The badge for THCon2026, a DVID board, had 2 firmware : the conference firmware, which was reversed by @virtualabs here: https://virtualabs.fr/geekeries/thcon26-badge-writeup
and a challenge firmeware here: https://github.com/dvid-security/dvidv2-opensource/tree/main/workshop/thcon2026
That I solved here: https://cryptax.github.io/2026-06-thconbadge/ (writeup/spoiler).
Pour ceux qui aiment la musique classique et qui sont proches de Lausanne, je recommande !
Last Friday, I was at Auvergn'hack, a small single-tracked conference in the middle of France.
A very friendly atmosphere, beautiful weather, great venue, and several very interesting talks.
Learning about Landlock with a sandboxed opencode in nono. Nono is a sandbox, uses Landlock, and for example we can restrict directories opencode can go into.
Mounted my first Luksbox, protected by a Yubikey. Works very well.
Compared to Gocryptfs: you have support for FIDO2 keys.
Compared to veracrypt and truecrypt, the big advantage is you don't have to reserve x Gb for the encrypted partition.
#luks #encrypted #partition #volume #fido #crypt #file #linux
cc: @Penthertz
FYI, I updated my blog post on CTFs and AI, because I wasn't entirely satisfied with what was in it + people press me for my opinion... so I added it.
https://cryptax.github.io/posts/ctf-ai/
Want it brielfly?
Very happy to have won THCon CTF 2026 :)
All 5 of us were playing locally. The CTF had a few challenges only accessible locally, while others also accessible remotely.
We finished 1st on the local scoreboard, and also 1st on the "remote" scoreboard at the time of the end of the (local) CTF, but the remote CTF is still running, so that will change.
A talk is short (especially that we had to merge in our ideas, with @virtualabs !) and there are a couple of thoughts and feedback form results of @ph0wn that I never got the chance to present. So, I made a blog post about it, it's interesting to you if "CTF and AI" is a problem to you and you want to think about it.
https://cryptax.github.io/posts/ctf-ai/
cc: @cpu
CTFs and Artificial Intelligence. Post Ph0wn 2026 Thoughts. Myth #1: “CTF players hate AI because it spoils CTFs” Reality: this is not the opinion of the majority of CTF players “AI has destroyed CTFs” - this kind of message is frequent on the net. However, in a feedback form of Ph0wn CTF 2026, 80% hold no grudge against AI and are either happy with it, or just want to adapt:
Today, @virtualabs and I presented at THCon about the vast problem of AI and CTFs. It led to interesting discussions, and we were very happy with everybody's concern and enthusiasm.
https://thcon.party/events/#chain-of-thought
https://tagazok.virtualabs.fr/thcon/
Our session has been live streamed, our slides have been uploaded if you want them + we've been interviewed by a local radio, @cpu
