Conference Advice

This is an update to my DEF CON travel advice from 2017. I have made some major changes and separated DEF CON and InfoSec specific advice from general conference advice.

Also check out:

If you want advice from someone who is a more seasoned traveler about traveling as an introvert then check out Lesley Carhart's blog post "The Infosec Introvert Travel Blog."

General Travel Advice

Packing

  • Never check bags if you can avoid it. This prevents loss, theft, or mishandling. If you check bags then keep all your valuables in your carry-on.
  • Pack light; leave room for treasure. If you plan on collecting lots of treasure then pack an ultralight duffel in your carry-on. They pack small and you can check it on the trip home.
  • Your personal item should be a cross-body bag or backpack. The 'personal item' is the one that goes under the seat in front of you on a plane. Keep your valuables and electronics there.
  • Your carry-on item should be a frameless soft-bodied item. Pack your clothes and toiletries in this bag. Since you will be the only one handling it, you do not have to worry about it getting roughed up.
  • Smaller airlines have tighter carry-on requirements and hard-shell and rolling luggage can be refused. You can squish soft-bodied luggage to fit.
  • Check out other people's conference packing lists. They will give you an idea of what you should bring with you.
    • It is a good idea to pack a battery pack. I believe the largest the TSA allows is a ~20,000mAh pack. Between long distances between outlets and fake/additional cell towers in the area, your phone battery will drain faster than you expect.

Laundry

You can get away with packing less if you know how to do laundry in the sink of your hotel room. You just need a large enough sink and your shampoo. Someone I met at DEF CON was nice enough to teach me how, and I am passing that on to you.

  1. Half-fill sink with water. Put a couple drops of shampoo in the water.
  2. Swish clothes in soapy sink-water.
  3. Rinse clothes.
  4. Repeat steps 2 and 3.
  5. Wring clothes out as best you can.
  6. Roll up the clothes in a hotel towel then stomp the towel. This will soak up additional moisture.
  7. Hang to dry.

Cotton is comfortable because it is soft and wicks moisture, but it holds moisture and becomes odorous. Cotton clothes also take forever to dry even in well-ventilated areas. Synthetic fibers don't absorb moisture as well but dry quickly and are less prone to stinking. If you intend on doing your laundry in your sink then pack a clothesline made of medical rubber that ends with hooks or carabiners. Braided rubber grips clothes without pins, and suction cups will fail you. Once you get the routine down doing your laundry takes a couple of minutes, meaning you can pack lighter.

Often overlooked fact: Odor is caused by bacteria, which thrives in moist environments. Even if you shower and scrub every day, if people are complaining about B.O. it is your clothes. Doing your laundry is important.

Air Travel

  • Print your boarding passes. Unless you travel with a battery pack and can ensure your phone is always available do not rely solely on electronic boarding passes.
  • In my experience, airport security has shifted focus towards getting people through as quickly as possible. Shoes on, belt on. Sometimes stuff goes through x-ray sans bin. This is not always the case.
  • RFID-blocking wallets will set off the metal detector. Even if the agents say it won't. Put it in the bin.
  • Customs is all electronic now. Stop at a terminal, follow the prompts, give your receipt to the person at the exit. Quick, quick.
  • If you drink lots of water like I do you will have to dump your water into a garbage bin at every security checkpoint. This goes for all beverages. Dump it out before you're at the front of the line.
  • If you're traveling from Canada you will likely go through TSA pre-clearance which is just US customs/border but before you take off rather than land. No special rules/precautions.

DEF CON / InfoSec Specific

  • If asked about your lockpicks: refer to lockpicking as lock-sport and always have practice locks in the same bag as the lockpicks. If you bring intrusion tools pack them in checked baggage if possible.

Conferences

Planning

  • Book everything as far ahead in advance as possible. Hotels charge for the first night when you make your reservation but everything else gets charged when you check-in. Booking ahead is always cheaper.
  • Do not do mobile check-in if any member of your party is under the age of 21. It will cause headaches. Just check-in at the desk.
  • Your trip is going to be more expensive than you expect. Bring a bunch of cash but don't be seen with it, only keep enough in your wallet.

DEF CON / InfoSec Specific

  • Never, ever, do BlackHatUSA on your own dime. This advice comes from someone who can't afford it.
  • If you have mobility or anxiety issues, book at Ceasers for DEF CON, and if you can manage it try to get in on the floors that have a direct elevator to the conference areas. This will make your life substantially easier.
    • If you have mobility issues this lets you skip the casino floor and the mess everyone else goes through to get to the conference area. Also take some time on Thursday to find the elevators in the conference area so you don't have to find the signs while the halls are crowded with people.
    • If you have anxiety issues, booking at the Ceasers in any tower gives you a quick and free way to get away from the conference area to your own quiet space so you can recharge.
  • Most people's first year at DEF CON is spent learning how DEF CON works and where to spend their time. Don't get discouraged because you feel you didn't do enough your first year.
  • The villages at DEF CON are closed on Thursday for set-up and close early on Sunday to pack up. As such the crowds are thin on these days and the lines are shorter. Take Thursday to wander around with a DEF CON map in hand and find where things will be so you don't have to do it with the crowds.

Execution

Interacting with People

  • Ask for consent before taking people's picture or touching them for any reason. It makes a huge difference, even if you know the person really well.
    • Making eye contact and doing the open-arms-hug? gesture and asking, "Hug?" is easy to execute and isn't awkward. Respect their decision if they say no.
  • Bring business cards with basic contact information: name/alias, social media, business email. Asking for someone else's contact information can make them uncomfortable. By offering your contact information instead you give them control of the next interaction.
  • If you are better known by your online handle than your real name include your handle in your introduction. "Hi, I'm Amanda, also @AwfulyPrideful on Twitter."

General Conference Advice

  • Most important tip of all: Don't push yourself. If you get anxious and can't be on the conference floor for long periods, just duck out and recharge. Under no circumstance should you force yourself to stay at the conference all day. You will exhaust yourself and ruin the experience if you do.
  • Stay hydrated, bring snacks. You will have a better experience this way, I promise you. My personal choices are tap water (yuck, but free) and CLIF bars (trail food, keeps energy up sans meal).
    • Staying hydrated means drink small amounts of water every 15-20 minutes. Drinking lots of water all at once will not hydrate you since your body will only absorb a bit of it at once.
  • Con Flu is real. Wash your hands often, or carry around hand sanitizer and use it often. The alternative is to not touch anything, but that won't save you.
    • Good strategy is that if you are about to touch your face, eyes, or nose, stop and use hand sanitizer or wash your hands with soap and water.
  • Wear good walking shoes. You will be on your feet most of the time, either walking around or standing in lines. Get good insoles / inserts for your shoes. Your feet will thank you for it.
  • Carry lots of cash for tips. Tipping your service people is really important, and people attending conferences are known not to tip well. Also thank them and be patient because it's really busy and hard for them too.
    • If you like to drink, drop a twenty as a tip for your first drink. That bartender will be your friend all night and you will get served when you go to them.
  • Easy advice for working out how much to tip:
  • If you are at a bar or party, always order your own drink and keep your eyes on it. Stick with friends. Look after each other.

DEF CON / InfoSec Specific

  • Never leave a good conversation to see a talk. That is, unless your employer sent you and you need to report on some talks to justify the expenses. Face-to-face networking is a huge deal, so don't pass up those opportunities.
  • Hotels partnered with DEF CON stream the talks to hotel TVs. Some people host small viewing parties for talks. If you are invited to one by people you know, you should go. It is good for networking and you can ask people about content you don't understand.
  • Taking pictures of the crowd is against DEF CON's privacy policy. People are there to make memories, not evidence. Don't be the asshole with the GoPro strapped to your stupid forehead.
  • Don't interrogate people. If they're dodging where they work or what they do, leave them be. Remember where you are, and remember that they don't know you.
  • If you're gossiping or telling stories, don't name drop unnecessarily. People just don't appreciate it. You also seem more mysterious if you have secrets or "know someone."
  • LINECON is real. Start lining up at least half an hour before a talk is scheduled to start. People in line in front and behind you are there for the same reason you are and you don't have to lose networking time. This is one of the easiest ways to meet new people since you already have something to talk about.
  • HALLCON is where it's at. Go to a chill area and ask if a seat's open at a table or unofficial-circle-of-people-on-the-floor. Listen to people's conversations and ask some questions. Don't intrude/eavesdrop on clearly personal conversations. You can enter a lot of conversations just by proximity.
  • If you plan on getting swag from the Swag Shop at DEF CON, do it on the first day. In 2017, when I attended, the line on the first day snaked through the hallway, and through the entirety of a large conference room. Swag sells out fast, so get in line right after you get your badge.
    • A good way to make friends is to get in line, and then tell your friends that you'll pick up their swag for them. Have them meet you in line (or before you get in line) and give you cash and a list of stuff they want.

Support the Author

Devon Taylor (They/Them) is a Canadian network architect, security consultant, and blogger. They have experience developing secure network and active directory implementations in low-budget and low-personnel environments. Their blog offers a unique and detailed perspective on security and game design, and they tweet about technology, security, games, and social issues. You can support their work via Patreon (USD), or directly via ko-fi.