HOPE2020

talk on conference website

When Inverse Phase isn't composing chiptune video game soundtracks (_Treachery in Beatdown City, Super Smash Land, Shuttle Scuttle_) or writing recognized tributes to other musicians (Nine Inch Nails, Fall Out Boy, Assemblage 23), he's often working at a computer and gaming museum in Maryland, participating in the demoscene, or researching something related to old 8-bit computers. Tell him about your favorite cheese slice or ask him about CTM, a chiptune synthesizer he's building from scratch!

At The Circle of HOPE in 2018, he talked about how old, pirated software came with "extra" introductions from those who broke the copy protection. The cracking scene, becoming bored with and unrecognized by their efforts, evolved into a community called the Demoscene where they make audiovisual art under extreme limitations. At HOPE 2020, he will revisit computer music videos called demos, stored entirely in just a few kilobytes of space, including CD-quality music and 3D graphics on 8-bit machines. Many of the demos shown will be new from 2018 and, as usual, he'll discuss why they are technically impressive so you can gain a new appreciation for computer art.

talk on conference website

This workshop will help you practice techniques to detect, analyze, and respond to intrusions. You will construct targets and attackers on the Google cloud, and send attacks using Metasploit and Caldera to emulate APT attackers. Participants will monitor and analyze the attacks using Splunk, Suricata, Sysmon, Wireshark, Yara, and online analysis tools including PacketTotal and VirusTotal. The ATT&CK Matrix will be covered in detail, which enumerates threat actors, tactics, and techniques, so red and blue teams can better communicate and work together to secure networks.

The workshop is structured in a Capture the Flag format. Each participant works at their own pace. The techniques will be demonstrated, with complete step-by-step instructions to lead beginners through the easy challenges. There are also harder challenges for more experienced participants. We will help participants as needed, to ensure that everyone learns new techniques.

Participants need a credit card and a few dollars to rent Google Cloud servers. Debian Linux and Windows Server 2016 systems will be used. All the tools used are freely available, and all the training materials will remain available to everyone after the workshop ends.

https://wiki.hope.net/index.php?title=Incident\_Response\_workshop

talk on conference website

Since 2008, Radio Statler has been broadcasting original content from HOPE to the rest of the world: interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the talk rooms.

Radio Statler brings additional content that generally runs for the duration of the HOPE conference. They will continue this tradition of providing original content, both live and prerecorded, to the attendees at this virtual HOPE.

Watch and listen at http://radio.hope.net/

talk on conference website

In this presentation, attendees learn how to hack the mind of a Homo sapiens target in conversation. Advanced understanding is presented of how humans' conscious mind critical factor works, and can be exploited in targeted social engineering. The critical factor is a part of the conscious mind that responds to demands on a person, and regulates compliance versus noncompliance. Social influence, manipulation, or obfuscation of the attacker's intent or motives have traditionally been used in psychological operations, like social engineering. Tailoring communication patterns specific to a person's conscious vulnerabilities inherent in their critical factor increases desired response compliance, as subconscious processes regulating suggestibility are accessed. Identifying a person's specific conscious mind critical factor suggestibility, adapting communication to exploit psychological vulnerabilities, and entraining a desired state of consciousness depth are used in a targeted attack to obtain a desired behavioral, psychological, emotional, or physiological effect. Attendees will learn advanced psychological techniques to improve their own social security and recognize suggestibility exploits in human targets.

talk on conference website

Software distributors typically provide software in binary form to end users, yet many DevOps activities from performance profiling to security hardening are difficult to perform without access to source code. Furthermore, significant defenses such as the recent Spectre mitigations often require compiler-level changes. Even for open source systems, it takes time to rebuild projects from source and incorporate a modified compiler.

One simple way to transform a binary is to emulate or virtualize its execution environment. Existing tools (DynamoRIO, Pin, Valgrind) that perform such dynamic binary translation will be introduced. These tools work on nearly any binary and can be extremely useful, although they necessarily introduce some overhead. Other than virtualization, another popular technique is binary rewriting, which is useful for introducing small changes (especially patches), but requires quite a thorough understanding of the binary at hand.

The main part of the talk will introduce a new tool called Egalito, which works differently than existing tools. In the past, binary analysis has been seen as intractable: it quite easily reduces to the halting problem. However, modern binaries have substantial metadata embedded in them. In particular, most Linux distributions (Debian, Ubuntu, Fedora, openSUSE, Arch, etc.) have moved to position-independent executables by default. Egalito shows that such binaries can be completely and precisely analyzed, with all cross-references resolved; after which, user modifications can be introduced; after which, a new binary can be created with no constraints from the original binary. This process is called binary recompilation: it introduces no overhead from virtualization or trampoline jumps.

The goal is to allow Linux power users to transform any binary on their system at a moment's notice, and to improve performance or security. This talk will convince developers and users that binary transformation is a useful tool for any developer's toolbox.

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

Anonymous communication networks, such as Tor, are vital to maintain our privacy against adversaries that can monitor our network traffic to collect metadata like IP addresses. However, Tor does not defend against global passive adversaries that can observe the input and output of the entire network, such as all the traffic going in and out of Tor entry and exit nodes. For message-based systems, it has been shown that mix networks that reorder (mix) packets can defend against these nation-state level adversaries. After years of research as part of the European Commission PANORAMIX project and one year of coding, the Nym project has launched its generic, Rust-based MixNet code. This talk will demonstrate how a mix network can eliminate even timing information from a chat application, and how developers can build on top of this new mix networking framework.

None

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

The publication of the definitive history of hacktivism pioneers Cult of the Dead Cow in mid-2019 renewed interest in the influential group and inspired members and others to revive the mission that cDc defined two decades ago as hacking for human rights. For this panel, three stalwarts in the group return to HOPE to discuss their new initiatives and what they see as most admirable in others' work fighting surveillance, racism, and disease.

talk on conference website

Honeypots can be implemented to discover new threat information or detect intruders on a network. However, while there are numerous free honeypots available, many of them can be complicated to deploy and require additional engineering to consume log data. If you are curious about honeypots and are interested in a simple way to deploy your own honeypots, the HoneyDB honeypot workshop is for you.

https://wiki.hope.net/index.php?title=HoneyDB\_Honeypot\_workshop

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

Over the past ten years, transparency non-profit MuckRock has helped thousands of requesters file tens of thousands of public records and Freedom of Information Act requests to government agencies large and small. In the process, they've unveiled everything from the government's program giving local schools grenade launchers brought back from war zones to the CIA's declassified board game collection. Join Michael on this walk through the government's fascinating hidden archives and learn the secrets of what actually works when it comes time to convincing agencies to give up some of their most closely held secrets. Throughout the conference, he'll also be helping conference attendees workshop their request ideas, and during the presentation the best ideas will be revealed with prizes for winning submissions and inspiration for everyone else.

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

Every so often we see another headline announcing a major breakthrough in quantum computing, often accompanied by breathless warnings of the death of encryption as we know it. How real are these claims? Is encryption really doomed? How is quantum computing a threat anyway, and is there anything we can do about it? This is a session for people who are IT literate but not physicists, let alone quantum physicists. Come along if you’d like to hear quantum computing and encryption explained by someone who is IT literate, but not a physicist, let alone a quantum physicist!

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

Using public records laws can reveal everything from covert surveillance programs to hidden family history - but only if you know how to ask for it effectively. At this workshop, FOIA (Freedom of Information Act) masters from MuckRock and other leading transparency organizations will share their basic strategies for opening government at all levels. They'll go beyond magic keywords to include and teach participants how to get in the mind of government bureaucracy to file more precise, effective, and illuminating requests. In addition to strategies that will help new requesters and veterans alike improve their transparency strategies, the workshop will offer opportunities to receive advice and feedback on attendees' request ideas.

https://wiki.hope.net/index.php?title=Four\_Steps\_to\_FOIA\_Mastery\_workshop

talk on conference website

*We Used to Have Cake, Now We've Barely Got Icing* When free software licensing was born, software copyrights were essentially nonexistent, software patents didn't exist at all, terms of service weren't enforceable and there was no anti-circumvention law. In other words, you were legally permitted to clone or interoperate with any digital product. Today, we think of free software as a way for a company to say, "We probably won't sue you if you write code that can interoperate with ours" - but when free software started, it was more like, "I know I've got the absolute legal right to reverse engineer all your code and make a competing product, but that's such tedious work. Please, make it easy for me by giving me your source code." Back then, free software was icing on the cake. Then they stole the cake and left us hoping for a little icing every now and then. This makes a huge difference because software has eaten the world and shit out a dystopia: a place where Abbot Labs uses copyright claims to stop people with diabetes from taking control over their insulin dispensing and where BMW is providing seat-heaters as an-over-the-air upgrade that you have to pay for by the month. Companies have tried this bullshit since the year dot, but Thomas Edison couldn't send a patent enforcer to your house to make sure you honored the license agreement on your cylinder by only playing it on an Edison phonograph. Today, digital systems offer perfect enforcement for the pettiest, most bullshitty, greediest grifts imaginable.

talk on conference website

In this workshop you will create a map-based UI showing the number of reported cases of COVID by country. This UI will be powered by JavaScript and D3.js will be used as the map-based charting system.

https://wiki.hope.net/index.php?title=Map\_Based\_UI\_Using\_Javascript\_workshop

talk on conference website

Despite legacy BIOS going away, the boot sector gaming scene is on the rise. These are x86 16-bit games intended to fit inside the 512 byte MBR (Master Boot Record) space. Despite these limits, you'll find playable clones of games like PacMan, Invaders, Arkanoid, Flappy Bird, Snake/Nibbles, a rogue-like dungeon crawler, Tetris, a ray-casting 3D game, some more independent titles, and new ones are still in the works.

However, this won't be a history or overview of this interactive demoscene-adjacent playground. It's the more meta playground of gaming the games - hacking and cheating at them. Though this talk will dive into the technical details of hacking the games, a showcase of a collection of patch files (aka Boot Genie) will be shown and demonstrated. These patches include cheats such as invincibility, more lives, speed slowdowns, score hacks, rule/logic hacks, multiplier mods, better powerups, level mods, and more.

Beyond cheat patches, another showcase of "gaming the game" will focus on the bootRogue game. This will be a deep dive of the consequences of choosing to use a simple RNG (random number generator) for procedural level generation. Though each dungeon is "randomly" generated, we use our knowledge to understand the specifically discrete amount of unique dungeons there really are, and how to get to any arbitrary dungeon of our choosing just based on the items we pick up along the way! Custom routing protocols were programed for optimal traversal.

talk on conference website

This workshop will teach you how to use this particular inventory management system - especially suited for hackerspaces, but also good for all. Tutorials will be provided in the inventory management system that will guide you on modeling your stuff in the system. The system doesn't really require computers, but they will be used here, given this year's constraints.

You will learn about the implied political agenda that was discovered as this system was developed and used. In short: many people outsource the cataloging of items to retailers, and this creates a need for disposable products that can be shipped very quickly. If we would all catalog our things, we might consume less.

The workshop has two sessions. All participants should attend session one. Session two is optional, designed for those people who want to learn the special software. This is session one.

https://wiki.hope.net/index.php?title=Inventory\_Management\_Playground\_workshop

talk on conference website

With the price of ESP8266 and ESP32 development boards dropping to between $1 and $5, the Wi-Fi hacking community has embraced these tools as platforms for security research. Kody will go over the capabilities of these extraordinary devices and demonstrate the community projects that take advantage of them. This talk will cover a Wi-Fi deauther and network cloner with a web GUI, advanced serial CLI interfaces to enable packet sniffing and monitoring, unmasking modern MAC address privacy protections to track mobile devices, and brute-force discovery of trusted networks stored in nearby Wi-Fi devices. Kody will also show how these microcontrollers have been used to create safe and fun Wi-Fi hacking CTF games for beginners. Attendees will learn how these ultra-cheap devices embedded in most "smart" light bulbs can disable Wi-Fi security cameras, reveal work and personal affiliations by identifying previously joined networks, and track the location of their smartphone in public.

talk on conference website

A hacker mindset is essential to understanding the security of complex technological systems. This way of thinking applies much more broadly: not only to socio-technical systems but to purely social systems as well. Tax loopholes, for example, can be understood as hacks of the tax code. Disinformation campaigns can be understood as hacks of the democratic election process. This talk extends the core language of hacking to the broad systems that underlie our society. Bruce will talk about what it means to hack the law, to hack the market economy, and to hack the democratic process. Others have written about how social engineering hacks trust and authority, and how social media sites hack attention. Bruce will generalize this further, discussing how our cognitive systems are hacked. Finally, he will extend these notions to discuss artificial intelligence and robotics; these systems will hack what it means to be human, and also how we react to things we react to as human. In the 21st century, everything is a socio-technical system, and everything is vulnerable to hacking. Our experience and expertise is necessary to secure these systems, and the goal of this talk is to explain how we can do that.

None

talk on conference website

Our smartphones listen to our conversations even when they’re not on. GPS tracks us even when we know where we’re going. Our credit cards track all of our purchases. The cameras in our computers watch us. Maybe the camera in our smart TVs watch us too. We go through life sending out little electronic messages revealing everything we say, everywhere we go, everything we buy, and everyone we talk to. Artificial intelligence claims it can predict our actions and even our thoughts before we have them. It claims it can influence what we do and even how we vote. Is this the world of interconnectedness we dreamed of 25 years ago at the dawn of the Internet age? How can we control it instead of having it predict our moves and nudging us? https://wiki.hope.net/index.php?title=Surveillance_Capitalism_workshop

talk on conference website

Explore the wonders of Wardenclyffe, the historic laboratory built by science visionary Nikola Tesla, where he engineered a colossal 18-story wireless transmitting tower and conducted experiments that still evoke questions and controversy over a hundred years later. Presenter Marc Alessi, executive director at Tesla Science Center at Wardenclyffe, will share past, present, and future happenings at the site, including details on a recent discovery made during renovations and fascinating info on the tunnels beneath Tesla's legendary laboratory. You'll see actual experiments in wireless tech using Tesla coils along with a surprising electric music performance. You can further satisfy your curiosity during the live Q&A session.

talk on conference website

More than a decade ago, the democratization of 3D printers and CNC 2D cutters using lasers and routers brought with it a lot of breathless theorizing that mass customization and bespoke local production of objects would make global supply chains a thing of the past. Though these machines have changed maker culture dramatically and radically shortened the timeline of corporate product development, globalized supply chains are, if anything, even stronger. One key reason for this is that though these machines print with digital instructions which can be easily copied and sent, the matter they use is specialized, and therefore usually centrally produced. Another is that many of these materials are mined, or harvested in a mining-like way, so centralized production is most cost-effective.

This talk will present an alternative technological development path; one where materials are sourced entirely from constituents of living ecologies - plants, animals, microbes, and the materials they produce. Starting with historical examples of ecology-derived material production, Dominic will then present a catalogue of possible materials for experimentation. Then, using examples drawn from the maker community and from his own work, he will show how this method of production has the potential to make objects with functional properties across the entire spectrum of complexity - even including simple electronics. Along the way, the talk will highlight the societal, resilience, and ecological advantages of a manufacturing system like this one.

None

talk on conference website

What is FOIA? The Freedom of Information Act allows us, normal citizens, to ask the State anything. Until now, Badita has sent over 7,000 FOIA requests to over 3,000 public institutions in Romania. Most of them were sent using the ACTFOIA methodology. The acronym stands for "Anti-Corruption Toolkit for the Freedom Of Information Act (ACTFOIA)." This is a powerful new tool Romanians have at their disposal, so they can rank different cities on diverse topics and expose corrupt practices designed to steal public money. This will provide positive publicity for the local authorities that are not wasting public money, and will create a public backlash against the ones that are wasting public money. Citizens can go to the local authorities and ask questions like: why are we paying 50 Euros per month for garbage collection, when on average there are 100 cities only pay 10 Euros per month?

https://wiki.hope.net/index.php?title=Using\_ACTFOIA\_workshop

talk on conference website

Do you have a cool talent or hack? Here’s your chance to present it to a planet of enthusiastic hackers, hosted in two parts on each Saturday of HOPE (2200 EDT on the speaker track) by hacker archivist Jason Scott. Rules, regulations, and how to sign up will all be announced. If you’ve got something cool you can do and you want to show it off, this is your big chance! (And of course, first place will win a valuable prize.)

talk on conference website

You know that part in a movie when someone says something cool like, "Fasten your seatbelts..." and then rad music plays while they race around a city? This is that cool music.

An 8-bit performance with original music by HangOnGetReady and cld on visuals.

talk on conference website

So you've noticed the education infrastructure we've inherited isn't quite up for the new challenges. GPA is outdated, and we need to transition institutions to a more collaborative paradigm. To evolve beyond GPA, we need to build credit ramps! Developed in a Beijing high school, the MATRIX is a credentials converter that bridges GPA, competency-based assessment, and micro-certifications. Using a collaborative spreadsheet of links, it open sources teaching materials, cultivates self-directed learning skills with the habit of documentation, and shares learning evidence through a communal portfolio. If you're a teacher bound by GPA looking to encourage self-directed learning and peer-to-peer teaching - or a hacker seeking to create an index matching community of hackers and their skills, join this workshop! You will learn to set up a MATRIX, compile grades, competencies, and certifications from a course, and add recently learned skills from the conference into a HOPE 2020 MATRIX.

https://wiki.hope.net/index.php?title=Evolve\_Beyond\_Grade\_Based\_Education\_workshop

talk on conference website

The PGP web of trust is broken. Actually, that's not quite right. "Broken" implies it was working at one point, and web of trust never really worked. But that won't stop us from having fun with it.

This talk will look at PGP at the protocol level, show some really glaring issues with how the web of trust was designed, and some really fantastic ways that it fails. It will also introduce a series of tools that can help you to wreak havoc on the keyservers.

None

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

This is a “part one” talk on exploitation detailing how to get started with AFL to find bugs (usually memory corruption vulnerabilities). Finding bugs in a program gives you the opportunity to research further potential vulnerabilities and exploitation. It’s really that simple. vr0n will show how to install AFL, how to set up AFL, and how to use AFL against a program.

talk on conference website

Drinking mate tea and soda plays a vital role at all hacker congresses! A virtual mate circle is being hosted especially for newbies so everyone can learn how to prepare mate tea and exchange tips with other drinkers. This workshop includes a crash course on mate history (traditional and the bottled soda phenomena, including the most famous: Club-Mate) and a tutorial in mate making techniques. Drinking mate together is an opportunity to sit down and exchange information, and this is an opportunity for participants to become educated in mate making techniques so that they can then go and create their own mate circles.

https://wiki.hope.net/index.php?title=Mating\_Online\_workshop

talk on conference website

Whenever a co-worker's password is cracked or someone's intimate pictures are plastered online, we roll our eyes and laugh at the idiot. We lose patience when the commoners don't understand the implications of search engine companies diversifying into home automation and genetic testing. We still can't effectively articulate the importance of being vigilant to non-techies. Why shouldn't someone use Windows XP or plug-and-play security cameras in their bedroom? After all, they've got nothing to hide and the old OS works just fine.

Our community is generally unsuccessful in promoting privacy and security to ordinary people. This talk will discuss common advocacy pitfalls and present effective training ideas that convey to non-techy folks the long-term importance of privacy and security.

For example, an app will be introduced that exposes extremely personal details on its users after it's given basic phone permissions. Regular users get to see intimate conclusions about their lives piled up on the server screen in real time, creating a unique profile as the innocent game they installed mines every byte of their data. Aelon will discuss the financial incentives around this, showing how users' profiles can be sold to data brokerages. There will be a demonstration of modern apps that may prolong screen time by displaying targeted, emotionally-engaging content when detecting that the user is about to leave. We will see how our brains react to certain stimuli which tech products can exploit to further hook users.

A phishing link will be demonstrated as it takes over a user's laptop. Databases of scattered consumer security cameras will be inspected to explore how unintended, yet fully-automated and efficient mass surveillance systems are created. This presentation will review some of the ways PIs track down a subject across the country and share other eye-opening demonstrations.

The talk will discuss where other conscientious techies can help with triggering meaningful discussions and opening the average person's eyes to the realities of tech in the 2020s.

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

While the news is full of stories about government and corporate surveillance online, we don’t hear as much about online stalking. Digital stalking is a huge and fast growing problem. Android stalkerware apps increased by over 300 percent in the first eight months of 2019. The consequences of online stalking can be tragic, often leading to physical abuse and even murder. Despite the danger, most of us remain unaware of the risks posed by digital stalking. What are steps that the average person can take to recognize and protect themselves from a stalker online? This panel will discuss the scale of the problem. David Ruiz, a senior online privacy writer from Malwarebytes, will share the cybersecurity company’s own detection statistics to illustrate recent trends in stalkerware infections. He will also share data from some of the members of the Coalition Against Stalkerware, of which Malwarebytes is a founding partner. They will then discuss the many forms digital stalking can take - from a compromised iCloud account, to surreptitiously installed stalkerware apps, to jailbroken or otherwise compromised phones. The panel will also look into how stalkerware apps differ between iOS and Android. They will also examine state-sponsored stalkerware, like the Saudi-developed Absher app. The talk will present and discuss strategies to defend against stalkers. How can you re-secure your iCloud account? Why should you be wary of “gift” phones and tablets? What are some signs that your device may have stalkerware operating on it? What are free tools that can detect stalkerware? How can you remove stalkerware from your device? You’ll learn how victims can protect themselves after they discover a stalker. Panelists will discuss how important it is to secure evidence that a stalker may have left on your device and introduce ways to maintain resilience and redundancy to prevent being locked out of your own phone and online identity. You will learn about organizations - such as the National Network to End Domestic Violence - that can help victims. The speakers will emphasize how critically important it is to have a plan to protect your safety before you take any actions that may alert a stalker. Finally, you will learn the answers to these questions: What can be done to advance the fight against online stalking? What approaches and tools can the hacker community build to help victims recognize suspicious activity? How can action be taken against the developers of stalkerware?

talk on conference website

Participants will attack web applications with: command injection, SQL injection, cross-site request forgery, cross-site scripting, cookie manipulation, and server-side template injection. This workshop will also exploit Drupal and SAML. Participants will then implement network defenses and monitoring agents, using Burp, Splunk, and Suricata.

https://wiki.hope.net/index.php?title=Securing\_Web\_Apps\_workshop

talk on conference website

Since 2008, Radio Statler has been broadcasting original content from HOPE to the rest of the world: interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the talk rooms.

Radio Statler brings additional content that generally runs for the duration of the HOPE conference. They will continue this tradition of providing original content, both live and prerecorded, to the attendees at this virtual HOPE.

Watch and listen at http://radio.hope.net/

talk on conference website

Founded by the Electronic Frontier Foundation (EFF), the Electronic Frontier Alliance (EFA) is a grassroots network of community and campus organizations across the United States. Join representatives from the EFF, and EFA affiliated groups, for this panel discussion on community-based tech advocacy, and working within your community to educate and empower neighbors in the fight for data privacy and digital rights.

None

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

*Now More Than Ever: The Hacker Revolution Meets the Pandemic* A quarter century ago, Richard began addressing the impacts of the hacker revolution on the human inside the machine - how it would transform our lives, our thinking, our work, our identities. He was describing the "digital revolution" as a transformational engine, not as an academic exercise, but as genuine paradigm change. He was called "crazy" and "insane" but it all came to be as he described: hackers created the frames in which others lived - inside the bigger picture without even knowing it. Insanity, like wisdom, is apparently contextual. The pandemic is creating another paradigm change which asks that we apply real hacker methodologies to new realities. Context matters, and the context *is* the content of our lives. Hackers have the tools to identify the fragments of a disintegrating society and use them to model new structures. Hackers have internalized procedures, assumptions, and working models to piece together parts of complex systems to create new wholes, to break down to break through. Hackers once again are thought leaders for a brave new world. Leadership that is conscious and intentional puts the reins into our hands. This talk will illuminate how we need to apply our expertise to create a new landscape, how the "hacker ethos" translates into practical action. Because, as Philip K. Dick said, "Reality won't go away just because we refuse to believe in it."

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

On Thursday, March 19, 2020, Dr. Pierre Elias, a Columbia University cardiology fellow, reached out to Research and Learning Technologies librarian Madiha Choksi to utilize the Columbia University Libraries' 3D printers to produce supplemental face shields. Within a few days, she had optimized an existing design for face shields, taken two 3D printers from Butler Library to her apartment, and was printing parts and assembling shields. A few days later, she was joined by her fellow librarians, Alex Gil and Moacir P. de Sá Pereira. Two months later this team of librarians had organized one of the largest PPE grassroots efforts in the city, COVID Maker Response, which effectively produced and distributed more than 25,000 face shields to New York City hospitals and other front line institutions during the height of the city's pandemic crisis.

In this talk, the three librarians will share their experience building this volunteer collective: logistics, finances, project management, and communications. The team will also expand on their notion of "nimble tents" - a trans-institutional approach to rapid hacking in moments of crisis - and recent experiences and examples, including the #PRMapathon library response that effectively rebuilt the OpenStreetMap of Puerto Rico after Hurricane Maria to help the Red Cross, and the rapid response research of Torn Apart / Separados during the family separation crisis of 2018. At the core of the librarians' argument is the idea that library professionals already have the skills they need to make effective and impactful interventions in moments of crisis.

None

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

This workshop will cover what makes a good article or essay. This will include concepts ranging from "how do I come up with an idea?" to "when is it time to submit?" The workshop will also explore the general structure of a good essay, using actual published articles as a guide. Feel free to bring your own essays-in-progress, ideas, or curiosity.

https://wiki.hope.net/index.php?title=How\_to\_Get\_Published\_workshop

talk on conference website

Most people know that the government can track you via cell site location and e911 data, and that social networks have extensive location tracking capabilities. However, fewer people are familiar with the shadowy world of location tracking via data brokers and apps. Learn how simply giving a business your mobile phone number can be construed as "consenting" to them electronically following you like a creepy stalker, 24 hours a day, seven days a week. We'll also go over some creative ways to take back your privacy while still enjoying the convenience of a mobile phone.

None

talk on conference website

As security experts around the world have proven, our voting equipment and infrastructure are very vulnerable to multiple types of attacks. Instead of focusing on problems and broken things, this talk will focus on simple fixes that vendors and governments can put into action right now.

Starting with the machines themselves, then moving through parts of the entire system, BiaSciLab will offer suggestions on how simple practices and changes in thinking and hiring can improve the security of the entire system. At the Defcon 26 r00tz asylium, BiaSciLab was one of the first to hack the mock election reporting system set up by the voting village. Some have pointed out that this was a purposely flawed system designed for the kids to break. However, as outlined in the Mueller report, Russian hackers used the same SQL injection technique to break into an election reporting system. If our systems are so secure, how was this able to happen? Lack of secure coding practices and both peer and outside review. If proper coding review and application testing had happened, this SQL injection vulnerability would have been found and fixed.

Breaking down these flaws and offering real solutions for each one, BiaSciLab will bring hope in the face of this daunting and complex security problem.

talk on conference website

Wi-Fi hacking has become cheaper and easier with the creation of the Wi-Fi deauther, an Arduino based firmware for the ESP8266 that allows it to perform advanced Wi-Fi attacks for as little as a few dollars on any operating system. This workshop is for beginners interested in hacking with microcontrollers, hackers interested in learning Wi-Fi hacking, and anyone interested in what's possible with low-cost devices.

https://wiki.hope.net/index.php?title=Wi-Fi\_Hacking\_on\_the\_ESP8266\_Workshop

talk on conference website

Gus owns a couple of Gmail accounts with very generic, common user names. Unfortunately, this means she has ringside seats to some of the worst privacy and security mistakes on the web, as everyone with these names (and everyone they know) sends email to these accounts, thinking the mail will go to the right recipients. It's a common story by now, one that others have written about, but it's an under-recognized human factors problem in security. One of her accounts is a veritable nuclear waste dump of social security numbers, licenses, and bank account information that should never have been sent there.

In this talk, Gus will give an overview of what kind of documents show up in this account, and who is sending them. In talking to some of the people who have sent these misguided emails, she has learned about the specific shapes of bad habit and mistake that lead people to send email to this account - thinking it is theirs in some cases - and she will share those, along with comparisons to the Internet mistakes she saw in her dissertation research. Gus will discuss the structural problems with email that plague us this way. She will talk about the potential ramifications of accounts like this for phishing schemes and social engineering pretexting, which have been cited by other security researchers. Gus will describe the successful and unsuccessful interventions she has attempted in order to try to get people to stop sending email to these accounts, and the weird, serendipitous stories that have come about as she's talked to them (including getting written up in a North Carolina newspaper story about a dying woman she never met).

In the comments period, she will seek input from attendees facing this same problem, and will workshop other potential ways to solve it.

talk on conference website

The wealthiest company on earth now controls one of the U.S.'s most pervasive and complete video surveillance networks of public space, marketed as a personal and community safety tool: Amazon Ring. These doorbell cameras record public streets all day, every day, and make footage available to local law enforcement through partnerships with over 900 police departments. With no legal protections in place to ensure responsible stewardship or governance of such a network, understanding its breadth and extent is crucial. Amazon Ring includes a membership to a neighborhood "surveillance social network" called Ring Neighbors, where users post recorded videos and other content, in the name of public safety.

In 2019, Dan reverse engineered the private API that Amazon Ring uses to communicate with its mobile app, and developed a methodology to systematically scrape every post on the Neighbors app throughout the U.S. since the beginning of 2017, including posted videos. In this talk, they detail how they reverse engineered the API, how activist hacking can help us track and hold companies like Amazon accountable, and what the data has been used for so far: mapping Amazon's growing surveillance network, using statistical methods to understand who uses the platform and why, what kinds of people Ring users find "suspicious," and other adventures.

None

talk on conference website

At first, it didn't sound wrong. Scientists were going to track down social bots using scientific methods in order to study their influence on public debates. But a deeper look into the research shows that it is anything but scientific.

Researchers work with wrong claims and flawed methods. Algorithms, instead of being open source, are intransparent. Results contradict each other. Papers have been rejected by scientific journals. To this day, nobody has been able to present any scientific proof of "mass manipulation by social bots."

Yet this narrative is strong enough to delegitimize major political movements like Fridays for Future or Black Lives Matter. When scientists claim that a movement consists of bots, its voices are less likely to be heard.

It is time to set the record straight: People are not bots!

talk on conference website

There are many reasons to automate web browsing for security purposes, from scraping websites, to request manipulation, to task automation. Staid tools like wget and curl are a good start. But the modern web is dynamic and often client-side, limiting the effectiveness of these tools. Luckily, most modern web browsers provide webdriver engines that, when coupled with an automation framework, allow users near limitless methods to automate interactive web browsing sessions as if they were interacting with the browser themselves.

This talk will share basic concepts and advanced tips and tricks from years of experience automating web browsers using automation frameworks like Selenium. It will begin by discussing common methods of web automation, the Document Object Model and how to use it, and how webdrivers work with automation frameworks. From there more advanced topics will be explored such as browser configuration for research, headless browsing, interacting with modals, dealing with catpchas, and logging all the things. Code snippets will be provided along the way, including multiple methods of solving most problems.

talk on conference website

Through the lens of an artistic practice that combines sex work and performance, Lena will discuss the impact of the COVID-19 pandemic on sex worker communities, best practices for mutual aid organizing, and threats to digital freedom which concern sex workers, activists, and the public at large.

Major crises such as COVID-19 reveal the cracks in neoliberal capitalism and who gets left behind. Without relying on big donors or institutions, informal mutual aid networks fill the structural gaps in support for marginalized communities such as black and indigenous people, queer/trans folks, those with disabilities, etc. Such communities have long relied on social bonds as a matter of survival while existing in a constant state of crisis and scarcity. Sex workers, in particular, have faced loss of income as social distancing measures shut down their places of employment. In order to provide for basic needs such as food and shelter, sex workers have spearheaded grassroots relief efforts to collect and distribute financial support to sex workers in need.

Since the pandemic, a growing number of people have also turned to online sex work. Yet anti-trafficking legislation and technologies, such as FOSTA-SESTA and facial recognition software, conflate sex work with sex trafficking, rely on law enforcement and criminalization, and leave sex workers vulnerable to abuse.

Introduced on March 5, 2020, the EARN IT Act would amend Section 230 of the Communications Decency Act of 1996 and threaten end-to-end encryption by requiring all communication services to allow "back door" government access. Similar to FOSTA-SESTA, which was pushed forward under the guise of ending sex trafficking, EARN IT would have massive censorship and chilling effects - and potentially threaten not only the rights of sex workers, but activists, journalists, and the general public.

None

talk on conference website

Social media and infocomm technologies have enabled communication capabilities to scale; however, society has failed to get on the same page, and is arguably more polarized than ever. "A New Techno-Communication Style" is a technical presentation showing the research methods deployed to understand and simulate what an inclusive societal-scale, across-the-aisle conversation about critical issues could look like, using the example of the complex topic of "climate change" in the United States - which is actually composed of over 220 sub-topics of debate.

None

talk on conference website

Songs of hope and faith.

talk on conference website

Hacking is a mystery to television and film producers. Efforts to get (serious) films about hacking often fail because commissioners don't understand the topic, have preconceived notions about hacker stereotypes, and believe the complexities and intricacies of "cyber" are too difficult to translate to their audiences. So, in 2018, a group of filmmakers teamed up with members of the hacker and infosec world to prove that it is possible to tell compelling and engaging visual stories about complex issues within cybercrime and hacking, reach millions of people, and show the work of cybersecurity researchers and hackers as it really is, portraying the people and culture of hacking honestly and accurately, rather than a Hollywood version of it. The *Hacker:Hunter* series can be summed up as true crime going online, with all the mystery, suspense, and style that the true crime genre brings - and adapting it for the cyber sphere. A special is currently being produced about hacking health care during the COVID pandemic. In this talk, story producer Lara Ingram and executive producer Rainer Bock discuss some of the challenges with translating hacking into visuals on camera, why even serious filmmakers have a tendency to sensationalize it (and why that could be problematic), and how they discovered that finding rich and important stories in this field is much easier than they thought.

talk on conference website

Learn how to take over Windows, Linux, and Android systems, and how to defend them. You'll begin with common tools: Nmap, Metasploit, and Armitage, and then go into buffer overflows, packet crafting, command injection, and SQL injection.

https://wiki.hope.net/index.php?title=Intro\_to\_Attack\_Techniques\_workshop

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

BioWatch is the nation's response to HSPD 10 (securing the nation from acts of bioterrorism) and HPSD 21 (public health and safety) managed by the Department of Homeland Security (DHS). It has been funded in excess of $1 billion over the past ten years. It has a controversial past of declaring false negatives and is the recipient of skepticism within Congress and the public health community at large. Furthermore, for a period of years, the BioWatch Program Office deliberately misled the DHS Office of the Chief Information Officer (OCIO) as to the security posture of the system, a system that also contained several critical and high vulnerabilities that were not reported or addressed.

It is important to mention that the BioWatch web portal was hosted on an .org domain. While being hosted on a .org domain, DHS cannot monitor it. This was done by purposeful design by the BioWatch Program Office, which also deployed several subsystems in the BioWatch web portal without informing the DHS OCIO. One of these was a program management application that managed the financials of the program, which, being on a .org domain inaccessible to the federal government, allowed the BioWatch Program Office to use any funds received by Congress in any manner they so chose. There was no oversight to prevent the misappropriation of funds.

From 2012 to 2017, there was spending of over 400 million taxpayer dollars that remain unaccounted for. Other studies indicate that this number could be over $1 billion. What is known is the members of the BioWatch Program Office during this time used BioWatch program funding to attend numerous high-profile events, such as the Super Bowl, NBA playoffs, the Rose Bowl, and the Summer Olympics in Rio de Janeiro, as well as multiple Las Vegas conventions.

During this time, BioWatch was the only nationwide early detection system that served both a national security and public health mission. Its primary purpose was to detect pathogens and provide early detection of acts of bioterrorism and/or pandemics (specifically, pathogens related to anthrax and influenza) to enable the rapid deployment of national resources to contain and mitigate the outbreak. This system was supposed to provide early warning, detection, and tracking of pandemic outbreaks, such as COVID-19. The program and system were still operational at the time of the recent COVID-19 outbreak.

Hear more firsthand from the former information systems security manager for DHS BioWatch and whistleblower regarding fraud, waste, abuse, gross mismanagement, and mishandling of classified information within the BioWatch program.

None

talk on conference website

This workshop will cover all the information you need to start picking the most common locks. Eric will cover the tools you need, different types of locks, and legality in various states, plus show you how to start simple and build your skills. Anyone can learn how to lockpick and learn how in this class! After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

The western culture offers a very distilled narrative on what technology is and who builds, owns, and profits from it. Most non-technical audiences are unaware of how subjective this perspective is - and how strongly it favors well-marketed multinational corporations over local solutions. This talk will explore most problematic themes in popular culture and how they relate to the hacker approach. The more the technology advances and becomes interconnected and complex, the less the non-technical public understands the changes, their repercussions and the policies that come along with them. Most people end up relying on stories present in the popular culture to understand the tech world around them: the well-polished product ads hidden in their favorite films, the lone genius-inventor legends, cyberpunk visions of a world with no privacy, but so much convenience!

With the constant changes around, it's hard not to be future shocked and give up on any attempts of understanding the technology yourself. The alternative narratives, especially within the hacker scene, are anything but accessible. They're shrouded with technical terms, full of cryptic references and lacking any clear introduction. Very few stories explain why values such as net neutrality are important without speaking code. People need stories with clear explanations appealing to their emotions and remaining in their memories much longer than a dry technical evaluation of pros and cons.

None

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

In this workshop you will dive into the most popular types of restraints: handcuffs and flexicuffs. Eric will discuss the different types of handcuffs, their inner mechanisms, and how they can be attacked and defeated. You'll learn the various types of techniques that can be used against plastic restraints. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

In 2020, the Internet no longer interprets censorship as damage. Countrywide targeted web blocks are in effect everywhere from the Azerbaijan to Zimbabwe. TLS SNI-based blocking is deployed in places like Kazakhstan. And the only "solutions" seemingly on the table lead to further centralization via gatekeepers like CloudFlare.

Many Internet censorship circumvention tools are available to users, but it's unreasonable to expect whole populations to switch to the Tor Browser or Psiphon in order to access a blocked site. At the same time, effective strategies that website admins can implement on their own seem few and far between. In this talk, based on years of experience running a high-profile site censored in several countries, Michal will go through some of these strategies.

He'll start with moving to static content and enabling some decent caching on your own edge, through using Web Archive as a live backup, and focus on some funky p2p technologies (like IPFS or dat://) which, when deployed, could make censoring a website way, way harder.

Browser vendors will not be let off the hook. Internet gatekeepers will receive dishonorable mentions. Blockchain will only be discussed sarcastically.

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

The Bypass 101 workshop will teach the participant how to shim padlocks, bypass a common Master Lock 175, bump locks, and bypass lever door lock handles. It is worth noting that while lever door lock handles are common in commercial buildings, most people at home will not have access to one to test. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

As a Chinese diaspora living in Berlin, Germany, Fan put together a plan in the beginning of 2020 to make "City-Walk," about cinematic queer urban space in his neighborhood, Neukölln, Berlin. Because of the pandemic, he could not make the walk in the real world, but instead, as with HOPE, made creative use of the available technology to make the walk online using film. How did he do this? What was learned from virtualizing queer space, from queering virtual space? This workshop will share video, followed by live Q&A.

https://c-makers.de/entry/join-us-on-may-31-virtual-cinematic-walk-with-popo-fan/

https://wiki.hope.net/index.php?title=How\_We\_Made\_a\_Queer\_City-Walk\_Film\_During\_a\_Pandemic\_workshop

talk on conference website

What happens when your organization is based in the United States and is brought to court in another country for copyright infringement? This is the story of when this happened to Project Gutenberg, a free online library founded in 1971. The lawsuit was brought by a German publishing company for 18 eBooks in the Project Gutenberg collection. The books were still copyrighted in Germany, but had been in the public domain in the United States for decades.

Project Gutenberg fought the lawsuit in the German court system - and lost. During the course of events from the initial lawsuit in late 2014 until 2020, a lot was learned about jurisdiction in U.S. courts, extraterritoriality, international copyright law, enforceability of foreign money judgments, and differences between a civil law system (Germany) and a common law system (U.S.).

Project Gutenberg brought a hacker perspective to the lawsuit. They looked beyond, to the broader social context. They corresponded with the Electronic Frontier Foundation and others who had experiences with foreign courts. They were not content to let the lawyers battle it out, and rejected their suggestions that Project Gutenberg simply remove the books and pay some fines. The case has been lost in the German courts, including two appeals, yet Project Gutenberg has not removed the 18 eBooks. Greg will share the latest news and highlight how what was learned is of interest to other U.S.-based organizations facing non-U.S. copyright issues.

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

Keynote by: Jaron Lanier

talk on conference website

This interactive workshop will include a demonstration of Kal's robots that are about sound, science, absurd engineering, interactivity, and poetically inspired tech. He will talk a bit about his life as an artist and educator, then demonstrate a number of his works while fielding questions. He will show you how to build low-cost robots and tech art for next to nothing. Hack Arduino sensors without using an Arduino! Collaborate as often as possible - three people are a revolution and a movement. Get advice on showing your weird tech art. Why art!? Because we can - and we are changing the world with it. By finding your voice, you become empowered and discover your reason for being on the planet! Once you do that, there is no stopping you.

https://wiki.hope.net/index.php?title=Robots\_Science\_and\_Artistic\_Revolutionary\_Practices\_workshop

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

By introducing people from all over the world to local hackerspace communities, the Hackerspaces.org website laid the groundwork for introducing a lot of people to a scene that would forever change their lives in a positive way. But over the years, the website database became outdated, the UX/UI design made it difficult to find anything, and the site was not very welcoming (both for newcomers and command line lovers). After creating HackspaceOS (an open source website template and hackerspace online community hub), Marco started collecting more and more ideas on what a new Hackerspaces.org website could look like, in order to introduce hackerspaces to even more people and improve the collaboration between existing spaces. This is an opportunity to have a conversation about what a new website should be like, how to make it be a project with a wide support of hackerspaces from all over the world, and how to start building it!

https://wiki.hope.net/index.php?title=Build\_a\_New\_Hackerspaces.org\_workshop

talk on conference website

Since 2008, Radio Statler has been broadcasting original content from HOPE to the rest of the world: interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the talk rooms.

Radio Statler brings additional content that generally runs for the duration of the HOPE conference. They will continue this tradition of providing original content, both live and prerecorded, to the attendees at this virtual HOPE.

talk on conference website

Getting started in hacking seems like a big task: Where to start? What should I start learning? How can I practice? Join BiaSciLab, C.E.O. of Girls Who Hack for answers to all these questions and get yourself started on your hacking career! This is an intense, hands-on hacking class to get you started with web application hacking. You will learn: setting up a virtual lab, finding, Cross Site Scripting, and more! These hacking skills can be applied in real life. CTFs (Capture the Flag), an entire section of web applications to hack, Bug Bounty... If you are looking to get started in hacking, this is the workshop to attend! While this is aimed at kids, adults are welcome to sign up if space permits.

https://wiki.hope.net/index.php?title=Building\_a\_Home\_Lab\_workshop

talk on conference website

On March 15, 2020, Section 215 of the PATRIOT Act - a surveillance law with a rich history of government overreach and abuse - expired. Along with two other PATRIOT Act provisions, Section 215 lapsed after lawmakers failed to reach an agreement on a broader set of reforms to the Foreign Intelligence Surveillance Act (FISA).

In the week before the law expired, the House of Representatives passed the USA FREEDOM Reauthorization Act, which would have extended Section 215 for three more years, along with some modest reforms. After negotiations, the Senate passed a slightly amended version of the bill, but after a veto threat from the President, the House of Representatives failed to pass it. The bill currently remains expired, but the question remains - for how long? And what will reform look like?

In this discussion, India and Andrew will explain the political factors behind this unusual legislative journey, as well as the policy implications of these proposals.

None

talk on conference website

When hacking a physical facility, intelligence is key. Knowing the internal layout of a building will assist in identifying and accessing targets as efficiently as possible and anticipating security measures. In addition, for effective social engineering, it helps to know where you're going. This talk will focus on inferring what is inside a building just by looking at the outside: what is the layout of the hallways, where are the stairwells and elevators, where are what rooms? Bill will introduce a methodology for deducing the floor plan of a building from observing its external envelope, which is the result of years of research into thousands of architectural plans for a wide range of facilities.

Also outlined will be loads of techniques for situational awareness and intelligence gathering when navigating through a building. The implications for physical red teams and for facility managers to harden their operational security against these techniques being used by bad actors will be examined. This talk focuses on low-tech techniques, most involving only the human senses. Attendees will come away from the talk with a new perspective on the built world around them, and will be able to apply it in all urban aspects of their day-to-day lives.

None

talk on conference website

This workshop will be using Arduino IDE to flash the proper program to each microcontroller. It can be downloaded for your operating system from arduino.cc. You will also need a device with Wi-Fi access. With two inexpensive microcontrollers, anyone can program and build a Wi-Fi connected keystroke injection tool (the Wi-Fi duck!) that, when plugged into a target computer, can allow a hacker to control it (using a graphic user interface) remotely from up to a mile away. This workshop is for beginners interested in hacking with microcontrollers, hackers interested in learning keystroke injection attacks, and anyone interested in what's possible with low-cost devices and Arduino IDE.

https://wiki.hope.net/index.php?title=Wi-Fi\_Connected\_Open\_Source\_USB\_Rubber\_Ducky\_Workshop

talk on conference website

This talk is going to be about the world of Google dorking and how to use other tools like Shodan to perform passive reconnaissance. Roni will show techniques and share stories from within that universe. Dorking is an old technique that dates back to the early 2000s. However, most people aren't using this powerful tool, which can be extremely useful for both beginners and experts in the infosec field.

None

talk on conference website

The German military used Enigma cipher machines to encode all of their important communications. The breaking of these Enigma codes is credited with shortening the war by two years, saving thousands of lives, and perhaps keeping Hitler from developing the atomic bomb. This talk will explain in detail how the Enigma works and trace the fascinating history of the cracking of the Enigma codes. The real story behind *The Imitation Game* movie will be told.

None

talk on conference website

Automation in security testing is critical to secure the rapidly growing amount of software being developed. As much as you might be led to believe that security tools have this covered, there are clearly areas that current solutions have challenges with. SAST, DAST, IAST, RASP, etc. tools all have their place, but we consistently see systems that use all of these and still have exploitable vulnerabilities. In fact, there is evidence to show that more than half of all software vulnerability types cannot be discovered using security tooling alone. As software development techniques evolve, security tools often have trouble keeping up. This talk will include a number of specific vulnerability types that security tools often struggle to find, and how you can exploit these gaps. For example, tools are notorious for missing Insecure Direct Object Reference (IDOR) weaknesses. The information presented is a result of commercial product penetration test engagements involving many different types of systems over the last decade. These white-box style assessments include security architecture review, environment infrastructure inspection, and manual analysis of millions of lines of source code. Also discussed will be complementary protections like developer training, security unit testing, third-party penetration testing, and bug bounty programs to help give you a more complete picture of how to address weaknesses that we commonly see slip through the automation cracks.

talk on conference website

"Social engineering" is quite familiar to hackers. Instead of breaking through encryption or utilizing a zero-day exploit, it's often easier to get a password or network access by simply asking for it. It can be done over the phone, via email, or even in an in-person visit. The approach is often highly targeted, designed for a specific individual. This form of social engineering began among the phone phreaks in the 1970s, and by the 2000s, it has become a professionalized practice, complete with a systematized process of gathering OSINT, developing pretexts, engaging, and writing up reports.

This presentation explores two less-familiar areas of social engineering. First, there will be a look back to a time before the phone phreaks and hackers to another group of people who called themselves social engineers: late 19th and early 20th century social reformers and public relations professionals, specifically Edward Bernays and Doris Fleischman, who developed the "engineering of consent" program of using mass media to persuade people to adopt ways of thinking. This earlier form is referred to as mass social engineering, in contrast with the phone phreak and hacker version of interpersonal social engineering. Robert and Sean will look forward beyond the hacker form of interpersonal social engineering to consider a contemporary, emerging mixture of these two forms that are called masspersonal social engineering.

While the phreaks and hackers often targeted individuals, and the consent engineers targeted masses, masspersonal social engineering is a new form that leverages social media to target individuals on a mass scale. It relies on interpersonal, hacker social engineering techniques, but it has societal-shaping ambitions. A key example of this new form is the Russian election interference campaign of 2016.

Overall, this presentation places hacker social engineering into a larger historical context and shows how social engineering is a serious matter, not only for organizational security but also for geopolitics.

None

talk on conference website

When we think about hacking or building sex/tech, it's easy to focus primarily on how we, as individuals, relate to it: "Am I and/or my partner(s) having fun with this?" Whether we're thinking about toys, apps, websites, or something else entirely, it's also important to consider the perspectives of people who aren't just like us. In what ways does sex/tech act to keep people in the margins? How can we, as individuals and organizations, build empathy for people with (potentially multiple) marginalized identities that we don't share?

Join Kit "where did this b!tch get [their] doctorate" Stubbs of the Effing Foundation for Sex-Positivity and SX Noir, host of the *Thot Leader* podcast, for a conversation about the opportunities and challenges that sex/tech offers us.

This session will provide a space to talk about the intersections of two topics that many people don't have the opportunity to discuss: sex and marginalization (including thinking about people who may be one or more of: sex workers, gender/sexuality/relationship minorities, disabled, or poor, to name a few), in the context of issues surrounding tech which HOPE and the hacker community have been interested in for years, including data ownership; privacy and security; and digital, economic, and social mobility. This talk is for folks who are interested in sex/pleasure, enjoy geeking out about that, and are curious about human sexuality, its intersections with tech, and who are interested in gaining more empathy for folks from (multiple) marginalized communities. Kit is proud to have spoken since HOPE X in 2014 to large crowds, and they are excited to bring SX Noir's expertise and perspective as a queer Black woman to the HOPE community.

talk on conference website

This talk provides an introduction and survey of existing and future boards used to interface and reverse engineer electronic equipment. These are boards that allow your computer to interface to the protocols used in embedded computers, such as UART, I2C, SPI and JTAG, and SWD.

If you want to know more about these boards, what they can do, and how to use them, this is a good introduction. There are over 20 products and designs, such as the BusPirate, Facedancer, GreatFet, JTAGulator, Shikra, Focaccia, Shukran, the Black Magic Probe, etc. In addition, developers are working on the next generation, such as the Luna, BusPirate Ultra, Glasgow, and Edinburgh boards. If you don't know what to buy, or the advantages and disadvantages of each, this talk will help clear things up.

talk on conference website

Performance by Poly in Frames

talk on conference website

In this six-hour Open Source Intelligence (OSINT) workshop, taught by a passionate social engineer and DerbyCon black badge recipient with a proven OSINT track record, you will obtain a fundamental understanding of OSINT. The legal and ethical considerations of collection and destruction of OSINT data will be discussed. From there, you will learn the offensive and defensive applications of OSINT information. In the next modules, "People OSINT" and "Business OSINT" as they relate to offensive attacks will be discussed. The workshop will wrap up with a two-hour "capture the flag."

https://wiki.hope.net/index.php?title=OSINT\_Primer\_workshop

talk on conference website

Shipping containers are a backbone of our civilization, being involved with 90 percent of all the products that circulate around the globe today. The 20-foot equivalent unit (TEU) contributed a significant cost reduction in the handling of goods by introducing intermodality for freight transport. More precisely speaking, ISO 1161 shipping container corners are the hidden building block within a container which "allows for cranes and other lifting and carrying equipment to attach themselves to and move each element of a load in a uniform way" (Fuller 2005).

An ISO container corner has three holes. However, when a container is locked on a truck, a vessel, or in between other containers, a single so-called twistlock is attached to either the bottom/top or a side hole. In other words, only one twistlock is used per corner and there are never two twistlocks applied to the same corner simultaneously. By breaking this taboo, a shipping container can effectively be transformed into a barrel, allowing one person to move it, completely manually.

The system consists of three different components: "lifting spindles" to lift a container up by 200mm, "custom-made steel wheels" that can securely be locked into ISO container corners, and "a vehicle salvaging inflatable bag" with a manual pump.

In this presentation, Yoshinari explains in what process and supporting environment he managed to pull off the container rolling project - without having any engineering background.

talk on conference website

The government of Singapore recently bet ten million dollars on a research program to develop an open-source domain-specific language - for law. This talk explains why, and introduces lesser-known corners of computer science (like formal methods, controlled natural languages, and logic and constraint programming) and suggests that together they could permanently divide the traditional legal profession (which runs on humans) from a future legal industry (which runs on computers).

This talk offers a quick tour of useful theory that every self-taught hacker should be acquainted with, and shows how they solve problems in law. Lesser known chapters from the history of computing will be examined, such as formal verification, the temporal logics LTL and CTL, decision tables, DSLs, constraint satisfaction, and model checking, as well as strongly-typed languages for natural language generation. You will see how KRR (knowledge representation and reasoning) could move out of the heads of lawyers and into a computer. This talk outlines a plan for a domain-specific language for law, following the ethos of open source and open standards that promises to make it possible for hackers, consumers, and non-lawyers to get certain legal jobs done by themselves - not by going to a law firm, but by going to GitHub.

None

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

It all began when Jason’s home water heater started leaking. This led him down a path of learning and discovery, ultimately resulting in a basic but well-connected set of home water leak sensors. In this session, he will recap his experiences and journey around Arduino programming and electronics, using AWS API gateways and Lambda functions, and overcoming several minor but frustrating speed bumps along the way. Jason will share the many things he learned, as he progressed along the pathway from being an Arduino and AWS Lambda noob to someone who is now a proud “advanced beginner.” This session will include basic technical information, code walkthroughs, and a video demo from the basement of Jason’s house.

None

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

Information warfare, disinformation, and propaganda have persisted since the beginning of recorded history. Much like many of the world's oldest professions (espionage and sex work), information warfare has come under a variety of names and agendas. And much like espionage and sex work, information warfare remains alive and well in the present day.

From the old world where we have Asurbanipal's clay tablets relating elaborate tales of "glorious" military victories to Bernays's ushering in the modern era dominated by 20th century multi-modal propaganda campaigns, this talk will delve into a history of the sordid concept known as infowar. The panel will examine the pre-history of disinformation, iWar, misinformation and propaganda, all through both an historical and technical lens. They will address the advent of the printing press, moving swiftly to Wordpress and the Dark Net.

With respect to our present predicament in 2020, rather than clay tablets and cuneiform, we have dysfunctional social media systems, broken identity management concepts, multi-national troll farms, and a profusion of Internet-connected systems, all of which adversaries with malicious intent routinely manipulate. The concept of the Internet being used as an information warfare domain was not a twinkle in the eyes of inventors of the packet switched system that became known as ARPANET. The Internet was designed for functionality, not security, and therefore remains insecure. Trust and the integrity of information is still an issue 60 some years after the first proof of concepts reared their head at the RAND corporation.

This talk will address the challenges surrounding information warfare management, the intersection of infowar and iWar, as well as methods for identifying and inoculating against the strategies and tactics of 21st century iWar/PSYWAR operators. It will reference recent examples of state-sponsored activities, Coronavirus-related activity in the DNS, and will look ahead to the 2020 election and beyond.

None

talk on conference website

Since 2008, Radio Statler has been broadcasting original content from HOPE to the rest of the world: interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the talk rooms.

Radio Statler brings additional content that generally runs for the duration of the HOPE conference. They will continue this tradition of providing original content, both live and prerecorded, to the attendees at this virtual HOPE.

Watch and listen at http://radio.hope.net/

talk on conference website

This talk looks at the hackbase movement and its potential to change the world by building a new economy through hacking and co-living. Hackbases are residential hackerspaces, of which there are currently only a few in Europe. Liam will look at the challenges faced by hackbases from the experience of the Astralship hackbase in Wales, and will consider the possibility of building local transition economies through a network of decentralised communities for co-living, co-learning, and co-creating real value.

None

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

Keynote by: Yeshimabeit Milner

talk on conference website

This workshop will cover all the information you need to start picking the most common locks. Eric will cover the tools you need, different types of locks, and legality in various states, plus show you how to start simple and build your skills. Anyone can learn how to lockpick and learn how in this class! After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

In this workshop you will dive into the most popular types of restraints: handcuffs and flexicuffs. Eric will discuss the different types of handcuffs, their inner mechanisms, and how they can be attacked and defeated. You'll learn the various types of techniques that can be used against plastic restraints. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

So how can you be out there promoting open standards like TLS and IPv6 if your own websites don’t support these standards? Shouldn’t there be step-by-step recipes out there (or default configurations) that just make this easy? In this talk, Dan will dive into how the Internet Society fixed its multiple websites, and discovered how it could make these sites faster and more secure with some easy changes to the site configuration. He will share the crowd-sourced documentation that the project team has developed for self-hosted web servers, hosted servers, and sites using content delivery networks (CDNs), and will outline how you can help contribute to this project. He’ll cover how to implement HTTP/2, IPv6, TLS, HSTS, and DNSSEC - and provide the recipes his project team used. If we want an open Internet where we don’t need permission to deploy new services and systems, the Internet needs to be based on interoperable, open Internet standards. Join us in helping build a more secure and available Internet for everyone!

talk on conference website

By introducing people from all over the world to local hackerspace communities, the Hackerspaces.org website laid the groundwork for introducing a lot of people to a scene that would forever change their lives in a positive way. But over the years, the website database became outdated, the UX/UI design made it difficult to find anything, and the site was not very welcoming (both for newcomers and command line lovers). After creating HackspaceOS (an open source website template and hackerspace online community hub), Marco started collecting more and more ideas on what a new Hackerspaces.org website could look like, in order to introduce hackerspaces to even more people and improve the collaboration between existing spaces. This is an opportunity to have a conversation about what a new website should be like, how to make it be a project with a wide support of hackerspaces from all over the world, and how to start building it!

https://wiki.hope.net/index.php?title=Build\_a\_New\_Hackerspaces.org\_workshop

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

The Bypass 101 workshop will teach the participant how to shim padlocks, bypass a common Master Lock 175, bump locks, and bypass lever door lock handles. It is worth noting that while lever door lock handles are common in commercial buildings, most people at home will not have access to one to test. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

*And in the plague years, the words "end-to-end encryption" were on everybody's lips. For they were using Zoom for education and commerce and their socially distanced sex parties, and suddenly became worried that a government or two might be looking in. The fact that they had been doing all the same things over email for the past quarter century was never considered.*

The purpose of end-to-end security is to reduce the number of parties the users are required to trust. Proprietary messaging products make use of "end-to-end" cryptography but fail to achieve that purpose. End-to-end means nothing if users are required to trust the sole source provider to identify those ends.

The Mathematical Mesh is a personal PKI that addresses the trust gap in current end-to-end solutions, allowing the user to manage credentials for all the applications they use. The Mesh is built using and enabling the use of threshold cryptography, a form of public key cryptography that enables further separation of cryptographic roles by splitting and combining private keys.

An alpha release of the Mesh under MIT license will be announced at the end of the presentation.

None

talk on conference website

For better or worse, meetings are a part of life. In the workplace, meetings can be inefficient, boring, and even tyrannical. But they don't have to be so bad. As part of project management, meetings are a good way to organize collaborative work, produce new ideas and concrete deliverables with clear next steps, and come to consensus. This workshop covers simple tools for effective meeting design and facilitation, such as group norms, agendas, time keeping, note taking, and discussion techniques to keep people on track. The workshop will have a question and answer session at the end.

https://wiki.hope.net/index.php?title=Effective\_Meeting\_Design\_workshop

talk on conference website

Intelligence analysts collect, synthesize, and report on complex situations. Analysis is often complicated by high stakes, time pressure, and deception. During this workshop, you'll learn how to apply basic intelligence analysis techniques and how to avoid common pitfalls. You'll then work as a group to analyze some current events using the Analysis of Competing Hypotheses (ACH) technique developed by the CIA.

https://wiki.hope.net/index.php?title=Intelligence\_Analysis\_101\_workshop

talk on conference website

We're facing pretty difficult times and many in our communities are struggling. COVID-19, unemployment, racial inequality, turbulent politics, and the psychological stresses of shelter-in-place all conspire to form a perfect storm. If there is a silver lining, it's that there too are a multitude of opportunities for us to help each other, to share resources, and to use our hacks for good. It's hard knowing where to start, it's hard to get started, and it's hard to keep going.

As technologists, many of us are uniquely positioned to do work remotely and collaborate. This talk will describe how to use this to our advantage. Whether you're out of work and need help, you're trying to stay employed and avoid burnout and distractions, or you have extra bandwidth and are looking for ways to "fight for the user," Mek will show how to share resources, techniques, and opportunities which hopefully will help each of us do good enough, together.

None

talk on conference website

Human Interface Device attacks like the USB rubber ducky are famous for being able to exploit a computer with only a few seconds of physical access by pretending to be a keyboard. In this workshop, you'll learn to program a microcontroller in Arduino to create your own scripts that run when the device is plugged into a target computer. This workshop is for beginners interested in hacking with microcontrollers, hackers interested in learning keystroke injection attacks, and anyone interested in what's possible with low-cost devices.

https://wiki.hope.net/index.php?title=Digispark\_USB\_Attack\_Tool\_Workshop

talk on conference website

To create conditions favorable to privacy that last, hackers need to go on the offensive. The march of innovation in attacking privacy protections is ongoing, advanced by very well-resourced actors; to respond to new privacy attacks with new defenses is to perpetuate an arms race that disfavors privacy in the long term. Users - hackers, in particular - should instead adopt a strategic approach that responds to privacy attacks with tools for imposing costs on the attacker.

This talk surveys existing, working privacy technologies that fit the strategic outlook for undermining the arms race for privacy, and discusses their use. Technologies will include tools for traitor-tracing, bot-based web measurement, denial of service, and obfuscation of email and click behavior, as well as approaches to manual reporting, black-box experimentation for third-party auditing of privacy practices, and more.

Two central problems for strategic privacy technology are singled out for evaluation (and discussion): avoiding retribution from the service provider, and imposing proportional costs. The talk will end with thoughts on handling these problems, and with a few suggestions for the hacker community on how to take up the strategic perspective for maximum effect.

None

talk on conference website

This talk will cover the birth of the Russian domain space (.RU), its evolution, and how it addressed challenges such as creating/managing non-Latin international domain names (IDN) starting with the first Cyrillic domain (a pioneering ICANN program) and de-monopolization of the Russian domain business while educating government officials.

None

talk on conference website

"Mobile First" is more than a web developer's mantra chanted from 2010. It also means that many people now visit websites and use services from their mobile devices more than on laptops and desktops. Recently, several proposals and published models for establishing big parts of our lives through our mobile devices have been discussed. Big proposals include mobile driver's licenses, mobile health credentials, and other forms of digitized documentation such as university degrees. Recently published and proposed standards include the W3C's verifiable credentials data model and the ISO's 18013-5 mobile driver's license compliance. This talk discusses the privacy concerns that surround these ideas, test cases, and the trajectory of digitized identification.

The aspirations of these technologies are utopian. However, we are in a reality that makes digital identities subject to centralized power structures. Crafting who we are online can look different if these technologies become standard in our everyday interactions, especially if these interactions include employers and health care. These scenarios affect the most vulnerable among us, the people who don't get the chance of anonymity online. Engaging in these conversations helps bring to light concerns that may not be considered, and helps to craft a better digital future.

None

talk on conference website

Fact checkers around the world are overrun. There's too much misinformation, too little time, too little data, and stakes that are too high. Hackers can help. Fact checking focuses on systems, on analysis and deconstruction, on bypass, on verification and hardening. Sound familiar?

Christopher will talk about how the worldwide community of hackers can help the fact checkers. How we can make information more available, more searchable. We can track falsehoods as they spread. We can investigate who's the cause and how the systems in place perpetuate or alleviate the dissemination of fake news. As the lead technologist at Duke University's Reporters' Lab, he has been at the head of bridging the gap of reporters and hackers for five years. This subject has been in the zeitgeist for a long time now and this talk will hopefully clear up, clarify, or expand on anything that's been on your minds.

Fake news is social engineering on a vast scale, and the consequences are real, dangerous, and increasingly deadly. Hackers and fact checkers both value truth - it's time to work on it together.

None

talk on conference website

Machine learning has lately hit the buzz word spotlight. Finding both practical and impractical applications in fields from neuroscience to information security to... ranking bachelor contestants? This talk will cover some of the basics of manipulating and evading machine learning systems of all kinds, including how to confuse some military or government surveillance systems. This will cover the most common and useful attacks, how to apply them, and how to defend against these in the future. This is useful both for testing systems, as well as understanding how to specify and build them.

None

talk on conference website

Information has a profound effect on the population of a society. Controlling the information the populace sees can have a huge impact. We saw this in 2016, and continue to struggle with mis/disinformation.

Society has gone down a path that is ever becoming more bleak. Governments and society as a whole must start to own its message and have a unified front to battle the onslaught of mis/disinformation campaigns and false/fake news. Propaganda, whether positive or negative, generally doesn't have the best connotation, and using it to affect even positive changes is not without controversy. Putting controversy aside, if we are going to bring back some cohesion and semblance of peace, society must own the narrative - we must make sure people get accurate information and believe in the information available to them. This talk will cover the history, tactics, and responsible use of information and behavioral mechanisms to affect positive and lasting change.

None

talk on conference website

A HOPE concert veteran, RADIO WONDERLAND turns mass media into recombinant funk, processing live FM radio with a Buick steering wheel, four old shoes hit with sticks, knobs, buttons and custom code. As well as for RADIO WONDERLAND, Joshua Fried is known for his They Might Be Giants remixes, and for putting headphones on downtown New York City's most mercurial stars. Fried has performed at Lincoln Center, The Kitchen, CBGB, a Stuttgart disco, a former East Village bathhouse, a Tokyo museum, and the Dutch Royal Palace. Art guitarist Fred Frith soloed on Joshua's first single, and he has produced or remixed artists from Chaka Khan and Ofra Haza, to avant-drone master David First. His recordings have been released by clang, free103point9, Trace Label, Tellus and Atlantic Records.

talk on conference website

The world runs on COBOL! 95 percent of ATM swipes rely on COBOL, but few people know how to use it. Let's fix that! Party like it's 1959!

In this workshop, participants will learn basic COBOL programming and solve challenges including building HTTP requests, processing strings, file I/O, ASCII encoding, modular arithmetic and RSA encryption. You will use free Google cloud servers and a real public IBM mainframe.

The workshop is structured in a Capture the Flag format. Each participant works at their own pace. The techniques will be demonstrated, with complete step-by-step instructions to lead beginners through the easy challenges. There are also harder challenges for more experienced participants. Each participants will be helped as needed to ensure that everyone learns something new.

https://wiki.hope.net/index.php?title=COBOL\_CTF\_workshop

talk on conference website

COVID-19 has exposed the major failings of the world's school systems, mainly how schools are failing to prepare students to learn on their own. In this talk, China-based educator Jiang Xueqin explains how, with a learning journal, students can master the skills necessary for lifelong learning during the COVID-19 lockdown, and learn how to set precise measurable goals, how to develop personalized learning paths and strategies, and how to self-assess/self-reflect. The learning journal activity also encourages students to seek feedback from peers, teachers, and parents, and work towards a YouTube presentation as a final project. The science behind this learning journal that empowers students to hack their own brains will be explained.

None

talk on conference website

The kindly doctor says something you never want to hear; "I'm so very sorry to tell you it's terminal." What the actual fuck do you do?

Karamoon heard those very same words in July 2016. Aged 36 with two young kids, he was diagnosed with Stage 4 (terminal) colon cancer. Due to the level of spread to his liver, lymphatic system, and abdominal membrane, a realistic life expectancy was just seven to nine months.

When faced with a crisis, your natural reaction is to start asking questions, learn as much as you can, and get hacking. And that's exactly what he did. Hacking, after all, is a survival trait more than it's a hobby....

This practical talk will be about how Karamoon went from "You need a friend or family member with you before I give you this news" to "We can find no evidence of disease" in the space of four years. It's also about the incredible support he's had from members of the international hacker community.

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

"Space belongs to all," we often hear. However, most people do not relate their lives to space. The Outer Space Treaty was signed on 27 January 1967. Article I of the Space Treaty says "The exploration and use of outer space including the Moon and other Celestial Bodies, shall be carried out for the benefit and in the interests of all countries, irrespective of their degree of economic or scientific development, and shall be the province of all mankind."

Most people know space through news, stories, and entertainment. Some might know that space technology is making their lives easier, but they would not consider themselves able to contribute in any way. At the same time, the space community has remained mostly among itself. This presentation will argue that it is the responsibility of the space specialists to create new partnerships and collaborative projects that connect space and non-space actors and explore new nontraditional academic models and environments that can ignite creativity and foster cross-industry collaboration.

The global crisis due to COVID-19 has somehow forced us to rethink how we could take cross-industry communication and collaboration to the next level. Some tips and tricks will be shared to continue with cross-industry collaborative projects utilizing digital and online technology. Makerspaces' tech knowledge transfer model can enhance the space workforce development and lead to innovative research and inspire the next generation inside and outside the space community.

None

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

Throughout the last few years, the Ring smart doorbell has been purchased by many residents with the idea that it will keep their homes safer. But Ring, the company owned by Amazon that produces the Ring doorbell, does a lot more than simply monitor your home for you. It has forged secretive partnerships with over 1300 law enforcement agencies across the country, providing them with unprecedented access to footage across American communities, and often even inside the home. At the same time, Ring has been lackluster in its approach to product security, leading to a number of high-profile breaches giving hackers access to video streams and allowing them to use the doorbell's speaker to harass an eight-year-old child inside her home. Finally, original research conducted by EFF has shown the Ring app to be packed with third-party tracking libraries, sending a huge amount of information on customers' devices and habits to tracking companies without disclosing to users that this was happening.

This talk is going to catalogue Ring's Wrongs and EFF's campaign against these practices - practices that not only facilitate the overreach of law enforcement and injure user privacy, but also provide the clearest example of surveillance capitalism, a new frontier of profiteering.

None

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

Your data is not theirs to own.

With the advent of centralized social networks in the mid-2000s, all culture became consumed by the giants. Those giants then proceeded to sell your information, your privacy, and even our nations. Yet they still trudge on, much like John Perry Barlow's weary giants of flesh and steel, and we do little to stop them.

Your data is not theirs to own.

Three years ago, The_Gibson began an experiment that would become a community that would engage in projects to save our privacy and change the worlds of at least the members of that community. Now this panel hopes to help you spread that change further. In order to save hacking culture and the Internet, we must build new social networks and services that are federated and decentralized, and self-maintain our data rights.

Your data is not theirs to own.

Decentralized and federated networks are the past from which the public Internet sprung forth. These models have started to become viable again as the social media silos have begun to be seen as dangerous to the daily operation of society, and cloud hosting has become inexpensive. These new communities live somewhere between the BBS age and Web 2.0 - modern, nimble, creative, and largely free of undue outside influence due to advanced moderation capabilities and a hard to exploit distributed data model.

The presentation will tell the story of how this team did it - and how you can do it too.

None

talk on conference website

Too often, open source projects and online communities rely on a default of feudalism - granting near-absolute power to admins, mods, and benevolent dictators for life. An easy way to counteract that is to adopt some basic core agreements to your project, having a GOVERNANCE file in your repo along with the usual README and LICENSE. CommunityRule is a new tool designed to help groups come up with basic rule-sets, so they can get back to doing the work that matters most. In this workshop, you'll learn to use the tool to draft basic governance agreements and learn from those that others have created.

https://wiki.hope.net/index.php?title=CommunityRule\_workshop

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

Keynote by: Idalin Bobé

talk on conference website

This workshop will cover all the information you need to start picking the most common locks. Eric will cover the tools you need, different types of locks, and legality in various states, plus show you how to start simple and build your skills. Anyone can learn how to lockpick and learn how in this class! After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

**Radio Statler** has been broadcasting original content from HOPE to the rest of the world since 2008. You can expect interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the virtual talk rooms.

talk on conference website

The most common way attackers steal passwords, install malware on a victim's computer, or get employees to grant them unauthorized access to critical business systems is through so-called phishing attacks. A phishing attack is surprisingly low-tech, which is part of what makes it so devastatingly effective. Learning to spot these attacks is one of the most important things you can do to protect yourself online, since a hacker's tricks, called "lures," can appear anywhere from an email, to a Facebook message, to a real website that looks exactly like one you recognize! In this attack/defense exercise workshop, you'll learn how frighteningly easy it is for these scam sites to be built from the ground up, both manually and with tools like the Social Engineer's Toolkit. You'll also learn all about the tricks they use to fool you into falling for them.

https://wiki.hope.net/index.php?title=Launch\_Your\_Own\_Website\_Phishing\_Attacks\_workshop

talk on conference website

In this workshop you will dive into the most popular types of restraints: handcuffs and flexicuffs. Eric will discuss the different types of handcuffs, their inner mechanisms, and how they can be attacked and defeated. You'll learn the various types of techniques that can be used against plastic restraints. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

Amazon is an American multinational technology company based in Seattle. It focuses on e-commerce, cloud computing, digital streaming, and artificial intelligence. Amazon is called "one of the most influential economic and cultural forces in the world" and the world's most valuable brand. For nerds who grew up in the 1980s, it's like a cyberpunk dystopia's wet dream come true. Amazon has moved into health care and insurance. It has dug deeper into AI and automation, and bolstered its in-home delivery services. But that's not enough to understand the brutal capitalist force it represents and the future Jeff Bezos wants to create. This discussion will look at some of the curious aspects of this company, along with what we can learn from its behavior about late capitalism.

None

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

Alarm systems are a staple of businesses nationwide. When you walk into a building, the door contact separates, making the alarm panel chime. The motion detector sees you... but what about what you don't see? The person in the central station getting a ping and looking at the signals, calling the owner, then the police. This talk covers the basic types of alarms, common panels, and central station procedures, as well as how to exploit them and what you can do to help mitigate these exploits.

talk on conference website

The Bypass 101 workshop will teach the participant how to shim padlocks, bypass a common Master Lock 175, bump locks, and bypass lever door lock handles. It is worth noting that while lever door lock handles are common in commercial buildings, most people at home will not have access to one to test. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

The r00tf0lds Folding@home team (#258829) will teach what protein folding is, how it helps science fight disease, team history, and the past hacker events and causes that inspired their motivational methods and helped push their success. They will teach how to install and configure the software, what to expect when folding, and how to use advanced configurations to get the most from your CPU/GPU.

In just months, the team grew to over 350 users, is ranked in the top 85 of 250,000+ teams, boasting more than nine billion points, and has passed large corporations like Cisco, Apple, and Google, and countries like Vietnam, Poland, and Ireland. Presenters and top team members will be on hand to answer your questions live!

Additional guests will include: Obscure Images / Paul Leonard (cDc Communications, Hacktivismo, r00tf0lds), Space Rogue (r00t, L0pht Heavy Industries, r00tf0lds), top ranked team members, and those with specific areas of relevant expertise.

Got a spare CPU/GPU? Join a team of hackers (including members of r00t, cDc, the L0pht, LOD, and MOD) using distributed computing to help scientists fight COVID-19 with the Folding@home client!

https://wiki.hope.net/index.php?title=Fight\_COVID\_with\_Botnets\_workshop

talk on conference website

Imaging the human brain has remained one of the most outstanding scientific and technological challenges. With 86 billion neurons and an inter-neuron distance of one micron to 1/10 of a micron, developing technology that allows imaging the entire human brain in vivo at the so-called connectome-scale continues to elude even the best labs. In this talk, Russell will provide some motivating examples to show how human brain imaging can be relevant for technologists and hackers from a scientific perspective where popular media like *Black Mirror* and the like have left off. The possibility of backing up the human brain to a computer hard drive - the Brain Backup - is used as an illustrative example. Neural circuits, artificial intelligence, neural architecture informed AI, and other modern applications will be covered. Attacks and exploits may evolve as the understanding of the human brain advances.

None

talk on conference website

Using public records laws can reveal everything from covert surveillance programs to hidden family history - but only if you know how to ask for it effectively. At this workshop, FOIA (Freedom of Information Act) masters from MuckRock and other leading transparency organizations will share their basic strategies for opening government at all levels. They'll go beyond magic keywords to include and teach participants how to get in the mind of government bureaucracy to file more precise, effective, and illuminating requests. In addition to strategies that will help new requesters and veterans alike improve their transparency strategies, the workshop will offer opportunities to receive advice and feedback on attendees' request ideas.

https://wiki.hope.net/index.php?title=Four\_Steps\_to\_FOIA\_Mastery\_workshop

talk on conference website

Bildschirmtext was the German version of France's Minitel. The technology and the culture both shaped the German hacker community and provides a vision for a world beyond our current mess with web services.

It's particularly important due to the so-called BTX-Hack. The Chaos Computer Club (CCC) got the login credentials for the BTX user account of the bank they had their account at. They used it to access their own donation page repeatedly, generating a fairly high bill. They publicized the hack right from the beginning and clearly stated that they just wanted to expose the security issue and didn't want the money. The TV report about it featured an interview with the manager of that bank praising the CCC for its work.

The other aspect of Bildschirmtext is that its technical standards were meant to be extended. Apart from your standard text terminal, provisions for vector and pixel graphics as well as audio were defined right from the start. Today, the same idea could be extended to provide multimedia services on top of plain text terminal sessions. This could be a much simpler alternative to the ever growing complexity of web services.

This talk will focus mostly on the things that made Bildschirmtext unique as well as the ideas behind it.

talk on conference website

Local newsrooms across the country are disappearing, but there's at least one potential watchdog left: you! Doing journalism yourself might sound intimidating, but once you know the process, it becomes totally approachable. In this workshop, Brandon will take you through what you need to know to investigate your local government agencies. He'll demystify the investigative process and cover the basic tools every journalist needs to know: generating leads, records requests, public data sources, and navigating your local government's bureaucracy. This is a live session with time to ask questions about how you can report on your community.

https://wiki.hope.net/index.php?title=A\_Newsroom\_of\_Two\_workshop

talk on conference website

Everyone has to start somewhere, and with the constantly escalating presence of information security and hacking related news, television shows, and even academic programs, there's a whole generation coming up looking for fortune and glory as "133t h4x0rz." How our community treats these folks is going to shape the future. Join this panel for an informative and accessible discussion on how to handle those curious up-and-comers looking to dabble in the dark arts by offering solid and safe paths for exploration and discovery.

talk on conference website

Need to learn about Linux servers? Get a self-contained CentOS lab up and running in no time. What's required: a host computer with virtualization tools installed, a CentOS (or other RedHat-based) ISO file to install, and about an hour. It should interest anyone looking to quickly set up an environment to study Linux, either for an exam like RHCSA/CE or just to learn how it works. The workshop will be interactive, with questions encouraged. If the audience members have a laptop with a VM host installed and a Red-Hat based .ISO file, they can follow along (quickly).

The slides are at: https://github.com/murphnj/hourlab

https://wiki.hope.net/index.php?title=Create\_Your\_Portable\_CentOS\_Homelab\_workshop

talk on conference website

ProjectMF was originally started by Phiber Optik in 2006. ProjectMF 2.0 is an adapted version that is compatible with the latest versions of Asterisk (an open-source telephony toolkit), compatible on all hardware with no software recompilation or hardware modifications. It is a self-contained piece of software using band-pass filters and level gates to ensure it works 100 percent of the time. ProjectMF 2.0 is a piece of software that, when combined with Asterisk, can allow MF signaling, ACTS signaling for payphones, 2600 supervision, and SF signaling, It is able to detect OSPS Tones like ringback, coin collect/return, and finally and very impressively, it is able to decode rotary phone *pulse*dialing sounds! So you can use a rotary phone on any VoIP ATA or channel bank *in the world!* This gives anyone access to rotary phones on any piece of equipment! It even allows rotary phones on POTS lines to navigate your Asterisk IVR!

When you couple all of this with the open source NPSTN phone network (npstn.us - a VoIP phone network for telephone phreaks, collectors, professionals, and hobbyists), then something great happens. All of a sudden, you can dial a number, and MF will come on the line and signal in real time to the remote switch. Once the call is connected, you can do crazy stuff like blue-boxing on the trunk, You can literally flash your switch hook and cause a reset on the "circuit."

NPSTN also has real live operators in a handful of countries across the world, They have around 40 active members and switches on the network, They have ACTS coin-trunks, real crossbar and step switches, and any type of signaling used on the phone network of the 1970s that you can imagine! You can easily move from an intercept message to a secret party-line conference. NPSTN is truly the best "simulation" of the old phone network.

This talk will give you a thorough tour of the magic of ProjectMF 2.0, NPSTN, and the world of phone phreaks, past, present, and future.

talk on conference website

Arduino recently released their Nano 33 BLE Sense, which is an Arduino Nano equipped with an ARM Cortex-M4 and an array of sensors to be used in small form factor machine learning applications such as gesture recognition, voice control, and even facial recognition. In this workshop, participants will take an introductory look at Tensorflow Lite for the Arduino Nano, and learn how to train it for some use cases such as voice recognition and gesture control. For this workshop, it is not necessarily required to have an Arduino Nano 33, but you would greatly benefit from having one, as the focus will be on its applications.

https://wiki.hope.net/index.php?title=Teaching\_an\_Arduino\_to\_Think\_workshop

talk on conference website

The maker community has always been a supportive and safe harbor when something unexpected happens, like COVID-19. The community in Japan, Malaysia, and China have done many things to unite and stay strong mentally, also creating many projects of social value to give back to the society.

In this session you will hear some interesting projects of social value built by the community; learn about maker culture in Japan, Malaysia, and China; and hear different perspectives about "the new normal" maker lifestyle after COVID-19.

None

talk on conference website

As the war on abortion gains momentum and the future status of Roe v. Wade is in question, it becomes imperative that the knowledge of how to safely terminate a pregnancy be protected and effectively disseminated to those in need. Although abortion is a common and safe medical procedure, political controversy and deliberate misinformation campaigns by the pro-life movement have clouded the practical aspects of pregnancy termination. By learning what abortion entails, we can better understand what kind of tools, information, and medical privacy are at stake by extensive government overreach into personal healthcare decisions from the erosion of abortion access through targeted regulations of abortion providers. In addition to legal battles challenging the status of abortion, activists and providers face significant risks for their work, making it necessary to engage in surveillance and counter surveillance activities to protect against doxxing, harassment, stalking, arson, and even homicide. Hackers are uniquely positioned to understand and enhance security protocols to protect individuals and networks involved in abortion access and procurement. Given that abortion remains legal in the United States at this time, it is a best practice that someone in need of an abortion seek medical counsel and clinical support to terminate a pregnancy. As such, funding and support strategies used to assist individuals with limited access will be detailed to ensure the best possible outcomes for anyone in need of abortion. This talk will neither explain how to perform an abortion nor any other medical procedure, but will discuss the history of underground abortion, how self-managed abortion functions in complex legal contexts today, what we might expect from the web-based sale and distribution of medications used to terminate a pregnancy going forward, and how abortions were performed prior to the 1973 Roe v. Wade ruling, with particular focus on how manual vacuum aspiration devices were reverse engineered by non-medical activists to produce the “Del Em” device used by underground abortion networks.

talk on conference website

Many books about social engineering presume the reader has a minimum level of social ability. In this talk, Edward provides his solution for enabling those of us on the more introverted side of things to make the skills taught in popular SE education more relevant and actionable. He will introduce the framework, the texts, and methodology he has developed to not only teach basic social skills, social engineering, and maybe most importantly to provide a launching pad for our potential. The dramatic possibilities that better socialization, leadership, and SE skills have towards personal empowerment is revolutionary.

None

talk on conference website

Attendees will learn more about first trimester abortion, strategies to circumvent anti-abortion legislation, and have the opportunity to learn how to construct an improvised manual vacuum aspiration device used for menstrual extraction/menstrual regulation. This non-medical workshop will not teach how to perform abortions, but will focus on the surprisingly simple, inexpensive, and accessible equipment necessary to construct a device capable of terminating an early pregnancy safely, as well as convey the risks involved. Attendees will receive a supply list and step-by-step instructions and diagrams to construct a "Del Em."

_This workshop accompanies the talk, "Hackers in a Post Roe v. Wade World."_

talk on conference website

**OSXY** is an electronic research duo of NSDOS + Aerodynamika. In their work they explore the connections between the code, the sound, the virtual, and the physical matter. For this set they did a live session while located between Berlin and Paris. They used Orca and InfraNodus text network music synth to generate textual code that was then converted into the live visualization and MIDI sounds, which were then played using external synths. They also used Mozilla Hubs and various streaming tools to have a direct link over the VR, exploring the latency, distortion and multiverse as the active elements of sound improvisation. Website: https://osxy.link

talk on conference website

If you were to name three instruments, chances are they would all be over 300 years old. If not, then their user interface would be inherited from centuries past. They need to make beautiful sound while bearing archaic manufacturability constraints. They might be terribly difficult to learn, and probably for the wrong reasons.

The pocket organ is about designing an instrument that fits in your pocket, plays with earphones, is extremely easy to learn, and has a depth to it, plus a set of strengths and limitations that are quite unique and useful.

While there are exquisite modern instruments out there, they're all legal monopolies of their respective owners, and their price typically puts them out of the reach of beginners. The pocket organ is an attempt to change that.

None

talk on conference website

Good developers study documentation carefully and thoroughly understand their language. However, some people just want to code fast, break into things, and skip over the details. This Capture the Flag workshop is for them.

Even if you've never programmed before, you can make simple attack tools in Go. You will learn to perform port scans, HTTP requests, brute-force logins, crack password hashes, and perform encryption using XOR and AES.

The workshop is structured in a CTF format. Each participant works at their own pace. The techniques will be demonstrated, with complete step-by-step instructions to lead beginners through the easy challenges. There are also harder challenges for more experienced participants. You will be helped as needed, to ensure that everyone learns something new.

https://wiki.hope.net/index.php?title=Go\_the\_Wrong\_Way\_workshop

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

City Tech's entertainment technology department has been presenting the "Gravesend Inn," a haunted hotel, for more than 20 years with annual attendance now typically around 6000. The system has evolved from the early days of manually operated systems and a few discrete control elements to a completely networked, modern, themed attraction featuring show systems while also leveraging surveillance technologies. This presentation will detail the history of the attraction and its technology, and offer a virtual behind the scenes technology tour.

talk on conference website

As hackers, we all have unique skills and abilities that are in huge demand globally. But cybersecurity can be a tough industry to break into, and the acronym soup of qualifications and certifications can make it difficult to work out how to get started.

Orson, Naz, and Tom will present a discussion panel on how to build a successful career in cybersecurity from a background in hacking. All three have very different, diverse backgrounds, and very different skill sets - yet have managed to bypass university degrees and build their own unique careers in the industry.

Anyone who wants to break into the industry, who wants to further their career, or just wants to understand how to use their passion to pay the bills will benefit from attending this panel. Tom is now a CISO, published author, and consulting director. Orson and Naz have taken very different routes in their careers, but are now highly regarded security researchers at an award winning cybersecurity consultancy in the U.K., presenting their research to industry leaders and executives.

There isn't a shortage of cybersecurity skills in this industry - there's a shortage of people with the right attitudes and motivations. This panel will share their experiences - both good and bad, as well as the personal issues they each overcame - and encourage and enable others from equally diverse backgrounds to build their own unique careers in the industry.

None

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

There are many important elections this year. As you read this, Russia is already disrupting them.

When we talk about election security, most people think of hacking voting machines. But what about other cyber methods and means of disrupting an election? What can nation state threat actors do today, tomorrow, the day of the election, and after to sow chaos and erode our faith in democracy?

In this session, Allie will discuss how Russia has influenced worldwide elections using cyberwarfare and the means of fighting back. We'll understand the natural asymmetry between how Russia and other countries are able to respond, and how defensive approaches have changed since 2016.

Expect some brainstorming on all of the ways to disrupt an election that countries aren't prepared for. Get ready to put your nation state threat actor hat on and disrupt some elections - and maybe even earn some ириски-тянучки.

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

In 2018, Bruce presented a HOPE talk on how America was supposed to be a fiber optic nation where the telecom pipes were supposed to be open to all forms of competition. Customers paid over half a trillion dollars to make this happen by 2018 - and that was the low number. Through mergers and the takeover of the FCC and some state commissions, today there are only a few companies that have taken control of most of America’s broadband, Internet, cable TV, phone, satellite, and wireless services. But in 2019, the Irregulators took the FCC to court because they uncovered that AT&T, Verizon, and the other companies had been able to manipulate the very accounting formulas: they made the entire U.S. infrastructure appear to lose money so that they could not only leave whole areas of America to deteriorate, but could inflate all prices, included wireless - adding another half a trillion dollars in overcharging since 2000 and continuing to the present unabated. In 2020, they got the decision they wanted: The states are independent from the FCC’s manipulated accounting. Net neutrality and the digital divide can now be fixed, we can get back our privacy and stop the overcharging, and we can finally get gig speeds and open pipes. We can hold them accountable for their misdeeds and take the final step. It’s time to break up AT&T, Verizon, and the cable companies... again.

talk on conference website

Open source software sounds great to use, and hopefully even better to contribute to! This session will discuss the various ways to get involved with open source software, with notable examples taken from within the Apache Software Foundation. In past sessions, incredibly ambitious people have walked away having made a concrete (code) contribution.

https://wiki.hope.net/index.php?title=Start\_Contributing\_to\_Open\_Source\_Workshop

talk on conference website

**Radio Statler** has been broadcasting original content from HOPE to the rest of the world since 2008. You can expect interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the virtual talk rooms. Watch and listen at http://radio.hope.net/

talk on conference website

Maybe you've seen a modular music synthesizer with its alluring tangle of patch cords and wondered: how does it work? What do all those knobs do, and how might I get started? This workshop is for you! Using the free and open source VCV Rack digital audio workstation, you will learn the principles of analog audio synthesis and how to create new sounds using voltage controlled oscillators, filters, and amplifiers. No hardware required, but once you understand the principles, you will be ready to start playing Eurorack or similar modular synthesizers, and a new sonic world will be at your fingertips!

https://wiki.hope.net/index.php?title=Intro\_to\_Modular\_Synthesis\_workshop

talk on conference website

This workshop will cover all the information you need to start picking the most common locks. Eric will cover the tools you need, different types of locks, and legality in various states, plus show you how to start simple and build your skills. Anyone can learn how to lockpick and learn how in this class! After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

*Keynote by: Tiffany Rad* As the daughter of a former case officer, Tiffany's father taught her about electronic and physical security at an early age. (He had a lockpick set that rolled out of a canvas case and looked like a surgeon’s precision tools.) She grew up hearing stories about “sneaks,” as he called them, where he would be hired as a consultant to “break into places so bad people could not break into places.” After a successful sneak (and they all were - never a failure), he designed better security for the facility. Later on, he contributed to the movie, *Sneakers*. A few years later when she was in college, Tiffany met computer engineers who introduced her to computer hacking. This is where she learned about Kevin Mitnick’s arrest and subsequent conviction. She was so intrigued about his case that she went to law school. She discovered there was a need for attorneys with technical expertise. Years later, she started working with her father on consulting projects. In 2011, she simulated a prison break (in the safety of a sandboxed environment in a basement in Virginia) by finding and exploiting vulnerabilities in industrial control systems. Now, Tiffany accesses car computers and works to protect transportation and critical infrastructure. She’ll be talking to you about some of her other inspirations - including vehicle tuners, hot rodders, and rally racers (the first car hackers) - and how it’s important that we maintain the ability to use, buy, and create tools that allow us to access systems and devices for assessment and modification. More than ever, who controls the code - from a legal and technical perspective - will determine if we are simply “users” of our devices or “owners.“ And from a vehicle research perspective, are you a “driver” or are you “driven?”

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

In this workshop you will dive into the most popular types of restraints: handcuffs and flexicuffs. Eric will discuss the different types of handcuffs, their inner mechanisms, and how they can be attacked and defeated. You'll learn the various types of techniques that can be used against plastic restraints. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

More than 125 U.S. law enforcement agencies have suffered some form of hack or data breach over the last ten years. Journalism school graduate Madison Vialpando has been working with the Electronic Frontier Foundation to build a dataset compiling all the ransomware, DDOS attacks, physical data theft, and servers and surveillance technologies exposed online. In this talk, she will explain how the dataset works, the trends revealed by the data, some of the most interesting case studies, and whether law enforcement is actually learning anything from these incidents. Dave Maass will talk about the Electronic Frontier Foundation's security research into automated license plate readers and other unsecured surveillance tech, while transparency activist Emma Best of Distributed Denial of Secrets will provide an overview of BlueLeaks - one of the largest dumps of internal police documents in history.

None

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

As we all know, Mate sodas like Club-Mate are wonderful fuel for late night hacking sessions. But availability in the U.S. is limited. So how can we fill the void? Come learn how to produce your own Yerba Mate soda at home.

https://wiki.hope.net/index.php?title=D-I-Yerba\_Mate\_Soda\_workshop

talk on conference website

The Bypass 101 workshop will teach the participant how to shim padlocks, bypass a common Master Lock 175, bump locks, and bypass lever door lock handles. It is worth noting that while lever door lock handles are common in commercial buildings, most people at home will not have access to one to test. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

Many members of the international Internet freedom community perform organizational security audits for non-profits, media organizations, and small NGOs in need. These services are by no means full-fledged penetration tests, but they effectively respond to a specific need for affordable and achievable ways to bolster a small and cash-strapped organization's security posture.

While different OrgSec auditors may have their own tooling, Harlo will introduce you to the workflow developed at Freedom of the Press Foundation, centered around the Qubes operating system. This session will cover compartmentalization, building custom environments with powerful penetration testing tools, observing network activity without contaminating your results with personal traffic, working with peripherals like external Wi-Fi cards and network taps, and even air-gapped and confidential report generation. Oh, and since we are in the midst of a global health crisis, she'll address how some of this work extends well (or not-so-well) to a strictly remote practice. Throughout the session, Harlo will demonstrate how certain modules within popular auditing frameworks, like the SAFETAG methodology, are made all the easier and effective by taking advantage of the great set of features available in a Qubes workstation.

The goal of the session is to bridge the gaps between popular auditing techniques and their actual practical implementation. This will also be a great opportunity to discuss with the HOPE community the finer philosophical goals and methodologies that have been built around OrgSec auditing at a smaller scale, while showcasing how a pretty nimble setup using this new and exciting operating system has been created.

None

talk on conference website

The tools to create fake images are in the hands of the masses! From PhotoShop to InDesign to DeepFace Lab and Zao, you can make anyone say anything. Want a free drink on the plane? A simple editing on your self-printed boarding pass might do the trick (don't try this please!).

This talk will explore the ways in which images/video/documents can be manipulated, including some humorous examples. It will also discuss the serious aspects (e.g. lots of insurance fraud now involves faked "photo evidence" of flooded basements, etc.) As we move to elections in the U.S. and Canada, it is inevitable that we'll see political deepfakes and other chicanery.

After establishing that fakery is child's play, the talk will discuss various different ways of detecting fakes. Everything from checking the carotid pulse of a speaker to background matching and phoneme analysis. The author has developed a blockchain-based validation model that would, for example, have proven which "CNN Jim Acosta video" was the original and which was the fake that the White House tweeted out.

Finally, this talk will give an important message to all of us who have hacker abilities: just because you can do it doesn't mean you should!

None

talk on conference website

Would you like to have Fort Knox level security with an invisibility cloak for the data on your computer? Do you want to have a better security solution than the standard encryption offered for a GNU/Linux OS? Then check out MADDES Secret Lair, where Matt will demonstrate how it allows for full disk encryption (FDE) with "/boot" for a GNU/Linux OS with plausible deniability on a computer. This includes support for many features, including Linux Unified Key Setup, VeraCrypt, multi-boot different operating systems, and the GNU GRUB boot loader. MADDES Secret Lair supports both BIOS and UEFI and allows for installing the boot loader on a USB. The enhanced auto generation of the boot loader and initramfs (update-initramfs) allows for system updates to function as normal. This is possible using nonstandard GRUB, cryptsetup, systemd, and such. This workshop provides step-by-step demonstrations, allowing attendees of all skill levels to follow along.

https://wiki.hope.net/index.php?title=MADDES\_Secret\_Lair\_workshop

talk on conference website

Many "hacker" / infosec conferences have talks and workshops that cover lockpicking. However, the adjacent skills of locksmithing remain underexplored. This talk/demo seeks to focus on the following topics:

- explanation of basic locksmithing tools (re-pinning kit, plug followers, calipers, etc.);

- identifying key blanks and decoding keys;

- disassembling locks;

- changing out pins to work with a different key.

These skills will be useful for a variety of audiences: locksport people looking for increased knowledge of lock operation, locksport people interested in constructing challenge locks, as well as homeowners interested in doing their own lock re-keying.

None

talk on conference website

Digital encryption is a fundamental technology in digital communication that ensures privacy over public channels. This workshop introduces the concept of encryption and why it is important in communications. The history of encryption will be discussed from pre-digital to digital forms. The workshop will cover different types of encryption, such as symmetric and asymmetric encryption. Finally, participants will see digital encryption in action by encrypting and decrypting messages in a guided activity that introduces PGP/GPG, a standard that is commonly used for email encryption.

https://wiki.hope.net/index.php?title=Hidden\_in\_Plain\_Text\_workshop

talk on conference website

Hacker knowledge is open to all, community-backed, and defies regulation. All education could be enhanced by these unique strengths, but they also represent challenges: How can we build trust in excellent hacker knowledge sharing? How can we start to style all education after hacker learning, while maintaining the level of trust people place in certificates and transcripts?

This talk introduces the Reference-Rich* Decentralized Accreditation System (*DAS), a conceptual framework and developing circle of open source software for certifying knowledge among learners and between far-flung learning communities. Dana will show how the tech backing *DAS aligns learners' incentives to certify each other and themselves by offering statistical inference that reveals excellent teaching. He will describe high school pilot studies by makerspace learner-teachers in Beijing's Moonshot Academy as example applications. Dana will also demo how to use *DAS to evaluate some of our own learning about other topics, like cooking and programming. *DAS does not use machine learning and it prioritizes data privacy. The *DAS concept is designed to democratize education, lessen systemic inequality, and reward exponentially spreading peer-to-peer teaching and learning.

talk on conference website

Social engineering is one of the hottest talked about topics at conferences around the world. What makes social engineering so popular and why is it so successful? Why is social engineering so dangerous? In this talk, Christian goes beyond discussing popular techniques and exploits that are used in the hacker community. He will dive deep into reverse engineering the human mind and understanding how our DNA is coded to allow us to be so vulnerable. This talk is for anyone looking to hone in on their social engineering game, as well as those who want to improve their training programs and tactics to fight this threat.

Regardless of what side you're on, you will enter this talk as a social engineering script kiddie and leave as a master of manipulation. There is no going back; you will not see the world the same way again.

talk on conference website

So you've learned some amazing things from your community, not from school. How can you prove it? With an open source accreditation system, of course! But it's a challenge to write a certificate for your own learning that includes every piece: the right prerequisites, the right kind of proof that it's yours, the right material to make an excellent case for your knowledge - and how to credit your community, too. Join this workshop to learn how to write a short, trustworthy certificate to prove your knowledge (like the key points of Brown v. Board of Education of Topeka, 1954) or your skill (like soldering headers) that you'd like to prove to yourself or others, especially something you've learned at HOPE 2020! Use a reference-rich decentralized accreditation system (*DAS), which will be provided, to visualize your certificate as part of a live network of everyone else's certificates from the workshop.

https://wiki.hope.net/index.php?title=How\_to\_Prove\_and\_Assess\_Quality\_Learning\_workshop

talk on conference website

Social media has created a balkanization of conversation. Trapped inside our filter bubbles, the walls between us have solidified and our narratives and identities can be hacked. How do we change our discourse to create new narratives? In September, Michael will be releasing a movie in a completely new way over social media, as if it’s actually happening alongside dozens of fictional stories and celebrity appearances. It’s about two kids who try to ruin each others’ lives. Based on a viral Reddit story with two million views, it’s aimed at kids aged 13 to 25. This project will frame the problems, make them visible, and create a global conversation about how disinformation works. We can move forward and make a better world, and creating discussion and a better understanding of the problem is the first step. Michael will show the trailer and provide an overview of the project and the state of disinformation today in 2020.

talk on conference website

Ventilators help to save lives when a patient has caught COVID-19, but in some places it is difficult to gain access to one. They are also very expensive. In this workshop, you will learn how to use an Arduino board, a sensor, and motor controller shield, plus materials from a neighborhood shop, to build an automatic ventilator.

https://wiki.hope.net/index.php?title=Build\_an\_Easy\_Ventilator\_workshop

talk on conference website

Hackers and hacker culture are usually portrayed as being novel, with even the earliest proposed dates for "hackers" as a cultural group only going back to the 1960s or so. This talk will examine hacker culture in light of earlier cultural movements for whom knowledge and information were morally significant (as opposed to just good in a utilitarian sense) and show that moral, aesthetic, and sociological beliefs that are thought to be unique to the hacker culture, in fact existed in these earlier precursors. This talk will examine gnostics, alchemists, and various occult traditions and tie them together into a cultural lineage from which hackers still draw today.

talk on conference website

Got a burning question about sex? Curious about making your own silicone sex toys? Not sure of the difference between biological sex and gender? Wondering about dating and digital spaces? In this session, Kit "where did this b!tch get [their] doctorate" Stubbs of the Effing Foundation for Sex-Positivity and SX Noir, host of the *Thot Leader* Podcast, are ready for you to ask them anything!

They'll start with a quick survey of topics to get your ideas flowing, including sex and gender, DIY toys, dating and digital space, and online sex work. Then they will open the floor for your questions. Whether you're ready to ask a question or just happy to listen, join them for a celebration of hacking, tech, and human sexuality!

This session will provide a space to talk about topics that many people are curious about but don't have the opportunity to discuss, including sex, gender, and pleasure; and how skills that hackers value, including DIY/making things and programming, can be used to enhance sexual experiences. This talk is intended for folks who like sex/pleasure, enjoy geeking out about them, and are curious about human sexuality and its intersections with hacking and tech.

talk on conference website

dj-spock was influenced by the "Sound of Frankfurt" in the early 1990s. In legendary clubs like Dorian Gray, Omen, U60311, and Cocoon Club, he got in touch with artists like Sven Väth, Chris Liebing, DJ Dag, Carl Cox, Jeff Mills, Gayle San, and many more. Since 2001, he has been active in organizing hacker conferences and parties in Germany, the Netherlands, and Poland, including events like Chaos Communication Congress, Chaos Communication Camp, SHA2017, Eahsterhegg, and many more. He is also the host of a monthly hacker radio show and an active member of Chaos Computer Club. https://soundcloud.com/dj-spock-ffm https://www.mixcloud.com/dj_spock/ https://www.c-radar.de/

talk on conference website

Kliment will show you how to go from graphical art (drawing, sketch, photo) to a PCB layout that looks somewhat like it. This workshop is meant for people who are on one side of the art/electronics divide and would like a bridge to the other side. You will start with a drawing and a schematic, and end up with a set of files that can be sent to a PCB factory for manufacture. The schematic will be a simple Shitty Add-On (SAO) compatible with various event badges you may have. No prior knowledge is needed.

https://wiki.hope.net/index.php?title=Artistic\_PCB\_Design\_for\_Terrified\_Beginners\_workshop

talk on conference website

Polygraph or "lie detector" testing has long been discredited from a scientific standpoint. Yet it has been embraced by the United States government for decades, and in 2020 it is the centerpiece of American counterintelligence policy. Employees and contractors of such agencies as the CIA, NSA, FBI, and numerous others are required to undergo pre-employment and recurring polygraph screening. Yet there is no documented instance of routine polygraph screening ever catching a spy. This talk will address how this state of affairs came to be. It will further address polygraphy's scientific shortcomings and why it poses a threat to innocent test takers, and it will explain proven strategies for passing (or beating) a polygraph "test." The talk will also address the U.S. government's recent efforts to suppress the teaching of methods for fooling the polygraph. This topic will be of particular interest to the hacker community because many information technology jobs with the U.S. government and its contractors require that the applicant submit to polygraph screening.

talk on conference website

Traveling the world can be done with little or no money if the traveler knows how to properly hack various systems for obtaining airline miles. Using miles, Philip and Marjorie have traveled to Europe, Asia, and Oceania, and, using a combination of miles and money, traveled to the Middle East. In this discussion, they hope to show how you too can "hack" the travel system.

None

talk on conference website

As the world quickly adapted to the move to a remote workforce, it became clear which companies had prepared proper DR plans, and which were making quick decisions. We have seen many examples where these quick decisions sacrificed security for functionality. Christopher will discuss the obstacles that companies have faced, the ways they can be overcome, and the lingering threats that exist. Visual and practical representations will be included, using data from almost 4000 endpoints in three countries to show what can happen when security is overlooked. Special attention will be paid to RDP, which, while it was on a steady decline in use, has now seen a sharp increase (data from Shodan).

None

talk on conference website

Apache Beam is an open source unified model for defining data processing pipelines (Batch and strEAM), which allows you to write your pipeline in your language of choice and run it with minimal effort on the execution engine (ex: Apache Spark, Apache Flink, Google Cloud Dataflow) of choice. In this practical session, you will get hands-on experience writing Beam pipelines, as well as learn about the fundamentals of the Beam programming model and SDKs (Python, Go, Java).

https://wiki.hope.net/index.php?title=Apache\_Beam\_Workshop

None

talk on conference website

The fight against government use of face recognition technology is an important one, and one that civil liberties and other groups have come at from many different angles. Unfortunately, the technology is already out there - in use - and endangering people's privacy. Due to differing laws, regulations, and data-sharing agreements between federal, state, and local agencies across the country, U.S. residents and visitors frequently have their image not only collected and stored for facial recognition purposes by the government, but often also secretively shared between dozens of agencies. Because of the complexity of these laws and agreements, it's very difficult to learn who exactly has your image. It can take a hacker mindset to learn where your image is - FOIAs, online research, even contacting individuals directly at government agencies. Using all of these methods, EFF developed a new interactive website to explain to users which agencies might be using their image for face recognition - and to spur them to act. The speakers will explain issues with facial recognition technology; what sort of advocacy has been effective in the past; where we stand on federal, state, and local regulations; and discuss how they did the research, design, and creation of the whohasyourface.org website and its result on laws and advocacy, as well as suggest ways that others can build on this research.

talk on conference website

**Radio Statler** has been broadcasting original content from HOPE to the rest of the world since 2008. You can expect interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the virtual talk rooms. Watch and listen at http://radio.hope.net/

talk on conference website

Over the last year, Freddy has been involved in investigating the use of facial recognition technology in surprising places, including in counter terrorism fusion centers. Primary documents became a front page exposé on Clearview AI, a secretive surveillance company that is scraping billions of images off of social media for its facial recognition application. Clearview has sold its facial recognition system to dozens of companies and many law enforcement agencies. Yet the company does more than just search faces; it also compiles links to LinkedIn, Facebook, and other social media platforms, allowing police to create full profiles of individuals' lives. This talk will focus on the facial recognition technology, working with journalists on these tips, and the ensuing fallout.

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

Have you heard that you should never, ever use Telnet anymore? Sure, Telnet is horribly insecure, but did you know you can effectively control much of the Internet with good old Telnet? Don't believe it? Then come and learn how to use Python to do some web server reconnaissance and how to build your own IRC bot that is all powered by Telnet! The program will be demonstrated and the open source code will be provided to let you experiment or improve to your heart's content. Note: All skill levels (beginner to advanced) are welcome to attend and you are not required to download/run any code to participate in the workshop. If you want to play with the program, the code uses Python 3 with the standard "telnetlib" library. Nothing special is essential beyond these aspects.

https://wiki.hope.net/index.php?title=Python\_and\_Telnet\_workshop

talk on conference website

*COVID-19 Cybersecurity Attacks* Cybersecurity technologies to identify, protect, detect, respond, and recover are extremely important, but not sufficient. HumanOS upgrade is required to safely use the Internet and it is not only about training and awareness. It is about the way users must behave online. The IT community must openly acknowledge system vulnerabilities. Humans are the weakest and strongest links in cybersecurity.

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

CiTiZEN KINO is a public event series which mixes media activism plus analysis, curated film screenings, performance, and public discussion. They are community artists, writers, independent media activists, VJ/DJs, and event producers. Collaborations have included Transmediale Festival, Haus Der Kulturen (HKW), Volksbühne Theater, Piranha Music, Chaos Communication Congress, Hellerau Theater in Dresden, Dokumenta, Ars Electronica, Kulturbrauerei, MS Stubnitz, Czech Zentrum Berlin, C-Base, Noisebridge, EFF, ATA: Other Cinema, CellSpace, Omni Commons, Journal Of Aesthetics and Protest, Regenbogenfabrik (cinema), RogueArt (Paris music label), etc. Through an expanded cinema format, they investigate their current dismal scenarios of living in a hyper-industrialized world shaped by a variety of “fracking” industries and exploitative, profit-seeking mentalities. While most of them by now have been exposed to the new toxic forms of petrochemical energy production, the methods of hydraulic fracturing invented in 1947 by the fossil fuels industries are also a perfectly grisly metaphor for the monstrously expanded extraction techniques of capitalizing on all human communications and social interactions. Through various media clips, they will provide an overview into what Shoshana Zuboff and others have illuminated as the deeply penetrating “Surveillance Capitalism,” which has become the central economic engine of the data industries. They might also call it the new modus operandi of transforming humans into digital beings. In the legendary words of hacker pioneer John Gilmore, they look for ways to “route around these problems” in order to reclaim and reconstruct an embodied and sustainable coexistence within the full spectrum of living organisms. The XLterrestrials are an arts and praxis species which has been collaborating with a wide variety of arts, sciences, technologies, and humanities fields for nearly two decades. And they have been producing CiTiZEN KINO events internationally since 2011, which utilizes their experiences in the tactical media and culture jamming genre/movements which sprouted in the 1980s and 1990s, and which also took inspirations from earlier practices pioneered by the Situationists, Dada, and Surrealism - all of which can be considered to some extent to be the forebearers of today’s creative and resistant strains of hackerdom. For HOPE, they will present a special streaming edition, whereby they go against the grain of all the Zoomy-surveillance exuberance in our “corona-reboot” predicaments. They will offer a live “silhouette version” of their community events at a Berlin venue, whereby their team and local participants will be playfully anonymized behind a projection screen, which is also the surface for the films that will be presented for the topics analyzed. They will be like “shadow puppets” commenting on the media clips, or something in the vein of Mystery Science Theater 3000, heckling this horrible B-movie disaster we all find ourselves immersed in during these Trumpy-dumpster-fire times. This will be broadcast via livestream: https://livestream.com/internetsociety2/hope2020

talk on conference website

Surveillance technologies are becoming more and more accessible, providing the general public the ability to track, monitor, and control others. These systems are particularly dangerous to victims and survivors of intimate partner violence (IPV). Perpetrators frequently use so-called "stalkerware" or "spyware" to exert influence and coercion over their current or former partners. These software packages allow abusers to geolocate victims and survivors, read or even delete their messages, and keep a tab on their activities and relationships. To date, research on this topic is piecemeal and still in its infancy.

In this talk, panelists will share insights from their ongoing research project at University College London's Department of Science, Technology, Engineering and Public Policy (UCL STEaPP). The project is being carried out in collaboration with the Chayn and the Gender and IoT project. The aim of the project is to map out the existing state of knowledge on the topic of stalkerware - including the latest studies, journalistic research, and analysis tools.

Considering the involvement of hackers, makers, and developers in the design, maintenance, and possibly even the abuse of such malicious tools, the presenters believe it is of utmost importance that the HOPE community engages with this topic. The community has both the skills and power to take on and act against these products and services. The talk will feature preliminary findings, highlight questions and knowledge gaps, and, most importantly, offer plans to help the community understand avenues that can be tackled by hackers.

_To make the session engaging and interactive, the speakers plan to use survey tools such as Sli.do to prompt the audience throughout the talk with questions and surveys. This approach enables them to receive input from the attendees, get feedback from the hacker community, and note questions attendees may have._

None

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

2020 will be a consequential year of elections for many nations, but one of the most followed will be the United States. USA primaries have foreshadowed potential issues to come in the November elections. Even before COVID-19, the trial of new technology threw caucuses and primaries into the center of the controversy. With the coronavirus, the national debate about the security of mail-in voting has ignited. What are the facts and expectations of major differences from a security point of view in 2020 vs. prior elections like 2018 and 2016?

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

In our dystopian present, the digital world is enmeshed with the physical. Security controls once made of steel are turning into silicon and copper wire. Door locks are being replaced by key card access, car keys replaced by electronic fobs, and "wallets" are digital files which store your cryptocurrency. Subsequently, real world operations now often contain both physical and electronic components. This talk will cover why the current landscape exists, and the implications for offense and defense.

From heisting cars to stealing Bitcoin, this talk will dive into real hybrid attacks which blend lockpicking and hacking, physical bypass and digital access. You'll understand why the hacker needs to know how to pick locks, and why the Wi-Fi Pineapple and USB Rubber Ducky are becoming part of the physical access specialist's toolkit.

"It was easier in the old days... just as old wooden buildings have more rats than concrete buildings… Now that society is all ferrocrete and stainless steel there are fewer gaps in the joints. It takes a very smart rat indeed to find these openings. Only a stainless steel rat can be at home in this environment..." - Harry Harrison, _The Stainless Steel Rat_

None

talk on conference website

Our smartphones listen to our conversations even when they’re not on. GPS tracks us even when we know where we’re going. Our credit cards track all of our purchases. The cameras in our computers watch us. Maybe the camera in our smart TVs watch us too. We go through life sending out little electronic messages revealing everything we say, everywhere we go, everything we buy, and everyone we talk to. Artificial intelligence claims it can predict our actions and even our thoughts before we have them. It claims it can influence what we do and even how we vote. Is this the world of interconnectedness we dreamed of 25 years ago at the dawn of the Internet age? How can we control it instead of having it predict our moves and nudging us? https://wiki.hope.net/index.php?title=Surveillance_Capitalism_workshop

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

Hackforums is known as the script kiddie forum of hacking where most up and coming hackers drift to. Past investigations have shown, however, that many established hackers are still very much active on the platform and use it to transact illicit goods and services. This presentation builds on the contract section of the forum that has archives going back over one year. This contract section provides detailed information on the transactions that hackers have negotiated over Hackforums. Using tens of thousands of contracts scraped from Hackforums, David will provide an analysis of the true cost of hacking tools and services, not those advertised publicly on the forum. He will conduct social network analysis of the actors involved in the transaction of illicit goods and services to identify key players and map the structure of the social organization of the illicit trades facilitated by Hackforums. This presentation will provide new and solid evidence of the inner workings of the underground illicit economy, as well as provide a methodology to identify key players in hacker networks based on the best practices of the social network analysis field.

None

talk on conference website

This workshop teaches you how to use "password recovery" tools like John the Ripper and hashcat to find out what the password of a given user account or password-protected file is. By using free software programs that automate a technique called hash cracking, you can find out exactly how strong (or not) your own passwords are. Also in this workshop, you'll learn about equally free password and secrets management apps like KeePass that help you practice good password hygiene so that you don't reuse passwords or use weak passwords that don't offer as much protection as you might have thought before you learned how easy it can be to "crack" encrypted passwords yourself. This workshop will also provide an automated lab environment for you that you can spin up on your laptop so that you can follow along with the instructor and get cracking immediately.

https://wiki.hope.net/index.php?title=Password\_Superpowers\_workshop

talk on conference website

This workshop will cover all the information you need to start picking the most common locks. Eric will cover the tools you need, different types of locks, and legality in various states, plus show you how to start simple and build your skills. Anyone can learn how to lockpick and learn how in this class! After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

This talk will describe four mechanisms by which the big data paradigm degrades user autonomy:

1) Sensitive data is being aggregated without transparency and without meaningful consent from users;

2) Search functions and algorithms, content recommendations, and ads expose users to unwanted and potentially harmful content;

3) Behavioral analytics creates profit, often by exploiting addictive tendencies, both by platform design as well as by targeted content;

4) Dataism, a growing trust in the "objectivity" of data, justifies and reinforces norms while further marginalizing deviant identities and behaviors.

Each of these mechanisms are increasingly problematic when the platform in question is sexual in nature or is dealing with the collection, sharing, and use of intimate data. Keegan will provide examples of the ways in which different sex technologies, through these mechanisms, are violating users' capacities for self-determination, sexual or not. The technologies discussed to exemplify these mechanisms include pornography, dating apps, sex-tracking apps, and period-tracking apps.

The aim here is not so much to prescribe any certain path forward to overcome these complex issues, but rather to provide insight on the rapidly evolving terrain of our consumer culture, and perhaps inspire deeper and broader consideration of the relevance of technological discourse and digital privacy to sex education.

None

talk on conference website

There's nothing worse than being right all the time, but having no power to persuade or make change. In this talk, Nada will show you how to talk to the suits in your work life, first about mundane matters like software purchases and info security, and then about what we really care about: violations of equity or rights. Learn how to meet them where they're at to bring them onto the right path.

None

talk on conference website

In this workshop you will dive into the most popular types of restraints: handcuffs and flexicuffs. Eric will discuss the different types of handcuffs, their inner mechanisms, and how they can be attacked and defeated. You'll learn the various types of techniques that can be used against plastic restraints. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

So you've learned some amazing things from your community, not from school. How can you prove it? With an open source accreditation system, of course! But it's a challenge to write a certificate for your own learning that includes every piece: the right prerequisites, the right kind of proof that it's yours, the right material to make an excellent case for your knowledge - and how to credit your community, too. Join this workshop to learn how to write a short, trustworthy certificate to prove your knowledge (like the key points of Brown v. Board of Education of Topeka, 1954) or your skill (like soldering headers) that you'd like to prove to yourself or others, especially something you've learned at HOPE 2020! Use a reference-rich decentralized accreditation system (*DAS), which will be provided, to visualize your certificate as part of a live network of everyone else's certificates from the workshop.

https://wiki.hope.net/index.php?title=How\_to\_Prove\_and\_Assess\_Quality\_Learning\_workshop

talk on conference website

The Bypass 101 workshop will teach the participant how to shim padlocks, bypass a common Master Lock 175, bump locks, and bypass lever door lock handles. It is worth noting that while lever door lock handles are common in commercial buildings, most people at home will not have access to one to test. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

Johannes has been co-organizing the world's leading cocktail-robotics festival, Roboexotica, for two decades. In it, he's seen a lot of inebriating and ingeniously designed machinery. This annual event brings scientists, researchers, computer experts, and artists from all over the world to Austria. They build and present cocktail robots. They also discuss technological innovations and pitfalls, futurology, and the marvels of hands-on science fiction. It's time to dedicate an entire HOPE presentation to the concept and underlying philosophy of this bizarre and boozy endeavor. Roboexotica is all about the flair, the atmosphere, and the personality a robot can have. The contraptions presented can be efficient, but the primary goal is to display unique mechanical charm and character. With thousands of guests each year, there is also an exciting educational opportunity.

None

talk on conference website

This talk is about the rural-urban connections of tech in the Chinese countryside, and the impacts of tech on rural areas that are increasingly globalized. Xiaowei will tell the story of their visit to a police station in the city of Guizhou, and how they talked to a police officer about the implementation of their "Real Population Platform," a platform designed to surveil rural migrants in the city. A visit to the the offices of Face++/Megvii, which makes face recognition algorithms for China's Skynet surveillance system, will also be described. Through this research, they look at the realities of how these platforms and algorithms are used on the ground (along with implementation challenges, from data quality to collection, and the global profiting on surveillance).

This talk seeks to open up a broader discussion on data, representation, and the ethical and philosophical questions surrounding prediction as an industry built by tech. As the police officer in Guizhou said, "no one can predict the future." So why do predictive policing platforms still exist? What is the circular logic that remains in engineering? What are the potential strategies and areas of countering these types of surveillance?

None

talk on conference website

How to sew your own mask using a used disposable mask, some cloth, and a needle and thread. We also show how to user a laser cutter to add a little ring to adjust the length of the ear loops.

talk on conference website

The Nintendo Entertainment System features the Motorola 6502 CPU. This presentation serves as an introduction to the 6502 instruction set and features an overview of how the Game Genie works, memory hacks, and how to use techniques like write-breakpointing to further analyze and edit instructions. Free/open tools such as Bizhawk and FCEUX will be utilized.

None

talk on conference website

A New York City musician who just graduated from Brooklyn Technical High School and has performed in the 2018 and 2019 Tibet House Benefit concerts at Carnegie Hall, Cameron is also a recurring writer for *2600: The Hacker Quarterly*. In this session, he’ll be presenting a collection of improvised and composed music, as well as a little insight into how this year affected the class of 2020.

talk on conference website

As an ongoing investigation which unpacks the dehumanization conspiracy of growing data domination, this spatial research will leverage on the turmoiled case of Hong Kong, as a highly idiosyncratic context, to illustrate how the unheeded culmination of data centers has been silently engulfing urban space. Stemmed from an extensive thesis of typological analysis and speculative writing, the talk attempts to hypothesize on antagonistic potentials through the lens of performative theories, edge computing, and more. Especially in the age of pandemic in which our lifestyles are increasingly digitized, discussion on our incessant migration to the virtual realm and the emergence of city relics is unprecedented and timely. The presenters hope to raise awareness of this transformation of urbanism rapidly driven by burgeoning data consumption, and to invite imagination on alternative futures.

None

talk on conference website

A brief introduction to GNU Screen. Screen is part of the GNU project, and is an overlooked utility that can make working on the command line much easier. Screen is a terminal multiplexer that allows for disconnecting remote sessions, multiple ways to enhance viewing of your command line sessions, and better ways to capture data from those sessions. Murph will show you how to use all of this, as well as how to install it under several GNU/Linux (and other) operating systems.

The slides are at: https://github.com/murphnj/screenpresentation

https://wiki.hope.net/index.php?title=A\_Brief\_Introduction\_to\_GNU\_Screen\_workshop

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

Threats in IOT space are increasing on an exponential scale. One of the most stringent issues encountered in IoT devices is the management and deployment of embedded web servers and security controls associated with them. A number of security flaws exist due to the inability of imposing strong authentication and authorization controls at the granular level. In addition, bad design practices result in giving birth to inherent vulnerabilities. This talk highlights the state of security in embedded web servers by presenting undisclosed vulnerabilities in IOT devices. Additionally, the talk unveils how the embedded web servers used in IOT devices are exploited by adversaries to trigger advanced cyber attacks. There will be demonstrations and very detailed case studies will be discussed.

None

talk on conference website

**Radio Statler** has been broadcasting original content from HOPE to the rest of the world since 2008. You can expect interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the virtual talk rooms. Watch and listen at http://radio.hope.net/

talk on conference website

You've probably heard lots about Arduino. But if you don't know what it is, or how you can use it to do all sorts of cool things, then this fun and easy workshop is for you. Arduino is an amazingly powerful tool that is very simple to learn to use. It was designed so that artists and non-geeks can start from nothing, and make something cool happen in less than 90 minutes. Yet, it is powerful enough so that uber-geeks can use it for their projects as well. This workshop is easy enough for total newbies to learn all you need to know to get going on an Arduino. Participants will learn everything needed to play with electronics, and use a solderless breadboard to make a TV-B-Gone remote control to turn off TVs in public places - a fun way to learn Arduino (and electronics) basics.

https://wiki.hope.net/index.php?title=Arduino\_For\_Total\_Newbies

talk on conference website

A panel of experts, technologists, and lawyers will give an update on several I-star organizations, namely ICANN, IETF, IEEE, and ITU. Short presentations will touch on the major controversies in each space as they relate to human rights, namely freedom of expression and the right to privacy. Questions to the panel from the moderator will draw out the tensions and synergies of human rights considerations in Internet governance and standards setting across the I-star bodies. Questions from the audience are encouraged.

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

Get the latest information about how the law is racing to catch up with technological change from staffers at the Electronic Frontier Foundation, the nation's premiere digital civil liberties group fighting for freedom and privacy in the computer age. This session will include updates on current EFF issues such as:

Congress' EARN-IT legislation (designed to mandate backdoors in encryption);

Van Buren v. U.S., the upcoming Supreme Court case on the CFAA (federal anti-hacking law)

Law and policy for COVID-19 tracking/quarantine/immunity passport apps;

The growing trends to limit government use of facial recognition technology;

as well as updates on EFF's technology projects, cases, and legislation affecting security research, and much more. Half the session will be given over to question-and-answer, so it's your chance to ask EFF questions about the law and technology issues that are important to you.

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

Keynote by: Libby Liu

talk on conference website

Learn to solder together a cool, powerful music synthesizer and learn to make cool music, sound, and noise with a computer chip! For total beginners.

https://wiki.hope.net/index.php?title=ArduTouch\_Music\_Synthesizer\_Workshop

talk on conference website

This workshop will cover all the information you need to start picking the most common locks. Eric will cover the tools you need, different types of locks, and legality in various states, plus show you how to start simple and build your skills. Anyone can learn how to lockpick and learn how in this class! After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

Signal is currently one of the most useful and widely-adopted tools that we have for secure communication amongst activists, journalists, and human rights defenders. *The New York Times* recently reported that in the first week of June 2020, on the onset of protests and marches that swept through the United States and several other cities worldwide, Signal had 183,000 new downloads. With the rare combination of both a hardened, widely lauded security model and a user base of millions, the Signal platform has the potential of being leveraged for a variety of different functions, with the end goal of providing additional tools for vulnerable people without requiring them to install another app.

To that end, the Open Technology Fund (OTF), an organization that incubates privacy and security tools (and even in the early days, Signal itself) supported the creation of Ionosphere, a toolkit for building chatbots and other tools on top of the Signal network using straightforward JavaScript libraries with example code and clearly defined APIs.

In this session, Josh King, developer of Ionosphere, will demonstrate how these tools have been used to create chatbots for protecting activists' social graphs, providing IRC-like services to Signal groups, and more. Sarah Aoun, chief technologist at OTF, will discuss how OTF is using Ionosphere to extend services and tools to activists, human rights defenders, and journalists around the world. One example of it is through the creation of a Signal VPN bot, used to distribute VPN access and other resources to people in environments with restricted Internet freedom. Participants will come away with an understanding of the tools that exist for utilizing Signal in novel ways, how to think through the threat model and risk assessment for targeted groups, and how those tools can be expanded upon and applied to their own communities.

None

talk on conference website

In this workshop you will dive into the most popular types of restraints: handcuffs and flexicuffs. Eric will discuss the different types of handcuffs, their inner mechanisms, and how they can be attacked and defeated. You'll learn the various types of techniques that can be used against plastic restraints. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

The Bypass 101 workshop will teach the participant how to shim padlocks, bypass a common Master Lock 175, bump locks, and bypass lever door lock handles. It is worth noting that while lever door lock handles are common in commercial buildings, most people at home will not have access to one to test. After signing up for the workshop, please order your materials so that they arrive in time.

https://wiki.hope.net/index.php?title=Lockpicking_Village

talk on conference website

We have rights with respect to our technology. These rights are imperative to ensuring our digital autonomy: our right to be in control of our own destinies. As the border between the physical and the digital breaks down, it is increasingly becoming necessary to reexamine what we consider to be the rights that protect our digital autonomy, and the way those abstract ideas apply to existing (and theoretical) technology.

Cyborg lawyer Karen Sandler and digital rights activist Molly de Blanc will first discuss the principles of digital autonomy, clarifying what your rights are and the principles that define them. They will then analyze popular technologies including video chat software in the context of these principles.

Karen and Molly wrote the Principles of Digital Autonomy to summarize what they have learned in their time as digital rights advocates and activists. In this session, they will share them with the audience and then look at software and hardware, including Zoom, from the lens of those principles.

None

talk on conference website

Digital encryption is a fundamental technology in digital communication that ensures privacy over public channels. This workshop introduces the concept of encryption and why it is important in communications. The history of encryption will be discussed from pre-digital to digital forms. The workshop will cover different types of encryption, such as symmetric and asymmetric encryption. Finally, participants will see digital encryption in action by encrypting and decrypting messages in a guided activity that introduces PGP/GPG, a standard that is commonly used for email encryption.

https://wiki.hope.net/index.php?title=Hidden\_in\_Plain\_Text\_workshop

talk on conference website

The SecureDrop whistleblowing platform has become the de facto standard among news organizations for communicating with anonymous sources and accepting highly sensitive leaks, and is used by over 70 media organizations worldwide. The system was co-created by the late Aaron Swartz and first announced at HOPE six years ago. Each SecureDrop instance is physically hosted inside a news organization, and sources communicate with journalists by accessing a web application available using Tor Onion Services. In this talk, Mickael will discuss security and user experience challenges faced by journalists in opening anonymous submissions, and present the various design considerations for the SecureDrop Workstation. Currently in limited pilot with a small number of newsrooms, the SecureDrop Workstation relies on Qubes OS and Xen virtualization to separate the various components of a journalist's workflow, which until now required the use of air gapped hardware. Not only does it make working with source materials safer by mitigating most malware, it is also significantly faster and easier for journalists to use, and provides opportunities to integrate with other secure communication tools.

talk on conference website

This workshop will teach you how to use this particular inventory management system - especially suited for hackerspaces, but also good for all. Tutorials will be provided in the inventory management system that will guide you on modeling your stuff in the system. The system doesn't really require computers, but they will be used here, given this year's constraints.

You will learn about the implied political agenda that was discovered as this system was developed and used. In short: many people outsource the cataloging of items to retailers, and this creates a need for disposable products that can be shipped very quickly. If we would all catalog our things, we might consume less.

The workshop has two sessions. All participants should attend session one. Session two is optional, designed for those people who want to learn the special software. This is session two.

https://wiki.hope.net/index.php?title=Inventory\_Management\_Playground\_workshop

talk on conference website

In the last two decades, CG character animation has become a victim of its own success. Twenty years ago, recreating human beings in virtual 3D space was a fantasy, the Holy Grail of computer animation. Today, that fantasy is a reality that surrounds us in films, games, and TV commercials. A consequence of this success has been a sense of alienation and distrust we feel when we see realistic synthetic humans. This experience is often called the "Uncanny Valley." Today this distrust is justifiably even more pronounced, as realistic but not-actually-real humans populate video footage we now call "deepfake"

Chris has had more than 25 years of animating realistic human characters and has learned some surprising things about these synthetic humans, particularly about their faces. If these CG characters are well made, they can lie like humans - and we can see it in those faces. If they are not well made, they can only lie like machines - and we see it in their code.

In this presentation, Chris will show you the anatomy of a CG character's face and how it can lie to you - but also how it can convey, in unlikely ways, beauty and truth.

talk on conference website

The U.S. government has become world famous for actively ignoring the inbound COVID-19 pandemic, opting to disband the NSC pandemic team which had been directly and recently trained to respond to these issues, splintering them into other roles. The new Directorate for Global Health Security and Biodefense did not move to effectively prepare the country for a massive biological crisis, leaving most health care (and really, all other) facilities vastly under-prepared to handle the inbound sickness while keeping essential workers protected. Realizing it was time to promote dev to prod, “rapid-prototypers” from all sorts of maker realms from 3D printing to sewing stepped up to donate their time, materials, machinery, project management knowledge, and even personal health in order to get these essential workers the personal protective equipment (PPE) they need to ensure they can treat infected individuals while minimizing personal risk. This presentation will provide an overview of these efforts.

talk on conference website

Nine-year-olds are designing wearable electronics to promote their beliefs - in humanities classes, math classes, and in clubs. As mentors, we can provide the environment and bring ethics, self-agency, power tools, coding, and empathy. Join the MakeFashion Edu discussion! There will be a film screening concerning the following topics:

\* Amateur Electronics Design in Shenzhen, China

\* Project Based Learning in K-12 schools

\* Advocacy through Fashion and Technology

After each screening there will be a discussion followed by an introductory workshop on lighting up LED strips. (If you don't have your own hardware, you can send in your code and it will be uploaded to development boards so your code can be run on LED strips.)

This online workshop space will be open 24 hours a day during HOPE 2020, with several informal gatherings in addition to the official workshops. Pop in whenever you like!

https://wiki.hope.net/index.php?title=Custom\_Electronics\_and\_Activism\_in\_K-12\_Education\_workshop

talk on conference website

When we see the terms "Natural Language Processing" (NLP) or "Machine Learning" (ML), often our guts are correct, and it is vendor marketing material, frequently containing FUD. After tinkering with various libraries in Python and R with the use of some OSINT and SOCMINT techniques, Joe has found a use for NLP and ML that is 100 percent FUD-free in the form of a brand new Python-based tool.

In this presentation, Joe addresses topics that he has frequently spoken about in past years: disinformation, deception, OSINT, and OPSEC. When working through learning NLP and ML in Python, it dawned on him: marry these technologies with Decepticon for good. Enter the Decepticon bot.

The Decepticon bot is a python-based tool that connects to social media via APIs to read posts/tweets to determine patterns of posting intervals and content, then takes over to autonomously post for the user. What is the application, you ask? People who are trying to enhance their OPSEC and abandon social media accounts that have been targeted without setting off alarms to their adversaries. Use case scenarios include public figures, executives, and, most importantly, domestic violence and trafficking victims.

None

talk on conference website

Weaving is one of the older technologies in humankind - there is evidence of looms from 9000 years ago. It is also the first programmed machine. Yet in these modern times, the mechanics of loom weaving seem to be a mysterious craft, left to the esoteric craftspeople of society. The goal of this workshop is to uncover part of that mystery. There will be a prerecorded video on producing a woven piece, including the dying and prepping of the yarn, setting up the loom, pattern planning, and the actual weaving of the project. After the video presentation, in addition to questions and answers, there will be an opportunity for audience members to participate in the final design of a woven piece by indicating weaving patterns via an interactive website. The finished piece will be a true artifact of the HOPE 2020 conference!

https://wiki.hope.net/index.php?title=Weaving\_The\_Future\_workshop

talk on conference website

Charlie Chaplin once said to be truly funny, you must take out your pain and play with it. How can we use comedy to address the anxiety and despair in cybersecurity? J.M. is a cybersecurity reporter, security engineer, and comedian exploring how to make our *gaze into the abyss ye mighty and despair*field slightly less depressing. After years performing standup comedy, improv, and sketch, he went down the rabbit hole into Clown Land. He's studied with clown teachers on both sides of the Atlantic, including Philippe Gaulier. Modern clown has nothing to do with the stereotype of grease paint and colored wigs and big shoes, and *everything* to do with the trickster hacker ethos many of us at HOPE embrace. Bring your funny bone, a pen and paper notepad, and learn some (perfectly legal) clown-hacker tricks.

talk on conference website

Edible dyes used to illuminate the fickleness of human minds - what does the process of life sound like if we take the time to really look into what we see? This workshop looks to fermentation for insight into living color. With UV, it will explore the flavors of light and fluorescence with a quick dive into fermentation and fluorescence.

As a hands-on activity, you'll examine ingredients common to most kitchens (i.e., bananas, leafy vegetables) and examine their transformation under UV light. Participants can expect to have a hands-on session where they will create their own edible dyes at home and watch them glow in the dark. Discussion will focus on how to use these DIY edible dyes in a range of artistic mediums and methods.

https://wiki.hope.net/index.php?title=Glow\_in\_the\_(Edible)\_Dyes\_workshop

talk on conference website

Do you have a cool talent or hack? Here’s your chance to present it to a planet of enthusiastic hackers, hosted in two parts on each Saturday of HOPE (2200 EDT on the speaker track) by hacker archivist Jason Scott. Rules, regulations, and how to sign up will all be announced. If you’ve got something cool you can do and you want to show it off, this is your big chance! (And of course, first place will win a valuable prize.)

talk on conference website

The Cyberpunk Now Film Festival is a five-day media production hackathon - basically, a contest to produce a short film based on criteria that won't be known until HOPE begins on July 25. Sign up at https://cyberpunk.hope.net On July 25th, The Cyberpunk Now Film Festival's organizers will publish a set of top-secret Required Challenge Elements at cyberpunk.hope.net, and participants will have five days to team up, brainstorm, write, produce, edit, polish, and upload their finished films to the submission portal by the deadline on July 30th. Winners will be screened as they are announced in a Hackers On Planet Earth 2020 conference video feed on August 2nd and viewed by participants around the world. The Grand Prize winner will be announced during the HOPE Closing Ceremonies.

talk on conference website

Drinking mate tea and soda plays a vital role at all hacker congresses! A virtual mate circle is being hosted especially for newbies so everyone can learn how to prepare mate tea and exchange tips with other drinkers. This workshop includes a crash course on mate history (traditional and the bottled soda phenomena, including the most famous: Club-Mate) and a tutorial in mate making techniques. Drinking mate together is an opportunity to sit down and exchange information, and this is an opportunity for participants to become educated in mate making techniques so that they can then go and create their own mate circles.

https://wiki.hope.net/index.php?title=Mating\_Online\_workshop

talk on conference website

The launch of HBO Max yielded a lot of attention, though some of it was unwelcome. Credential stuffers, content scrapers, and trolls lined up to test this infant streaming platform. You'll hear how such threats were mitigated - sparing the app from media turmoil - plus maybe how to write your own (better!) bots.

None

talk on conference website

How do we slay the Hydra of mass surveillance? We live in a time where citizens put data into commercial, health care, and government systems to access services. Some services are only accessible online. From CCTV to Facebook, people have little understanding of why mass collection of data is dangerous. So once we disquiet everyone about this, what do we do next? In many ways, mass data collection and surveillance devices much like the Lernaean Hydra keep springing back. Public pressure on individuals who championed Google Glass only lasted for so long. We have similar issues with Amazon Ring and to some extent Facebook. How do we get people to consider not buying devices like Amazon Ring? While calling people glassholes was effective, times have changed along with presidents. The world is polarized and we need to reach across the divide to persuade. How do we engage people outside our tech bubble and encourage them to engage with organizations like the ACLU and help us to put pressure on our elected representatives? How do we cauterize the head of rampant facial recognition technologies and then do the same for the heads of shadow profiles, DNA profiles etc.? RFC 1984 was explicitly named to reference an Orwellian society that uses mass surveillance. This talk will seek to expand that beyond encryption to the mass collection of data and ask how do we limit this? How do we limit access to this data? How do we stop the nightmare?

talk on conference website

Hispagatos Collective is an anarchist hacker collective that has been around for about ten years with this name, and as binaryfreedom since 2003, helping organizations like Free Software Foundation and the Electronic Frontier Foundation, while also attending *2600*-related events and promoting the original hacker ethics ideas of Steven Levy and the anarchist decentralized roots of the hacker movement. This is a village for the hacktivist hacker types - to share information, work on projects, show related documentaries, and have some music at nights. They will show three documentary films and have two DJ sets. https://wiki.hope.net/index.php?title=Anarchist\_Hackers\_Village

talk on conference website

The left has historically fought corporate and government censors to ensure radical and revolutionary ideas can be freely shared under the banner of free speech. Recently, fascists have begun using the same free speech argument to support the spread of racism, misogyny, violence, and hatred both online and in real life. This has become especially true during the heavy switch to online organizing during the COVID-19 crisis. This mixes with an increasing dependence on corporate marketed software, including web conferencing software like Zoom.

How do we fight back without compromising our own online organizing? What changes in our own meeting and conference culture need to be made? How do we avoid depending on corporate definitions of political extremism which have historically targeted trans folx, bogus political groupings such as "black separatist extremists," and other movement allies?

https://wiki.hope.net/index.php?title=Free\_Speech\_Zero\_Day\_panel

talk on conference website

PolySense is a fabrication process that adds electrical functionality to various materials. Using this method, you can, for example, create clothes which measure your body movement, or gloves which heat your hands. PolySense might find application in VR by creating thin, breathable gloves with precise motion tracking abilities, or in dance performances by creating elastic, moving clothing which might also control light and sound. All of this is based on fabric augmentation, using tools you can find in any kitchen.

None

talk on conference website

Ever wonder how they do all the physical access tricks in the movies or on a penetration test? Then come to the Lockpicking Village! They will cover a variety of different techniques - from the basics you see every day to more complex systems - they may even show a few advanced tools!

They will be covering lockpicking with a focus on the most common locks in the United States: pin-tumbler and wafer locks. Handcuffs and restraints will also be covered, with a dive into the most popular styles of handcuffs. In addition, a Bypass 101 class will be run, teaching people to defeat padlocks, lever lock doors, and other devices.

If you want to feel like MacGyver - or even aspire to become MacGyver - everyone starts somewhere. So come by and enjoy these classes covering the foundations of locksport and physical security. Who knows? It may make you want to move into a security career with physical access testing!

https://wiki.hope.net/index.php?title=Lockpicking\_Village

talk on conference website

This workshop will break down the fundamental concept of machine learning so that it can be understood by all. It will also cover the basic structure of a web application, and step through training your own machine learning application using freely available tools. By the end of this workshop, you will have launched your own machine-learning-powered web application.

https://wiki.hope.net/index.php?title=Machine\_Learning\_for\_Anyone\_workshop

talk on conference website

School districts throughout the United States suffer from notoriously poor information security. This is at a time when school district spending on technology is at an all-time high. Why is this? The public assumption that K through12 information security has kept pace with the rest of society is wrong. This talk will review doctoral research that found that understaffed and underfunded districts are either ignorant of the risks or simply choose to accept them, and there is no penalty for either. School leaders should be bound by the same expectations to secure their assets as leaders in other government agencies, and their leaders should be responsible for ensuring that students enter the world with a clean slate.

None

talk on conference website

With judging completed, the semifinal winners and runners-up of the first-ever Cyberpunk Now Film Festival will be revealed in this special live stream presentation. Who came in first in the Animation Challenge? In Drama? In Experimental? This is when you get to both find out who won and see the winning short films. Watch the award-winning short films and learn about how the film festival came together. The winners announced during this stream will be eligible for the Grand Prize. Be sure to tune in later in the day for the How We Did It event in Stream 1, when the Grand Prize winner and the secretive Most Cyberpunk award will be announced live during the Hackers On Planet Earth Conference 2020 closing ceremonies. Catch the live stream: https://livestream.com/internetsociety2/hope2020

talk on conference website

Come say hello to Hong Kong's Dim Sum Labs. They provide the garage that no one in Hong Kong has space for. While most in Hong Kong are consumed by their work culture, Hong Kong hackers sacrifice time and space to use their geographically advantageous location to tinker with junk found on the markets in Sham Shui Po and imported from across the border in Shenzhen. They run a Mozilla Hubs room on theirr big screen 24/7. People can virtually join DSL anytime, ask questions, and exchange knowledge, similar to how it is at assemblies or villages at other hacker events. https://wiki.hope.net/index.php?title=Dim\_Sum\_Labs\_Village

talk on conference website

This talk will review a range of solutions for Internet routing security and distributed denial of service (DDoS) mitigation. The solution methods include RPKI, route origin validation (ROV), BGP signaling for mitigation of route leaks, enhanced feasible-path unicast reverse path filtering (EFP-uRPF), remotely triggered black hole (RTBH) filtering, and Flowspec. These techniques are covered in detail and security guidance is also offered in NIST Special Publication 800-189.

talk on conference website

This virtual village will help people experience various wireless communications used by makers, hackers, and amateur radio enthusiasts across the radio frequency (RF) spectrum.

The village will be focused on activities for those with beginner and intermediate experience in RF experimentation, using both unlicensed and licensed spectrum. Activities envisioned within the village include:

_Hands-on workshops._ This will be the virtual space for RF-related workshops as submitted separately from this proposal and as approved by HOPE.

"_Show and tell" presentations._ For two days out of the conference, 60 minutes will be reserved each day for people to give a "lightning talk" on RF related projects they are working on with emphasis on live demos.

There will be all sorts of other various activities throughout.

talk on conference website

This workshop will introduce you to a free and professional-grade software program that is used to attack websites called the OWASP Zed Attack Proxy. In a specially prepared lab environment, you will see how real-life attack techniques like code injection are discovered and used in order to gain unauthorized, administrative access to websites and steal information like user passwords. By seeing how and why the attacks work, you will be better prepared to defend your own accounts and any websites you might be building or be responsible for protecting.

https://wiki.hope.net/index.php?title=Introduction\_to\_Exploiting\_Web\_Applications\_workshop

talk on conference website

The digital rights movement started with the founding of EFF 30 years ago this summer. Let's take stock of where we are, what we've accomplished, which fights are still ongoing, and which are currently red hot (looking at your encryption). But then let's talk about where we go from here. We can only build a better future if we can imagine it, so how do we take what we've learned from the last 30 years - our successes and failures - and apply it today so that in the next 30 years we can honestly say that technology supports freedom, justice, and innovation for all the people of the world.

talk on conference website

**Radio Statler** has been broadcasting original content from HOPE to the rest of the world since 2008. You can expect interviews with speakers, extended Q&As, panels, and the occasional glimpse into everything that happens outside the virtual talk rooms. Watch and listen at http://radio.hope.net/

talk on conference website

We live in a time of tech monopolies, again. We escaped Microsoft's 90s desktop monopoly to hurtle into the FAANG monopolies, by walking a path where browsers, OSes, and developer tools might be free software, but the platforms we used to connect and collaborate were more locked down than ever. But what if free software was not just a window to a locked down world? What if the world "out there" where we speak and collaborate emerged exclusively from free software running on our laptops and phones, connecting in a peer-to-peer network? The p2p "stack" is growing fast in maturity and capability; how far can we take it? Messaging apps seem to be the most popular user-facing software; can we make one of those? This talk will survey approaches to p2p messaging apps and discuss tradeoffs in the context of a specific app: Zbay, which is being built based on Zcash and Tor, and which just launched in beta.

talk on conference website

This is a talk about the conditions in a very large city where a group of people who support this hackerspace have already made possible seven years of activities related to free software, free culture, hacking, digital security, and book presentations. Carlos will talk about the conditions that were faced by this autonomous hackerspace, along with the problems and successes in digital security workshops pre- and post-COVID-19, as well as the collaboration with other groups from other cities and countries that have made it possible to continue with this project.

None

talk on conference website

Debug ports with root shells, gaping security holes, and lazy copy-and-paste circuitry lurk within your electronics. Overcome your impostor syndrome with these eye-rolling, groan-inducing tales that show how low the bar can go. In this humorously pragmatic session, prototype developer Zack Freedman exposes the filthy hacks and sloppy design that go largely unchecked into nearly every consumer device. Learn how to extract firmware, trick bootloaders, literally solder your way into a root shell, and more. Hackers will learn to barge into the backdoors that embedded developers don’t get paid enough to close. Programmers will marvel at the astonishingly terrible decisions their colleagues push to production. Engineers will discover electrical engineering so incredibly lazy that it strains physics and defies reason. Of course, you’ll learn how to clean up the filth and improve your own designs by closing root shells, plugging backdoors, locking down firmware, designing defensively, provisioning secrets, and more. You’ll walk away a bit savvier, a bit more prepared, and a bit more disgusted with your favorite electronics.

talk on conference website

Machine learning has been rapidly adopted by law enforcement as a way to justify sentencing, policing focus, and border control. In particular, facial recognition technology has been deployed around the world through massive surveillance networks, public/private ‘fusion centers,’ and cloud tools that make identifying an individual cheaper than a subway ride. The coming years will see similar technologies deployed in autonomous cars and drones despite research showing commercial systems disproportionately mis-classify non-males and people of color. These systems are mathematically opaque and rarely open source anyway, meaning that these algorithms govern our lives without corresponding oversight. Unsurprisingly, recent research suggests these systems are also fragile to many adversarial attacks. This talk will explore the history of biometric AI, its modern deployment, and fun ways to break these systems.