InfoSec Conferences - Revision history

Ms-demeanor: /* What are some good cons? */

2024-03-19T22:48:02Z

What are some good cons?

← Older revision		Revision as of 15:48, 19 March 2024
Line 52:		Line 52:

	=== "But what about DefCon?" ===		=== "But what about DefCon?" ===
	DefCon is frankly unmanagably huge and I've had some pretty bad experiences with that conference. I know some excellent people who volunteer for DefCon, and I know many people who have a great time ~~ever~~ time they go, but I can't just give an unqualified recommendation to check out the con because my issues with it are many and varied. If you'd like to read more about it you can click the link to this wiki's page on [[DefCon]].		DefCon is frankly unmanagably huge and I've had some pretty bad experiences with that conference. I know some excellent people who volunteer for DefCon, and I know many people who have a great time every time they go, but I can't just give an unqualified recommendation to check out the con because my issues with it are many and varied. If you'd like to read more about it you can click the link to this wiki's page on [[DefCon]].

	== "But what if I can't go to a con?" ==		== "But what if I can't go to a con?" ==

Ms-demeanor at 22:46, 19 March 2024

2024-03-19T22:46:39Z

← Older revision		Revision as of 15:46, 19 March 2024
Line 47:		Line 47:
	* [https://bsides.org/w/page/12194156/FrontPage BSides]		* [https://bsides.org/w/page/12194156/FrontPage BSides]
	* [https://www.layerone.org/ LayerOne]		* [https://www.layerone.org/ LayerOne]
	* [https://toorcon.net/about-us/ ~~TooRCon~~]		* [https://toorcon.net/about-us/ ToorCon]
	* [https://hope.net/ Hope]		* [https://hope.net/ Hope]
	* [https://www.blackhat.com/us-23/ Black Hat]		* [https://www.blackhat.com/us-23/ Black Hat]

	=== "But what about [[DefCon]]?" ===		=== "But what about DefCon?" ===
	DefCon is frankly unmanagably huge and I've had some pretty bad experiences with DefCon. If you'd like to read more about it you can click the link to this wiki's page on [[DefCon]].		DefCon is frankly unmanagably huge and I've had some pretty bad experiences with that conference. I know some excellent people who volunteer for DefCon, and I know many people who have a great time ever time they go, but I can't just give an unqualified recommendation to check out the con because my issues with it are many and varied. If you'd like to read more about it you can click the link to this wiki's page on [[DefCon]].

	== "But what if I can't go to a con?" ==		== "But what if I can't go to a con?" ==
			You don't have to go to a con to get some of the benefits. Many conferences post talks and projects online so that you can get some of the experience even if you can't go to the con. The links below have archived talks and slides for various conferences going back 20 years in some cases.

			* [https://toorcon.net/archives/ ToorCon Archive]
			* [https://www.youtube.com/user/DEFCONConference/videos DefCon Talk Videos]
			* [https://www.layerone.org/archives/ LayerOne Archive]
			* [https://www.shmoocon.org/ ShmooCon Archive] (see archives in the footer)

Ms-demeanor at 22:35, 19 March 2024

2024-03-19T22:35:28Z

← Older revision		Revision as of 15:35, 19 March 2024
Line 36:		Line 36:
	== How do I find a conference? ==		== How do I find a conference? ==
	Look if you want to [https://web.archive.org/web/20240224005416/https://www.vice.com/en/article/9aa83p/julia-stiles-in-94-%E2%80%9Ccan-you-jam-with-the-console-cowboys-in-cyberspace-%E2%80%9D jam with the console cowboys in cyberspace], you can't expect someone to hold your hand every step of the way. I get a lot of people asking me "how do I become a hacker?" and that's a question you only answer by going out and becoming a hacker. If you want to know how to find a conference, you should probably try searching either "hacker conference near me" or "infosec conference near me" as your first step. And anyway I don't think a con is the best first step; see if you can't go to some [[InfoSec Meetings]] before you try to hit up a con.		Look if you want to [https://web.archive.org/web/20240224005416/https://www.vice.com/en/article/9aa83p/julia-stiles-in-94-%E2%80%9Ccan-you-jam-with-the-console-cowboys-in-cyberspace-%E2%80%9D jam with the console cowboys in cyberspace], you can't expect someone to hold your hand every step of the way. I get a lot of people asking me "how do I become a hacker?" and that's a question you only answer by going out and becoming a hacker. If you want to know how to find a conference, you should probably try searching either "hacker conference near me" or "infosec conference near me" as your first step. And anyway I don't think a con is the best first step; see if you can't go to some [[InfoSec Meetings]] before you try to hit up a con.

			If you are thinking of going to a con for the first time, I'd say to see if you can find something local with a relatively low entry cost instead of going to Black Hat right off the bat.

	That being said, you could also see who or what is affiliated with the conferences below.		That being said, you could also see who or what is affiliated with the conferences below.

	== What are some good cons? ==		== What are some good cons? ==
			In no particular order:
			* [https://www.shmoocon.org/ ShmooCon]
			* [https://www.socallinuxexpo.org/scale/21x SCALE]
			* [https://bsides.org/w/page/12194156/FrontPage BSides]
			* [https://www.layerone.org/ LayerOne]
			* [https://toorcon.net/about-us/ TooRCon]
			* [https://hope.net/ Hope]
			* [https://www.blackhat.com/us-23/ Black Hat]

	=== "But what about [[DefCon]]?" ===		=== "But what about [[DefCon]]?" ===
			DefCon is frankly unmanagably huge and I've had some pretty bad experiences with DefCon. If you'd like to read more about it you can click the link to this wiki's page on [[DefCon]].

	== "But what if I can't go to a con?" ==		== "But what if I can't go to a con?" ==

Ms-demeanor at 21:57, 19 March 2024

2024-03-19T21:57:59Z

← Older revision		Revision as of 14:57, 19 March 2024
Line 35:		Line 35:

	== How do I find a conference? ==		== How do I find a conference? ==
			Look if you want to [https://web.archive.org/web/20240224005416/https://www.vice.com/en/article/9aa83p/julia-stiles-in-94-%E2%80%9Ccan-you-jam-with-the-console-cowboys-in-cyberspace-%E2%80%9D jam with the console cowboys in cyberspace], you can't expect someone to hold your hand every step of the way. I get a lot of people asking me "how do I become a hacker?" and that's a question you only answer by going out and becoming a hacker. If you want to know how to find a conference, you should probably try searching either "hacker conference near me" or "infosec conference near me" as your first step. And anyway I don't think a con is the best first step; see if you can't go to some [[InfoSec Meetings]] before you try to hit up a con.

			That being said, you could also see who or what is affiliated with the conferences below.

	== What are some good cons? ==		== What are some good cons? ==

Ms-demeanor: Created page with "For some reason people think that it's really normal and standard to go to a conference about comics or anime or medical equipment but very weird to go to a conference about hacking. Hacker Cons (which I tend to call "infosec conferences" in work-speak) are just what they sound like. Like Comicon if you had panels on breaking into databases instead of upcoming TV shows. I really enjoy cons - hell, my first date with my spouse was at a con - and I think that people shoul..."

2024-03-19T21:46:07Z

Created page with "For some reason people think that it's really normal and standard to go to a conference about comics or anime or medical equipment but very weird to go to a conference about hacking. Hacker Cons (which I tend to call "infosec conferences" in work-speak) are just what they sound like. Like Comicon if you had panels on breaking into databases instead of upcoming TV shows. I really enjoy cons - hell, my first date with my spouse was at a con - and I think that people shoul..."

New page

For some reason people think that it's really normal and standard to go to a conference about comics or anime or medical equipment but very weird to go to a conference about hacking. Hacker Cons (which I tend to call "infosec conferences" in work-speak) are just what they sound like. Like Comicon if you had panels on breaking into databases instead of upcoming TV shows.

I really enjoy cons - hell, my first date with my spouse was at a con - and I think that people should go to them. If you're interested in learning about InfoSec in a serious way, a con is a good way to start to meet people, see cutting edge talks, and get a feel for the attitudes of the industry.

== Why go to an InfoSec Conference? ==
Conferences are fun, first and foremost. I've seen people talk about hacker cons as work events but that's generally not in the way that most people think of "work" conferences. Sure, you can learn work-relevant stuff at a con, but it's unlikely that you'll do a job-relevant workshop or have a sit-down with a vendor at a hacker con. Hacker cons are for bullshit and trolling and they're great.

=== Socializing ===
Cons are, first and foremost, social activities. I have gone to dozens of cons and truth be told, I have gone to almost zero talks because I'm not there to go to talks, I'm there to talk to people. I've made good friends at conferences, and met a lot of cool people, and made a lot of cool connections.

This is also actually the most work-relevant thing about conferences because another word for "Socializing" is "Networking." People tend to think that networking is a dirty word but it's only gross if you go out and obnoxiously try to sell yourself to everyone you meet as a potential future employee/co-worker. If you go out and just act like you want to meet people you'll end up meeting people and getting onto mailing lists and chats with them and suddenly it's three years later and you're moving to a new city and your friend you've been chatting with and hanging out with at cons for a few years happens to know of an opening at their job. I know ''so many'' people who have found work (or even started companies) because of cons, but essentially none of them saw the con as a "networking event" and all of them saw it as a party.

=== Learning ===
Okay but there are talks. The talks are there for a reason, and it's to teach you things, and you can learn cool stuff at a conference. You may not be able to learn a ''lot'' about a new topic in an hour-long talk but that's long enough to get a solid introduction and to learn the terms you need to know to go and seek out more info.

I tend to find that talks at hacker cons come in two flavors: extremely general or very specific. Extremely general talks are the ones that introduce you to a totally new topic, very specific talks are the ones that are functionally a post-mortem of a particular security incident. If you're new to hacker cons, try to go to a few of both at whatever conference you're attending to get a feel for what kind of talk is more informative to you or relevant to your interests. I really like the post-mortem explorations of how various teams responded after an attack, but hacker cons have all kinds of great talks. I've seen talks about near-space exploration, disaster preparedness, and making silly robots at cons and those have all been both entertaining and educational.

Talks also aren't the only way to learn at conferences; you will also often find that there are workshops and open learning "villages" scattered around a con. Maybe you're not going to get a lot out of a talk, but you might get a lot out of sitting down at a table with a few hundred padlocks and trying to pick them.

=== Fun Activities ===
Most cons have a variety of fun stuff to do that includes everything from art contests to capture the flag to dance parties. The con that I like best has a tamper-evident contest where the goal is to get into something that you shouldn't be able to and leave no trace; the same con has robot fights with terrible robots.

Many cons have hardware villages where you can work on assembling your badge (which is often some kind of nifty purpose-built computer) and other kinds of activity centers where you can try to hack IoT devices or play pinball or learn how to solder.

Games are also quite common, and you'll sometimes see cons making hacker-specific versions of game shows.

Most cons also include some kind of entertainment event on the main night of the conference - this can be a dance with DJs or a performance by a freak show or a casino night; there are lots of options and many cons vary their entertainment from year to year.

=== Challenge Mode for your Liver ===
You absolutely positively do not have to be someone who drinks alcohol to enjoy a hacker conference. I know many people who are sober, many people who are straight edge, and many people who are medically excluded from consuming substances who have a great time at cons.

I also had someone offer me 'shroom chocolate at a con last year and I know people who carry their own shot glasses around conferences because it's just so common for people to offer to pour alcohol into your mouth. If you are someone who enjoys partaking in mind-altering substances with varying degrees of intensity and legality, you will probably have a great time at a hacker con. Just. You know. Drink water and don't get alcohol poisoning.

I also know people who have found that conferences exacerbated their substance use issues and had to change their behavior around cons as a result. Take care of yourself and go in with the understanding that people will be using substances at the con.

== How do I find a conference? ==

== What are some good cons? ==

=== "But what about [[DefCon]]?" ===

== "But what if I can't go to a con?" ==