In order to participate you must check in with the contest staff in the main conference registration area 30 minutes before the start of the contest

The "Running Man" is a person on foot, walking in, around and near the grounds of the hotel, enjoying all the Interz0ne atmosphere. Now all you have to do is figure out who she/he/it is...

The Running Man is carrying some WiFi equipment that is transmitting an SSID: RunningMan, and is running a Web server. The IP address is 10.10.10.10.

The equipment is mobile, but may not be apparent. It could be a laptop, it could be a PDA, or it could be some weird WiFi device concealed on the Running Man's person.

Players should set their own WiFi devices to the same SSID, and attempt to open the Running Man's Web page. You know you've got the right one, when you see the web page graphic of the "Running Man" movie poster, with the scowling visage of Gov. Arnold Schwarzenegger. Players may check that this is the actual Running Man by verifying signatures on the files. All of the mini games should be carrying a file/files PGP signed by Roamer.

The device is transmitting on very low power, and may take some radio directional equipment to locate.

The web server will have additional clues to the identity of the person.

Using those radio directional finding and puzzle solving skills, try to locate the Running Man. Once you think you have the Running Man located, simply walk up to the 'suspect' and ask them "Are you the Running Man?"
If they are the actual Running Man, they will answer "Yes" and you win! They will confirm this by showing you the items hinted at in the clues.

The Running Man will alert the contest organizers that they have been located.

Note: If the person you ask is not the Running Man, expect at least a strange look in response to your challenge. If you really annoyed them, they might also punch you.

Time limit of 1 hour

1) Locate the Tag server. It is on the grounds of the hotel.

2) The Tag server the only machine on a infrastructure mode WLAN. SSID: TAGME

3) Unfortunately for the players, the AP is transmitting on low power and has directional antennae/shaped reflectors to limit the signal direction. It will take some radio directional equipment and skills to locate.

4) Using your radio directional finding skills, try to the AP.

5) You will need some skillz to access the AP and server.

6) At the start of the contest an association will take place with the AP. It will then stop and reassociate every 10 minutes for 3 hours.

7) Once having accessed the WLAN, the players must access the shared folder to place the TAG.TXT file. Players may check that this is the actual Tag server by verifying the signatures of a file located on the server. It will be carrying a file GPG signed by Chris.

8) First Person/Team to place the TAG.TXT wins.

Time limit of 3 hours.

The name and public PGP key of each team/player must be submitted before the start of the contest.

Once again, players should realize that this is DEF CON, and than means within 5 minutes of the contest's start approximately 8.6 million spoofed TAG servers will exist. The organizers cannot control this, so don't even bother to ask. Once again, it will add to the challenge.

TAG.TXT format:

Name: YourScreenNameHere
Contest: TAG
Email: YourAccount [AT] YourISP [DOT] domain (This can be a throw away account. It is just for game verification purposes ONLY.)
Password: (Not really. Just seeing if you're paying attention.)

Just like when you were a kid, the goal of "King of the Hill" is to get on top and stay on top.

A server will be behind a WPA Access Point. To win the contest, you will have to compromise the AP, then the server, then keep control of both while the other contestants try to kick you out and take control. The winner will be the person with the longest time controlling the server.

The general idea is to incorporate attack and defend methods. The WPA AP will have an initial passphrase of 13 characters. Once the server is compromised and your pgp signed key is uploaded to the server, you must protect your assets (AP and server) from the other contestants. Each time the AP and server are compromised, you must place a text document in the root directory of the server with the passphrase of the AP. We will have an account on the server that must not be deleted. If we cannot check the status of the AP and the server, you will not get credit for the time. How you protect your assets is up to you as long as you follow two simple rules: The passphrase for the AP must not be more than 13 characters and the server must stay on-line.