BSIDESLV 2018 - Keynotes

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music] [Music]

[Music]

[Music] [Music]

[Music]

[Music]

[Music] [Applause] [Music] [Applause]

[Music] [Applause]

[Music]

[Music]

[Music] [Music]

[Music] [Music]

[Music] [Music]

[Music]

[Music]

[Music] [Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music] [Music]

[Music]

[Music]

[Music]

[Music] [Music]

[Music] [Music] [Applause] [Music]

[Music] [Applause] [Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Applause]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music]

[Music] [Applause] [Music] [Applause] [Music]

[Music]

[Music]

[Music]

[Music] [Music]

[Music]

[Music]

[Music]

[Music] [Music]

[Music]

[Music] [Music] [Applause] [Music] [Applause]

[Music]

trembles to minister a potion unto Munir that that which trembled to receive thyself good morning everyone and welcome to b-sides LV 2018 the biggest and best besides Las Vegas ever I'm winter this is oz next year will be better last year was better but what we can tell you is that it has been 10 years since the house that Jack built first opened its doors to a handful of talks and this year besides LV will host 130 talks and training for over 200 hours of combined educational programming and that's all given away for free folks that's beautiful because of the dedication and support of the sponsors and people like you the sponsors this year that we have to

thank our rapid7 top of the list we got Amazon here this year ooofff tell us simply don't know if I said that right in-game hacker one humne oh I see Pro TV we got up tix and we got virustotal and last but not least wall um so thank you very much as sponsors check out this crazy wall of support up here we got a couple of schedule changes just so everyone's aware some time changes so hillbilly's story time with adam is gonna be 11:00 to 12:00 wednesday not today not in the cobra at 11:00 today ground floor in copa the first talk talk today will be at 11:30 we're gonna sort of tighten these keynotes up to get them done early

a Scanner Darkly which is a blue team technique to break discovery with matthew e-version so that's gonna be that's gonna be now at 11:30 today and then from CTF to cv8 CDE unfortunately has been cancelled so that would have been the talk directly before that if you were looking for it all right check my check the replies might check my check Mic Check Mic Check Mic Check hello thank you thank you for giving me your attention the whole entire room hello now but I can still hear you too and I shouldn't be able to hear you I should only hear me hello Mic Check all right if I call my check that means I'm asking the whole entire room to be quiet

and do nothing but listen to the voice is calling Mic Check Mic Check I'm still hearing voices in our mind Mic Check thank you if you wish to talk please go out into the hallway track this is not for conversation this is for paying attention what's going on the stage that includes our lovely lovely sponsors will not be having conversation for the next hour or so quotable quote said besides Las Vegas I like being able to speak yeah I'm gonna lose my voice before Def Con thank you for your attention if you wish to continue your conversations please do so elsewhere but otherwise welcome to your attention to the stage cheers Thank You banshee everyone

Banshee [Applause] so having said that there's just a couple of other little pieces of business if you've been here in years previously you may have known that the Raffles rent on really really long during the ending ceremonies that we were picking numbers and nobody was there so it works a little bit differently this year in your bags that you received at registration there's probably a couple of tickets you'll notice that they weren't separated we're going to do a raffle draw during the happy hour today the happy hour tomorrow and tomorrow before or during the closing ceremonies so the idea is go past the raffle and saw an auction portion of the the table over here once

we get it set up and then you'll be able to say that oh if I'm gonna if I want to bid on this stuff or if I want to put my raffle ticket in to win this I know that it's being drawn at this happy hour so that we're only pulling tickets from the people that are there so we'll be collecting the tickets at that point in time if that didn't make any sense because it's early and I was really it was a late night then you can meet us over at the silent auction table we'll discuss that with you later beyond that we've got public grounds yeah and just just a quick note on with

we've got all the support as we mentioned before for besides this is an amazing conference and the price is totally phenomenal right so we really depend on the support of everyone that comes here as well so please go over buy a raffle ticket or tan support the silent auction buy a t-shirt because this is really a community driven driven event that we have here yeah we have a new thing this year that we're just announcing now the public ground so for years we feel been building bridges into public policy there hearing public grounds and dying to meet you so your opportunity to engage and maybe hack our futures it's gonna be over in platinum sponsored by Hewlett Foundation and

organized by I am the cavalry and this is designed to be a safe space for security researchers and public policy people to build bridges together understand where each other is coming from and engage some of our teammates and some of the ambassador's from the other side office hours will be held by congressional staffers hackers and lawyers Homeland Security the FDA think tankers Mozilla and other ones as well very excited to meet you they're gonna have some topics like should companies be liable for software vulnerabilities when people get harmed very interesting and unsolved question there how is coordinated vulnerability disclosure understood in Congress or is it understood at all let's let's find out from the from some of our

congressional representative and stuff is about that and should companies have immunity if they do the right thing and if they respond to coordinated disclosure in a timely and renders and in responsible manner so that I think is really worth checking out for anyone interested in those policy questions that's a brand new thing this year and we really want to thank the Hewlett Foundation for putting this together for this thank you so much so just two final things we're about to get going here a quick note that there's a few evening events there's a career con mixer at 8:00 till midnight tonight at the Tuscany pool and also at 9:30 there's the new hacker pyramid which will be

here in this room and tomorrow night of course is the is the big pool party but basically I don't know if you guys knows or if you've met wint or anything like that we're just a couple of people from different countries who have decided that we would come out down to the states and help out host this conference because things here right now man yeah interesting situation and it just I feel like the the American emcee industry seems to be struggling I'm sorry we've just been told that by Presidential Decree there's no a tariff on foreign emcees we have to reduce our we're done we can't enjoy ourselves we're out of town we had we had a bunch more here but

we've been 25% of our emceeing has been cut right now so we're just gonna have to yeah I better get off stage before DHS gets here alright keynote Andres yeah so let's move on quickly I'm super excited to introduce this first keynote speaker today because this he's gonna be speaking about something that has fascinated me for a very long time so our first keynote speaker is retired special agent Jim Christie some quick biographical information he was most recently until until 2013 the Deraa futures exploration which explored strategic relationships between the US government and the private sector in academia so stuff that a lot of us are really interested in before that from oh three two oh six he was the director of

the defense cybercrime institute from 2001 to 2003 the director of operations of the defense computer forensics lab and from 89 to 96 chief of the Air Force Office of Special Investigations computer crime investigations unit so to translate that into our language he's a badass and that was recognized by Hollywood he actually wrote the infrastructure attacks for the movie live free or die hard so he's gonna be talking today about the DB cooper cold case he was brought on to work on that cold case brought out of her time in 2016 which is just an absolutely fascinating case if you're not familiar with it you wiII be AB very very interested if you're familiar with it

he's got some new information to talk to us here sorry so once again please don't talk 25% less and welcome Jim Christie

all right good morning how y'all doing so I'm a former government guy so this is our agenda okay so a common operating picture so what does cyber mean anyway right I got to tell you working for the Department of Defense for 42 years 43 years when cyber first came out there was much debate and probably 27 different definitions flying around depending on the service or the organization one of the jobs I had I got detailed to the to Senator Nunn on the permanent Subcommittee for investigations back in 1996 and we held up investigations and hearings on through cyber threat to national security and one of our first witnesses was john deutsch when he was director of

the CIA at the time and my job as a staffer was to write all the questions for the senator what the possible answers were of what the follow-up question was so that the senator would look like he knew what the hell he was talking about right and being a senator and being a lawyer you never ask questions you already don't know the answers to right well in the middle of John deutsches testimony he asked John Deutsch so what was going the wrong direction here so what is cyber mean anyway and john deutsch his face went pale I mean this is 1996 he's a senior guy he didn't know what the hell cyber means and so he he

pauses he says may I have a moment and he turns to his straphangers in the back and they have a huddle for about 30 seconds and he comes back and says sorry senator I'll have to get back to you on the answer so the very next day he sends this letter to John - senator nunn so I'll read it for you says dear senator nunn during yesterday's hearings on foreign information warfare capability you asked a rather indelicate question what is cyber mean anyway I must admit that your query caused a great deal of discomfort here while everyone had used the term no one had heretofore felt any need to know precisely what the hell it

meant yeah I put hell and he didn't say that in light of my promise to keep Congress fully and currently informed I pressed for an answer Central Intelligence Agency's CIA's research revealed that the term cybernetics was coined by the father of cybernetics Norbert Wiener in 1948 and mr. whiners words we have decided to call the entire field of control and communication theory whether in a machine or an animal by the name cybernetics which we formed from the from the Greek Cybernet ease or steersman that's enlightening Department of State concurred with CIA's findings but wish to point out that the Greek cybernet EES is related to the Latin gubernatorial Anor governor the Defense Intelligence Agency remember Flynn

you know National Security Adviser right here an dia the Defense Intelligence Agency is not yet ready to make a judgment and is exploring the possibility that cyber may come from the Greek size deter or divert from which we also derived the word cyber suitor or a genis of large diving beetles I hope this clears up any confusion so now you all know what the hell cyber means right so as a criminal investigator you know we look at motives you know when you're trying to solve a case and they run the gamut from you know sex politics activism ego hate you name it anything can possibly be the motive and every tool known to man so

far to make life easier more efficient more effective they somebody has turned that tool around to make it holy [ __ ] what's going on here every tool has turned around to become a weapon so it shouldn't yell Rock a hammer golf club pots and pans you name it turned into a weapon so we shouldn't be surprised when when computers turn into weapons and weapons can play three roles in a crime they can be the victim of a crime a system that's hacked for instance a witnesses of crime could just be an innocent by passing system you know that that the hacker went through or it could be the target the subject of the crime you know and be the victim

tools of the trade today you need reliable communication whether you're an executive spy terrorist and some say executives and our spies are terrorists so reliable communication your documentation plans partners contact information you need access to all this stuff so what better place to use things to use but the the web smartphones laptops tablets oh and they do I think that defending against a cyberattack is the opposite of defending against a nuclear attack to defend against the nuclear attack we know that some [ __ ] who have nukes right right we spend a lot of time and Intel knowing who's got him and we surveil them and we have great platforms to surveil these guys with nukes so if somebody was to launch

an attack within a fraction of a second we would know that there was a launch we probably know they're prepping for it know what when it was launched and within a few seconds the trajectory and possible targets of that attack and in the meantime we're going to nuke them till they glow pretty significant deterrence to defend against a cyber attack you can't surveil everybody because anybody can launch a cyber attack so you have to sit back and wait for the attack to occur and then work backwards for attribution much more difficult and what makes it even more difficult is the in in the u.s. the difference between the responsibilities and authorities of the Intel community and law enforcement

community so if the attacks are occurring in the United States the intelligence community can't play only law enforcement can play so hopefully the law enforcement guys will communicate and coordinate with the Intel guys but that's not a given okay we're locked up here

so if you know there's a difference between law enforcement in to tell community and we now have a cyber attack

that's not how that should work

[Applause] y'all are clapping but it ain't flippin moving premature accolade indeed it's still loading when in dude just reboot does not fit here

what's on that stuff

don't go far all right so I'll skip a lot of slides how's that holy [ __ ] well I'm never buying a Chromebook let me tell you holy [ __ ] okay speed counts right oh my god jurisdiction there over love I don't even care about that so attribution is the holy grail for for a cyberattack I've got to get to some bitch's fingers on a keyboard all right so we're skipping through skipping through how many you know about the hannover hacker case red okay that was my case okay so cliffs an old buddy marsh worm everybody knows marsh worm all right you know I worked that case and his father was even on my meat the Fed panel one

year you know he says you'd look for me I said yeah cuz where I worked your son's case you guys don't want to talk about the elections and all that [ __ ] so we'll just keep on going so what I would like to talk about is the law enforcement and the intelligence community the intelligence community has done a tremendous disservice to us in America the only thing that counts to the intelligence community is offense and they don't share any information with law enforcement or the private sector if because they want to use it offensively and I think that it's far more important to do defense when it comes to cyber then then offense okay so

yeah they classify everything it's just it said so so I think digital forensics with the proliferation of digital devices digital forensics is the key it answers you know DNA we've been using DNA in criminal cases since about 1986 and it can answer the who question but digital forensics can answer all the traditional who what where when why and how question but we just can't do it in ten minutes like they do on TV all right come on come on move so they're they're different disciplines within the intelligence community you have SIGINT human all the different ents I think that we should have created a thing I call digital forensics intelligence and the reason might come up in a minute or

so holy [ __ ] that'll make it go faster so so if you look at the Venn diagram three different disciplines the national security that's the Department of Defense the intelligence community public safety that's your law enforcement key and then the economic sector private sector okay where they all overlap is what I call digital forensics intelligence so now it goes to

what a piece of [ __ ] this is anyway screw digital forensics talk about a case I had back in nineteen ninety one dependent wife of an Air Force member she was found in the front seat of a pickup truck and she had been stabbed 42 times husband was a suspect but had an alibi and he was on base at the time of the murder she was murdered off-base so about three days later the agents went to interview and this was in the Philippines and they went to interview him as a witness not as a subject and so they went to his office they walked into his office and they started talking to him and all of a sudden he jumped up

from the desk reaches down into a box next to his desk pulls out a pair five and a quarter inch floppy disk and a pair of pinking shears and he began mutilating the diskettes so the agents said that you know they had to they couldn't jump in right away because he was fending them off with the with the scissors but once once they cut the scissors away then he started picking up the pieces and they called me in DC and said hey you know obviously there's something on these disks that he doesn't want us to see you know because they were detectives so so they said we're sending them to you you need to get all that you need to find out what's

on two discs so while they were in transit I'm talking to all the different law enforcement agencies nobody had a tool or a technique to recover the data I went to the private sector they didn't have a tool or a technique I finally went to the intelligence community NSA was up there for a while and they said well you know we've got theories on that but we've never tested a theory so it'll take a long time meanwhile our boys been arrested for homicide and we have a speedy trial issue so I went to my buddies over CIA and they said yeah we can we can get the data for you I said cool so - they said

no but we can't tell you how we did it and I said well what the hell good is that and they said well you can you know we're giving you the data but we're not going to divulge a classified technique in open court it's a criminal court it's a murderer I said okay well you give me the data and I'll figure that out so I figured if he gives me the data that the bad guy knows what's on there if I show it to him maybe we can get a confession and trick him into confessing so that was the plan so they had my disk for about two weeks and they called said okay you can come

get your damn disks listen what does that mean they said well we can't talk about it on the phone okay so my deputy made kuchen sinai' we drive around a beltway over to CIA headquarters and we pick up our dish I said so what's going on well we can't get that we can't get the information off to disallow I did you just tell me that well we don't want the bad guys to know they might be listening that we can't get that data okay God thank you so we grabbed our desk we start back around the Beltway and it says to be ok you let all the big boys have a shot you're gonna let me

have a shot I said well what are you going to do he says that long go to scotch tape them back together I said you can't scotch tape discs back together because in the floppy disks you know the head rides right on to my alarm right so if it hits a piece of tape that's going to rip the rewrite heads off he says well [ __ ] we don't know if we don't try so we get back to the office we grab a disc throw some date on it we cut it in quarters tape it on one side throw it back in the jacket and then he whips out my laptop with my external five and a quarter Drive and he

says we're going to read it I said you gonna rip my rewrite heads office won't know if we don't try so turned it on and you could hear it crunching and then all of a sudden you could hear the heads flying around on the inside of the chassis we won't go into what I said at that point so we pulled it out and when we pulled it out on the top where this place was that was still nice and smooth on the backside where the tape was the tape was frayed tape is what ribs right read/write heads on so we started brainstorming and I said well what if we take another blank diskette and we sandwich the tape

between the two so we tried yet so we got a disc put some data on it cut it in quarters taped it on one side covered it up with another blank diskette put them back in the jacket and we'd gone up to the small computer tech Center got a stack of disk drives because we figure gonna rip the [ __ ] out of them and we turned it on and we were able to do physical reads of the data off the top diskette well cool now we have to flip it over and you know do the backside so we did that we were able to get the data from the backside so now we had to technique the guy who'd crumpled

the disk up so the the real evidence pieces we had to figure out how to deal with them so we had iron him so we tried irons we tried you know we tried a bunch of techniques didn't work so finally we took a sodding iron put it on a rheostat so we got just the temperature took a piece of brushed aluminum tubing slid it over the heating element and then we rolled it so if you need to do this at home 112 degrees works great and would take the creases out also remember the pieces we actually had to diskettes when we started putting them together like a jigsaw puzzle we actually had to diskettes and 23 pieces

and we only had two-thirds of each diskette I guess it was kind of an afterthought to get them all you know and so we had two pcs together and some of them didn't have an outer edge or an inner hub so we didn't know how to orient them so I found this stuff called Magnus II it's a real fine ferrous powder suspending an alcohol-based solution you shake it up throw it on magnetic media the alcohol evaporates and the particles line up with the track in sectors and you can actually see your data so we use that and you could actually see the data we could orientem tape them in place and then with a little alcohol brush off the ferrous

powder so using that technique we were able to recover anywhere from 85 to 95% of data off each and every piece what we found on the disk was that our boy his wife had actually divorced them and left him and moved back to the United States we found the love letters that he was sending to his ex-wife saying how much he loved her wanting her to come back and remarry him and then we also found the letters that he was sending to his Filipino girlfriend say I hate how he hated his ex-wife how he loved her and oh by the way will you hire a hitman for me the local police interviewed the girlfriend and on the seventh interview

I think she was water bartered she finally confessed that she had two of her cousins and a third guy they split $105 and killed his wife so what we got all that information we presented it to him and and he played he confessed pled guilty was sentenced to life in prison so it's even changed the fonts and sizes this is really great huh anyway forensics files did an episode on it so called sheer luck which i think is [ __ ] okay now I want to talk about the cold case so back in 2016 I was asked to join the DB cooper cold-case team how many of you have remembered DB Cooper okay he's an American legend folk hero right

cept he's really not so there's been movies there's been songs over the years so DB Cooper was actually his name was Dan Cooper he purchased a ticket the day before Thanksgiving in 1971 from Portland to Seattle for $20 and you can see you actually filled it out dan Cooper so the press nicknamed him DB cooper by accident so it was actually Dan Cooper he hijacked a Northwest orient flight 305 on the day before Thanksgiving and it's today it's still the only unsolved u.s. hijacking he had a bomb on onboard he showed it to the flight at time the stewardess at the time and and demanded two hundred thousand and four parachutes to regular parachutes and two reserves

and and then he let the passengers go once they landed in Seattle and once the money came onboard and the parachutes he checked the parachutes he'd let the passengers go and a couple members of the crew kept about four of them and said okay we're going to fly to Mexico and they said well we can't we can't go that far we have to refuel so say okay well we're gonna refuel in Reno and then go on to Mexico and somewhere along the way they think in Washington State they were flying a 727 has a stairwell in the back in the ass-end of the aircraft they felt a shaking he was asking how to open stairs

he opened the stairs and disappeared and never been heard from again so eight years ago seven years ago Tom Colbert who's our lead investigator comprised a team of over 40 law enforcement professionals pellagra firs criminologist FBI agents Intel couple judges handwriting experts forensics experts and they went on this probably a five-year investigation and it culminated with the History Channel airing of four hour episode in July of 2016 so you can catch the reruns it comes on about three or four times a year well the team believed at the time that they had identified who DB Cooper was suspect was Robert rack straw he was seventy-three years old in 2016 I had an illustrious military career until it

wasn't FBI identified him as a suspect as being DB Cooper in 1978 he was kicked out of the Army for fraud in 1971 actually what he did was he had moved up the ranks in the army to a first lieutenant and he beat his wife multiple times they investigated and while they were investigating they found out that you know he lied to get in the army he was actually a high school dropout so they kicked him out he while he was in the army he was an Airborne jump school he was a helicopter pilot and you can see his military ID on the left and a DB Cooper picture on the left and pretty similar so he does resemble DB Cooper

holy God so he was an explosives expert pilot both fixed-wing and helicopter I can't even read it you guys heavy smoker you trained the Shah of Iran's helicopter pilots he was acquitted of murdering his stepfather guy was a real real nice guy felony convictions for check kiting kiting and plane theft and illegal explosives was sentenced to two years in prison and served a bit of jail time in 1964 he enlisted in the Army was an infantry jump school at 67 battered his wife at 68 she was going to divorce him and then some of the seniors in the military went to his wife and convinced her not to not to do that because it would ruin his career so she she stayed

with them he did psyops training in helicopter school of 68 deployed to Vietnam for two tours two Distinguished Flying crosses and a Silver Star and promoted to first lieutenant and he did sport jumping with the Vietnamese so besides jump school he was actually a sport parish used as well so in 1971 he battered his wife they ran the investigation he was kicked out of the army he disappeared in June and just dropped off off off the map there and the day before Thanksgiving the 24th is when the hijacking occurred so in the investigation we actually think we know where he was for those three months and it's a whole bizarre hold another set of circumstances it's really interesting

but while he was being arrested Bly was in jail and going trial for the explosive explosives and the fraud he was asked by one of the media if he was DB Cooper and he said no I'm afraid of heights so he said well you know you you really could be DB Cooper are you DB Cooper he said it could have been could have been you know so he's never actually denied being DB Cooper so kind of an interesting guy so the on in July of 2016 when the History Channel aired their documentary the FBI closed their case that had been open for 45 years that day so kind of interesting

so case until that point had no cyber Nexus I wasn't involved in in in at all but there are several Cooper DB Cooper websites out there where people are trying to figure out you know civilians loose trying to figure out who DB cooper was and our team was surveilling these websites and to bloggers with no online history began posting and seemed to have information that only our team had that we hadn't made public in the documentary yet our team had over 110 at the time unique pieces of evidence that pointed to our guy rack straw and the theory was that rack straw or somebody he was controlling were doing the blogging so they came to me and asked me if I put a

cold case team cyber team together for them to see if we could identify who the bloggers world so I joined a team I put an undercover team together four of us from the Army Navy and Air Force with about 130 years investigative experience and we created identities and joined these these websites and so we coordinated the scripts what we were all going to say to each other hoping that everybody else was watching and would enter into conversation and we draw these bloggers in with us and they we created a document with with to help us surveil and and he took the bait and he downloaded our document and we set up monitoring we can only reconcile it down

to a zip code so it didn't help us a whole lot but while that was ongoing we had this guy who was a 32 year old male for Mississippi contacted Colbert and said hey you know I've catfished Robert rack straw and he thinks I'm a 53 year old nurse he said you know are you interested so Colbert said hey would you run this I said sure so I started running this guy and trying to keep the two opps completely separate so our boy had created a facebook persona Kelly 53 year old 52 year old nurse from Mississippi said her father had been stationed with rack straw and that she liked military men even 73 year

olds men sent flattering messages sent a friend request and and asked him if he was DB cooper after a month rax drawl accepted her friend request and they started to interact and he had several phone conversations or texting so so I I finally called the guy we were doing the email and text and I finally called the guy I said I want to know what's your motivation why are you doing this and turns out that he was just bored and was looking for something to do he was married had three kids his wife had actually divorced him because of doing this kind of [ __ ] on the on Facebook but they had actually gotten back together so he didn't have a

Facebook persona a real one so he had to do this catfishing so he could still do this [ __ ] so so by the way DB cooper comm if you're interested we have all our interviews all our evidence is on there the whole thing so I had my ex-wife as a private investigator so she did a background investigation on the guy Kelly and all the information that he had provided me was actually accurate he was he was married three kids thirty-two years old he had provided his real address in Alabama and he was a pastor of a church and so was his father I mean okay amen so he was actually she he was actually

able to get some some pictures that we didn't have so he started texting and so I said you know I just want you to you know flatter him you know but you know let's keep it clean right well that lasted for a little while so Rex trout had provides Kelly said she would her father a good station with rack straw when he was in Fort Benning he sent this picture when he was 35 and if you can't see it but it he's a lieutenant colonel with all these medals well lieutenant Colonel's up here and a first lieutenant is down here you know so he faked this photograph you know many many years ago and he was kicked out you know in 71 so

he so lots of different interactions but he told her that he had actually worked for CIA when he was in Vietnam and we went back to his commanders former commanders and they said that he was actually doing stuff off the books with the CIA in Thailand and Cambodia you know running black ops so that was helpful he also sent pictures of his yacht that he lives on in San Diego invited her to come stay if you can read the name of his boat it's poverty sucks and in the stateroom on the far right he actually has that lieutenant colonel picture on his wall guy's a piece of work so then all of a sudden my boy

starts sending me all these texts that he's exchanging with wrack straw and it got it it went from flattery to sexting very quickly and I told him I said listen you know I'm really not interested in in the sexting you know it's not real helpful to the investigation because I was talking to about 20 guys before and they'd all say they were DB Cooper if they thought they were going to get laid you know so so I informed him that if he didn't I was going to terminate him and I wasn't going to communicate with him anymore he kept up sending me stuff and I've terminated him as a as a an informant but he continues today too

so he said here here's a picture of her and a picture of him so this you can't get out of your mind a picture of a 73 year old DB Cooper's penis you know so in other briefings I made it bigger because because of the legend but so I I terminated him a source and then two weeks later we're running to remember our first op we're still monitoring these Cooper websites my cat Fisher joins the website under his real name and starts to go and have a meltdown about all the stuff and how he catfished Rach straw and we're trying to I'm communicating with him and he's ignored and say hey you don't do that

you know cuz he may be watching well he ignored me and so I called the SIS up and assisted Ben and I had him kicked off the board and I had the blogger's I that we thought were rack straw I had them kicked off so they couldn't monitor if what was going on until I got ahold of them and the way I got ahold um I called his flippant father and told his father what he was doing and say if you don't get him to stop I'm going to tell his wife so that seemed to work so sorry about the fonts they were okay when I started but the boys got some some real issues

unfortunately we couldn't collude conclude definitively from the cyber portion who DB cooper was but what happened was when the FBI closed the case when they have a case open we're asking for information yeah you know law enforcement is not going to share any information they have it an open case well once they closed the case we said hey you closed the case so we want access to the case fall and they said no so we said okay so we sue them and we won and we sue them in September we won in January and in February we started to get a hundred to 200 documents out of the case file every month and we still

get them today so the investigation continued FBI started releasing these documents so in jail so we start we won the case in January 2017 so we had a couple press releases and a couple had seen the History Channel documentary about the same time in a rerun and they came forward and said hey we have something we want to share with you the husband was in a narrow Club it was a pilot and his wife was a retired deputy sheriff up in Washington State and rust the husband was confided in by three other members of the Aero Club who were in their late mid to late 70s at that time that they had actually helped DB

cooper escape and they had staged this area had worked it out had surveilled it had a drop zone a plain Cooper pick was picked up after he jumped out of the 727 and what the pilot took DB cooper right we don't know they don't know RAC straw so if he's so to separate at this point so the pilot picks up Cooper 50,000 in cash and his bomb they take off and fly and they dump 50,000 cash and the bomb in this huge lake so there were hoping that people would find that and think that he was killed in two jump meanwhile two other guys picked the parachute up in 150k and they drove out into the

wilderness and buried it so once the guy that confided in him had passed away they decided the wife convinced the husband they need to come forward so in 2007 they came forward to the FBI and they blew him off so when they saw the documentary they saw somebody was interested and they contacted us so I don't know if you could see this but this is the the path there in red the path and the black is the airliner path and the red is where he jumped out where they dropped the the fifty thousand cash and a bomb and escaped so we thought we could find where where they said they had buried the parachute and the money

so we put a dig together a year ago in August and we set a team up there and they were up there for a week and they literally found what we believe are parts of the straps off of a parachute and we we took those we collect we had a couple of retired FBI agents in the dig they collected it as evidence we documented it and we gave it to the FBI and we've heard nothing since because the case is closed another guy of Vietnam veteran Rick Sherwood was also a member of the same Army Security Agency that rack straw had been in and he was looking at the letters Cooper had sent letters to the afterwards after the

hijacking to newspapers Polk and the FBI in the eye for not being able to catch him well there were codes on the bottom of these letters and nobody ever broke the codes so don't know whether they tried but nobody broke the codes well this guy spent months working on two codes and says that he broke them so in the 9th of February this year we had a press conference to close the case and of course we thought it would be appropriate to do steps to the FBI so so we had a press conference there and if you remember one of the details was that he told our cat Fisher was that he did CIA operations

for the National Security Agency National Security Council so I remember when we were talking to the lead investigator he had he had told me that he had interviewed one of Rach straws former son in laws and he told them that rack straw had actually flown for this for CIA in iran-contra in the 80s okay so my theory is while he was in jail in 78 to 81 for first murdering his stepfather and then for the explosives and and fraud that the FBI had him as a suspect I think they solved the case back then and so I think in return for dropping the case he had to fly iran-contra for the CIA so I went to my Intel sources so

I'm still pretty connected and my source came back to me and said okay I want you to pay attention to my words we cannot confirm okay I was it so they didn't say we cannot deny or confirm confirm or deny he said we cannot confirm that's code for yeah so our lead Colbert he went to his Intel sources it got the same thing so I think there's a lot of folks that you know avoid jail time you know for a ran contra okay it's kind of how the government operated in those days so tomorrow what we're going to do is we're going to have a press release how the code is broken so if you guys

are interested in this go to DB cooper comm tomorrow and you will be able to and if there's members of the press I have a a pre press release and if you promise to hold the story until tomorrow we'll give you the story today okay so

and if you're interested in this case in 2016 Colbert wrote this award-winning book on the last master outlaw and this is I mean it's in depth how do hip growing up interviews with his sisters is all this former you know it's a it's really good book you can get it off DB cooper calm as well so probably the most bizarre complex and I'm only I'm only touching the surface you should really go to the website and see the the interviews see the newspaper articles see our documentation it's it's really overwhelming I think you'll be convinced as well that Robert rack straw is DB Cooper I've read several blogs periodically for symmetric so I've written a couple on

Cooper and stuff like that so if you're interested you can go to symmetric calm and boy this is just screwed everything up so anyway

holy [ __ ] so what we're going to do is if there's any questions what we're going to do is we're going into breaking ground afterwards and I'll try to keep everybody on schedule and so I answer your questions until you don't have any more and I keep going but this thing is locked up again so thanks [Applause] one more round for mr. Christie thank you Jim Christine are any Canadians here Thank You mr. Christie you make a cookies but it's just it's so amazing or mind boggling to know that somebody who's done so much for digital forensics can be kind of taken out by a cloud in a Chromebook makes me wonder if we break

the Chromebook in half and we tape it back together if we can put it through the drive it'll work right now we've got we've got Jack Daniel coming up he is one of the founders of b-sides LV we will be approaching we will be having our ten-year anniversary next year we hope that everybody can come down and check that out this man needs no introduction if you've ever had been able to have a drink with him or just relax and have a good conversation he's a sage he's a listener a creative a thinker just an all-around top dresser ladies and gentlemen mr. Jack Daniel [Applause]

let's see

mic on a stand that they're trying to keep me in one place sorry cameraman I don't do that well hey I'm Jack I'm not going to take a lot of time I just want to say a few things about b-sides come on we can do it we'll skip that part here's the important thing you are here I'd like you to notice how many other b-sides have happened globally this is the intent event in end of July okay into July 2009 a handful of us kind of made this thing happen and about 175 200 of you came and we didn't think we were doing anything other than given a voice to some folks and having a little fun this is a tenth

one of these this is the four hundred and thirty-third b-sides globally in the past nine years where are we 90 plus almost a hundred cities 21 countries I'm currently having conversations with people doing ones in Beijing Istanbul Dubai I forget where else all across the US and Europe it's amazing a couple of these are based on my memory which is not always good so here we go a little a little look back this is the first year there might be a couple of years the room we were in wasn't air-conditioned so we were duct taping garbage bags to the windows to make it work and we had a portable air conditioning units and then we had just

the most amazing conference oh and we nearly burned the house down it turns out that if you plug in a portable AC unit you shouldn't have I'll come back to me technology anyway come on you can do it you can do it you know those days when your love of technology is unrequited

let's try this one more time and then I'm just gonna give up on slides who needs slides so anyway we nearly burned the house down I wasn't supposed to talk about that anymore but whatever but how did we get here I want to talk about the founders circle I don't want to make fun of any conferences that do this but we've grown dramatically and like any growing organization or building you need a growing foundation so unlike some other events and conferences whether this is your first event or 80th event welcome to the founders circle you're part of what makes b-sides what it is you know how does that work strangers become friends who became family and that's what built this

amazing thing yeah my powerpoint heckles me so creepy uncles I think this so the audio for those of you who know that clip they told to friends and they told to friends anyway so what does it take to make this happen it doesn't take that what it takes is Jack to give up on the stupid slide deck that's all so what it takes is it an incredible team of staff that make this event happen most of the staff works at least ten months of year a lot of us work 12 months of the year we have volunteers it takes hundreds of people to make this happen but it's not just us it's everybody who comes to

speak or run a workshop or run the capture the flag or man the villages it takes everybody that participates and shares what they know because that's what this is about it takes the sponsors who support this make this happen engage with our community give you jobs and hire you we have the training of a hiring ground going takes all of the volunteers who come in for a day or two or four or five and it takes you the participants you'll notice that doesn't say attendees there are no attendees here everyone participates and that's what makes it special what it takes to make b-sides happen is you participants not attendees we have sponsors not vendors we are a 501c3 the

IRS has rules about that but I think it means a lot to tell people that you're sponsoring this you're making this happen and as we've looked through what has made besides magical the four things that we came up with the first three were content sharing interesting content having good conversations about that content and if you do those two things it starts to build and strengthen your communities and if you do those three things it turns out that has a profound impact on people's careers it's worth if you are new to this or haven't seen this a few years ago I collected a bunch of recollections of what b-sides means to various people it means a lot to a lot

of us a lot of people have given their first talk at a conference here a lot of people have gotten jobs here the people that I lose on my staff because they got their dream job here people have made friends here people have leaned on each other through rough times because by the way we're all humans so work isn't all we do when we talk about the family here there are some of us who are truly closer than we are with our biological families and so there's something that you can all do here this week do it today and tomorrow at besides but there's other things happen in a town you can do it there what you need to do

who's anybody here they're first besides event yeah I love that now I'm gonna pick on somebody and hope she goes blush come here come here you can make you're gonna make a new friend and you're gonna talk and see if you can help their career or they can help yours this is my friend Sarah we met through Twitter trying to help her with a thing hello make a friend even if you're just barely young into your career you can help somebody come up behind you and maybe make a buddy who can move you a little bit further forward so hey I'm glad we've we've been chatting online since last fall yeah and we're finally meeting in person

here and she's part of the NOC team and making this event happen her first event she's in an orange shirt making this happen make buddies advance the world thank you so that's the most important thing you can do there's a lot to learn a lot to share I want to say happy birthday to I am the cavalry that was born here five years ago they're kind of making a difference in things and that was you know we gave them a launch pad that we don't get much credit but we get a little bit of credit for it I believe we were called hacker midwives that's kind of an interesting phrase I'm not sure I'm gonna put that on my bio but that

was a pretty good thing and with that I'm actually gonna do this very quick this is not the end this is the beginning I am going to leave you with a video of the first like five or six events that happened and let the a/v team I can't do the video it's not gonna work nevermind well you know I'm gonna try it we're gonna try technology one more time thank God the Internet's of passing fad because I'm really tired of this

I also have that as a tattoo don't worry there's no story behind a heart with tentacles flailing out of it give this very quick and then will let a V work

play

oh nice the audio doesn't want to play

if only there were people that understood technology here to help me anyway I'm gonna leave it with this running some of these photos may be interesting to some of you it's it's my laptop it's gotta be it's one of my audio cards should we try this one more time oh it's pushing out the VGA I hate the Internet

oh well

oh well hey rather than waste any more time I just wanted to say welcome to b-sides whether it's your first event or 60th their 70th there are all sorts of people in orange shirts who make this happen they're people in purple shirts who make it happen they're people in red shirts who make it happen if you are uncomfortable about anything need guidance find one of the folks with one of those colored shirts they'll steer you to things with that let's let's get rolling and thank you all very much [Applause]

you