Massachusetts Bay Transportation Authority v. Anderson et al

Filing 20

EXHIBITS one thru eight re 2 MOTION for Temporary Restraining Order by Massachusetts Bay Transportation Authority. (Attachments: # 1 Exhibit Two, # 2 Exhibit Three, # 3 Exhibit Four, # 4 Exhibit Five, # 5 Exhibit Six, # 6 Exhibit Seven, # 7 Exhibit Eight)(Edge, Eugenia)

EXHIBIT 2

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

OFFICIAL DEFCON FAQ v0.95
[NOTE: Before this FAQ goes production 1.0 it will be split into two, one for general DEF CON questions, and another for the

https://www.defcon.org/html/links/dc-faq/dc-faq.html (1 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

current years con]

What is DEFCON? DEFCON is one of the oldest continuous running hacker conventions around, and also one of the largest.

How did DEFCON start? Originally started in 1993, it was a meant to be a party for member of "Platinum Net", a Fido protocol based hacking network out of Canada. As the main U. S. hub I was helping the Platinum Net organizer (I forget his name) plan a closing party for all the

https://www.defcon.org/html/links/dc-faq/dc-faq.html (2 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

member BBS systems and their users. He was going to shut down the network when his dad took a new job and had to move away. We talking about where we might hold it, when all of a sudden he left early and disappeared. I was just planning a party for a network that was shut down, except for my U.S. nodes. I decided what the hell, I'll invite the members of all the other networks my BBS (A Dark Tangent System) system was a part of including Cyber Crime International (CCI), Hit Net, Tired of Protection (ToP), and

https://www.defcon.org/html/links/dc-faq/dc-faq.html (3 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

like 8 others I can't remember. Why not invite everyone on #hack? Good idea!

Where did the name come from? The short answer is a combination of places. There as a SummerCon in the summer, a HoHoCon in the winter, a PumpCon during Halloween, etc. I didn't want any association with a time of year. If you are a Phreak, or just use your phone a lot you'll notes "DEF" is #3 on the phone. If you are into military lingo DEFCON is short for "Defense Condition."

https://www.defcon.org/html/links/dc-faq/dc-faq.html (4 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

Now being a fan of the movie War Games I took note that the main character, David Ligntman, lived in Seattle, as I do, and chose to nuke Las Vegas with W.O.P.R. when given the chance. Well I knew I was doing a con in Vegas, so it all just sort of worked out. There are several resources that will give you an idea of what DEFCON is all about. DEFCON Press: through the prism of the media DEFCON Pics: visual evidence, thousands of pictures, some NSFW DEFCON Groups:

https://www.defcon.org/html/links/dc-faq/dc-faq.html (5 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

Local groups that meet DEFCON Media archives: Speeches from DC 1 to the present, captured Google: always a good research starting point Just remember, DEFCON is what you make of it.

When and where is DEFCON? DEFCON is generally in the last week of July or first week of August in Las Vegas. DEFCON 16 will be held August 8-10 at the Riviera Hotel & Casino in Las Vegas. Many people arrive a day early, and many stay a day later.

https://www.defcon.org/html/links/dc-faq/dc-faq.html (6 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

Isn't there a DEFCON FAQ already? Yes, an unofficial one. It's quite humorous, somewhat outdated, sometimes informative, and DEFCON takes no responsibility for its content. It can be found at http://defcon. stotan.org/faq/

What are the rules of DEFCON? Physical violence is prohibited. We don't support illegal drug use. Minors should be accompanied by their parent(s) or guardian

https://www.defcon.org/html/links/dc-faq/dc-faq.html (7 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

(s). Please refrain from doing anything that might jeopardize the conference or attendees such as lighting your hair on fire or throwing lit road flares in elevators. DEFCON Goons are there to answer your questions and keep everything moving. Hotel security is there to watch over their property. Each has a different mission, and it is wise to not anger the hotel people. Please be aware that if you engage in illegal activities there is a large contingency of feds that attend DEFCON. Talking about how you are

https://www.defcon.org/html/links/dc-faq/dc-faq.html (8 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

going to bomb the RNC convention in front of an FBI agent is a Career Limiting Move!

Is DEFCON canceled? No.

What is there to do at DEFCON? DEFCON is a unique experience for each con-goer. If you google around you'll find dozens of write-ups that will give you an idea of what people have experienced at DEFCON. Trust writeups more than media

https://www.defcon.org/html/links/dc-faq/dc-faq.html (9 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

articles about the con. Some people play capture the flag 24x7, while many people never touch a computer at DEFCON. Some people see every speech they can, while others miss all speeches. Other activities include coffee wars, WI-FI shoot outs, robot contests, TCP/IP contests, movie marathons, scavenger hunts, sleep deprivation, lock picking, warez trading, drunken parties, spot the fed contest, charity dunk tanks, the Black and White Ball. Because DEFCON is what the attendees make of it, there are

https://www.defcon.org/html/links/dc-faq/dc-faq.html (10 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

more events than even we are aware of. Half the fun is learning what happened at DEFCON after the fact!

I'm not a hacker, should I go to DEFCON? Many people have different definitions of what is a `hacker'. I would recommend looking at previous years speeches, and write-ups from past attendees - this should give you a good idea if DEFCON is for you. This hacker FAQ might give you some insight into the matter as well. If you do not have any technical

https://www.defcon.org/html/links/dc-faq/dc-faq.html (11 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

interests, DEFCON is probably not for you. Sure there is a lot of socializing you can do, but technology and hacking is the core of the con.

Do criminals go to DEFCON? Yes. They also go to high school, college, work in your workplace, and the government. There are also lawyers, law enforcement agents, civil libertarians, cryptographers, and hackers in attendance. Ssshhh. Don't tell anyone.

https://www.defcon.org/html/links/dc-faq/dc-faq.html (12 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

What are Goons? They are the staff at DEFCON. They have many roles including security, speaker coordination, vendor room coordination, network operations, et cetera... Please try to be helpful to them if they make requests of you. If any goon tells you to move, please do so immediately as there may be safety issues they are attempting to address. Security Goons generally wear red shirt, Speaker and Content Control wear Blue.

How can I help out

https://www.defcon.org/html/links/dc-faq/dc-faq.html (13 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

or become a Goon? The staff at DEFCON has grown organically. All positions have some degree of trust associated with them, so typically new goons are `inducted' by friends of existing goons. There are many random points when goons need help and may ask people for help, generally for helping move stuff or other tasks that don't require high amounts of trust or unsupervised work. Just because you help out doesn't make you a goon. If you really want to be a goon, talk with one and see how much work they

https://www.defcon.org/html/links/dc-faq/dc-faq.html (14 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

actually do (hint: you may want to enjoy being at DEFCON, not working full-time at it). Last year the network group got a new Goon when a networking engineer was need, and he came to the rescue. The intent behind the goons is not to be elitist, but to have a network of trusted people who can help run the conference please do not feel upset if you are not chosen to be a goon.

How can I help or participate? DEFCON is not a spectator sport! Before

https://www.defcon.org/html/links/dc-faq/dc-faq.html (15 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

the con, during, and after there are chances for you to get involved. Before the con you can read about the contests and maybe sign up for one like Capture the Flag. There are artwork contests for shirt and posters. You can build a bot for Robot Wars, practice your lock pick skills, or just get your laptop all locked down and ready to do battle. Organize your .mp3s. Check out the DEFCON Forums to see what other people are up to. If you want to create your own event, you can do that as well - you will not get official space or sanctions, but virtually

https://www.defcon.org/html/links/dc-faq/dc-faq.html (16 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

every official event at DEFCON started out as an unofficial event. After DEFCON you can help support the conference by posting links to your DEFCON photographs at defconpics.org, writing a review of your experiences and posting it online (Don't forget to mailing us (press [at] DEFCON døt org) a copy) or just sending us feedback so we can improve in the future. If you ran a contest write it up and we'll link to it. If you have the results of a contest or a new event we'd love to hear about it.

https://www.defcon.org/html/links/dc-faq/dc-faq.html (17 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

I would love to see XYZ event, how do I make this happen? Virtually all events at DEFCON were conceived by the attendees. The DEFCON forums are a great place for recruiting help for an event you want to put on, and making sure your efforts aren't being duplicated. If it doesn't require resources from DEFCON (space, namely) you generally don't have to ask anyone's permission. Most events are unofficial until they've been going on for a couple of years. Please

https://www.defcon.org/html/links/dc-faq/dc-faq.html (18 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

let us know if you have an idea for an event, we may help facilitate or promote it. Email [suggestions at DEFCON døt org] to keep us in the loop.

How can I speak at DEFCON? You can submit a response to our CFP (call for papers). All entries are read and evaluated by a selection committee. We would love to have your submission. The call for papers opens March 1, 2008.

I'm press, how do I sign up, why can't I

https://www.defcon.org/html/links/dc-faq/dc-faq.html (19 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

get in for free (I'm just doing my job)? Please email press[at] defcon[døt]org if you wish press credentials. Lots of people come to DEFCON and are doing their job; security professionals, federal agents, and the press. It wouldn't be fair to DEFCON attendees if we exempted one group from paying. If you are a major network and plan on doing a two minute piece showing all the people with blue hair, you probably shouldn't bother applying for a press pass - you won't get one. If you are a security writer or from

https://www.defcon.org/html/links/dc-faq/dc-faq.html (20 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

a real publication please submit, and someone will respond with an answer.

I want to sell stuff, how do I do this? If you want a space in our vendor area, you need to apply. Because of limited space and our attempt to have a diversity of vendors, you may not be able to get a booth. It is wise to think of staffing issues - if you are one person do you want to spend your entire time behind a vendors booth?

What are the

https://www.defcon.org/html/links/dc-faq/dc-faq.html (21 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

different price rates? Everyone pays the same: The government, the media, the `well known hackers', the unknown script kiddies. The only discount is for Goons and speakers, who get to work without paying for the privilege.

How much is admission DEFCON, and do you take credit cards? DEFCON costs $120 USD cash. Do we take credit cards? Are you JOKING? No, we only

https://www.defcon.org/html/links/dc-faq/dc-faq.html (22 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

accept cash - no checks, no money orders, no travelers checks. We don't want to be a target of any State or Federal fishing expeditions.

Can I pre-register for DEFCON? No. We used to do this a long time ago, but found that managing the registration list, and preventing one 'Dr. Evil' from impersonating another 'Dr. Ev1l' too much of a hassle. Seeing how we would only take case in the first place, and things becomes time consuming and easy to abuse. Cash at

https://www.defcon.org/html/links/dc-faq/dc-faq.html (23 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

the door works every time.

DEFCON is too expensive, how can I afford it? DEFCON is cheaper than many concerts, and certainly cheaper than many shows in Vegas. Many people have made an art and science out of coming to DEFCON very cheaply. Here are a couple of tips. Travel: Buy airfare in advance, go Greyhound, Carpool, hitch-hike. (Note: this may be dangerous and/ or illegal.) Lodging: Share rooms - some people have up

https://www.defcon.org/html/links/dc-faq/dc-faq.html (24 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

to 10 people they share a room with, find a hotel cheaper than the one that the conference is scheduled at, stay up for three days, etc. (note: this can be hazardous to your health.) Food: Pack food for your trip, go off site to find food, eat in your hotel rooms, and look for cheap Vegas food at Casinos. (Look for deals and specials that are trying to get you in the door to gamble.) Booze: You don't need to drink. Brew your own and bring it. (It's been done.) Entrance: $120 can be saved, mow some

https://www.defcon.org/html/links/dc-faq/dc-faq.html (25 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

lawns. Try to go to another 3 day event for cheaper than this that offers so much. We have increased the fees slowly over the years, but also the amount and quality of events have increased. With a new hotel for DC-14 some costs have increased, and we have to pass those along. Inevitably people will try to do some math and pretend that DT gets rich each DEFCON - they seem to lack the ability to subtract.

How many people typically attend DEFCON?

https://www.defcon.org/html/links/dc-faq/dc-faq.html (26 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

There have been roughly 3,000-5,000 attendees in the last few years of DEFCON.

Is there a network at DEFCON? Yes. It would be fair to describe the network as `hostile'. It has been described as `the worlds most hostile network', but such descriptions are just attempts at flattery. It is recommended that if you want to connect to the DEFCON network pretend that you are sharing out your entire hard drive to 5,000 hackers. You may want to bring a `clean' computer that you

https://www.defcon.org/html/links/dc-faq/dc-faq.html (27 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

don't mind being infected/hacked/etc. It is considered very poor form to attempt to DoS the network; while the DEFCON staff may not do anything about such attempts it is reasonable to assume that `peer justice' may be meted out. If you're unhappy about the possible risks associated with connecting to DEFCON networks there are a couple of options: refrain from computer use for a few days or connect using another network elsewhere in Vegas (another hotel or something).

https://www.defcon.org/html/links/dc-faq/dc-faq.html (28 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

At DEFCON 13 we rolled out a new WiFi network using Aruba gear. If you were inside the coverage area of the DEFCON access points the new network switch would do thinks like detect rogue APs and attack them, reset or FIN network connections it didn't like, and prevent one user from being able to scan another user. Nothing is foolproof, but it brought a new level of sanity and stability to the network. We plan to do this again for DC14. Look in the printed program for the correct MAC and IP address of the gateway router.

https://www.defcon.org/html/links/dc-faq/dc-faq.html (29 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

What is the age limit? People have brought children to DEFCON it is not recommended to do this unless you are going to constantly supervise them. It is generally an `adult' atmosphere (language, booze, et cetera). If you've never been to DEFCON, you may want to refrain from bringing your children (unless they are demanding that you bring them). While there are no age limits, we have consistently cooperated with parents and/or private investigators who are

https://www.defcon.org/html/links/dc-faq/dc-faq.html (30 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

looking for children that `ran away from home' to go to DEFCON. You will have to be 18 to reserve a room. That said I think NullTone ties with the youngest person to attend DEFCON at 13 year old. Years later he is in college and set up the DEFCON Forums. See, DEFCON won't destroy you completely.

What is a DEFCON "Black Badge"? The Black Badge is the highest award DEFCON gives to contest winners of

https://www.defcon.org/html/links/dc-faq/dc-faq.html (31 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

certain events. CTF winners sometimes earn these, as well as Hacker Jeopardy winners. The contests that are awarded Black Badges vary from year to year, and a Black Badge allows free entrance to DEFCON for life-- potentially a value of thousands of dollars.

How can I get a hold of DT? I tried to mail him and haven't seen a response yet. DT doesn't dislike you, isn't trying to hurt your feelings, and bears you no ill will. The fact is he gets an unmanageable load of

https://www.defcon.org/html/links/dc-faq/dc-faq.html (32 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

mail continually. Mailing him again may elicit a response. Try mailing FAQ (at) DEFCON.ORG if you have a general question that isn't answered here or in the forums.

What about having a DEFCON in XYZ city/country? We've been in the city of sin since DC 1. We are not looking to franchise. It's always fun to see people organize conventions in their local areas, and if you do, we'll include you in our calendar, but not with the name "DEFCON".

https://www.defcon.org/html/links/dc-faq/dc-faq.html (33 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

Is it hot in Vegas? Yes. Bring sunscreen (high SPF), do not fall asleep near the pool (lest you wake up to sunburn), and do not walk far in the sun unless you are experienced in dealing with extreme heat. The sun is dangerous in Las Vegas. Sleeping in lawn chairs is a sure way to wake up to severe burns in the morning when that bright yellow thing scorches your skin. Drink plenty of water and liquids remember that alcohol will dehydrate you.

https://www.defcon.org/html/links/dc-faq/dc-faq.html (34 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

What should I bring? It depends on what you're going to do at DEFCON. This is discussed in quite some depth on the unofficial DC FAQ, as well as a thread in the DC Forums. You may want to bring fancy (or outrageously silly) clothes for the Black and White Ball, an annual Saturday night event where everyone shows off nifty attire.

Will the Riviera allow free parking? Yes. You will be able to park for free

https://www.defcon.org/html/links/dc-faq/dc-faq.html (35 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

regardless if you have a room at the Riviera.

I looked at a map of the convention space and noticed there are sky boxes. Can I reserve one? No. If you have any great ideas for what a sky box should be used for, feel free to send us suggestions, but individual attendees will not be able to reserve sky boxes.

How much do rooms at the Riviera cost, and how do I reserve a room?

https://www.defcon.org/html/links/dc-faq/dc-faq.html (36 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

The Riviera has reservations online or over the phone [phone]. Room Rates are "flat-fee" based on quantity of occupants. $98 + tax with 1 or 2 people, $118 + tax with 3 or 4 people. Priority for room assignment when you say you're with DEFCON is "Deluxe" when making reservations on the phone.

How much is internet access in the rooms of the Riviera? $9.00 for 24 hours. Free (and more dangerous) internet access is available for

https://www.defcon.org/html/links/dc-faq/dc-faq.html (37 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

free in the convention area.

Will the Riviera broadcast the speeches on their cable system? No. There will be two DEFCON channels that will provide `extra' content (short clips, hacker related videos, etc.). It is our intention that everyone who wishes to attend a speech will be able to - this was a primary motivation for moving hotels.

Will we have DEFCON branded poker chips?

https://www.defcon.org/html/links/dc-faq/dc-faq.html (38 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

You will have to attend DEFCON to find out.

Will conference attendees have entire floors of hotel rooms to themselves? Probably not. The hotel is very cooperative in attempting to centralize the DEFCON attendees, for their convenience and ours, but there will be non-DEFCON attendees in hotel rooms next to us.

This FAQ didn't answer my

https://www.defcon.org/html/links/dc-faq/dc-faq.html (39 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

questions, or was unclear, how can I get further information? There is a forum discussion thread in which you can ask follow up questions.

Get involved

with DEFCON

Groups in

your area!

Discuss hacker

related issues at

the DEFCON

Forums

Upload all your

photos and

videos from

DEFCON at pics.

defcon.org

https://www.defcon.org/html/links/dc-faq/dc-faq.html (40 of 41)8/7/2008 5:44:27 PM

Welcome to DEF CON, the Largest Underground Hacking Convention in the World

https://www.defcon.org/html/links/dc-faq/dc-faq.html (41 of 41)8/7/2008 5:44:27 PM