==Phrack Magazine== Volume Five, Issue Forty-Six, File 19 of 28 **************************************************************************** DefCon II: Las Vegas Cyber-Christ meets Lady Luck July 22-24, 1994 by Winn Schwartau (C) 1994 Las Vegas connotes radically different images to radically dif ferent folks. The Rat Pack of Sinatra, Dean Martin and Sammy Davis Jr. elicits up the glistening self-indulgent imagery of Vegas' neon organized crime in the '50's (Ocean's Eleven displayed only minor hacking skills.) Then there's the daily bus loads of elderly nickel slot gam blers from Los Angeles and Palm Springs who have nothing better to do for twenty out of twenty four hours each day. (Their dead husbands were golf hacks.) Midwesterners now throng to the Mississippi River for cheap gambling. Recreational vehicles of semi-trailor length from East Bullock, Montana and Euclid, Oklahoma and Benign, Ohio clog routes 80 and 40 and 10 to descend with a vengeance upon an asphalt home away from home in the parking lot of Circus Circus. By cul tural demand, every Rv'er worth his salt must, at least once in his life, indulge in the depravity of Glitter Gulch. And so they come, compelled by the invisibly insidious derelict attraction of a desert Mecca whose only purpose in life is to suck the available cash from addicted visitor's electronic purses of ATM and VISA cards. (Hacker? Nah . . .) Vegas also has the distinction of being home to the largest of the largest conventions and exhibitions in the world. Comdex is the world's largest computer convention where 150,000 techno- dweebs and silk suited glib techno-marketers display their wares to a public who is still paying off the 20% per annum debt on last year's greatest new electronic gismo which is now rendered thoroughly obsolete. And the Vegas Consumer Elec tronic Show does for consumer electronics what the First Amend ment does for pornography. (Hackers, are we getting close?) In between, hundreds upon hundreds of small conferences and conventions and sales meetings and annual excuses for excess all select Las Vegas as the ultimate host city. Whatever you want, no matter how decadent, blasphemous, illegal or immoral, at any hour, is yours for the asking, if you have cash or a clean piece of plastic. So, it comes as no surprise, that sooner or later, (and it turns out to be sooner) that the hackers of the world, the computer hackers, phone phreaks, cyber-spooks, Information Warriors, data bankers, Cyber-punks, Cypher-punks, eavesdroppers, chippers, virus writers and perhaps the occasional Cyber Christ again picked Las Vegas as the 1994 site for DefCon II. You see, hackers are like everyone else (sort of) and so they, too, decided that their community was also entitled to hold conferences and conventions. DefCon (as opposed to Xmas's HoHoCon), is the premier mid-year hacker extravaganza. Indulgence gone wild, Vegas notwithstanding if previous Cons are any example; but now put a few hundred techno-anarchists together in sin city USA, stir in liberal doses of illicit controlled pharmaceutical substances, and we have a party that Hunter Thompson would be proud to attend. All the while, as this anarchistic renegade regiment marches to the tune of a 24 hour city, they are under complete surveillance of the authorities. Authorities like the FBI, the Secret Serv ice, telephone security . . . maybe even Interpol. And how did the "man" arrive in tow behind the techno-slovens that belong behind bars? They were invited. And so was I. Invited to speak. (Loose translation for standing up in front of hundreds of hackers and being verbally skewered for having an opinion not in 100% accordance with their own.) "C'mon, it'll be fun," I was assured by DefCon's organizer, the Dark Tangent. "Sure fired way to become mutilated monkey meat," I responded. Some hackers just can't take a joke, especially after a prison sentence and no opposite-sex sex. "No really, they want to talk to you . . ." "I bet." It's not that I dislike hackers - on the contrary. I have even let a few into my home to play with my kids. It's just that, so many of the antics that hackers have precipitated at other Cons have earned them a reputation of disdain by all, save those who remember their own non-technical adolescent shenanigans. And I guess I'm no different. I've heard the tales of depraved indif ference, hotel hold-ups, government raids on folks with names similar to those who are wanted for pushing the wrong key on the keyboard and getting caught for it. I wanted to see teens and X- generation types with their eyes so star sapphire glazed over that I could trade them for chips at the craps table. Does the truth live up to the fiction? God, I hope so. It'd be downright awful and unAmerican if 500 crazed hackers didn't get into at least some serious trouble. So I go to Vegas because, because, well, it's gonna be fun. And, if I'm lucky, I might even see an alien spaceship. For you see, the party has already begun. I go to about 30 conventions and conferences a year, but rarely if ever am I so Tylonol and Aphrin dosed that I decide to go with a severe head cold. Sympomatic relief notwithstanding I debated and debated, and since my entire family was down with the same ailment I figured Vegas was as good a place to be as at home in bed. If I could survive the four and half hour plane flight without my Eustahian tubes rocketing through my ear drums and causing irreparable damage, I had it made. The flight was made tolerable becuase I scuba dive. Every few minutes I drowned out the drone of the engines by honking uncon trollably like Felix Ungerto without his aspirator. To the chagrin of my outspoken counter surveillance expert and traveling mate, Mike Peros and the rest of the first class cabin, the captain reluctantly allowed be to remain on the flight and not be expelled sans parachute somewhere over Southfork, Texas. Snort, snort. Due to extensive flirting with the two ladies across the aisle, we made the two thousand mile trek in something less than 34 minutes . . . or so it seemed. Time flies took on new mean ing. For those who don't know, the Sahara Hotel is the dregs of the Strip. We were not destined for Caesar's or the MGM or any of the new multi-gazillion dollar hotel cum casinos which produce pedestrian stopping extravaganzas as an inducement to suck in little old ladies to pour endless rolls of Washington quarters in mechanical bottomless pits. The Sahara was built some 200 years ago by native slave labor whose idea of plumbing is clean sand and decorators more concerned with a mention in Mud Hut Daily than Architectural Digest. It was just as depressingly dingy and solicitly low class as it was when I forced to spend eleven days there (also with a killer case of the flu) for an extended Comdex computer show. But, hey, for a hacker show, it was top flight. "What hackers?" The desk clerk said when I asked about the show. I explained. Computer hackers: the best from all over the coun try. "I hear even Cyber Christ himself might appear." Her quizzical look emphasized her pause. Better to ignore a question not understood than to look stupid. "Oh, they'll be fine, We have excellent security." The security people, I found out shortly thereafter knew even less: "What's a hacker?" Too much desert sun takes its toll. Proof positive photons are bad for neurons. Since it was still only 9PM Mike and I sucked down a couple of $1 Heinekens in the casino and fought it out with Lineman's Switch ing Union representatives who were also having their convention at the Sahara. Good taste in hotels goes a long way. "$70,000 a year to turn a light from red to green?" we com plained. "It's a tension filled job . . .and the overtime is murder." "Why a union?" "To protect our rights." "What rights?" "To make sure we don't get replaced by a computer . . ." "Yeah," I agreed. "That would be sad. No more Amtrak disasters." The crowd got ugly so we made a hasty retreat under the scrutiny of casino security to our rooms. Saved. Perhaps if I noticed or had read the original propaganda on DefCon, I might have known that nothing significant was going to take place until the following (Friday) evening I might have missed all the fun. For at around 8AM, my congestion filled cavities and throbbing head was awakened by the sound of an exploding toilet. It's kind of hard to explain what this sounds like. Imagine a toilet flushing through a three megawatt sound system at a Rolling Stones concert. Add to that the sound of a hundred thousand flu victims standing in an echo chamber cleansng their sinuses into a mountain of Kleenex while three dozen football referees blow their foul whistles in unison, and you still won't come close to the sheer cacophonous volume that my Saharan toilet exuded from within its bowels. And all for my benefit. The hotel manager thought I was kidding. "What do you mean exploded?" "Which word do you not understand?" I growled in my early morning sub-sonic voice. "If you don't care, I don't." My bed was floating. Three or maybe 12 inches of water created the damnedest little tidal wave I'd ever seen, and the sight and sound of Lake Meade in room 1487 only exascerbatd the pressing need to relieve myself. I dried my feet on the extra bed linens, worried about electrocution and fell back asleep. It could have been 3 minutes or three hours later - I have no way to know - but my hypnogoic state was rudely interrupted by hotel mainte nance pounding at the door with three fully operational muffler- less jack hammers. "I can't open it," I bellowed over the continual roar of my personal Vesuvius Waterfall. "Just c'mon in." The fourteenth floor hallway had to resemble an underwater coral display becuase the door opened ever so slowly.. "Holy Christ!" Choking back what would have been a painful laugh, I somehow eeked out the words, with a smirk, "Now you know what an explo- ding toilet is like." For, I swear, the next two hours three men whose English was worse than a dead Armadillo attempted to suck up the Nile River from my room and the hallway. Until that very moment in time, I didn't know that hotels were outfitted with vacuum cleaners specifically designed to vacuum water. Perhaps this is a regular event. Everyone who has ever suffered through one bitches about Vegas buffets, and even the hackers steered away from the Sahara's $1.95 "all you can eat" room: "The Sahara's buffet is the worst in town; worse than Circus Circus." But since I had left my taste buds at 37,000 feet along with schrapneled pieces of my inner ear, I sought out sustenance only to keep me alive another 24 hours. By mid afternoon, I had convinced myself that outside was not the place to be. After only eighteen minutes of 120 sidewalk egg- cooking degrees, the hot desert winds took what was left of my breath away and with no functioning airways as it was, I knew this was a big mistake. So, hacker convention, ready or not, here I come. Now, you have to keep in mind that Las Vegas floor plans are designed with a singular purpose in mind. No matter where you need to go, from Point A to Point B or Point C or D or anywhere, the traffic control regulations mandated by the local police and banks require that you walk by a minimum of 4,350 slot machines, 187 gaming tables of various persuasions and no less than 17 bars. Have they no remorse? Madison Avenue ad execs take heed! So, lest I spend the next 40 years of my life in circular pursuit of a sign-less hacker convention losing every last farthing I inherited from dead Englishmen, I asked for the well hidden loca- tion at the hotel lobby. "What hackers?" There goes that nasty photon triggered neuron depletion again. "The computer hackers." "What computer hackers. We don't have no stinking hackers . . ." Desk clerk humor, my oxymoron for the week. I tried the name: DefCon II. "Are we going to war?" one ex-military Uzi-wielding guard said recognizing the etymology of the term. "Yesh, it's true" I used my most convincing tone. "The Khasaks tanis are coming with nuclear tipped lances riding hundred foot tall horses. Paris has already fallen. Berlin is in ruins. Aren't you on the list to defend this great land?" "Sure as shit am!" He scampered off to the nearest phone in an effort to be the first on the front lines. Neuron deficiency beyong surgical repair.. I slithered down umpteen hallways and casino aisles lost in the jungle of jingling change. Where the hell are the hackers? "They must be there," another neuron-impoverished Saharan employ ee said as he pointed towards a set of escalators at the very far end of the casino. All the way at the end of the almost 1/4 mile trek through Sodom and Gonorrhea an 'up' escalator promised to take me to hackerdom. Saved at last. Upstairs. A conference looking area. No signs anywhere, save one of those little black Velcro-like stick-em signs where you can press on white block letters. No Mo Feds I must be getting close. Aha, a maintenance person; I'll ask him. "What hackers? What's DefCon." Back downstairs, through the casino, to the front desk, back through the casino, up the same escalator again. Room One I was told. Room One was empty. Figures. But, at the end of a hallway, past the men's room and the phones, and around behind Room One I saw what I was looking for: a couple of dozen T-shirt ed, Seattle grunged out kids (read: under 30) sitting at uncov ered six foot folding tables hawking their DefCon II clothing, sucking on Heinekens and amusing themselves with widely strewn backpacks and computers and cell phones. I had arrived! * * * * You know, regular old suit and tie conferences could learn a thing or two from Jeff Moss, the man behind DefCon II. No fancy badge making equipment; no $75 per hour union labor built regis tration desks; no big signs proclaiming the wealth of knowledge to be gained by signing up early. Just a couple of kids with a sheet of paper and a laptop. It turned out I was expected. They handed me my badge and what a badge it was. I'm color blind, but this badge put any psychedel ically induced spectral display to shame. In fact it was a close match to the Sahara's mid 60's tasteless casino carpeting which is so chosen as to hide the most disgusting regurgative blessing. But better and classier. The neat thing was, you could (in fact had to) fill out your own badge once your name was crossed off the piece of paper that represented the attendee list. Name: Subject of Interest: E-Mail: Fill it out any way you want. Real name, fake name, alias, handle - it really doesn't matter cause the hacker underground ethic encourages anonymity. "We'd rather not know who you are anyway, unless you're a Fed. Are you a Fed?" A couple of lucky hackers wore the ultimate badge of honor. An "I Spotted A Fed" T-shirt. This elite group sat or lay on the ground watching and scouring the registration area for signs that someone, anyone, was a Fed. They really didn't care or not if you were a Fed - they wanted the free T-shirt and the peer re spect that it brought. I'm over 30 (OK, over 35) and more than a few times (OK, a little over 40) I had to vehemently deny being a Fed. Finally Jeff Moss came to the rescue. "He's not a Fed. He's a security guy and a writer." "Ugh! That's worse. Can I get a T-shirt cause he's a writer?" No way hacker-breath. Jeff. Jeff Moss. Not what I expected. I went to school with a thousand Jeff Mosses. While I had hair down to my waist, wearing paisley leather fringe jackets and striped bell bottoms so wide I appeared to be standing on two inverted ice cream cones, the Jeff Mosses of the world kept their parents proud. Short, short cropped hair, acceented by an ashen pall and clothes I stlll wouldn't wear today. They could get away with anything cause they didn't look the part of radical chic. Jeff, I really like Jeff: he doesn't look like what he represents. Bruce Edelstein, (now of HP fame) used to work for me. He was hipper than hip but looked squarer than square. Now today that doesn't mean as much as it used to, but we ex-30-somethings have a hard time forget ting what rebellion was about. (I was suspended 17 times in the first semester of 10th grade for wearing jeans.) Jeff would fit into a Corporate Board Meeting if he wore the right suit and uttered the right eloquencies: Yes, that's it: A young Tom Hanks. Right. I used to hate Tom Hanks (Splash, how fucking stupid except for the TV-picture tube splitting squeals) but I've come to respect the hell out of him as an actor. Jeff never had to pass through that first phase. I instantly liked him and certainly respect his ability to pull off a full fledged conference for only $5000. You read right. Five grand and off to Vegas with 300 of your closest personal friends, Feds in tow, for a weekend of electron ic debauchery. "A few hundred for the brochure, a few hundred hear, a ton in phone bills, yeah, about $5000 if no one does any damage." Big time security shows cost $200,000 and up. I can honestly say without meaning anything pejorative at any of my friends and busienss acquaintances, that I do not learn 40 times as much at the 'real' shows. Something is definitely out of whack here. Suits want to see suits. Suits want to see fancy. Suits want to see form, substance be damned. Suits should take a lesson from my friend Jeff. * * * * * I again suffered through a tasteless Saharan buffer dinner which cost me a whopping $7.95. I hate grits - buttered sand is what I call them - but in this case might well have been preferable. Somehow I coerced a few hackers to join me in the ritualistic slaughter of our taste buds and torture of our intestines. They were not pleased with my choice of dining, but then who gives a shit? I couldn't taste anything anyway. Tough. To keep our minds off of the food we talked about something much more pleasant: the recent round of attacks on Pentagon computers and networks. "Are the same people involved as in the sniffing attacks earlier this year?" I asked my triad of dinner mates. "Indubitably." "And what's the reaction from the underground - other hackers?" Coughs, sniffs. Derisive visual feedback. Sneers. The finger. "We can't stand 'em. They're making it bad for everybody." Two fingers. By and large the DefCon II hackers are what I call 'good hackers' who hack, and maybe crack some systems upon occasion, but aren't what I refer to as Information Warriors in the bad sense of the word. This group claimed to extol the same position as most of the underground would: the Pentagon sniffing crackers - or whoever who is assaulting thousands of computers on the net - must be stopped. "Scum bags, that what they are." I asked that they not sugarcoat their feelings on my behalf. I can take it. "These fuckers are beyond belief; they're mean and don't give a shit how much damage they do." We played with our food only to indulge in the single most palatable edible on display: ice cream with gobs of choco late syrup with a side of coffee. . The big question was, what to do? The authorities are certainly looking for a legal response; perhaps another Mitnick or Phiber Optik. Much of the underground cheered when Mark Abene and others from the reknowned Masters of Destruction went to spend a vacation at the expense of the Feds. The MoD was up to no good and despite Abene's cries that there was no such thing as the MoD, he lost and was put away. However many hackers believe as I do, that sending Phiber to jail for hacking was the wrong punish ment. Jail time won't solve anything nor cure a hacker from his first love. One might as well try to cure a hungry man from eating: No, Mark did wrong, but sending him to jail was wrong, too. The Feds and local computer cops and the courts have to come up with punishments appropriate to the crime. Cyber-crimes (or cyber-errors) should not be rewarded by a trip to an all male hotel where the favorite toy is a phallically carved bar of soap. On the other hand, hackers in general are so incensed over the recent swell of headline grabbing break-ins, and law enforcement has thus far appeared to be impotent, ("These guys are good.") that many are searching for alternative means of retribution. "An IRA style knee capping is in order," said one. "That's not good enough, not enough pain," chimed in another. (Sip, sip. I can almost taste the coffee.) "Are you guys serious?" I asked. Violence? You? I thought I knew them better than that. I know a lot of hackers, none that I know of is violent, and this extreme Pensacola retribution attitude seemed tottally out of character. "You really wouldn't do that, would you?" My dinner companions were so upset and they claimed to echo the sentiment of all good-hackers in good stand ing, that yes, this was a viable consideration. "The Feds aren't doing it, so what choice do we have? I've heard talk about taking up a collection to pay for a hit man . . ." Laughter around, but nervous laughter. "You wouldn't. . ." I insisted. "Well, probably not us, but that doesn't mean someone else doesn't won't do it." "So you know who's behind this whole thing." "Fucking-A we do," said yet another hacker chomping at the bit. He was obviously envisioning himself with a baseball bat in his hand. "So do the Feds." So now I find myself in the dilemma of publishing the open secret of who's behind the Internet sniffing and Pentagon break ins, but after talking to people from both the underground and law en forcement, I think I'll hold off awhile It serves no immediate purpose other than to warn off the offenders, and none of us want that. Obviously all is not well in hacker-dom. * * * * * The registration area was beyond full; computers, backpacks everywhere, hundreds of what I have to refer to as kids and a fair number of above ground security people. Padgett Peterson of Martin Marietta was going to talk about viruses, Sara Gordon on privacy, Mark Aldrich is a security guy from DC., and a bunch of other folks I see on the seemingly endless security trade show circuit. Jeff Moss had marketed himself and the show excellently. Los Angeles sent a TV crew, John Markoff from the New York Times popped in as did a writer from Business Week. (And of course, yours truly.) Of the 360 registrees ("Plus whoever snuck in," added Jeff) I guess about 20% were so-called legitimate security people. That's not to belittle the mid-20's folks who came not because they were hackers, but because they like computers. Period. They hack for themselves and not on other systems, but DefCon II offered some thing for everyone. I remember 25 years ago how my parents hated the way I dressed for school or concerts or just to hang out: God forbid! We wore those damned jeans and T-shirts and sneakers or boots! "Why can't you dress like a human being," my mother admonished me day after day, year after year. So I had to check myself because I can't relate to Seattle grunge-ware. I'm just too damned old to wear shirts that fit like kilts or sequin crusted S&M leather straps. Other than the visual cacophony of dress, every single hacker/phreak that I met exceeded my expectations in the area of deportment. These are not wild kids on a rampage. The stories of drug-in duced frenzies and peeing in the hallways and tossing entire rooms of furniture out of the window that emanated from the HoHoCons seemed a million miles away. This was admittedly an opportunity to party, but not to excess. There was work to be done, lessons to be learned and new friends to make. So getting snot nosed drunk or ripped to the tits or Ecstatically high was just not part of the equation. Not here. Now Vegas offers something quite distinct from other cities which host security or other conventions. At a Hyatt or a Hilton or any other fancy-ass over priced hotel, beers run $4 or $5 a crack plus you're expected to tip the black tied minimum wage worker for popping the top. The Sahara (for all of the other indignities we had to suffer) somewhat redeemed itself by offer ing an infinite supply of $1 Heinekens. Despite hundreds of beer bottle spread around the huge conference area (the hotel was definitely stingy in the garbage pail business) public drunken ness was totally absent. Party yes. Out of control? No way. Kudos! Surprisingly, a fair number of women (girls) attended. A handful were there 'for the ride' but others . . . whoa! they know their shit. I hope that's not sexist; merely an observation. I run across so few technically fluent ladies it's just a gut reaction. I wish there were more. In a former life, I owned a TV/Record produc tion company called Nashville North. We specialized in country rock taking advantage of the Urban Cowboy fad in the late 1970's. Our crew of producers and engineers consisted of the "Nashville Angels." And boy what a ruckus they would cause when we recorded Charlie Daniels or Hank Williams: they were stunning. Susan produced and was a double for Jacqueline Smith; we called Sally "Sabrina" because of her boyish appearance and resemblance to Kate Jackson. A super engineer. And there was Rubia Bomba, the Blond Bombshell, Sherra, who I eventually married: she knew country music inside and out - after all she came from Nashville in the first place. When we would be scheduled to record an act for live radio, some huge famous country act like Asleep at The Wheel of Merle Haggard or Johnny Paycheck or Vassar Clements, she would wince in disbe lief when we cried, "who's that?" Needless to say, she knew the songs, the cues and the words. They all sounded alike. Country Music? Ecch. (So I learned.) At any rate, ladies, we're equal opportunity offenders. C'mon down and let's get technical. As the throngs pressed to register, I saw an old friend, Erik Bloodaxe. I've known him for several years now and he's even come over to baby sit the kids when he's in town. (Good prac tice.) Erik is about as famous as they come in the world of hackers. Above ground the authorities investigated him for his alleged participation in cyber crimes: after all, he was one of the founders of the Legion of Doom, and so, by default, he must have done something wrong. Never prosecuted, Erik Bloodaxe lives in infamy amongst his peers. To belay any naysayers, Erik ap peared on every single T-shirt there. "I Only Hack For Money," Erik Bloodaxe proclaimed dozens of shirts wandering through the surveillance laden casinos. His is a name that will live in infamy. So I yelled out, "Hey Chris!" He gave his net-name to the desk/table registrar. "Erik Bloodaxe." "Erik Bloodaxe?" piped up an excited high pitched male voice. "Where?" People pointed at Chris who was about to be embarrass ingly amused by sweet little tubby Novocain who practically bowed at Chris's feet in reverence. "You're Erik Bloodaxe?" Novocain said with nervous awe - eyes gleaming up at Chris's ruddy skin and blond pony-tail. "Yeah," Chris said in the most off handed way possible. For people who don't know him this might be interpreted as arrogance (and yes there is that) but he also has trouble publicly accept ing the fame and respect that his endearing next-generation teenage fans pour on him. "Wow!" Novocain said with elegance and panache. "You're Erik Bloodaxe." We'd just been through that said Chris's eyes. "Yeah." "Wow, well, um, I . . . ah . . . you're . . . I mean, wow, you're the best." What does Sylvia Jane Miller from Rumpsteer, Iowa say to a movie star? This about covered it. The Midwest meets Madonna. "Wow!" Only here it's Novocain meets Cyber Christ himself. Like any other security show or conference or convention there is a kickoff, generally with a speech. And DefCon II was no excep tion. Except. Most conventional conventions (ConCons) start at 7:30 or 8:00 AM because, well, I don't know exactly why, except that's when so- called suits are expected to show up in their cubicles. Def Con, on the other hand, was scheduled to start at 10PM on Friday night when most hakcers show up for work. Most everyone had arrived and we were anxiously awaiting the opening ceremonies. But, here is where Jeff's lack of experience came in. The kick- off speaker was supposed to be Mark Ludwig of virus writing fame and controversy. But, he wasn't there! He had jet lag. "From Phoenix?" I exclaimed in mock horror to which nearby hack ers saw the absurdity of a 45 minute flight jet lag. Mark has a small frame and looks, well, downright weak, so I figured maybe flying and his constitution just didn't get along and he was massaging his swollen adenoids in his room. "Oh, no! He's just come in from Australia . . ." Well that explains it, alright! Sorry for the aspersions, Mark. But Jeff didn't have a back up plan. He was screwed. Almost four hundred people in the audience and nothing to tell them. So, and I can't quite believe it, one human being who had obviously never stood in front of a live audience before got up in an impromptu attempt at stand up comedy. The audience was ready for almost anything entertaining but this guy wasn't. Admittedly it was a tough spot, but . . . "How do you turn a 486 into an 8088?" "Add Windows." Groan. Groan. "What's this?" Picture the middle three fingers of your right hand wiggling madly. "An encrypted this!" Now hold out just the middle finger. Groan. Groan. "What's this?" Spread your legs slightly apart, extend both hands to the front and move them around quickly in small circles. "Group Air Mouse." Groan. The evening groaned on with no Mark nor any able sharp witted comedian in sight. Phil Zimmerman wrote PGP and is a God, if not Cyber-Christ him self to much of the global electronic world. Preferring to call himself a folk hero (even the Wall Street Journal used that term) Phil's diminutive height combined with a few too many pounds and a sweet as sweet can be smile earn him the title of Pillsbury Dough Boy look alike. Phil is simply too nice a guy to be em broiled in a Federal investigation to determine if he broke the law by having PGP put on a net site. You see, the Feds still think they can control Cyberspace, and thereby maintain antique export laws: "Thou shalt not export crypto without our approval" sayeth the NSA using the Department of Commerce as a whipping boy mouth piece. So now Phil faces 41-51 months of mandatory jail time if prosecuted and convicted of these absurd laws. Flying in from Colorado, his appearance was anxiously awaited. "He's really coming?" " I wonder what he's like?" (Like every one else, fool, just different.) When he did arrive, his shit- eating grin which really isn't a shit-eating grin, it's just Phil's own patented grin, preceeded him down the hallway. "Here he is!" "It's Phil Zimmerman." Get down and bow. "Hey, Phil the PGP dude is here." He was instantly surrounded by those who recognize him and by those who don't but want to feel like part of the in-crowd. Chat chat, shit-eating grin, good war stories and G-rated pleas antries. Phil was doing what he does best: building up the folk hero image of himself. His engaging personality (even though he can't snorkel to save his ass) mesmerized the young-uns of the group. "You're Phil?" "Yeah." No arrogance, just a warm country shit-eating grin that's not really shit-eating. Just Phil being Phil. He plays the part perfectly. Despite the attention, the fame, the glory (money? nah . . .) the notoriety and the displeased eyes of onlooking Computer Cops who really do believe he belongs in jail for 4 years, Phil had a problem tonight. A real problem. "I don't have a room!" he quietly told Jeff at the desk. "They say I'm not registered." No panic. Just a shit-eating grin that's not a shit-eating grin and hand the problem over to the experts: in this case Jeff Moss. Back to his endearing fans. Phil is so damned kind I actually saw him giving Cryptography 101 lessons on the corner of a T-shirt encrusted table. "This is plaintext and this is crypto. A key is like a key to your hotel room . . . " If only Phil had a hotel room. Someone had screwed up. Damn computers. So the search was on. What had happened to Phil's room? Jeff is scrambling and trying to get the hotel to rectify the situation. Everyone was abuzz. Phil, the crypto-God himself was left out in the cold. What would he do? When suddenly, out of the din in the halls, we heard one voice above all the rest: "Phil can sleep with me!" Silence. Dead stone cold silence. Haunting silence like right after an earthquake and even the grubs and millipedes are so shaken they have nothing to say. Silence. The poor kid who had somehow instructed his brain to utter the words and permitted them to rise through his esophagus and out over his lips stood the object of awe, incredulity and mental question marks. He must have thought to himself, "what's every one staring at? What's going on? Let me in on it." For the longest 10 seconds in the history of civilization he had abso lutely no clue that he was the target of attention. A handful of people even took two or three steps back, just in case. Just in case of what was never openly discussed, but nonetheless, just in case. And then the brain kicked in and a weak sheepish smile of guilt overcame this cute acne-free baby-butt smooth-faced hacker who had certainly never had a shave, and was barely old enough to steer his own pram. "Ohhhhhh . . . . noooooo," he said barely louder than a whisper. "That' not what I mean!" I nearly peed laughing so hard in unison with a score of hackers who agreed that these misspoken words put this guy in the unenvi able position of being the recipient of a weekend of eternal politically incorrect ridicule. "Yeah, right. We know what you mean . . " "No really . . ." he pleaded as the verbal assaults on his al leged sexual preferences were slung one after the other. This poor kid never read Shakespeare: "He who doth protest too much . . ." If we couldn't have a great kickoff speech, or comedian, this would have to do. The majority of the evening was spent making acquaintances: "Hi, I'm Jim. Oops, I mean 'Septic Tank," was greeted with "Oh, you're Septic. I'm Sour Milk." (Vive la difference!) People who know each other electronically are as surprised to meet their counterparts as are first daters who are in love with the voice at the other end of the phone. "Giving good phone" implies one thing while "Having a great keystroke" just might mean another. The din of the crowd was generally penetrated by the sounds of a quasi-pornographic Japanese high tech toon of questionable so cially redeeming value which a majority of the crowd appeared to both enjoy and understand. I am guilty of neither by reason of antiquity. And so it goes. * * * * * Phil Zimmerman must have gotten a room and some sleep because at 10AM (or closely thereafter) he gave a rousing (some might say incendiary) speech strongly attacking the government's nearly indefensible position on export control I was really impressed. Knowing Phil for some time, this was the first time I ever heard him speak and he did quite an admirable job. He ad libs, talks about what he want to talk about and does so in a compelling and emotional way. His ass is on the line and he should be emotional about it. The audience, indeed much of counter culture Cyberspace loves Phil and just about anything he has to say. His affable 40-something attorney from Colorado, Phil DuBois was there to both enjoy the festivities and, I'm sure, to keep tabs on Phil's vocalizations. Phil is almost too honest and open for his own good. Rounds and rounds of sincere appreciation. Hey kids, now it's time for another round of Spot The Fed. Here's your chance to win one of these wonderful "I Spotted A Fed" T-shirts. And all you have to do is ID a fed and it's yours. Look around you? Is he a Fed? Is she under cover or under the covers? Heh, heh. Spot the Fed and win a prize. This one-size- fits-all XXX Large T-shirt is yours if you Spot the Fed. I had to keep silent. That would have been cheating. I hang out on both sides and have a reputation to maintain. "Hey, I see one" screeched a female voice (or parhaps it was Phil's young admirer) from the left side of the 400+ seat ball room. Chaos! Where? Where? Where's the fed? Like when Jose Consenko hits one towards the center field fence and 70,000 screaming fans stand on their seats to get a better view of a three inch ball 1/4 mile away flying at 150 miles per hour, this crowd stood like Lemmings in view of Valhalla the Cliff to espy the Fed. Where's the Fed? Jeff jumped off the stage in anxious anticipation that yet anoth er anti-freedom-repressive law enforcement person had blown his cover. Where's the Fed? Jeff is searching for the accuser and the accused. Where's the Fed? Craned necks as far as the eye can see; no better than rubber neckers on Highway 95 looking for steams of blood and misplaced body parts they half expected a Fed to be as distinctly obvious as Quasimoto skulking under the Gorgoyled parapits of Notre Dame. No such luck. They look like you and me. (Not me.) Where's the Fed? He's getting closer, closer to the Fed. Is it a Fed? Are you a Fed? C'mon, fess up. You're a a fed. Nailed. Busted. Psyche! Here's your T-shirt. More fun than Monty Hall bringing out aliens from behind Door #3 on the X-Files. Good clean fun. But they didn't get 'em all. A couple of them were real good. Must have been dressed like an Hawaiian surf bum or banshee from Hellfire, Oregon. Kudos to those Feds I know never got spotted. Next year, guys. There's always next year. Phil's notoriety and the presence of the Phoenix, Arizona prosecu tor who was largely responsible for the dubiously effective or righteous Operation Sun Devil, Gail Thackeray ("I change job every 4 years or so - right after an election") brought out the media. The LA TV station thought they might have the makings of a story and sent a film crew for the event. "They're Feds. The ones with the cameras are Feds. I know it. Go ask 'em." No need. Not. "Put away that camera." At hacking events it's proper etiquette to ask if people are camera shy before shooting. The guy that I was sitting next to buried his face in his hands to avoid being captured on video tape. "What are you; a Fed or a felon?" I had to ask. "What's the difference," his said. "They're the same thing." So which was it, I wondered. For the truly paranoid by the truly paranoid. "Get that thing outta here," he motioned to the film crew who willingly obliged by turning off the lights. "They're really Feds," he whispered to me loud enough for the row in front and behind us to hear. I moved on. Can't take chances with personal safety when I have kids to feed. Fed or felon, he scared me. Gail Thackeray was the next act on stage. She was less in agree ment about Phil Zimmerman than probably anyone (except the unde tected Feds) in the audience. She, as expected, endorsed much of the law enforcement programs that revolve around various key management (escrow) schemes. Phil recalls a letter from Burma that describe how the freedom fighters use PGP to defend them selves against repression. He cites the letter from Latvia that says electronic freedom as offered by PGP is one of the only hopes for the future of a free Russia. Gail empathizes but sees trouble closer to home. Terrorism a la World Trade Center, or rocket launchers at O'Hare Airport, or little girl snuff films in Richmond, Virginia, or the attempt to poison the water supply outside of Boston. These are the real threats to America in the post Cold War era. "What about our personal privacy!" cries a voice. "We don't want the government listening in. It's Big Brother 10 years behind schedule." Gail is amused. She knew it would be a tough audience and has been through it before. She is not shaken in the least. "I've read your mail," she responds. "Its not all that interest ing." The audience appreciates a good repartee. "You gotta pay me to do this, and frankly most of it is pretty boring." She successful made her point and kept the audience laughing all the way. She then proceeded to tell that as she sees it, "The expectation of privacy isn't real." I really don't like hearing this for I believe in the need for an Electronic Bill of Rights. I simply think she's wrong. "History is clear," she said "the ability to listen in used to be limited to the very few. The telegraph was essentially a party line and still today in some rural areas communications aren't private. Why should we change it now?" "Gail, you're so full of shit!" A loud voice bellowed from next to me again. Boy can I pick seats. "You know perfectly well that cops abuse the laws and this will just make their jobs easier. Once people find a way to escape tyranny you all want to bring it right back again. This is revolution and you're scared of los ing. This kind of puke scum you're vomiting disgusts me. I just can't take it any more. " Yeah, right on. Scattered applause. While this 'gent' may have stated what was on many minds, his manner was most unbefitting a conference and indeed, even DefCon II. This was too rude even for a hacker get-together. The man with the overbearing comments sat down apologizing. "She just gets me going, she really does. Really pisses me off when she goes on like about how clean the Feds are. She knows better than to run diarrhea of the mouth like that." "You know," she continued. "Right across the street is a Spy Shop. One of those retail stores where you can buy bugs and taps and eavesdropping equipment?" The audience silently nodded. "We as law enforcement are prohibited by law from shopping there and buying those same things anyone else can. We're losing on that front." Cheers. Screw the Feds.