Looking for a Bsides NYC ticket. Please hmu if you have extra

📢 DEF CON Training is now accepting course submissions for 2027!

Whether you’re an experienced instructor or bringing a new course to the community, we’re looking for high-quality, hands-on training that helps security professionals build real-world skills.

Submit your training material today for the opportunity to teach alongside the DEF CON community in locations around the world including Las Vegas, the Middle East, and Singapore!

For more details, see the application. The deadline to apply is November 13, 2026.

Apply here today 🔗: https://forms.cloud.microsoft/r/z2f4igJPuu

Already submitted your course for Singapore March 2027? As long as you selected your other sessions of interest at the end of the application form, you don’t need to reapply! We have your application on file.

Questions? Email us at training@defcon.org

So after I already believed that I would never get a job in this field, at least in this market situation, I got an email from a company I applied to through the “Easy Apply” feature that I even forgot I applied for.

And then they started saying that they saw my resume and thought I was a good fit and stuff.

Then they asked me to solve a technical challenge, and I delivered it way before the deadline.

Then they said sorry, they needed me to solve an additional challenge.

And it was so much harder, and it took a lot of time from me, but I still delivered it way before the deadline.

And then they were happy and gave me good feedback that I was able to solve these hard technical challenges. They told me all the files were correct and everything was good, but they just needed a write-up explaining the steps I took to solve it!

And I did the write-up, and everything was explained, and I told them if they needed me to clarify any step, I was happy and ready to clarify it!

Then they came back to me after a couple of days and basically just said sorry, they don’t think I’m a good fit, without even giving any feedback!!

And I was likeee in my mind, what?? Really?? Are you serious???
After I spent days solving your hard technical challenges, and you confirmed that everything was good, and you gave me good feedback, and you haven’t even done any interview with me, and now you just send me a message saying I’m not a good fit without even giving any specific feedback??

I really feel we should get paid for the time we spend on technical challenges and interviews because it takes days from our time and life, so employers can take us more seriously rather than just playing with our feelings and hope!

When someone meets me and knows that I have done a degree in cybersecurity and tells me, “OMG, I want to get into the field,” at this point I don’t know what to tell them because if I say it’s hard and getting a job is so hard, they will think I’m a gatekeeper, but it’s just sad how it is now!

So now, honestly, I feel with this joke of a market and crazy employers, I would like to say to anyone who is looking for a job that we are really cooked…

Rather than chasing and trying to find just a job and letting employers move us like chess pieces, we should try to consider another field that could possibly be much better, or we open our own businesses!

I also would like to thank my family for supporting me in this journey. Otherwise, I would probably be working at a fast-food place for minimum wage right now!

I don’t know what I will do next in my life, but I really got enough from this field, and I don’t want to lower myself anymore or feel like I’m begging just to get a job.

This life is unfair, and thank you!

A little over a month ago I asked about getting a pin for DC33 and discovered they didn’t have them that year. However, with the help of the community we figured something out with a little creativity and superglue.

Huge thanks to u/ckthorp who was super gracious to ensure my collection was complete; they went above and beyond!

See ya'll next year!

For instance, Villiage, Human, Goon, etc. And what were the categories?

Defcon Crack The Core team put on a hell of a fun challenge this year! I came in 2nd. Great competitors, great times, fun opens. Thank you so much for the gift, #CrackTheCore team! Very much looking forward to next years challenges 🔓

All systems are go for DEF CON Singapore 2!

We’re excited to announce our return to Singapore 4-6 March, 2027.

Even better, DCSG2 follows directly after Black Hat Singapore. For BH attendees it’s a perfect opportunity to make a week of it.

We’ll be opening online registration soon.

We’re back at the lovely and capacious Marina Bay Sands, and we’re bringing the whole DEF CON experience with us. World class talks, immersive Villages, contests and entertainment.

Of course, if you want to do more than just attend, watch this space. Now that the dates are set we’ll be posting Calls for Papers, Contests, Villages, Communities, and Entertainment. The opportunities to participate are legion.

DEF CON Singapore 1 was amazing. We’re looking forward to rejoining our new friends and making new memories. We hope we’ll see you there.

Please save the date and follow us here and at defcon.social for all the latest news.

I failed a technical interview and I’m so disappointed…
Although it was just an internship role and they shouldn’t expect a lot from us, sadly it was still a very hard process.

I passed the technical challenge and the first interview, but then it came to the technical interview.

He was giving me very hard scenarios and questions, and I believe I answered them fairly well.

But then suddenly, days later, I received an email saying that I wasn’t selected…

Why is it even this hard for an internship role!!

My dream now is to find another non-technical field I can get into easily. At least they won’t have that thing of technical interviews.

DT is this legit? It's over a domain I used for QA post talk.

Workshop required us to order a PCB kit, so I did. At the workshop, turns out they never showed up, so instead the workshop was a lot of the presenter just googling stuff and zooming into photos. Whatever, shipping issues happen.

Was told the kit would be shipped to a provided address, so emailed it to him, no reply.

Followed up three times after, still no reply, and now it looks like his website is offline.

Very frustrating, I hope he doesn't get invited back to lead a workshop again.

If you attended the workshop and bought a kit, I recommend you also file a chargeback because you're not getting the kit.

# Email Self-Defense: Because Apparently We Have to Encrypt Everything Ourselves

Your email provider has a copy. Your network provider may have a copy. Somewhere, a server is making decisions about who gets to see your data.

Cool! Let's fix that.

This is a hands-on workshop in GPG (GNU Privacy Guard) email encryption, facilitated by the Free Software Foundation. We’ll spend just enough time on public-key cryptography to understand what the hell is happening, how emails work, then get our hands dirty.

You’ll take an existing email address, generate and manage your keys, configure encryption, and send an actual encrypted message.

By the end, you won’t just know how to encrypt your own email. You’ll know how to help someone else do it, which is important, because cryptography is considerably less useful when you're the only person in your contact list using it.

No magic. No proprietary black box. No “trust us.” Just keys, math, encrypted mail, and the mildly unsettling realization that protecting your own communications is apparently a hands-on skill.

Our friends, Greg Farough and Heshan de Silva-Weeramuni from the Free Software Foundation will share their knowledge. Bring a laptop. Bring an email account. Bring your paranoia. We'll bring the crypto (BTW, crypto means cryptography LOL).

Our New York Capital District group "DCG518" will have a gathering this time the Saturday, September 19th 2026 and it will be at the Guilderland Public Library.

More information about our group and future events on our site https://dc518.github.io

Everyone is welcome!

I'm from Romania and this is mainly what I use since it's super easy. I also have some money there so I would rather get it trough there. Shoot me a dm. Looking for almost anything, from pins to badges, from shirts to hats and much more. Just shoot me a dm if you are from Romania, Hungary, Greece, Poland and are interested in doing this. Thank you.

Hey hackers and fans of the DC 34 badge - dc34sim.com (a browser-native DC34 badge genetic population simulator) has gotten three new tabs since our original post.

badgecestry takes the patent AncestryDNA uses to determine ancestral composition (US 12,626,778, a two-stage hidden markov model) and turns it loose on DC34 badges. The badge turns out to be a perfect target: "founder populations" are written down in the source, phasing is free, mutation math becomes a known matrix raised to a power. Every knob the model touches is on the screen. You can drag the generations-since-founding slider and watch ancestral inference break down as founder signals get smeared out. And in a delightful twist, the "nonlin anomaly" - where the new value of the nonlin gene depends on the value of both the chaser and nonlin loci, instead of just the nonlin loci - turns out to provide a sharp 0-or-1 signal inside the hidden markov model, creating a cleaner ancestry signal. (See badgecestry.md for details)

eggstraction extracts a physical badge's full genome using only the stock gene-exchange protocol. No JTAG, no firmware dump, no debugger. You mint nonces, scan them with your badge, and paste the resulting gametes, and after 10-20 exchanges, the underlying diploid falls out of the statistics. Bridge from atoms to bits: once it's reconstructed, one click sends your real badge into the sim as a first-class citizen - mate it, evolve it, find your ancestors, or give it full ROOT access in the borg simulator! (See eggstraction.md for details)

skeet is the other direction. Given one diploid, it lays out all 32 (pure, unmutated) gametes that that badge can possibly produce, side by side. Pick the one you want, and generate a nonce from it to mate your physical badge with it via QR. This bypasses the built-in mutation step from the donor badge, so you are getting the unmutated gametes. Use this tool to turn your badge into a designer baby. (See skeet for details)

Check out the live simulator at dc34sim.com

Check the GitHub repo for code

Hey everyone! I just wanted to drop a quick update. First, a massive thank you for the incredible support and love you all showed on my last post. I was genuinely not expecting that!

Now that all the initial orders have had time to reach their destination I've just put a small restock of the remaining inventory live over on my Etsy Shop. These are the last of the custom holographic vinyl DEFCON 34 stickers in my possession, so quantities are extremely limited this time around.

If you missed out during the first round, you can grab one while they last, matching tees are still available as well. Check out the "Build Your Own Sticker Pack" listing on my shop if you'd like to create your own custom bundle. Thanks again for keeping this project rolling! Your support has helped fuel my fire and lift my spirits.

Please reach out if you have any questions!

Friendly Reminder:

While supplies last, you can get the Baochip-enabled DEF CON 34 badge for $99 in the DEF CON store.

It's our best badge yet - a fully inspectable open source platform you can use as a security token or password manager or something cooler you cook up long after you've played through the conference goodies.

Shop.defcon.org. inventory is limited, so don't delay.

I have two upcoming technical interviews for an AppSec role, and I’m freaking out. I hate technical interviews as much as I hate pickles.
I passed the practical challenge like a pro with no problem, but I’m horrible when I have to verbally explain technical things. I can actually do the work, but when someone asks me to explain definitions, concepts, or walk through the steps out loud, my mind just goes blank.
I’m really anxious that I might lose this opportunity just because I’m not good at speaking technically, even though I passed the practical challenge without any issues.
Has anyone else dealt with this? How did you prepare for AppSec technical interviews and get better at explaining things verbally?

My boss let me have some of her old Defcon 27 swag.. this little guy is 7 years old awww

DefCon34 was incredible! My first...

I read from many saying "At DefCon, skip the talks and explore the villages and demos. All the talks will be online later to watch."

However, locating the talks now seems to be a challenge. Some videos seem to be trickling out from the main DefCon YouTube channel, but only a handful. Is it just a time thing for them to get them all online?

/DEF CON 34/DEF CON 34 presentations/DEF CON 34 presentations/ has only files from prior to DefCon34.

I just happened to stumble upon the Voting Village @ DEF CON YouTube channel. On there I found the talk I attended that really shocked my friends who attended. This was an incredible talk!!!

It's CRIMINAL that it has less than 100 views...

More early release goodies for you! The live music, pictures, short videos and a bunch more content from DC34 are ready for downloading on media.defcon.org. Front-load your weekend with some DEF CON vibes.

And in that spirit, here’s another talk - Bruce Schneier’s presentation ‘Hacking AI’.

AWESOME BLING EDIT: Per u/netw0rkpenguin (see post below) there are more coins and swag available! DM me per their instructions and we'll GET SOME GOOD IN THE WORLD!

MOAR EDIT: THANKS EVERYONE - EVERYTHING IS SPOKEN FOR AND I'VE GOT A WAITING LIST.

EDIT: EVERYTHING IS GONE BUT THE ONE COIN AND SOME STICKERS.

I don't know why Reddit filters keep removing my post, but enough people responded to the last swag post that most stuff is committed, but I do have one coin left.

SO:

A bunch of people have offered to buy the coins, but I’d rather do some good instead - now that Dolly's gone (shout out to fam in Sevierville!), we all gotta shine a little brighter. If you want this coin, all I ask is that you DM ME FIRST, confirm that I still have it to put aside, and then donate at least $25 to your local animal shelter or rescue and send me proof. I will pay for the postage to send it to you.

Also, a BIG THANK YOU to everyone who donated for all of the other coins. Your communities appreciate you, the animals appreciate you, and you are a good human. <3

For your information: The fine folks of DCG Easton (PA) are running a live presentation now called 'What we did on our hacker summer vacation' which will include their debrief of #defcon34. If you've got the time and inclination, show them some love.

#defcongroups

https://www.asahi.com/articles/ASV8Y4RHBV8YUHBI008M.html

"There are many casual light clothes such as T-shirts and shorts, but there are also people who wear dinosaur costumes and clothes full of personality that look like handmade devices all over their bodies. There was a sign saying "Humans are here" at the reception desk.""

#defcon #defcon34

So Saturday morning of the con I was putting together my HackRF, and I invited this guy who was curious to check it out and put it together. He had this amazing case of gear, that was velcro'd with velcro straps, customizable, to put in all sorts of gadgets and devices, and I want to know what that case and system is because it is literally perfect. If you're out there, or know what I'm talking about or looking for, plz let me know. Dude was rad, hope you're chillin