← All talks

Greater Than 300 Days

BSides TLV · 201825:27251 viewsPublished 2018-07Watch on YouTube ↗
Speakers
Tags
StyleKeynote
About this talk
KEYNOTE - "Greater Than 300 Days" - Jayson E street BSidesTLV 2018 - Tel Aviv University - 19 June 2018
Show transcript [en]

this is a gentleman who joined us all the way from us and I'm gonna tell you some things about him that he doesn't want you to know is that okay Jason can I reveal all of your secrets actually no yeah everybody else has already revealed all of Jason's secrets so Jason E Street is our amazing special closing keynote and we're so honored that he's with us today Jason is not only the global DEF CON ambassador from DEFCON the biggest hacker convention on earth in Las Vegas he just returned from a trip to China where they did a very special Def Con China event because the founders of Def Con decided that yeah that's pretty awesome actually

we like cats I like cats so DEFCON China and Jason will tell us a little about that that was actually because they decided that if the security researchers in China cannot come to Def Con in the US the Afghan will come to China to them and we're gonna hear a little bit more about that I think we all said do you need anything okay yes and Jason just the microphone it's gonna be a little bit far so put it a little up or use this one I'm really loud very loud okay I hope you get ready okay please make some noise for the amazing chase on East Street all the way from DEFCON here with us at besides

therapy make noise [Music] thank you so much thank you thank you for having me hello everyone how y'all doing it's like I have to apologize I've been trying to dress Nasir but my luggage I've been the shirt is somewhere in Israel so that's good I don't know where in Israel it is but it's supposed to be here so thank you Turkish Airlines for that I fly United at least he didn't beat me up so I got that going for me so yeah so a pardon for my my dress but I want to get right into it I was asked by Carina she asked me to do the keynote and I was like and she said like 15

minutes you got 15 minutes and everybody knows how much I talk it's like that's really something you know coming up with 15 minutes of trying to because usually it's like an hour and 15 minutes I can manage maybe it's like you just an hour 32 hours so I wanted to get inside what am I going to talk to you about what do I think is so important that I want if I only have 15 minutes I want to talk to you about and so I came up with this talk it's called greater than 300 even more powerful than over 9,000 a little bit about me is you may have seen me rob a bank on National Geographic talked on

the news but more likely you've seen me on your surveillance cameras robbing you that's sort of what I do so I do a little bit of offensive and defensive kind of thing but let's get straight into the 300 because most people are thinking this 300 it's like you're thinking you know that's what I want to talk about you know which is you know a cool movie and stuff you know it's nice it's like but no it's this you have over 300 days to the next besides Tel Aviv what are you gonna do with it what's up it's like has anybody here you've been here for the whole conference raise your hand you've been here for the whole

conference have you learned something something in something inspired you something thought about it it's like one of the questions I gotta ask you is like what are you going to talk about next year what's your subject going to be it's like you see people up here with talks and say see me with my talks and I hope when you look at my talks you say wow that's pretty basic Jason okay because it usually is pretty basic it's like and that's fine because I'm not trying to go and say all the advanced stuff it's like I want you to start off with the basics I want you to understand that there are still people out there that need to know

how to get started they need to know what the basics are I mean advanced you know using a zero-day to pop a calculator on an ATM or a toaster oven or a light bulb yay it's like that's awesome but we need to keep education going and it's like and it's not just going to be me keep being up on stage giving talk after talk you need to be on stage you need to be sharing the information it is just selfishly horrible that you have knowledge that I don't know and you're keeping it to yourself it's like I don't the uten the most useless time that I have at a conference is this right here because I'm not learning all I'm doing

is going below and it's like I'm just talking and you know babbling you're on and I'm not getting anything out of it and I am selfish it's all about me right it's like I want to learn I come here to learn I come here to network I come here to find out what you have to say what you know it's like I need you to share more of your information I need you to come up with a talk besides it's like we were like well I don't know I don't know I don't know if we're I could give a talk hello right here in your own neighborhood this is where you can give a talk besides our amazing for that it's

like there are local conferences you have local meetups Def Con groups it's like they're everywhere and they're there for you to actually start practicing those talks practicing that lecture working with other people of the same passion you hear someone in the end in the background in the meeting and they're talking it like in the the chill-out area and they're talking about a subject interrupt oh say well hey I'm interested in that too it's like trying to connect start a talk to it that's what's so beautiful about DEFCON it's like because people are saying it's like you know DEFCON is like well my gosh Jason it's like you know it's like there's so many people there's like over 25,000 people at

DEFCON yeah there's over 25,000 opportunities for you to find someone that's got the same passion that you have everybody is like oh my gosh station there's so many villages at DEFCON yes you now know exactly the key places that you can go to meet those people that share the same passion you do you like Wi-Fi hacking go to the Wi-Fi hacking village you like social engineering go to the social engineering village you like the IOT village really IOT village it's like you like the cannabis village is you know cannabis go to the Canada's in this village is there I got everything now they got build just for everything so it's like from car hacking to voting

machine hacking there's something there it's like and it doesn't just have to be that conference you can start developing those talks and start understanding that that's what this community is about this community is not built on just listening to what other people have to say it's about sharing information it's about being part of the community and one of the key things is is that you're part of the community all over the world Oh waitron world Sorry Sorry that was for another slide deck it's like flat earth you know sorry no this is the world right there we go so you're part of the world you're part of a global community it's like and what does

that mean what does that mean to be part of the global community it means participating and understanding that the global is not just in our backyard not just what we agree on not what we're a part of but just accepting all different sides of it it's like so it's like one of the key things it's like and that's one things I like about DEFCON groups is that we share that it's like we share that spirit of communication and being part of a community something bigger than ourselves one of the best things that I like back in the 90s is being on the IRC it's like IRC was like slack but you know almost it's worse so it's like in

case you're wondering what a higher C was okay and the best thing about being on IRC is that I didn't know where you came from I mean people older than me one for the BBS I did some VBS I was like nine but not very many but it's like MBBS Azhar were actually worse than slack so you have to go through that and you look at that and you know what I didn't know where you came from I didn't know where you lived I didn't know what your religion was I didn't know what you look like I didn't know what color you were what gender you were nothing I knew what you thought I knew

what information that you had to share with me and what information you wanted to me to share with you that's what I knew then we got Instagram crap now I know you're a girl now I know you're a guy now I know that you're different color than me now I know you have a different religion than I am and that's when it started going south it's because we started letting that dictate instead of what the information dictated we are part of a global community we're not when I came here I was having people tell me saying oh Jase are you sure about coming here it's like yeah like why not I've been to over 45 countries

in ten years and I am telling you right now I have never met a foreigner you sit down in the corner of Beijing it's like and you see people going to school it's like taking their kids to school businessmen going off to work it's like that's the same thing I see here in Jerusalem when I was there just this morning it's like it's the same thing I see in the Philippines it was the same thing I saw in Bogota Colombia same thing I see in Paris France were people what separates us is perceptions and fears and you can't let other people's projections of fear of what they think this the world is shadow or shame change

what you want so we had some things thank you and there was some talk about DEFCON Beijing and I was told to mention about that and that's one of the key things it's like I heard about was like oh my gosh taking it over to Beijing okay it's like you know they'll do this you'll know they'll do this you'll know they're gonna do this and I'm like I've been going my first conference outside of the US my first time outside of the US was to Beijing in 2008 and I'm telling you right now I was afraid I I mean I used to be look I use them to behind a dumpster okay it's like when I was 16

it's like trust me I know what being afraid was like it hasn't been happening in like decades okay because it's like I've got a very high threshold of fear and but my first time I was afraid and you know what that was until I got out of my hotel room it's like that was when I started walking around and meeting people and seeing people and when I went to the first conference I wasn't an American that was coming over there to you know spy or be part of whatever the hacking community and trying to I was a hacker I was someone wanting to learn I was well received I was welcomed to the after party it was amazing time that's

what Def Con was trying to bring to China it's like Def Con wasn't trying to bring Def Con Vegas to China Def Con was trying to bring a conference a place where people in the same kind of style that the Chinese already have to share information because one of the biggest problems we have in this community and on this I think planet is that everybody is too busy talking about each other and not to each other and that's what we need to start building bridges on we need to start opening communication we need to start understanding that what I have to say is important who here thinks that they have a talk or idea or

something their passion about that they're able to give out and share by next year what is this do you realize that my talks to me are crap seriously I have one of the best examples of you know impostor syndrome on the world the only thing I'm good at is failing it's like the only thing that I've really been I mean I actually had a talk based on all my fails it's like not really cool fails where I accidentally robbed the wrong bank or anything like that it was literally how I screwed up and how I messed up and don't do the things that I did but I still get up here because I hope at least one point someone will

hear something and they'll either go and say wow I learned something from that guy it's like I want to learn and do more to it or crap I can't be worse than that guy it's like I want to go up and talk next time either way so don't let your voices it's like here you know that voice in the back of your head that says that you're not good enough or you don't think have someone has to learn stopped you from teaching from sharing your information the hacker community is about sharing information so if you're part of this community then you should be sharing information it's like and if you're not in this music will Jason I'm

not in this hacker community well you should be it's an amazing place because you're accepted for who you are and what you know not what religion not what color not what gender not who you love it's what you know and what you can show that's what this has got to be about this was supposed to be a very quick talk I think I accomplished that what I will do is like open it up for questions it's like you can ask me about anything then one of the key things I have to warn you about I do not filter at all so you can ask me any question that you feel like you think you can get away

with and be careful because I will answer it as honestly and unfiltered as I can it's been very embarrassing in several different locations around the world but I will do that here so let's start with some questions yes

that is a good question I don't have one I have five home away from home cities I have five cities that I know everywhere to go I know where everything's at I know where all the Pizza Hut's are it's like I I have had cab drivers tear ID take me to the long way and I've been able to stop them going no no I'm not a tourist you go this way it's Beijing Berlin Singapore Shanghai in Paris it's like they're they're not like the best ones but they're the ones that I've gone to the most mall say Michelle took my breath away it's like when I was 10 years old it's an awful the coast of France when I

was 10 years old I didn't have let's just say a normal childhood it was against the Geneva Conventions but I used to read national Geographics and I would see the different cities inter and mossy Michelle was the first place that I ever saw that was like beautiful and real was like oh my gosh I don't have to live here I could actually live somewhere like that and two years ago I actually got to go to it and so and one of the best pictures it's like I'm one of my wallpapers I'm one of my computer's is a picture not looking at Mont saint-michel because that's all I did my whole entire life it was a

picture of outside my hotel window seeing the outside of it so I was actually looking out from Mont saint-michel so that was probably one of the best places I've ever been just because of that memory but I've seen beauty here it's like I was walking on Mount Zion and I got lost I was trying to get to the tomb of King David and I just randomly walked up to a lady and she was like and I was like she was waiting for the bus she's busy she was looking on her phone alright and I had a map say hey can you can you show me it's like I'm trying to get to is this worth

that and not only does she give me directions but this she was like and enjoy your stay here it's kindness everywhere it is not something beholden to one area or one city I've seen it in every city I've been in I've seen it in every country that I visited yes yes my favorite failure [Music] my favorite failure was attacking the network guys I went and created a whole I created such an adversarial relationship with the networking and IT team because security and network guys were not supposed to get along they know what they did so it's like so so I had this I had this adversarial relationship with them and I noticed one time on the

firewall these weird telnet sessions that were being dropped but it was coming from inside the network you know the phone calls coming from inside the house I freaked them out right it's like I lost you know flare guns it's like we had like the big red button was pushed talked to the CIO got him over there where we're trying to figure out what's going on I'm freaking out about 15 minutes later the junior network guys like oh could that be my scan that I'm doing for with our Orion system and or whatever and said you know to our external our routers it's like our branch routers yes it could be you know it's like and the thing was he

could have probably told me that sooner but I was an a-hole why bother I've learned that your facilitator in information security you're not the law you're not I am the authority I know you are the facilitator you're there to help networking is just like anybody else and when they start realizing that you're helping them they start helping you so that was probably one of my best failures is that because I started at that point to be better at communicating with the network right yes

and that's perfect and do you realize there's people all over that would love to hear about that people that want to talk to their children other people that are watching youtube videos do you know how I have two kids do you know how much time they spend on YouTube they would love to stumble across a video of someone like you coming up here and showing them how to get it done I got a deem today if someone's like how do I become a hacker okay I haven't replied yet but first of all that's not a good question okay because you're a hacker you don't ask how to be a hack you can't be a hacker you can't

learn to be a hacker it's just built into who we are it's like every child was a hacker it's like someone what times we lose that you know how you know a child's a hacker why why does this work why okay how's it why and they just ask that why they have that curiosity that's always built in so it's like yes to show people it's like how to do the streamline how to make the shortcuts that's valuable so everybody has something contribute it doesn't always have to be a zero day none of my talks involves zero day none of my talks evolve one or two or three days most of them are like four hundred or above days

okay it's like nothing new okay but I still get up and I still share that information because I think it might help someone yes the local DEFCON groups invited you to come in and talk as well hey so any other questions by the way if we still have time this is the way I work if I still have time which I do and no one answers a question to ask a question I randomly pick someone in the audience to ask me a question okay there we go okay so who wants to ask me a question or should I go find out someone yes yes actually was a pretty good one I was robbing a bank in Houston Texas

it's like and I just found blueprints for the bank in the construction dumpster and if you don't know how valuable blueprints are for a bank they should not be left in the construction dumpster thank goodness it wasn't the regular dumpster I end up in a lot of dumpsters okay I like construction dumpsters to the best because there's less food matter or other matter and so I'm coming out and I'm bout to like go out and do my happy dance everybody has their own happy root dance when they break something you know it's like I'm not gonna show you my root dance but uh so I'm about to get out of this dumpster and I see blue and red lights and I'm

like I didn't order disco lights for my happy root dance where did this come from it's like it's all of a sudden there's like a police officer he's like that was your end what was your if it hits and I'm like I'm coming out of a dumpster but I'm in Texas I could die now okay it's like so it's like I literally get out of my I have a letter to don't shoot me here I have a letter I'm going for paper and I pull out the get-out-of-jail-free card and I sashay it sideways to the guy less likely to kill me and it's like he was the older dude that was passenger and I'm like here it's like you know as

adorably and as harmless as I can and he read it like cursory and you know what he said he's like oh he's engagement it's like fine whatever and then it hit me what did he do he let me go and he didn't call any of the numbers I now carry to get out of jail free cards one is the one that the company gave me and the other one is the forged one that I make myself telling whoever catches me that they have to do everything that I say they can't put it in the report because it's an ongoing audit and the numbers that I give them our burner phones that are my colleagues have who

will answer the phone as the person that's supposed to be on there it's an amazing I have that one company who actually said for a bonus they wanted me to go into their server room and take a server out of their server room they had one to set up aside so you'll know by the name of it and stuff it sits on the side just like you'll get a bonus I'd go in there and I break into the server room at night and those it okay I can't say that word those wonderful people decided to be a little funny and play a joke on me the server they put for the bonus was an old compact scuzzy file

server that weighs like five for you five thousand pounds I may be exaggerating a little bit okay it's like and that was on the side of the corner I was like oh we're gonna be funny today so I go back outside and I get caught by security and it's like and when the security comes it's like they catch me it's like because I was very obvious to make sure that they did it's like I handed them my forge get-out-of-jail-free card that talk to him about like you have to do everything and I say you have to light and they carried the server out to my car because that sucker was heavy and I wasn't doing

it okay it's like so my best epiphany was figuring out I can get away with forged emails yes okay yes one last question yes [Music] very simple what do you like doing what do you have a passion about what makes you curious and make it something that you may not know that very much do you know the best way to learn something is knowing that you have to give a talk on it that people are going to question you want it you learn it real thorough it's like when you know that's coming down it's like so find something you have a passion about something you may not even know about yet it's like and then start

studying tell yourself I want to give a talk on this figure out how you're gonna give a talk on it what parts of that you're gonna because every you can everybody in this room can give a talk on in MAPP and hardly any of them are going to be the exact same it's like because everybody has a different approach to what they're learning everybody has a different approach to see something and the way that you see something maybe the aha moment for someone else in this audience that goes and says I never saw it that way now it makes sense so that's what you do you find the thing that makes you passionate about and you share it with the world

all right thank you [Applause]

[ feedback ]