@IanAMartin@thecanadian.social @FritzAdalis@infosec.exchange @catsalad@infosec.exchange @cR0w@infosec.exchange I was reminded of this as I was an unofficial observer of an NCCDC competition in San Antonio - and not being a member of judging or competitive team, I was free to wander to observe both the competitors and the red team as the competition progressed.
I was also free to drink heavily during the duration of the competition - but I digress, as is my wont.
The folks running the competition had put together some fairly realistic legacy ecosystems that the teams were to defend - even throwing in a mission critical Solaris system that was running an OS that had its last patch issued long before any of the competitors were born - just for good measure (and as a realistic example of what one might expect to inherit when joining the workforce)
But this is a story about the simulated IoT network (which was some make-believe gas pumps) that were simulated on about a dozen raspberry pis in the display room. And, for some reason - whoever sourced the pis had procured sound hardware and speakers for each of them, presumably because they were sociopathic. Or psychopathic. Or possibly both.
It did not take long for the red team to find the "gas-pumps" and thoroughly grundle them like Coach on a Trash Can
I was in the room with the pis when it first happened.
There was no warning.
The first one popped - and the sound of the nyan cat theme started playing from it's tinny speakers like it was being broadcast from the Lego™ dimension.
And then the next started - a little off sync from the first, and then the next and the next and the next until the only thing that you could hear was the cacophony of 6the nyan cat theme just barely out of phase - providing what I would have to imagine what the waiting room in the DMV in Hell would sound like.
