We are always spoilt in April with not only Infosec, but 44Cafe and BSides London too – and this year was another corker.
Traditionally, April is the month of the ‘unholy trinity’: 44Cafe, BSides London and Infosec. As you might expect, I was at all three again this year, although I have to say I’m finding 44Cafe and BSides to be far more valuable from a learning perspective, although of course Infosec is a great opportunity to see the latest and greatest product offerings, meet up with people and, most importantly, replenish your stock of pens, t-shirts and assorted marketing tat.
The sun shines on the righteous, it would seem, as both 44Cafe and BSides had beautiful weather (although SC’s Dan Raywood avoided the sunstroke that prevented his 44Con appearance last year). 44Cafe had a fair bit of vendor-sponsored competition in the guise of thinly veiled drinking sessions, but still gathered a healthy crowd for the afternoon talks. The first was by WickedClown – well known to 44Con regulars as the friendliest scary biker you could ever hope to meet – who revealed how to use a malicious Remote Terminal Services server to bypass corporate security barriers without the use of exploits or malware. This was a great ‘why didn’t I think of that?’-style talk, and shows that you don’t always need to be knee-deep in x86 assembly to get through defences.