Some trouble with our slides, they're not working at the moment, but they're working on it. We're
talking to tech support in alt space about it. Okay, no problem about the slides. Can you hear
me well everyone? Oh yeah, so you want me to go ahead and I can... we're a little early yet,
we got about six minutes, but I can go ahead and introduce you whenever you're ready.
Yeah, please do. Thank you. Okay, welcome everybody. This is Defcon 30, alt space VR,
Defcon Group's presentation. We're having a little technical difficulty with our slides,
but they're working on that and they're talking to alt space VR tech support for it. In the meantime,
our speakers can go through the slides. We can make these slides, depending on the talk, we'll
talk to the presenters. Not all of them may embargo their slides, for instance, but if they
are willing to release them, we'll make them available so people can download them. Also,
we're available on Discord. You can always talk to us on the Defcon Group's VR Discord,
dcgvr.org. There's links there to all that information. So our next speakers are Mauro
Eldridge and Adan. They're both from Argentina. Mauro is an Argentinian hacker, founder of DC5411
in Argentina and Uruguay, specializing in hardware hacking and crafting madness of Ruby. He's a
speaker at over 35 events, so he's a very seasoned speaker. Adan is also from Argentina Hacker Group.
Member of DC5411. He's a junior hacker and developer learning
my way by playing with different languages and boxes, or I hope I got all that right.
So thank you for being here and feel free to take it away. Just you'll have to run your slides
locally. If you pick up a mic here, I'll drop this one. You can pick up these mics. You'll be
able to talk to everybody in the room. I'll also make sure I give you megaphone status,
which means that no matter where you are on the stage, you'll be able to hear you
throughout the entire space. So let me set that up real quick.
Okay, thank you for inviting us today. We're really happy to be here.
Okay, since the slides are not working, we provided on our Twitter and the channel
GitHub where we're posting in source code what we're presenting today and also the thoughts.
So feel free to follow from there. There's also a recorded demo
around the other day by playing with this. So feel free to watch it there too.
So okay, I will say this. Welcome to the talk. I'm Martin Valdez from today and me from PC54.
Our talk today presents this old tool called Gene. Think of it like a box or an acme,
but where the machine is sold. It's not only a mouse, it's a face. Think of it as a game
where you have a box that has a name, has a face, it has some quotes, phrases.
We can show you in this code, so it won't fall back. Think about it like a box.
It won't fall back without putting a thought. So I'm going to play this and I'm going to pass
the microphone to Adam to present. Hello there, my name is Adam DiBattista and I am a junior
hacker from Argentina. I spoke in the past for Argentina, India and Bolivia and this is my first
time taking for the USA. I am really happy to be here in the interest of showing the demo of
Exploit and Drown in some minutes. Okay, this will be an open-source tool, so we are happy to
share with you and to receive any kind of contributions that you make. It doesn't matter
if you are new to the channel or if you are new to the platform, we are here to help you.
If you are new to the channel or if you are new to the platform, we are here to help you.
Yeah, we're having some technical difficulties. Ability to present slides has gone down.
So, we are having some technical difficulties. Ability to present slides has gone down.
So, we are having some technical difficulties. Ability to present slides has gone down.
Ability to present slides has gone down.
Ability to present slides has gone down.
Ability to present slides has gone down.
...
...
...
...
...
...
...
...
...
...
Now, I'd like to share with you a little bit of history.
Some of the things we've done for fun,
found a way for the community to get together,
and we've come up with this crazy scenario of curfew changes.
Again, everyone will contribute what they can.
Some of the things we've done for fun,
found a way for the community to get together,
and we've come up with this crazy scenario of curfew changes.
Again, everyone will contribute what they can.
Again, everyone will contribute what they can.
I don't know about anybody else, but I could definitely see the GitHub screen there for a good bit of the presentation.
Yeah, we put that screen up with the GitHub link.
The reason we did that is that people using an actual VR headset would not be able to see a URL that we posted.
We also posted it over on the screen here on the side, but it got cut off.
So they posted the actual GitHub page on a screen temporarily during the presentation so people could get the link.
If you go to defcongroupsvr.org, you can connect to our Discord server.
We can give you the links that way as well.
And they've made their slides available on that GitHub page as well.
So thank you to our speakers. That was an excellent presentation.
Thank you for that.
If anybody has questions right now they would like to ask our speakers, feel free to ask.
Are you all avid D&D players as well?
No, you know, to be fully honest, I just saw some campaigns of D&D on Warhammer 40k, but I never played myself.
What was the hardest part of making all this, would you say?
The hardest part for sure was that once you submit the form, we need to replace all the string you submitted to the Ruby template,
where they would, you know, to fill the API keys, the strings that the boss is going to say, and we use placeholders.
You know, we use a highly specific variable name, which needs to be replaced with GSOV, or something like Unix Set, S-A-E-D.
And the bad part is that this messes up everything.
Because the backend sometimes will just catch a single quote or catch anything and it won't run at all.
Debugging that part was really hard.
Would you say when you started this project that you knew what the end of it would look like exactly?
Or was it just kind of an idea that just kind of grew like an initial idea?
Well, this is a really early stage. We couldn't exactly figure out how many conditions we wanted to implement.
Actually, we have a list of all the things we would like to see implemented, but we can't materialize lots of these ideas.
And that's a good thing for me. Part of the project is foreseeable. We can see how it will look like.
But another part is still quite ethereal. We can still yet figure out exactly how to make it.
And that's fun, because you need to resort to a lot of people from different backgrounds to ask,
Hey, can we do this? Can we get this information? Can this be done this way?
So yeah, there are a lot of things that are still undefined, to be honest.