#REDIRECT [[File:User-Olaf.jpg]]

File:User-Olaf.jpg

2022-07-18T15:38:07Z

Olaf: Olaf moved page File:Olaf.jpg to File:User-Olaf.jpg

File:User-Olaf.jpg

2022-07-18T14:59:16Z

Olaf:

User:Olaf

2022-07-18T14:58:14Z

Olaf: Updated village

{{UserInfo
|NickName={{PAGENAME}}
|Bringing=DJI Mini 1, Sony A6400 + Tamron 17-70 mm F/2.8 Di III-A VC RXD
|Village=Village:Unlock The City
|Arrival=2022-07-21
|Departure=2022-07-26
|Languages=EN
}}

Village:Unlock The City

2022-07-18T14:51:22Z

Olaf: Added GIF

{{Village
|Has name=Unlock The City
|Has website=hackyholidays.io
|Has contact=Frank Groenewegen
|Has description=This village is related to the sponsor(tent) of Deloitte where we host tons of cool talks, presentations and challenges
|Has village tag=CTF, Capture the flag, wargames, hacking, hardware hacking, talks, bbq, UnlockTheCity
|Provides session location=Yes
|Location=52.28287, 5.52654
|MapObjectHandle=0x1EE70
|Has orga contact=jijsenbrant@deloitte.nl
|On site orga contact=Jasmine Ijsenbrant
|Village frab=Yes
|Village content space=No
|Village citizen count=25
|Village Needs power=Large Village (32A CEE 400V)
|Village size needed=150
|Village hacktents num=0
|Village brings big stuff=No
|Village Special Vehicle=No
|Village planning notes=We would like to build our village around/by our sponsor tent (Deloitte). We will need about 100m2 for the tents and another 50m2 for room/ space to be outside, eat, BBQ, tables, outside activities, etc.
Preferred fields: Olsen or Liskov
}}
{{MapObject|Handle = 0x1E406}}
{{MapObject|Handle = 0x1E23B}}
{{MapObject|Handle = 0x1E1D4}}
{{MapObject|Handle = 0x1E238}}
{{MapObject|Handle = 0x1E239}}
{| class="" style="float: left; position: sticky; top:0; padding-top: 10px; padding-bottom: 10px; max-width: 200px;"
|-
| __TOC__
|}

{| class="" style="padding-right: 50px;"
|-
| style="vertical-align: top;" |
[[File:Rocket_200.gif|link=File:Rocket.gif]]
|
== Unlock the City ==

Welcome to a city full with nifty gadgets and crafty inhabitants. In our village you will learn and hone different hacking skillets, will listen to entertaining speakers presenting a variety of topics and will have a lot of fun. So what are you waiting for? come and help us '''Unlock the City!'''

As part of MCH we will be hosting a series of talks and workshops on different cyber-related topics. Our agenda is below, not that some additional presentations and changes may be added to the agenda, so be sure to check every once in a while.
Some of the members of our village: Jilles and Jurre Groenendijk, will also be presenting at the Abacus stage at MCH. Their talk is called: [https://program.mch2022.org/mch2021-2020/talk/7PZANM/ 'What to do when someone close to you takes their life and you are not Tech-Savvy']. This talk is on '''Monday 25th of July at 10AM in the Abacus stage'''.

|-
| style="vertical-align: top;" |
[[File:Drone_200.gif|link=File:Drone.gif]]
|
== HackyHolidays CTF ==
HackyHolidays is our annual CTF (Capture The Flag). For more information see [https://hackyholidays.io hackyholidays.io].

You’ve been officially chosen to compete in UNLOCK THE CITY from July 8. till July 26.

Help! The smart city is in trouble. An A.I. algorithm went rogue in the once so peaceful, intelligent city. It's chaos out there. To regain control and restore peace, we need a group of talented hackers. Each hacker or hacking team will unlock the city in phases by solving a set of challenges in four city districts. The city council has announced that the event's winner will be appointed "Mayor" of the City to sweeten the deal. Additionally, the best hacker in a particular district will become the "Sheriff" for that district. Can we count on you to unlock the city?

<div style="width: 100%; display: flex; justify-content: center; margin: 1em 0;">
[[File:UnlockTheCity.gif|link=https://hackyholidays.io]]
</div>

<div role="button" style="background-color: #9cff08; color:#000; cursor: pointer; border-radius: 4px; font-size: 14px; padding: 6px 12px; white-space: nowrap; text-align: center; display: inline-block;" class=""><span class="plainlinks">[https://hackyholidays.io JOIN UNLOCK THE CITY]</span></div>
|-
| style="vertical-align: top;" |
[[File:Zeppelin_200.gif|link=File:Zeppelin.gif]]
| style="vertical-align: top;" |
== CityControl Badge App ==
CityControl is a SpaceTeam like shouting game. Help free the city from the rogue algorithm which has captured the city.

|-
| colspan="2" |
== Schedule ==
{| class="wikitable" style="text-align:left; width: 100%;"
|- style="text-align:left;"
! colspan="4" style="text-align:center;" | UNLOCK THE CITY AGENDA
|- style="text-align:left;"
| colspan="4" | '''Friday 22nd of July'''
|- style="text-align:left;"
| 5PM
| colspan="4" style="text-align:left; padding-left: 25px;" | '''''MCH OPENING'''''
|-
| style="text-align:left;" | 6PM
| style="padding-left: 25px; | Defending and attacking Kubernetes
| Akshit Sharma & Mauricio Cano
| [[#D&A Kubernetes]]
|-
| style="text-align:left;" | 7PM
| style="padding-left: 25px; | Introduction to GraphQL hacking
| Giovanni Ferronato
| [[#GraphQL]]
|-
| style="text-align:left;" | 8PM
| style="padding-left: 25px; | Can you stage dive in the metaverse: A digital ethics discussion on rules in a digital sphere
| Jan-Jan Lowijs, Charlotte Connor Arpa & Jasmijn Kol
| [[#metaverse]]
|-
| style="text-align:left;" | 9PM
| style="padding-left: 25px; | Wardriver.uk - open source wardriving with the ESP32
| Joseph Hewitt & Jilles Groenedijk
| [[#wardriver]]
|-
| style="text-align:left;" | 10PM
| style="padding-left: 25px; | Interfacing with your hardware: UART
| Pavlos Lontorfos
| [[#UART]]
|- style="text-align:left;"
| colspan="3" | '''Saturday 23rd of July'''
|-
| style="text-align:left;" | 11AM
| rowspan="2" style="vertical-align:middle; padding-left: 25px;" | Reverse engineering for beginners workshop
| rowspan="2" style="vertical-align:middle;" | Rikkert ten Klooster
| rowspan="2" style="vertical-align:middle;" | [[#RevEng]]
|-
| style="text-align:left;" | 12PM
|-
| style="text-align:left;" | 1PM
| style="padding-left: 25px; | Developing the CityControl badge app
| Mick Cox
| [[#CityControl]]
|-
| style="text-align:left;" | 2PM
| style="padding-left: 25px; | The history and future of digital identity - An Identity R/Evolution
| Emilie van der Lande
| [[#IdentityRev]]
|-
| style="text-align:left;" | 3PM
| rowspan="2" style="vertical-align:middle; padding-left: 25px;" | Rust Workshop
| rowspan="2" style="vertical-align:middle;" | Santiago Quintero Pabón
| rowspan="2" style="vertical-align:middle;" | [[#Rust]]
|- style="text-align:left;"
| 4PM
|-
|-
| style="text-align:left;" | 5PM
| style="padding-left: 25px; | Interfacing with your hardware: I2C
| Pavlos Lontorfos
| [[#I2C]]
|-
| style="text-align:left;" | 6PM
| style="padding-left: 25px; | Who is who in Ancient Hebrew Poetry?
| Christiaan Erwich
| [[#WhoisWho]]
|- style="text-align:left;"
| colspan="3" | '''Sunday 24th of July'''
|-
| style="text-align:left;" | 5PM
| style="padding-left: 25px; | Interfacing with your hardware: SPI
| Pavlos Lontorfos
| [[#SPI]]
|-
|- style="text-align:left;"
| colspan="3" | '''Monday 25th of July'''
|-
| style="text-align:left;" | 11AM
| rowspan="2" style="vertical-align:middle; padding-left: 25px;" | Developing Concurrent Pentesting Tools in Go
| rowspan="2" style="vertical-align:middle;" | Mick Cox
| [[#GoLang]]
|-
| style="text-align:left;" | 12M
|-
| style="text-align:left;" | 1PM
| style="vertical-align:middle; padding-left: 25px;" | Adventures with workflow automation
| style="vertical-align:middle;" | Mauricio Cano
| [[#WorkAuto]]
|-
| style="text-align:left;" | 2PM
| rowspan="3" style="vertical-align:middle; padding-left: 25px;" | Hardware hacking for absolute beginners + CTF
| rowspan="3" style="vertical-align:middle;" | Jurre Groenendijk & Jilles Groenendijk
| rowspan="3" style="vertical-align:middle;" | [[#HH]]
|-
| style="text-align:left;" | 3PM
|-
| style="text-align:left;" | 4PM
|-
| style="text-align:left;" | 5PM
| style="vertical-align:middle; padding-left: 25px;" | How much money can you steal with a quantum computer? - <br />A quantitative analysis of the quantum risk to cryptocurrencies
| style="vertical-align:middle;" | Itan Barmes
| [[#Crypto]]
|-
| style="text-align:left;" | 6PM
| style="padding-left: 25px; | Reverse engineering Minecraft to get world records
| Jurre Groenendijk & Jelle Groenendijk
| [[#Minecraft]]
|}

|-\
| colspan="2" |
== Talks & Workshops ==
=== Defending and Attacking Kubernetes <span class="anchor" id="D&A Kubernetes"></span> ===
====Friday, 22nd July, 6PM====
This talk discusses some common security misconfigurations for cloud-based managed Kubernetes clusters and how attackers can exploit them via live demonstrations. A custom cloud-native security monitoring solution built in AWS will be showcased. The goal is to alert relevant stakeholders of potential misconfigurations and active breach attempts on an Amazon EKS Cluster. The talk includes live demonstrations of some of the use-cases that have been implemented. The implemented solution leverages AWS native tools, as well as an infrastructure-as-code template used for rapid deployment across accounts.

=== GraphQL hacking <span class="anchor" id="GraphQL"></span>===
====Friday, 22nd July, 7PM====
GraphQL is a data query language developed by Facebook which is increasingly emerging as an alternative to REST API. During this presentation, we will cover the basics of what to test when you’re tasked with a GraphQL endpoint pentest.

=== Can you stage dive into the metaverse: a digital ethics discussion on rules in a digital sphere. <span class="anchor" id="metaverse"></span> ===
====Friday, 22nd July, 8PM====
Rules govern our daily lives however sometimes we can get away with and even justify breaking them. Migration towards a life in the Metaverse poses the challenge of how to incorporate the ambiguity of the natural world into the structure of a virtual one; prompting a digital ethics dilemma -- can you, should you or would you stage dive in the Metaverse?

=== wardriver.uk - open source wardriving with the ESP32 <span class="anchor" id="Wardriver"></span> ===
====Friday, 22nd July, 9PM====
Wigle.net is a website that collects wifi/bluetooth/gsm information and more and plots it on a world map. Wardriver.uk is a cheap opensource project build on embeded technology (ESP32) that collects the data for it.

=== Interfacing with your hardware: UART <span class="anchor" id="UART"></span> ===
====Friday, 22nd July, 10PM====
This is an introductory hands-on workshop for understanding the universal asynchronous receiver-transmitter (UART) protocol, and how you can interface with it.
You will receive the theory on how the protocol works and you will solve a challenge analyzing the protocol.
Prerequisites: Your laptop
Software: PulseView, Putty (or Screen, minicom, etc)

=== Reverse Engineering For Beginners Workshop <span class="anchor" id="RevEng"></span> ===
====Saturday, 23rd July, 11AM - 1PM ====
Do you live with the following questions? What is assembly? How do you read assembly? What is a decompiler? How do you use radare and Ghidra? Join the workshop with interactive challenges.

=== Developing the CityControl badge app <span class="anchor" id="CityControl"></span> ===
====Saturday, 23rd July, 1PM ====
The Go programming language combines performance with ease of use. In this workshop we will go over the basic language constructs and you will learn all that is necessary to write your own pen testing tools such as a concurrent port scanner.

=== The future of digital Identity - An Identity R/Evolution <span class="anchor" id="IdentityRev"></span> ===
====Saturday, 23rd July, 2PM ====
Snappy bird flight oversight of the evolution of Identification. How has authentication changed through the centuries? How to tackle decentralized and multiplied identities? Let's time travel and find out.

=== Rust Workshop <span class="anchor" id="Rust"></span> ===
====Saturday, 23rd July, 3PM - 5PM====
The Rust programming language allows us to build not only fast and memory-efficient programs, but also memory-safe and thread-safe. In this workshop we will get familiar with Rust's type system and ownership model, along with tools like rustc, cargo, rustfmt, and the RLS.

=== Interfacing with your hardware: I2C <span class="anchor" id="I2C"></span> ===
====Saturday, 23rd July, 5PM ====
This is an introductory hands-on workshop for understanding the serial protocol Inter-Integrated Circuit, or I2C, and how it is used to interface with sensors or other devices.
You will receive the theory on how the protocol works and you will solve a challenge analyzing the protocol.
Prerequisites: Your laptop
Software: PulseView, Putty (or Screen, minicom, etc)

=== Who is who in Ancient Hebrew poetry? <span class="anchor" id="WhoisWho"></span> ===
====Saturday, 23rd July, 6PM ====
Who is who in Ancient Hebrew Poetry? Or: how I tried to hack an ancient textual problem with the computer. A longstanding problem in Ancient Hebrew poetry is that it is often hard to answer the 'who is who' question. You don't know who is saying what, and who is doing what to whom. That makes understanding texts from the Ancient Near East often hard, even when reading translations. To complicate matters, traditional Biblical scholars have always given contradicting interpretations of these texts. In my PhD research I developed a set of algorithms to help solve these problems. I annotated way too much data, wrote an inter-annotator algorithm, and a coreference resolution algorithm (borrowed from Computational Linguistics) and was able to contribute to more objective and systematic interpretations. Want to know what this actually all means? Come to this presentation, and hear about the unravelling of an ancient textual world.

=== Interfacing with your hardware: SPI <span class="anchor" id="SPI"></span> ===
====Sunday, 24th July, 5PM ====
This is an introductory hands-on workshop for understanding the serial SPI protocol and how it is used to interface with devices such as SD card readers, Wireless transeivers, etc.
You will receive the theory on how the protocol works and you will solve a challenge analyzing the protocol and reading the hidden message from the wire.
Prerequisites: Your laptop
Software: PulseView, Putty (or Screen, minicom, etc)

=== Developing Concurrent Pentesting Tools in Go <span class="anchor" id="GoLang"></span> ===
====Monday, 24th July, 11AM - 1PM====
The Go programming language combines performance with ease of use. In this workshop we will go over the basic language constructs and you will learn all that is necessary to write your own pen testing tools such as a concurrent port scanner.

=== Adventures with workflow automation <span class="anchor" id="WorkAuto"></span> ===
====Monday, 24th July, 1PM====
In this session we will discuss what a CI/CD pipeline is, as well as different ways in which the concept of automated pipeline can be used from and offensive and engineering perspective. Demos will be used to provide examples on the different scenarios that can be observed. As a bonus, some tidbits for DevSecOps (or secure DevOps) will be discussed throughout.

=== Hardware Hacking for Absolute Beginners + CTF <span class="anchor" id="HH"></span> ===
====Monday, 24th July, 2PM - 5PM====
This Hardware Hacking lecture will teach you how hardware works, gives you insights in the challengers for the creators and and will train you to hack your own hardware with just a small budget. We finish the lecture with a CTF.

=== How much money can you steal with a quantum computer – a quantitative analysis of the quantum risk to cryptocurrencies <span class="anchor" id="Crypto"></span> ===
====Monday, 24th July, 5PM====
Quantum computers pose a systemic risk to the security of cryptography algorithms, which are the foundational building blocks of blockchain. In this presentation I will describe this risk in general, show a number of attack vector to the current implementation of cryptocurrencies and present a quantitative analysis on how many coin can actually be stolen. I will also discuss the necessary mitigation measures and the complexity of implementing them.

=== Reverse Engineering Minecraft to get World Records <span class="anchor" id="Minecraft"></span> ===
====Monday, 24th July, 6PM====
Within the Minecraft Speedrunning community, there's a ton of incredibly smart people. some of them have found a way to gain crucial info for a run out of seemingly random places. This talk will be about that feat, and a bunch of other, miscellaneous minecraft geekiness

|}

File:UnlockTheCity.gif

2022-07-18T13:39:00Z

Olaf:

Session:Badge Creation

2022-07-15T10:09:37Z

Olaf: Olaf moved page Session:Badge Creation to Session:Developing the CityControl badge app: Updated title

#REDIRECT [[Session:Developing the CityControl badge app]]

Session:Developing the CityControl badge app

2022-07-15T10:09:37Z

Olaf: Olaf moved page Session:Badge Creation to Session:Developing the CityControl badge app: Updated title

{{Session
|Has session tag=badge creation
|Is for kids=No
|Has description=Learn all about the development of the CityControl game app on MCH2022's badge!
|Has session type=Talk
|Has session keywords=embedded
|Processed by village=Village:Unlock The City
|Held in language=en - English
|Has orga contact=jijsenbrant@deloitte.nl
}}
In this talk we will give an overview of the development process of writing the CityControl game which is one of the apps on your badge today! We'll share all the pitfalls, lessons learnt and tricks you need to develop for the MCH badge yourself!

2022-07-13T18:50:38Z

Olaf: File uploaded with MsUpload

File uploaded with MsUpload

User:Olaf

2022-06-28T13:27:56Z

Olaf: create user page

{{UserInfo
|NickName={{PAGENAME}}
|Languages=EN
|HackerSpace=
}}