Category: Announcement

Win Amazing Things With Passport for Prizes!

June 1, 2015
Announcement

After last year was such a great success, we are brining back Passport For Prizes again this year!

Each attendee will receive a Passport at registration. If you want to play, then you must visit each sponsor table on the passport and obtain a signature, initials or stamp on your Passport–you must complete the entire Passport (yes, including contact information) in order to be eligible for the prize drawings, which will be held at the reception on Friday. You must be present at the reception to win.

What can you win?

  • Exclusive RV4sec speaker beer mugs (set of 2) provided by richSEC
  • Not just one, but two “Mystery Bags Of Shit” provided by richSEC (in honor of Jericho – this prize also comes with peer pressure to blog about the contents!).
  • $100 gift card provided by Sunera
  • Beats Headphones – Red – Solo HD Special Edition provided by Trend Micro
  • GoPro provided by SLAIT Consutling
  • Toucan Wireless Bluetooth Speaker provided by Rapid7
  • GoPro Hero 3 provided by Netskope
  • $100 Visa Card provided by CORE Security
  • $100 Amazon Gift Card provided by Pulse Secure
  • Visual Land Prestige Elite 9″ Tablet 8GB Quad Core & Keyboard Case provided by Capitol Technology University
  • Fitbit Charge HR™ Wireless Heart Rate + Activity Wristband provided by Bit9

RV4sec Registration Is Now Closed!

May 31, 2015
Announcement

We are pleased to announce that RV4sec 2015 registration is now closed and we look forward to a great event! In the coming days we will provide some additional information about the conference to everyone registered.

There is a bit more time left to register for the training classes but act fast!

See you soon!

Last Week To Register & Sell Out Risk High!

May 27, 2015
Announcement

There are only a few days left to get tickets for RVAsec, and remember we will not be selling tickets at the door!

And if that’s not enough incentive to purchase your tickets right this second, and you still want to attend you better think about pulling the trigger soon as we are reaching our capacity for this year!

We do have plenty of space left for training and suggest you take advantage of this great opportunity to attend classes locally in Richmond at affordable prices!

What to expect at RVAsec:

  • RVAsec bag stuffed with swag
  • Capture The Flag with live bug hunting!
  • RVAsec t-shirt with “Inside the Mind of the Hacker” logo designed by 14-year-old
  • Post-con reception with adult beverages (and more food) on Friday
  • After party sponsored by Rapid7, GuidePoint and nVisium!

RV4sec 2015: Ticket Transfers & Cancellations

May 26, 2015
AnnouncementTraining

Did you know you can transfer an RVAsec ticket to a co-worker or friend directly in Eventbrite?

Log in to your account and go to My Tickets (you may need to create an account using the email address you registered).

Then you can view your Current Orders (select RVAsec), and “Edit details” for the ticket. Changing the “Contact Information” will update the name of the person registered to check in at the conference. You can also change the questions asked at registration, which will help us plan for parking, catering and other items.

Also, please note that no refunds for training or the conference will be issued after May 26th.

Silver Sponsor Feature: Bit9+Carbon Black

May 26, 2015
AnnouncementConference

Bit9+Carbon Black

https://www.bit9.com/

@Bit9

 

bit9-plus-carbon-black-tagline.png (736×199)

Bit9 + Carbon Black provides the most complete solution against advanced threats that target organizations’ endpoints and servers, making it easier to see—and immediately stop—those threats. The company enables organizations to arm their endpoints by combining continuous, real-time visibility into what’s happening on every computer; real-time signature-less threat detection; incident response that combines a recorded history with live remediation; and prevention that is proactive and customizable.

Don’t have a ticket yet? Register now!

Hospitality Sponsor: Symantec

May 20, 2015
AnnouncementConference

 

We are pleased to welcome Symantec as a Hospitality Sponsor! All the food and drink served on Thursday will be sponsored by them, so be sure to stop by their table to say hi and thank them for feeding everyone!

 

Symantec_logo_horizontal.png (3706×977)

 

Hospitality Sponsor: Capital One

May 18, 2015
Announcement

 

We are pleased to welcome Capital One as a Hospitality Sponsor! All the food and drink served on Friday will be sponsored by them, so be sure to stop by their table and say hi and thank them for feeding everyone!

N78Jgl-f_400x400.jpeg (400×400)

RV4sec 2015 Badge Build

May 15, 2015
AnnouncementBadges

Paul Bruggeman from HackRVA provided us with an update on the badges!

Badge Design

Badge2015-1

 

The printed circuit board, or PCB, is the backbone of any circuit board. It supplies the physical strength and fundamental wiring for the board. It also determines the minimum size.

 

The circuit design artwork is Badge2015-2drawn, usually with special software but hobbyists sometimes just draw them by hand. The gEDA software suite has a component called “pcb” that was used to draw the badge.

 

Badge Etching

Badge2015-3

 

 

The PCB board is fiberglass-reinforced epoxy laminated with a thin copper sheet which is etched away using ferric chloride to recreate the artwork.

 

 

 

 

One goal of this year’s badge was to use a professional process to cover the Badge2015-4boards with the acid resist. Attempts last year worked but were not consistent.

 

 

 

 

Badge Cutting

Badge2015-5

 

 

Once the boards are etched they have to be cut down to final size. PCBs are tough material to cut.

 

 

 

The addition of a sheet metal cutter this year has made it much easier to do.Badge2015-6 The steel blade is 1/2″ thick and the whole thing weighs 60 lbs!

 

 

 

 

 

 

Badge Parts

Badge2015-7

 

With the boards cut down, the next process is to put the surface mount parts on. Most of the 50+ parts are surface mount. This means they have no wires to solder, because they have metals pads that melt and attach when heated to 510F degrees.

 

The process of installing the parts is called “pick and place.” Not very Badge2015-8complicated, but it can be tedious to do, especially 350 times!

 

 

 

 

 

 

Badge pick+place

Badge2015-9First a solder paste containing thousands of beads of tin is drawn across a stencil that leaves the sticky grey paste where the parts will be placed. This stencil is etched copper foil. Stencils can also be plastic or steel.

 

The board then makes its way down the volunteer assembly line where parts Badge2015-10are carefully placed on the solder paste. We have had the help of over a dozen HackRVA people so far this year.

 

 

Badge Cooking

Badge2015-11The solder paste has to be melted or “re-flowed” to electrically connect the parts to the PCB. This currently is not very hi-tech: $20 donated ovens.  A volunteer last year built a micro- controlled unit but the heating element died on it.

 

The manual ovens require attention. Failures are usually of the distracted Badge2015-12human type. We had a board last year survive a 5-hour session underneath the oven, and it worked fine–though it looked like burnt toast!

 

 

Badge Wrap-up

Badge2015-13

 

The last things to go on are the hand- soldered parts: infrared transmitter and receiver, piezo buzzer, USB connector, USB detection wire, and the LCD panel.

 

 

 

 

If you plan on doing any software development we recommend the reset Badge2015-14button option (red in picture) which can be soldered across the middle and far right pin on the lower center 5-pin programming header.

 

 

 

 

Design: Paul, Morgan

Electronics: Paul

Coordinator: Morgan

Etch: Paul, Jon, Aaron

Pick+place: Jon, John, Bill, John, Yijie, Sidney,

Thad, Tony (so far)

CTF: Know A Local RVA Company That Needs Security Help?

May 13, 2015
AnnouncementCTF

Do you know any local RVA companies that need security help?  Whether they can’t afford to hire help, are a Non-Profit organization or something else, the RV4sec CTF team is here to help!

This year we are working with Bugcrowd to allow CTF participants the ability to give back to the community. The live bug hunting aspect will provide real organizations security testing so they can better understand and improve the security posture of their online presence.

Please help us spread the work that an organization can receive free security testing by signing up for the BugCrowd platform here:
https://tracker.bugcrowd.com/organizations/programs/new

Once you signup please email us so we can help you through the next steps.

The testing will provide real world feedback on what an attacker would be able to see from the Internet, allowing you to understand what needs to be fixed.

If you have any questions please contact us to discuss!

This year’s CTF is being sponsored and brought to you by United Network for Organ Sharing (UNOS), a non-profit 501(c)(3) organization.

 

UNOS