==Phrack Magazine==

                Volume Five, Issue Forty-Six, File 19 of 28

****************************************************************************

                     DefCon II: Las Vegas

                 Cyber-Christ meets Lady Luck

                       July 22-24, 1994

                       by Winn Schwartau
                          (C) 1994


Las  Vegas connotes radically different images to radically  dif
ferent  folks.   The Rat Pack of Sinatra, Dean Martin  and  Sammy
Davis  Jr.  elicits up the glistening self-indulgent  imagery  of
Vegas'   neon  organized  crime in the  '50's   (Ocean's  Eleven
displayed only minor hacking skills.)

Then  there's the daily bus loads of elderly nickel  slot  gam
blers from Los Angeles and Palm Springs who have nothing  better
to  do  for twenty out of twenty four hours each  day.   (Their
dead  husbands were golf hacks.)   Midwesterners  now  throng to
the Mississippi River for cheap gambling.

Recreational vehicles of semi-trailor length from East  Bullock,
Montana  and  Euclid, Oklahoma and Benign, Ohio clog  routes  80
and 40 and 10 to descend with a vengeance upon an asphalt  home
away  from home in the parking lot of Circus Circus.  By  cul
tural demand, every Rv'er worth his salt must, at least once in
his life,  indulge in the depravity of Glitter Gulch.

And  so they come, compelled by the invisibly insidious  derelict
attraction  of a desert Mecca whose only purpose in life  is  to
suck  the  available  cash from  addicted  visitor's  electronic
purses of ATM and VISA cards. (Hacker?  Nah . . .)

Vegas  also has the distinction of being home to the largest  of
the largest conventions and exhibitions in the world.   Comdex
is the world's largest computer convention where 150,000  techno-
dweebs  and  silk  suited glib  techno-marketers  display  their
wares  to a public who is still paying off  the 20% per  annum
debt  on last year's greatest new electronic gismo which  is
now rendered thoroughly obsolete.  And the Vegas Consumer  Elec
tronic  Show does for consumer electronics what the First  Amend
ment does for pornography.  (Hackers, are we getting close?)

In between, hundreds upon hundreds of small conferences and
conventions  and sales meetings and annual excuses  for  excess
all  select Las Vegas as the ultimate host city.  Whatever  you
want, no matter how decadent, blasphemous, illegal or immoral, at
any  hour, is yours for the asking, if you have cash or a  clean
piece of plastic.

So, it comes as no surprise, that sooner or later, (and it turns
out to be sooner) that the hackers of the world, the computer
hackers, phone phreaks, cyber-spooks, Information Warriors, data
bankers, Cyber-punks, Cypher-punks, eavesdroppers, chippers,
virus  writers  and  perhaps the occasional  Cyber  Christ  again
picked Las Vegas as the 1994 site for DefCon II.

You see, hackers are like everyone else (sort of) and so they,
too, decided that their community was also entitled to hold
conferences and conventions.

DefCon  (as opposed to Xmas's HoHoCon), is the  premier  mid-year
hacker extravaganza.  Indulgence gone wild, Vegas notwithstanding
if  previous Cons are any example; but now put a  few  hundred
techno-anarchists  together in sin city USA, stir  in  liberal
doses  of  illicit controlled pharmaceutical substances, and  we
have a party that Hunter Thompson would be proud to attend.

All  the while, as this anarchistic renegade regiment marches  to
the tune of a 24 hour city, they are under complete  surveillance
of  the authorities.  Authorities like the FBI, the Secret  Serv
ice,  telephone security . . . maybe even Interpol.  And how  did
the  "man"  arrive in tow behind the techno-slovens  that  belong
behind bars?

They were invited.

And so was I.  Invited to speak. (Loose translation for standing
up  in front of hundreds of hackers and being verbally  skewered
for having an opinion not in 100% accordance with their own.)

"C'mon,  it'll be fun," I was assured by DefCon's organizer,  the
Dark Tangent.

"Sure  fired way to become mutilated monkey meat,"  I  responded.
Some  hackers just can't take a joke, especially after  a  prison
sentence and no opposite-sex sex.

"No really, they want to talk to you . . ."

"I bet."

It's  not that I dislike hackers - on the contrary.  I have  even
let a few into my home to play with my kids.  It's just that,  so
many  of the antics that hackers have precipitated at  other Cons
have  earned them a reputation of disdain by all, save those  who
remember  their own non-technical adolescent shenanigans.  And  I
guess I'm no different.  I've heard the tales of depraved  indif
ference,  hotel  hold-ups, government raids on folks  with  names
similar to those who are wanted for pushing the wrong key on  the
keyboard and getting caught for it.  I wanted to see teens and X-
generation types with their eyes so star sapphire glazed over that
I could trade them for chips at the craps table.

Does  the truth live up to the fiction?  God, I hope so. It'd  be
downright  awful and unAmerican if 500 crazed hackers didn't  get
into at least some serious trouble.

So I go to Vegas because, because, well, it's gonna be fun.  And,
if I'm lucky, I might even see an alien spaceship.

For you see, the party has already begun.


I  go to about 30 conventions and conferences a year, but  rarely
if ever am I so Tylonol and Aphrin dosed that I decide to go with
a severe head cold.  Sympomatic relief notwithstanding I  debated
and  debated, and since my entire family was down with  the  same
ailment  I figured Vegas was as good a place to be as at home  in
bed.   If  I could survive the four and half  hour  plane  flight
without  my  Eustahian tubes rocketing through my ear  drums  and
causing  irreparable damage, I had it made.

The  flight was made tolerable becuase I scuba dive.   Every  few
minutes I drowned out the drone of the engines by honking  uncon
trollably  like  Felix  Ungerto without his  aspirator.   To  the
chagrin of my outspoken counter surveillance expert and traveling
mate,  Mike  Peros and the rest of the first  class  cabin,   the
captain reluctantly allowed be to remain on the flight and not be
expelled sans parachute somewhere over Southfork, Texas.   Snort,
snort.  Due to extensive flirting with the two ladies across  the
aisle, we made the two thousand mile trek in something less  than
34  minutes . . . or so it seemed.  Time flies took on new  mean
ing.

For  those who don't know, the Sahara Hotel is the dregs  of  the
Strip.   We were not destined for Caesar's or the MGM or  any  of
the  new multi-gazillion dollar hotel cum casinos  which  produce
pedestrian  stopping  extravaganzas as an inducement to  suck  in
little old ladies to pour endless rolls of Washington quarters in
mechanical  bottomless pits. The Sahara was built some 200  years
ago  by native slave labor whose idea of plumbing is  clean  sand
and  decorators  more concerned with a mention in Mud  Hut  Daily
than Architectural Digest.  It was just as depressingly dingy and
solicitly low class as it was when I forced to spend eleven  days
there (also with a killer case of the flu) for an extended Comdex
computer show.  But, hey, for a hacker show, it was top flight.

"What hackers?" The desk clerk said when I asked about the show.

I explained.  Computer hackers: the best from all over the  coun
try.  "I hear even Cyber Christ himself might appear."

Her  quizzical  look emphasized her pause.  Better  to  ignore  a
question   not understood than to look stupid.  "Oh,  they'll  be
fine,  We have excellent security."  The security people, I found
out  shortly thereafter knew even less: "What's a  hacker?"   Too
much  desert sun takes its toll.  Proof positive photons are  bad
for neurons.

Since it was still only 9PM Mike and I sucked down a couple of $1
Heinekens in the casino and fought it out with Lineman's  Switch
ing  Union representatives who were also having their  convention
at the Sahara.  Good taste in hotels goes a long way.

"$70,000  a  year to turn a light from red to  green?"   we  com
plained.

"It's a tension filled job . . .and the overtime is murder."

"Why a union?"

"To protect our rights."

"What rights?"

"To make sure we don't get replaced by a computer . . ."

"Yeah,"   I  agreed.   "That  would  be  sad.   No  more   Amtrak
disasters."  The crowd got ugly so we made a hasty retreat  under
the scrutiny of casino security to our rooms. Saved.

Perhaps  if  I  noticed or had read the  original  propaganda  on
DefCon, I might have known that nothing significant was going  to
take  place  until the following (Friday) evening  I  might  have
missed all the fun.

For  at around 8AM, my congestion filled cavities  and  throbbing
head was awakened by the sound of an exploding toilet.  It's kind
of  hard  to  explain what this sounds like.   Imagine  a  toilet
flushing  through  a  three megawatt sound system  at  a  Rolling
Stones concert. Add to that the sound of a hundred thousand   flu
victims standing in an echo chamber cleansng their sinuses into a
mountain  of  Kleenex while three dozen  football  referees  blow
their foul whistles in unison, and you still won't come close  to
the  sheer cacophonous volume that my Saharan toilet exuded  from
within its bowels.  And all for my benefit.

The  hotel  manager  thought I was kidding.  "What  do  you  mean
exploded?"

"Which word do you not understand?" I growled in my early morning
sub-sonic voice.  "If you don't care, I don't."

My  bed was floating.  Three or maybe 12 inches of water  created
the damnedest little tidal wave I'd ever seen, and the sight  and
sound  of  Lake Meade in room 1487 only exascerbatd the  pressing
need to relieve myself.  I dried my feet on the extra bed linens,
worried  about electrocution and fell back asleep. It could  have
been  3  minutes or three hours later - I have no way to  know  -
but  my hypnogoic state was rudely interrupted by  hotel  mainte
nance pounding at the door with three fully operational  muffler-
less jack hammers.

"I  can't  open  it," I bellowed over the continual  roar  of  my
personal  Vesuvius Waterfall.  "Just c'mon in."   The  fourteenth
floor hallway had to resemble an underwater coral display becuase
the door opened ever so slowly..

"Holy Christ!"

Choking  back  what would have been a painful laugh,  I  somehow
eeked out the words, with  a smirk, "Now you know what an explo-
ding  toilet  is like."

For,  I  swear, the next two hours three men  whose  English  was
worse  than a dead Armadillo attempted to suck up the Nile  River
from my room and the hallway.  Until that very moment in time,  I
didn't  know  that  hotels were outfitted  with  vacuum  cleaners
specifically designed to vacuum water.  Perhaps this is a regular
event.


Everyone  who has ever suffered through one bitches  about  Vegas
buffets,  and  even the hackers steered away  from  the  Sahara's
$1.95  "all you can eat" room: "The Sahara's buffet is the  worst
in  town;  worse than Circus Circus."  But since I  had  left  my
taste  buds  at 37,000 feet along with schrapneled pieces  of  my
inner ear, I sought out sustenance only to keep me alive  another
24 hours.

By mid afternoon, I had convinced myself that outside was not the
place  to be. After only eighteen minutes of  120  sidewalk  egg-
cooking  degrees, the hot desert winds took what was left  of  my
breath  away  and with no functioning airways as it was,  I  knew
this  was  a big mistake.  So, hacker convention, ready  or  not,
here I come.

Now,  you  have to keep in mind that Las Vegas  floor  plans  are
designed  with  a singular purpose in mind. No matter  where  you
need to go, from Point A to Point B or Point C or D or  anywhere,
the traffic control regulations mandated by the local police  and
banks require that you walk by a minimum of 4,350 slot  machines,
187  gaming  tables of various persuasions and no  less  than  17
bars.  Have they no remorse?  Madison Avenue ad execs take heed!

So, lest I spend the next 40 years of my life in circular pursuit
of  a  sign-less hacker convention losing every last  farthing  I
inherited from dead Englishmen, I asked for the well hidden loca-
tion at the hotel lobby.

"What  hackers?"  There goes that nasty photon  triggered  neuron
depletion again.

"The computer hackers."

"What computer hackers.  We don't have no stinking hackers . . ."
Desk clerk humor, my oxymoron for the week.

I tried the name: DefCon II.

"Are  we going to war?"  one ex-military Uzi-wielding guard  said
recognizing the etymology of the term.

"Yesh, it's true"  I used my most convincing tone. "The  Khasaks
tanis  are coming with nuclear tipped lances riding hundred  foot
tall  horses.   Paris has already fallen.  Berlin  is  in  ruins.
Aren't you on the list to defend this great land?"

"Sure as shit am!"   He scampered off to the nearest phone in  an
effort  to  be the first on the front lines.   Neuron  deficiency
beyong surgical repair..

I  slithered down umpteen hallways and casino aisles lost in  the
jungle of jingling  change.   Where the  hell  are  the  hackers?
"They must be there," another neuron-impoverished Saharan employ
ee said as he pointed towards a set of escalators at the very far
end of the casino.

All the way at the end of the almost 1/4 mile trek through  Sodom
and Gonorrhea an 'up' escalator promised to take me to hackerdom.
Saved  at last.  Upstairs.  A conference looking area.  No  signs
anywhere,  save  one of those little black  Velcro-like  stick-em
signs where you can press on white block letters.

                      No Mo Feds

I must be getting close. Aha, a maintenance person; I'll ask him.
"What hackers?  What's DefCon."

Back  downstairs,  through the casino, to the  front  desk,  back
through  the casino, up the same escalator again. Room One I  was
told.   Room  One  was empty.  Figures.  But, at the  end  of   a
hallway,  past the men's room and the phones, and  around  behind
Room One I saw what I was looking for: a couple of dozen T-shirt
ed,  Seattle grunged out kids (read: under 30) sitting at  uncov
ered  six foot folding tables hawking their DefCon  II  clothing,
sucking  on Heinekens and amusing themselves with  widely  strewn
backpacks and computers and cell phones.

I had arrived!

                       * * * *

You  know,  regular old suit and tie conferences  could  learn  a
thing or two from Jeff Moss, the man behind DefCon II.  No  fancy
badge making equipment; no $75 per hour union labor built  regis
tration  desks; no big signs proclaiming the wealth of  knowledge
to  be gained by signing up early.  Just a couple of kids with  a
sheet of paper and a laptop.

It turned out I was expected.  They handed me my badge and what a
badge it was.  I'm color blind, but this badge put any psychedel
ically induced spectral display to shame.  In fact it was a close
match  to the Sahara's mid 60's tasteless casino carpeting  which
is so chosen as to hide the most disgusting regurgative blessing.
But better and classier.

The neat thing was, you could (in fact had to) fill out your  own
badge  once  your name was crossed off the piece  of  paper  that
represented the attendee list.

Name:
Subject of Interest:
E-Mail:

Fill  it  out  any way you want.  Real name,  fake  name,  alias,
handle  - it really doesn't matter cause the  hacker  underground
ethic  encourages anonymity.  "We'd rather not know who  you  are
anyway, unless you're a Fed.  Are you a Fed?"

A  couple of lucky hackers wore the ultimate badge of honor.   An
"I  Spotted A Fed" T-shirt.  This elite group sat or lay  on  the
ground watching and scouring the registration area for signs that
someone,  anyone, was a Fed.  They really didn't care or  not  if
you  were a Fed - they wanted the free T-shirt and the  peer  re
spect that it brought.

I'm over 30 (OK, over 35) and more than a few times (OK, a little
over 40) I had to vehemently deny being a Fed.  Finally Jeff Moss
came to the rescue.

"He's not a Fed.  He's a security guy and a writer."

"Ugh!  That's worse.  Can I get a T-shirt cause he's  a  writer?"
No way hacker-breath.

Jeff.   Jeff Moss. Not what I expected.  I went to school with  a
thousand Jeff Mosses.  While I had hair down to my waist, wearing
paisley leather fringe jackets and striped bell bottoms so wide I
appeared to be standing on two inverted ice cream cones, the Jeff
Mosses  of  the world kept  their parents  proud.   Short,  short
cropped  hair,  acceented by an ashen pall and  clothes  I  stlll
wouldn't  wear  today.  They could get away with  anything  cause
they  didn't look the part of radical chic.  Jeff, I really  like
Jeff: he doesn't look like what he represents.  Bruce  Edelstein,
(now of HP fame) used to work for me.  He was hipper than hip but
looked squarer than square.  Now today that doesn't mean as  much
as  it used to, but we ex-30-somethings have a hard time  forget
ting  what rebellion was about. (I was suspended 17 times in  the
first semester of 10th grade for wearing jeans.)

Jeff  would  fit into a Corporate Board Meeting if  he  wore  the
right suit and uttered the right eloquencies:  Yes, that's it:  A
young  Tom Hanks.  Right.  I used to hate Tom Hanks (Splash,  how
fucking stupid except for the TV-picture tube splitting  squeals)
but  I've come to respect the hell out of him as an actor.   Jeff
never  had to pass through that first phase.  I  instantly  liked
him and certainly respect his ability to pull off a full  fledged
conference for only $5000.

You  read  right. Five grand and off to Vegas with  300  of  your
closest personal friends, Feds in tow, for a weekend of electron
ic  debauchery.   "A few hundred for the brochure, a few  hundred
hear, a ton in phone bills, yeah, about $5000 if no one does  any
damage."   Big time security shows cost $200,000 and up.   I  can
honestly  say  without meaning anything pejorative at any  of  my
friends and busienss acquaintances, that I do not learn 40  times
as  much  at the 'real' shows.  Something is definitely out of
whack  here.  Suits want to see suits.  Suits want to see  fancy.
Suits want to see form, substance be damned.  Suits should take a
lesson from my friend Jeff.

                       * * * * *

I again suffered through a tasteless Saharan buffer dinner  which
cost me a whopping $7.95.  I hate grits - buttered sand is what I
call  them  - but in this case might well have  been  preferable.
Somehow  I  coerced a few hackers to join me in  the  ritualistic
slaughter of our taste buds and torture of our intestines.   They
were  not pleased with my choice of dining, but then who gives  a
shit?  I couldn't taste anything anyway.  Tough.

To keep our minds off of the food we talked about something much
more pleasant: the recent round of attacks on Pentagon  computers
and  networks.  "Are the same people involved as in the  sniffing
attacks earlier this year?" I asked my triad of dinner mates.

"Indubitably."

"And what's the reaction from the underground - other hackers?"

Coughs, sniffs.  Derisive visual feedback. Sneers. The finger.

"We can't stand 'em.  They're making it bad for everybody."   Two
fingers.

By and large the DefCon II hackers are what I call 'good hackers'
who hack, and maybe crack some systems upon occasion, but  aren't
what  I refer to as Information Warriors in the bad sense of  the
word.   This group claimed to extol the same position as most  of
the  underground  would:   the Pentagon sniffing  crackers  -  or
whoever  who  is assaulting thousands of computers on the  net  -
must be stopped.

"Scum bags, that what they are."  I asked that they not sugarcoat
their feelings on my behalf.  I can take it.  "These fuckers  are
beyond belief; they're mean and don't give a shit how much damage
they  do."  We played with our food only to indulge in the single
most  palatable edible on display: ice cream with gobs of  choco
late syrup with a side of coffee. .

The big question was, what to do?  The authorities are  certainly
looking  for a legal response; perhaps another Mitnick or  Phiber
Optik.   Much  of  the underground cheered when  Mark  Abene  and
others from the reknowned Masters of Destruction went to spend  a
vacation  at the expense of the Feds.  The MoD was up to no  good
and  despite  Abene's cries that there was no such thing  as  the
MoD, he lost and was put away.  However many hackers believe as I
do, that sending Phiber to jail for hacking was the wrong punish
ment.  Jail time won't solve anything nor cure a hacker from  his
first  love.   One might as well try to cure a  hungry  man  from
eating:   No, Mark did wrong, but sending him to jail was  wrong,
too.   The  Feds and local computer cops and the courts have  to
come  up with punishments appropriate to the crime.  Cyber-crimes
(or cyber-errors) should not be rewarded by a trip to an all male
hotel where the favorite toy is a phallically carved bar of soap.

On  the other hand, hackers in general are so incensed  over  the
recent swell of headline grabbing break-ins, and law  enforcement
has  thus far appeared to be impotent, ("These guys  are  good.")
that many are searching for alternative means of retribution.

"An IRA style knee capping is in order," said one.

"That's  not  good enough, not enough pain," chimed  in  another.
(Sip, sip. I can almost taste the coffee.)

"Are  you  guys serious?" I asked.  Violence?  You? I  thought  I
knew them better than that. I know a lot of hackers, none that  I
know  of  is  violent,  and this  extreme  Pensacola  retribution
attitude seemed tottally out of character.  "You really  wouldn't
do that, would you?"  My dinner companions were so upset and they
claimed to echo the sentiment of all good-hackers in good  stand
ing, that yes, this was a viable consideration.

"The Feds aren't doing it, so what choice do we have?  I've heard
talk  about  taking up a collection to pay for a hit man .  .  ."
Laughter around, but nervous laughter.

"You wouldn't. . ." I insisted.

"Well,  probably  not  us, but that  doesn't  mean  someone  else
doesn't won't do it."

"So you know who's behind this whole thing."

"Fucking-A  we do," said yet another hacker chomping at the  bit.
He was obviously envisioning himself  with a baseball bat in  his
hand.

"So do the Feds."

So now I find myself in the dilemma of publishing the open secret
of who's behind the Internet sniffing and Pentagon break ins, but
after  talking  to people from both the underground and  law  en
forcement,  I think I'll hold off awhile  It serves no  immediate
purpose other than to warn off the offenders, and none of us want
that.

Obviously all is not well in hacker-dom.

                       * * * * *

The  registration  area  was beyond  full;  computers,  backpacks
everywhere,  hundreds  of what I have to refer to as kids  and  a
fair number of above ground security people.  Padgett Peterson of
Martin  Marietta was going to talk about viruses, Sara Gordon  on
privacy, Mark Aldrich is a security guy from DC., and a  bunch of
other  folks I see on the seemingly endless security  trade  show
circuit. Jeff Moss had marketed himself and the show excellently.
Los Angeles sent a TV crew, John Markoff from the New York  Times
popped  in as did a writer from Business Week.  (And  of  course,
yours truly.)

Of  the  360 registrees ("Plus whoever snuck in," added  Jeff)  I
guess about 20% were so-called legitimate security people. That's
not to belittle the mid-20's folks who came not because they were
hackers, but because they like computers.  Period.  They hack for
themselves and not on other systems, but DefCon II offered  some
thing for everyone.

I  remember 25 years ago how my parents hated the way  I  dressed
for  school or concerts or just to hang out: God forbid! We  wore
those damned jeans and T-shirts and sneakers or boots! "Why can't
you dress like a human being," my mother admonished me day  after
day,  year after year.  So I had to check myself because I  can't
relate  to Seattle grunge-ware. I'm just too damned old  to  wear
shirts that fit like kilts or sequin crusted S&M leather  straps.
Other   than  the  visual  cacophony  of  dress,   every   single
hacker/phreak that I met exceeded my expectations in the area  of
deportment.

These  are not wild kids on a rampage.  The stories  of  drug-in
duced  frenzies  and peeing in the hallways  and  tossing  entire
rooms  of  furniture  out of the window that  emanated  from  the
HoHoCons  seemed  a million miles away.  This was  admittedly  an
opportunity  to party, but not to excess.  There was work  to  be
done, lessons to be learned and new friends to make.  So  getting
snot  nosed drunk or ripped to the tits or Ecstatically high  was
just not part of the equation.  Not here.

Now   Vegas  offers something quite distinct  from  other  cities
which host security or other conventions.  At a Hyatt or a Hilton
or  any other fancy-ass over priced hotel, beers run $4 or  $5  a
crack  plus  you're expected to tip the black tied  minimum  wage
worker  for  popping the top.  The Sahara (for all of  the  other
indignities we had to suffer) somewhat redeemed  itself by offer
ing an infinite supply of $1 Heinekens. Despite hundreds of  beer
bottle  spread  around the huge conference area  (the  hotel  was
definitely  stingy in the garbage pail business) public  drunken
ness  was  totally absent.  Party yes.  Out of control?  No  way.
Kudos!

Surprisingly, a fair number of women (girls) attended.  A handful
were there 'for the ride' but others . . . whoa! they know  their
shit.

I hope that's not sexist; merely an observation.  I run across so
few  technically fluent ladies it's just a gut reaction.  I  wish
there  were more.  In a former life, I owned a TV/Record  produc
tion  company called Nashville North. We specialized  in  country
rock taking advantage of the Urban Cowboy fad in the late 1970's.
Our crew of producers and engineers consisted of the   "Nashville
Angels."  And boy what a ruckus they would cause when we recorded
Charlie  Daniels  or Hank Williams: they  were  stunning.   Susan
produced and was a double for Jacqueline Smith; we  called  Sally
"Sabrina"  because  of her boyish appearance and  resemblance  to
Kate Jackson.  A super engineer.  And there was Rubia Bomba,  the
Blond  Bombshell,  Sherra,  who I eventually  married:  she  knew
country music inside and out - after all she came from  Nashville
in the first place.

When we would be scheduled to record an act for live radio,  some
huge famous country act like Asleep at The Wheel of Merle Haggard
or Johnny Paycheck or Vassar Clements, she would wince in  disbe
lief when we cried, "who's that?"  Needless to say, she knew  the
songs, the cues and the words.  They all sounded alike.   Country
Music?  Ecch.  (So I learned.)

At  any rate, ladies, we're equal opportunity  offenders.   C'mon
down and let's get technical.

As  the  throngs pressed to register, I saw an old  friend,  Erik
Bloodaxe.   I've  known him for several years now and  he's  even
come  over to baby sit the kids when he's in town.   (Good  prac
tice.)    Erik  is about as famous as they come in the  world  of
hackers.   Above ground the authorities investigated him for  his
alleged  participation in cyber crimes: after all, he was one  of
the  founders of the Legion of Doom, and so, by default, he  must
have done something wrong.  Never prosecuted, Erik Bloodaxe lives
in  infamy amongst his peers.  To belay any naysayers,  Erik  ap
peared on every single T-shirt there.

                       "I Only Hack For Money,"
                                Erik Bloodaxe

proclaimed  dozens of shirts wandering through  the  surveillance
laden casinos. His is a name that will live in infamy.

So  I  yelled  out, "Hey Chris!"  He gave  his  net-name  to  the
desk/table registrar. "Erik Bloodaxe."

"Erik  Bloodaxe?"  piped up an excited high pitched  male  voice.
"Where?"  People pointed at Chris who was about to be  embarrass
ingly amused by sweet little tubby Novocain who practically bowed
at Chris's feet in reverence.  "You're Erik Bloodaxe?"   Novocain
said  with nervous awe - eyes gleaming up at Chris's  ruddy  skin
and blond pony-tail.

"Yeah,"  Chris  said in the most off handed  way  possible.   For
people who don't know him this might be interpreted as  arrogance
(and yes there is that) but he also has trouble publicly  accept
ing  the  fame  and respect that  his  endearing  next-generation
teenage fans pour on him.

"Wow!"  Novocain  said with elegance and panache.   "You're  Erik
Bloodaxe."  We'd just been through that said Chris's eyes.

"Yeah."

"Wow,  well,  um,  I  . . . ah . . . you're . . .  I  mean,  wow,
you're  the best."  What does Sylvia Jane Miller from  Rumpsteer,
Iowa  say to a movie star?  This about covered it.   The  Midwest
meets  Madonna.   "Wow!"   Only here it's  Novocain  meets  Cyber
Christ himself.



Like any other security show or conference or convention there is
a kickoff, generally with a speech.  And DefCon II was no  excep
tion.  Except.

Most conventional conventions (ConCons) start at 7:30 or 8:00  AM
because, well,  I don't know exactly why, except that's when  so-
called  suits are expected to show up in their cubicles.     Def
Con, on the other hand, was scheduled to start at 10PM on  Friday
night  when  most  hakcers show up for work.  Most  everyone  had
arrived  and we were anxiously awaiting the  opening  ceremonies.
But, here is where Jeff's lack of experience came in.  The  kick-
off speaker was supposed to be Mark Ludwig of  virus writing fame
and controversy.  But, he wasn't there!

He had jet lag.

"From Phoenix?" I exclaimed in mock horror to which nearby  hack
ers saw the absurdity of a 45 minute flight jet lag.  Mark has  a
small  frame and looks, well, downright weak, so I figured  maybe
flying  and  his constitution just didn't get along  and  he  was
massaging his swollen adenoids in his room.

"Oh,  no!  He's  just come in from Australia . .  ."   Well  that
explains it, alright!  Sorry for the aspersions, Mark.

But Jeff didn't have a back up plan. He was screwed.  Almost four
hundred people in the audience and nothing to tell them.  So, and
I can't quite believe it, one human being who had obviously never
stood  in front of a live audience before got up in an  impromptu
attempt  at stand up comedy.  The audience was ready  for  almost
anything  entertaining but this guy wasn't. Admittedly it  was  a
tough spot, but . . .

"How do you turn a 486 into an 8088?"

"Add Windows."  Groan. Groan.

"What's  this?"  Picture the middle three fingers of  your  right
hand wiggling madly.

"An  encrypted  this!"   Now hold out  just  the  middle  finger.
Groan.  Groan.

"What's  this?"   Spread your legs slightly  apart,  extend  both
hands to the front and move them around quickly in small circles.

"Group Air Mouse."  Groan.

The  evening  groaned on with no Mark nor any able  sharp  witted
comedian in sight.



Phil  Zimmerman wrote PGP and is a God, if not Cyber-Christ  him
self to much of the global electronic world.  Preferring to  call
himself a folk hero (even the Wall Street Journal used that term)
Phil's diminutive height combined with a few too many pounds  and
a  sweet  as sweet can be smile earn him the title  of  Pillsbury
Dough  Boy look alike.  Phil is simply too nice a guy to  be  em
broiled  in a Federal investigation to determine if he broke  the
law  by  having PGP put on a net site.  You see, the  Feds  still
think  they can control Cyberspace, and thereby maintain  antique
export laws: "Thou shalt not export crypto without our  approval"
sayeth the NSA using the Department of Commerce as a whipping boy
mouth  piece.  So now Phil faces 41-51 months of  mandatory  jail
time if prosecuted and convicted of these absurd laws.

Flying  in from Colorado, his appearance was  anxiously  awaited.
"He's really coming?"  " I wonder what he's like?"  (Like  every
one  else, fool, just different.)  When he did arrive, his  shit-
eating  grin  which really isn't a shit-eating  grin,  it's  just
Phil's own patented grin, preceeded him down the hallway.

"Here  he is!"  "It's Phil Zimmerman."  Get down and bow.   "Hey,
Phil the PGP dude is here."

He  was  instantly surrounded by those who recognize him  and  by
those  who  don't but  want  to  feel like part of the  in-crowd.
Chat chat, shit-eating grin, good war stories and G-rated  pleas
antries.  Phil was doing what he does best: building up the  folk
hero image of himself.  His engaging personality (even though  he
can't  snorkel to save his ass) mesmerized the young-uns  of  the
group.  "You're Phil?"

"Yeah."   No  arrogance,  just a warm  country  shit-eating  grin
that's  not really shit-eating.  Just Phil being Phil.  He  plays
the part perfectly.

Despite the attention, the fame, the glory (money? nah . . .) the
notoriety and the displeased eyes of onlooking Computer Cops  who
really  do  believe he belongs in jail for 4 years,  Phil  had  a
problem tonight.  A real problem.

"I  don't have a room!" he quietly told Jeff at the desk.   "They
say  I'm  not registered."  No panic.  Just  a  shit-eating  grin
that's not a shit-eating grin and hand the  problem  over  to the
experts:  in  this case Jeff Moss.  Back to his  endearing  fans.
Phil is so damned kind I actually saw him giving Cryptography 101
lessons  on  the corner of a T-shirt encrusted table.  "This  is
plaintext and this is crypto.  A key is like a key to your  hotel
room . . . "   If only Phil had a hotel room.

Someone  had screwed up. Damn computers.  So the search  was  on.
What had happened to Phil's room?  Jeff is scrambling and  trying
to  get the hotel to rectify the situation. Everyone  was  abuzz.
Phil,  the  crypto-God himself was left out in  the  cold.   What
would he do?

When  suddenly, out of the din in the halls, we heard  one  voice
above all the rest:

"Phil can sleep with me!"

Silence.   Dead stone cold silence.  Haunting silence like  right
after  an  earthquake and even the grubs and  millipedes  are  so
shaken they have nothing to say.  Silence.

The  poor kid who had somehow instructed his brain to  utter  the
words  and permitted them to rise through his esophagus  and  out
over  his  lips stood the object of awe, incredulity  and  mental
question marks.  He must have thought to himself, "what's  every
one  staring  at?  What's going on?  Let me in on it."   For  the
longest  10 seconds in the history of civilization he  had  abso
lutely no clue that he was the target of attention.  A handful of
people even took two or three steps back, just in case.  Just  in
case of what was never openly discussed, but nonetheless, just in
case.

And  then the brain kicked in and a weak sheepish smile of  guilt
overcame  this cute acne-free baby-butt smooth-faced  hacker  who
had  certainly  never had a shave, and was barely old  enough  to
steer his own pram.

"Ohhhhhh . . . . noooooo," he said barely louder than a  whisper.
"That' not what I mean!"

I nearly peed laughing so hard in unison with a score of  hackers
who agreed that these misspoken words put this guy in the unenvi
able  position  of being the recipient of a  weekend  of  eternal
politically incorrect ridicule.

"Yeah, right.  We know what you mean . . "

"No  really . . ." he pleaded as the verbal assaults on  his  al
leged sexual preferences were slung one after the other.

This  poor kid never read Shakespeare: "He who doth  protest  too
much . . ."

If  we  couldn't have a great kickoff speech, or  comedian,  this
would have to do.

The majority of the evening was spent making acquaintances:

"Hi, I'm Jim.  Oops, I mean 'Septic Tank," was greeted with  "Oh,
you're Septic. I'm Sour Milk."  (Vive la difference!) People  who
know  each  other electronically are as surprised to  meet  their
counterparts  as are first daters who are in love with the  voice
at  the other end of the phone.  "Giving good phone" implies  one
thing while "Having a great keystroke" just might mean another.

The din of the crowd was generally penetrated by the sounds of  a
quasi-pornographic  Japanese high tech toon of  questionable  so
cially redeeming value which a majority of the crowd appeared  to
both  enjoy and understand.  I am guilty of neither by reason  of
antiquity.

And so it goes.

                       * * * * *

Phil Zimmerman must have gotten a room and some sleep because  at
10AM  (or closely thereafter) he gave a rousing (some  might  say
incendiary)  speech  strongly attacking the  government's  nearly
indefensible position on export control

I was really impressed.  Knowing Phil for some time, this was the
first  time I ever heard him speak and he did quite an  admirable
job.  He ad libs, talks about what he want to talk about and does
so in a compelling and emotional way. His ass is on the line  and
he  should be emotional about it.  The audience, indeed  much  of
counter culture Cyberspace loves Phil and just about anything  he
has  to  say.  His affable 40-something attorney  from  Colorado,
Phil  DuBois  was there to both enjoy the  festivities  and,  I'm
sure,  to keep tabs on Phil's vocalizations.  Phil is almost  too
honest  and open for his own good.  Rounds and rounds of  sincere
appreciation.



Hey  kids,  now  it's time for another round  of  Spot  The  Fed.
Here's  your  chance to win one of these wonderful "I  Spotted  A
Fed" T-shirts. And all you have to do is ID a fed and it's yours.
Look  around you?  Is he a Fed?  Is she under cover or under  the
covers? Heh, heh.  Spot the Fed and win a prize.  This  one-size-
fits-all  XXX Large T-shirt is yours if you Spot the Fed.  I  had
to  keep silent.  That would have been cheating.  I hang  out  on
both sides and have a reputation to maintain.

"Hey,  I  see one" screeched a female voice (or  parhaps  it  was
Phil's  young admirer) from the left side of the 400+ seat  ball
room.   Chaos!  Where? Where?  Where's the fed?  Like  when  Jose
Consenko  hits  one  towards the center field  fence  and  70,000
screaming  fans  stand on their seats to get a better view  of  a
three inch ball 1/4 mile away flying at 150 miles per  hour, this
crowd stood like  Lemmings  in view of Valhalla the Cliff to espy
the  Fed.  Where's the Fed?

Jeff jumped off the stage in anxious anticipation that yet anoth
er anti-freedom-repressive law enforcement person had blown   his
cover.   Where's the Fed?  Jeff is searching for the accuser  and
the  accused.  Where's the Fed?  Craned necks as far as  the  eye
can see; no better than rubber neckers on Highway 95 looking  for
steams of blood and misplaced body parts they half expected a Fed
to  be  as  distinctly obvious as Quasimoto  skulking  under  the
Gorgoyled parapits of Notre Dame.  No such luck.  They look  like
you and me. (Not me.)  Where's the Fed?

He's getting closer, closer to the Fed.  Is it a Fed?  Are you  a
Fed?  C'mon, fess up.  You're a a fed. Nailed.  Busted.  Psyche!

Here's  your  T-shirt.   More fun than Monty  Hall  bringing  out
aliens  from behind Door #3 on the X-Files.  Good clean fun.  But
they didn't get 'em all.  A couple of them were real good.   Must
have  been  dressed  like an Hawaiian surf bum  or  banshee  from
Hellfire, Oregon.  Kudos to those Feds I know never got  spotted.
Next year, guys.  There's always next year.

Phil's notoriety and the presence of the Phoenix, Arizona prosecu
tor   who was largely responsible for the dubiously effective  or
righteous  Operation  Sun Devil, Gail Thackeray  ("I  change  job
every 4 years or so - right after an election")  brought out  the
media.  The LA TV station thought they might have the makings  of
a story and sent a film crew for the event.

"They're Feds. The ones with the cameras are Feds.  I know it. Go
ask 'em."  No need. Not.

"Put away that camera."  At hacking events it's proper  etiquette
to ask if people are camera shy before shooting.   The guy that I
was  sitting next to buried his face in his hands to avoid  being
captured on video tape.

"What are you; a Fed or a felon?" I had to ask.

"What's the difference," his said.  "They're the same thing."  So
which  was it, I wondered.  For the truly paranoid by  the  truly
paranoid.

"Get  that  thing outta here," he motioned to the film  crew  who
willingly  obliged  by turning off the lights.   "They're  really
Feds,"  he whispered to me loud enough for the row in  front  and
behind us to hear.

I moved on.  Can't take chances with personal safety when I  have
kids to feed.  Fed or felon, he scared me.

Gail Thackeray  was the next act on stage. She was less in agree
ment about Phil Zimmerman than probably anyone (except the  unde
tected Feds) in the audience.  She, as expected, endorsed much of
the  law  enforcement programs that revolve  around  various  key
management  (escrow) schemes.  Phil recalls a letter  from  Burma
that  describe how the freedom fighters use PGP to  defend  them
selves against repression.  He cites the letter from Latvia  that
says  electronic  freedom as offered by PGP is one of  the  only
hopes for the future of a free Russia.  Gail empathizes but  sees
trouble  closer  to home. Terrorism a la World Trade  Center,  or
rocket launchers at O'Hare Airport, or little girl snuff films in
Richmond,  Virginia,  or the attempt to poison the  water  supply
outside of Boston.  These are the real threats to America in  the
post Cold War era.

"What about our personal privacy!" cries a voice.  "We don't want
the  government listening in.  It's Big Brother 10  years  behind
schedule."

Gail  is amused.  She knew it would be a tough audience  and  has
been through it before.  She is not shaken in the least.

"I've read your mail," she responds.  "Its not all that interest
ing."   The audience appreciates a good repartee. "You gotta  pay
me  to  do this, and frankly most of it is pretty  boring."   She
successful made her point and kept the audience laughing all  the
way.

She then proceeded to tell that as she sees it, "The  expectation
of  privacy isn't real."  I really don't like hearing this for  I
believe  in the need for an Electronic Bill of Rights.  I  simply
think she's wrong.  "History is clear," she said  "the ability to
listen in used to be limited to the very few.  The telegraph  was
essentially  a  party line and still today in  some  rural  areas
communications aren't private.  Why should we change  it now?"

"Gail,  you're so full of shit!" A loud voice bellowed from  next
to me again. Boy can I pick seats. "You know perfectly well  that
cops  abuse the laws and this will just make their  jobs  easier.
Once people find a way to escape tyranny you all want to bring it
right  back again.  This is revolution and you're scared of  los
ing.  This kind of puke scum you're vomiting disgusts me.  I just
can't  take it any more. " Yeah, right on.   Scattered  applause.
While  this  'gent' may have stated what was on many  minds,  his
manner was most unbefitting a conference and indeed, even  DefCon
II.   This was too rude even for a hacker get-together.  The  man
with  the  overbearing comments sat down apologizing.  "She  just
gets  me going, she really does.  Really pisses me off  when  she
goes on like about how clean the Feds are.  She knows better than
to run diarrhea of the mouth like that."

"You  know,"  she continued.  "Right across the street is  a  Spy
Shop.  One of those retail stores where you can buy bugs and taps
and eavesdropping equipment?"  The audience silently nodded.  "We
as law enforcement are prohibited by law from shopping there  and
buying  those same things anyone else can.  We're losing on  that
front."  Cheers. Screw the Feds.