I had NO IDEA how easy these things make it.  It’s amazing that these locks are marketed at all.  Flatten the tension bars.  Ease the pick in while gently twisting.  Eventually the pressure will balance out and the lock will open.  Ridonkulous.

Posted on

A Different Kind of Lock

Picked up a locked Zero Halliburton Centurion Elite briefcase at an auction. There were contents, so I was dead set on getting in. It was the three-dial combo type. Tried brute-forcing it, but no luck. I suspect I would have had to go from closed and latched to open with every iteration, and that wasn’t about to happen. So I seduced my way into the case by another means, and removed the lock mechanism.  Hell, this case is considered the Rolex of briefcases, so I’d like to know the combo and be able to use it.

 

Posted on

Meeting recap

First meeting, I’d call it a success despite my arriving a few minutes late. I want to thank everyone who showed up, both those I have met before and those I haven’t.  Hopefully next time will be in a drinking establishment. Stay tuned!