I took my team to the Red Sky 2017 Security conference today. Its local, fairly inexpensive, and gave my team some insight into what a disaster the current state of security really is. You can do a lot, but a motivated individual will almost always find a way. So the conference, decent swag, kinda limited, spose it was only a one day conference. Continental breakfast, box lunch, free but limited sodas, and drinks (non-alcoholic of course). Mitnick was entertaining, and most of the speakers in the separate talks were pretty good. A few were a little dry, it may have just been a bit too warm. My S4 camera is shit, so the pictures are mediocre at best, almost not better than nothing. They forgot to provide power (probably on purpose) but did provide tables, and wifi, including the required “this is a security conference, these are trained individuals, use the wifi at your own risk, we provide no security” (reminded me of defcon) but seemed like a cop-out to me. I think I’ll go prepared next year to catch some packets and see if I can’t at least map the topology.
(more…)