Safe at Home
When my husband and I moved into our new Park Slope apartment last November and started cleaning, I ran into this safe, conspicuously stuck in the middle of the living room wall. For lack of reference in the picture, I’ll tell you that it’s about 12” square (or cubed, I would assume). It was painted shut and into the wall in a relatviely successful attempt to minimize it’s “decorative impact.” Well, that was before i busted out the super-toxic paint remover and freed that baby up!
The mystery is overwhelming… what could be in there? Old documents, piles of cash, a handwritten joke, absolutely nothing???
You can imagine my excitement, then, when the list of talks for the upcoming HOPE Conference was just released:
Eric Schmiedl
Despite many appearances in film and television, fairly little is widely known about how safes can be opened without the proper combination or key. This talk will attempt to address some of the questions commonly asked about the craft, such as is it really possible to have a safe open in a minute or two using just a stethoscope and some clever fingerwork? (Yes, but it will take a bit more time than a few minutes.) Are the gadgets used by secret agents in the movies ever based on reality? (Some of them.) The talk will cover several different ways that safes are opened without damage, as well as the design of one lock that is considered completely secure.
There is hope yet! (no pun intended).

Dual English-Korean keyboard from which this post is being written.
In true Schroedinger homage, I’m writing this post from a duality of locations. In the one sense, I’m reporting from The Last HOPE - hacker conference. In another sense (an albeit more physical one) I’m sitting in NetZone Internet Cafe in the middle of Korea town.
I’m not sure which location is more absurd. The convention has a few thousand people and at least that many electronic devices. There are hundreds of computers doing myriad tasks; it’s an unabashedly proud electronic war zone. I’ve been live tweeting the entire thing from my BlackBerry to much success, but I would no more sit down at a machine and enter a password there than I would leave my car unlocked with my purse and keys inside in the middle of a bad neighborood. It’s bad enough that the reception in some of the conference rooms requires that I connect to the open WiFi to get a data connection. So…. in a somewhat ironic twist of fate, I’ve ventured into this room on the fifth floor of an anonymous building with roughly 20 computers of various shapes and configurations (all covered in the same layer of filth) to finally spit out a few words before the best details of my recent experiences escape me. Thanks, mobile Google Maps.
It will take more than one post to cover my thoughts on what I’ve seen so far at HOPE. There have been some exemplary talks - U. Penn’s presentation of their results from auditing the ES&S electronic voting machines (laughably insecure) to Prometheus Radio’s panel on “How to Share Your Love of Technology with Non-Technical People” that intermixed their stories of building low-power radios in depressed Kenyan neighorhoods with a decidedly Utah Phillips-ian discussion of growing up invisible to one’s own technological priviledge. The people are, of course, a varied bunch. There are your stereotypical coke bottle eyeglass geeks, your old (in technology years) ham radio operators, your young tatooed cyberpunks, etc etc etc… and a surprising number of women. Both my experience as a woman participant and my views of the place of other women at HOPE will require a full post in and of itself. In fact, you’ll be able to find it on .51 - Geekspace for Women blog. It’s coming Maria, I promise!
In addition to the good quality photos that will be up on flickr soon, so far I’ve managed to upload two quick (not so good quality) videos while brushing my teeth and running out the door this morning. They cover two projects using light and movement to create really neat artistic visualizations. You can find the 3D Volume Visualizer (way cooler than the video shows) and Persistence of Vision clips on YouTube.
Sometimes you just wish there were more hours in the day!

amberella (me), live-tweeting from HOPE
Before The Last HOPE, ubergeeke over at .51 - Geekspace for Women asked me to keep her in mind for a guest post about the role of women in the conference. I apparently wrote her a book.
How is it that as an increasing number of women graduate with Computer Engineering and other technical or hard science degrees and girl-geek culture explodes thanks to New Media™, that there is not a commensurate increase in women’s contributions to the hardcore techie and hacker community? It’s no longer difficult to find women espousing their love of iPhone apps and digg.com – the problem is finding those that want to infiltrate the realms of bug trackers, penetration testers, and the corporate suites reserved for CTOs and CISOs. more»
This should mark the end of my HOPE related posting, as far as I know. If there’s something you’re interesting in hearing about, let me know.

Check out the torrent tracker. Seems like things are popping up on YouTube and Vimeo as well. (Vimeo FTW, people)
Note: It is my personal opinion that paying $75 per HOPE ticket should have granted us access to $5 DVDs of the talks we saw in person. Let people buy them for $20 a pop via the website after the fact, if they’d like. $20 at the conference per talk??? Ridiculous. I do know that the price hike was caused by moving from a guaranteed contract with the DVD burner company to a cut of the profits contract situation. I’m guessing he cut his nose off to spite his face on that one, as my mother would say, as numerous people lamented the crazy pricing scheme and walked away empty handed.
That said, do support 2600 in any way you can and certainly thrown down for an official copy if you’re buying it for use at a company. (As of this post, it doesn’t look like the videos are for sale on the website yet. YEMV.)
The sad fact is that these applications are susceptible to malware pushers and those looking to steal your personal information. It’s not much of a stretch for hackers to impersonate people you think are trusted, fellow players, as is the case with a lot of online gaming. And the more you expose yourself, the bigger the target you become.
I saw the Social Zombies talk at DEFCON 17 (which was awesome) and decided to put real effort into educating my friends, family, and strangers in bars about how insidious Facebook apps are/can be. I assumed they already knew, but HEY, it turns out that’s not the case. It’s frustrating to spend an hour crafting a simple, clear email to everyone including Tom Eston’s Facebook Privacy recommendations PDF flier (which he should update for the new FB privacy schema *cough cough*) and not get back a single comment, response, or thank you. Someone (not me) needs to make a catchy video explaining this stuff and get people’s attention. I’ll keep trying, but man, it’s a tough sell. </endrant>
Sidenote: My twitter feed is currently 50% people bitching about the Superbowl and 50% people bitching about the snow at Shmoocon. That is all.
Building BlinkyShoes in the hardware hacking village at The Next HOPE.
These past few weeks have been a whirlwind. I have at least four separate blogs to update (Note: *update* not *post*), at least one research-intensive piece to write, and three days to move into my new apartment, finish Project BlinkyShoes, and impress work folks on my new project before heading off to Las Vegas for Black Hat / DEF CON. I may implode.
Based on Postage by Greg Cooper. Everything heavily modified by me.
*Unlikely to find your lost post using this but you can try...
Comments