SHA2017 Wiki - User contributions [en]

User:Sling

2017-07-19T13:39:47Z

Sling:

{{User
|Name=Sling
|Bringing=A bag of meat and bones controlled by a neural network and powered by ingestion of deceased animals. Pretty cool huh.
|Village=Village:Heaven
|Arrival=2017/07/28 12:00
|Departure=2017/08/11
|EMail=sha2017@mathijs.info
}}
Hi! This event I'm teamlead for Team:Volunteers, contact us at team-volunteers@lists.sha2017.org

DECT: 2017 (For volunteers-related things, call the volunteersdesk @ VLNT instead!)

Village:Heaven

2017-07-16T21:28:02Z

Sling:

{{Village
|Has name=Heaven
|Has website=https://volunteer.sha2017.org/
|Has contact=irc.freenode.net/#sha2017-angel
|Has description=Here will be paradise
|Provides session location=No
|Has Field=Rhodes Field
|Location=52.283708145356,5.5292111521148
|Has orga contact=ralf@sha2017.org
|On site orga contact=ralf@sha2017.org
|Village frab=No
|Village content space=No
|Village citizen count=300
|Village size needed=2000
|Village hacktents num=2
|Village brings big stuff=No
|Village Special Vehicle=No
|Village Plans=... run a kitchen for our citizens; ... bring light installations; ... build up a big tent
}}
'''About'''

No event without crew and angels. Heaven will be the village where crew
and angels live together. Heaven will be the first village and it will
be the last. From the beginning until the end.

We will provide food, there will be breakfast, lunch and dinner for
crew members and those angels who worked enough.

We will have a nice spot under a big tarp, where crew members and
angels can recover from hard work.

We will have (the only one on the whole site) campfire in the evening.

We have many things in mind which are not yet confirmed. Some
might happen, some not. We would like some hammocks and other
stuff for relaxing. We want some seats with power and cable
network.

But most we want to provide good feeling for those people who
make SHA possible.

'''Who'''

Many angels will be part of another village and visit Heaven only for eating.
But there are always a number of angels that do not belong to another
village, and those angels are welcome for staying and living in our village.

During early buildup and teardown some of the village fields will not be
available. Buildup and teardown angels from villages on those fields are also
welcome to put their tents on Rhodes field.

'''When'''

If you want to join the village before 3. August you need permission. You can
use the information named on this page to get in contact with our team for
getting permission to arrive earlier (just to make sure we can facilitate everybody
on the field in terms of food and facilities).

Tear down is not the most popular part of a big event. But it will come and
we would be really happy if there will be enough angels to help. Our full
service will be available until (including) 11. August.

User:Sling

2017-07-12T23:28:10Z

Sling:

{{User
|Name=Sling
|Bringing=A bag of meat and bones controlled by a neural network and powered by ingestion of deceased animals. Pretty cool huh.
|Village=Village:Heaven
|Arrival=2017/07/28
|Departure=2017/08/11
|EMail=sha2017@mathijs.info
}}
Hi! This event I'm teamlead for Team:Volunteers, contact us at team-volunteers@lists.sha2017.org

Phone

2017-07-12T18:56:33Z

Sling: /* Important Numbers */

= General =

There is a DECT network at SHA2017 operated by the µPOC.

To activate your GAP-compatible DECT handset for use at the SHA2017 telephony network, please register your personal extension at https://poc.sha2017.org, then just head over to the POC helpdesk at the Infodesk tent.

The POC helpdesk will help you setting up and activating your phone at the DECT network.

Once activated, you won’t only be able to call extensions within the SHA2017 telephony network, but also make free calls to The Netherlands, Germany and probably some other countries.
* '''Outgoing call to The Netherlands:''' 0 <national number incl. 0>
* '''Outgoing call to a foreign country:''' 0 00 <country code and number>

You can also be called from the outside world – you can just request a national number via the POC website*.

* while stocks last.

Not sure if your phone is supported? Here is a DECT Compatibility list: https://eventphone.de/wiki/index.php/DECT_Phone_Compatibility_List
= Important Numbers =
* 112 CERT
* 662 NOC
* 762 POC
* 911 CERT
* 999 CERT

The complete phone book is available at https://poc.sha2017.org/phonebook

= Further information =
* There is also a sip server besides DECT, which you can use with your favorite sip client. When registering your extension, please choose "SIP Account" as extension type. The server runs at poc.sha2017.org:5060.
* There is also a good chance to enjoy DECT coverage even at the parking lot.
* Blog: [https://sha2017.org/blog/bring-your-own-dect-registration-is-open Bring Your Own DECT: registration is open]

== Behind the scenes ==
* Alcatel OmniPCX 4400
** Multiple chassis from VH to ACT28
** Redundant CPU7-2
** multiple DECT4HB line cards
** multiple DECT8 line cards
** single mode fibre connection between the different chassis
* 1RU server with PRI card to connect the chassis to the local sip server.
* sip uplink kindly provided by [https://www.speakup.nl/ speakup].

Phone

2017-07-12T18:25:00Z

Sling:

There is a DECT network at SHA2017 operated by the µPOC.

To activate your GAP-compatible DECT handset for use at the SHA2017 telephony network, please register your personal extension at https://poc.sha2017.org, then just head over to the POC helpdesk at the Infodesk tent.

The POC helpdesk will help you setting up and activating your phone at the DECT network.

Once activated, you won’t only be able to call extensions within the SHA2017 telephony network, but also make free calls to The Netherlands, Germany and probably some other countries.
* '''Outgoing call to The Netherlands:''' 0 <national number incl. 0>
* '''Outgoing call to a foreign country:''' 0 00 <country code and number>

You can also be called from the outside world – you can just request a national number via the POC website*.

* while stocks last.

Not sure if your phone is supported? Here is a DECT Compatibility list: https://eventphone.de/wiki/index.php/DECT_Phone_Compatibility_List

Volunteering

2017-07-04T21:17:35Z

Sling: /* Volunteers: Coordinator */

[[File:StillHelpingAnyway.png|frameless|right|Still Helping Anyway]]Great if you're willing to participate by helping us out! SHA2017, in the tradition of the four-yearly hackers festivals, is entirely run by volunteers who pay for their tickets like every other visitor. Some of us are working on organizing the event months, years in advance.

The angel system is up and running at https://volunteer.sha2017.org/ so make sure you register an account there! Once the event starts you should then come to the volunteerdesk in the Infodesk tent to get yourself marked as 'arrived' and get more information about shifts.

For quick Q&A join us on IRC: [irc://irc.freenode.net/#sha2017-angel irc.freenode.net/#sha2017-angel]

If you want to help out before the event, check the [http://orga.sha2017.org Orga wiki] and the vacancies on it! Welcome! :)

=== Special Training Angeltypes ===
Most volunteershifts can be taken on without any training, they are not 'restricted'. Others might need a certain certification, experience, etcetera. These restricted angeltypes are listed below with details on what is actually required and who to contact for more information or for being confirmed in the engelsystem for these shifts:

Note: For all the angeltypes, see https://angel.sha2017.org/?p=angeltypes

==== Harbour: Ferry Master ====
{| class="wikitable"
|-
| Required Skills || Must be able to run a boat with some experience.
|-
| Required Certificates || -
|-
| Would-be-nice Certificates || Limited license for inland and coastal waters (Vaarbewijs I/II)
VHF License (Marifoon bedieningscertificaat / Marcom B or Marcom A). There is a limited budget available to obtain VHF licenses!
|-
| Contact || orga@safeharbour2017.nl
|}

==== Harbour: Official ====
{| class="wikitable"
|-
| Required Skills || Have some experience with what goes on in a harbour.
|-
| Required Certificates || VHF License (Marifoon bedieningscertificaat / Marcom B or Marcom A). There is a limited budget available to obtain VHF licenses!
|-
| Would-be-nice Certificates || Limited license for inland and coastal waters (Vaarbewijs I/II)
|-
| Contact || orga@safeharbour2017.nl
|}

==== Volunteers: Coordinator ====
{| class="wikitable"
|-
| Required Skills || For this angeltype you should ideally have volunteered at a few other hacker events so you are familiar with what goes on. Some experience with the engelsystem is also a pre. Come to the volunteerdesk during the event if you are willing to take on shifts so we can confirm your registration for this type.
|-
| Required Certificates || -
|-
| Would-be-nice Certificates || -
|-
| Contact || team-volunteers@lists.sha2017.org
|}

Tickets

2017-05-31T10:44:48Z

Sling:

[[image:sha_cumulative_ticket_sales.png|thumb|right|320px|Ticket Sale Graph, updated regularly. See [https://sha2017.org/blog/answer-to-the-question-what-is-the-amount-of-tickets-sold this blogpost] for more info.]]SHA2017 costs an [[budget|incredible amount of money]]. We've made budgets ranging from 3500 visitors to 6000 and came to the prices listed in the shop. A ticket pays for the terrain, large tents, angel catering, insurance, facilities and so on and so forth.

There are various tickets for SHA2017, from cost coverage to various supporter levels. In the shop you can also choose to rent village equipment such as tents, chairs and tables if you don't want to bring that yourself. You'll also find parking spots for cars and boats(!) and other optional items such as sleeping tents and t-shirts.

'''Because of the amount of sponsorship tickets sold (thank you), we were able to reduce ticket price for a batch of tickets. Check out the ticket shop!'''

All tickets are listed in the [https://tickets.sha2017.org ticket shop].

__NOTOC__
== How to buy tickets? ==
You can buy your tickets at the [https://tickets.sha2017.org online ticket shop]. Tickets are only sold via the ticket system, so not on-site!

If you're a volunteer and tickets should run out: don't worry, your team lead can probably get you a voucher which entitles you to buying a ticket.

== How many tickets have you sold already? ==
Not enough, if you haven't bought one yet! For the grand sum see the image in the top right corner of this wiki page.

== Why is the price so high? ==

We have kept the tickets in line with the CCC and EMF camp. This is simply needed to have a positive budget and not involve heavy commercial sponsoring.

* CCC Camp 2015 (Ticket that covers cost): € 240 (https://events.ccc.de/camp/2015/wiki/Static:Tickets)
* EMF Camp 2016 (2,5 day event): € 150

As a comparison, staying on a camping and having a regular vacation, has the same price. You won't get the lectures that we have at our event, of course.

Some note that the CCC Camp 2015 ticket for cost coverage was set at 220 euro. This was correct, until that number has updated to 240 during buildup as it appeared the coverage costs where higher.

== I cannot afford a ticket! ==

We don't have the budget to offer a low-budget ticket in the shop. If however you cannot afford a ticket, but feel you can make a unique contribution to the event, please contact us (tickets(at)sha2017.org). We can look into the possibilities.

== € 42 for parking? ==

The site doesn't have parking space for 2000 cars. For SHA a custom parking terrain will be built with 2000+ plates and various bridges. The parking ticket allows building this infra, preventing hundreds of cars to be stuck in the mud when it rains.

If you want to park your car somewhere else and travel by public transport, this is possible as well. Then you don't need to pay for a parking ticket.

== Can you explain what exactly causes the extra costs? ==

This is very hard, because a direct comparison between events (for example OHM and SHA) would lead to very misleading figures. For example, at SHA we will have a much more expensive terrain: it has some critical basic infrastructure already in place (such as fiber, power, water, sewage) so we're saving in those areas. Some events (like HAL and HAR) had some brick buildings, and saved on tents and sanitary facilities. Sponsors paid for a lot in the past and now we're going to rely on them less than we have before. Every number we release now will be compared to other numbers and might raise even more hard questions than it answers.

However, we are looking into ways of being more transparent, but please understand that this takes some time.

== Why is there a surcharge for credit card payments? ==
A credit card payment provider does take a percentage from each transaction. SHA2017 has very good payment provider (Stripe ... kudos here). However, we also want to discourage CC payments, because there could be fraudulent transactions.

== How can I pay for my ticket? ==

We accept wire transfers to our Dutch bank account, credit card payments and iDeal.

Paypal was an option the first day of the ticket sales, but they decided to withhold the money and because of this, we had to disable this option. Tickets that were already bought via Paypal will remain valid, even though we can't access the amounts paid.

== My payment provider requests an address, what should I put there? ==

Croeselaan 18

3500 HG

Utrecht

== I want to buy my ticket anonymously ==

We can help you with this. Please contact us in a way you feel appropriate and we can come to an arrangement.

== Will there be day tickets? ==

We have not planned on providing day tickets at this time.

== How can I download my ticket? ==

Before the event, we will generate tickets that you can download from the ticket shop.

== I need an invoice for my ticket ==

If you have purchased a business ticket, we can provide you with a VAT invoice. Your company name will be on the invoice then.

== Can a foreign business get an invoice at 0% VAT? ==

Reverse charge is not applicable, even for businesses with a VAT number, because that is for ''exported goods'', while the event is considered a ''service''. The place of performance is Zeewolde, Netherlands thus we have to charge Dutch VAT (21%).

== I would like to buy a corporate ticket ==

We have multiple business tickets available. We can provide an invoice with VAT for these tickets.

== I really like your event and want to contribute to the event by buying a more expensive ticket ==

We have two tickets available that will meet your need. Please contact us if you are interested in one of these tickets to get a voucher.

== I need the address of the recipient to initiate an international wire transfer ==

<pre>
Stichting IFCAT
Graan voor Visch 18515
2132 GW, Hoofddorp
The Netherlands
</pre>

== I want to bring my kids. Do they need a ticket as well? ==

Children under 6 get in for free. Between 6 and 12 the ticket is € 50. Between 12 and 18 the ticket is € 100.

We use the "start date of the event" to determine age.

== I'm a disabled person with a person accompanying me. ==

A single person officially accompanying a disabled person gets in for free. Only you will have to buy a ticket. Please send an email to tickets@sha2017.org and explain your situation. Then we will get back to you.

== I'm a speaker, do I need a ticket? ==

In general, everyone should buy a ticket. Exceptions can be made for speakers.

== Can i bring my campervan / trailer? ==

Currently, we're working with the terrain owner on the number of camper vans the terrain can handle and what the conditions are. When those answers are clear, they will be announced to the buyers of tickets and in the ticket shop. :)

== Can I join with the U-Boot in the harbour? ==

Please use a chinook to fly in the U-boot as the water might not be deep enough to join over water. That said, this is a special case and we're amazed that this question is asked frequently. Please get in touch with the [mailto:brenno@safeharbour2017.nl Harbour Master!] :)

Volunteering

2017-05-28T11:37:39Z

Sling: /* Special Training Angeltypes */

Volunteering

2017-05-28T11:37:30Z

Sling: /* Special Training Angeltypes */

[[File:StillHelpingAnyway.png|frameless|right|Still Helping Anyway]]Great if you're willing to participate by helping us out! SHA2017, in the tradition of the four-yearly hackers festivals, is entirely run by volunteers who pay for their tickets like every other visitor. Some of us are working on organizing the event months, years in advance.

The angel system is up and running at https://volunteer.sha2017.org/ so make sure you register an account there! Once the event starts you should then come to the volunteerdesk in the Infodesk tent to get yourself marked as 'arrived' and get more information about shifts.

For quick Q&A join us on IRC: [irc://irc.freenode.net/#sha2017-angel irc.freenode.net/#sha2017-angel]

If you want to help out before the event, check the [http://orga.sha2017.org Orga wiki] and the vacancies on it! Welcome! :)

=== Special Training Angeltypes ===
Most
Most volunteershifts can be taken on without any training, they are not 'restricted'. Others might need a certain certification, experience, etcetera. These restricted angeltypes are listed below with details on what is actually required and who to contact for more information or for being confirmed in the engelsystem for these shifts:

Note: For all the angeltypes, see https://angel.sha2017.org/?p=angeltypes

==== Harbour: Ferry Master ====
{| class="wikitable"
|-
| Required Skills || Must be able to run a boat with some experience.
|-
| Required Certificates || -
|-
| Would-be-nice Certificates || Limited license for inland and coastal waters (Vaarbewijs I/II)
VHF License (Marifoon bedieningscertificaat / Marcom B or Marcom A). There is a limited budget available to obtain VHF licenses!
|-
| Contact || orga@safeharbour2017.nl
|}

==== Harbour: Official ====
{| class="wikitable"
|-
| Required Skills || Have some experience with what goes on in a harbour.
|-
| Required Certificates || VHF License (Marifoon bedieningscertificaat / Marcom B or Marcom A). There is a limited budget available to obtain VHF licenses!
|-
| Would-be-nice Certificates || Limited license for inland and coastal waters (Vaarbewijs I/II)
|-
| Contact || orga@safeharbour2017.nl
|}

==== Volunteers: Coordinator ====
{| class="wikitable"
|-
| Required Skills || For this angeltype you should ideally have volunteered at a few other hacker events so you are familiar with what goes on. Some experience with the engelsystem is also a pre. Come to the volunteerdesk during the event if you are willing to take on shifts so we can confirm your registration for this type.
|-
| Required Certificates || -
|-
| Would-be-nice Certificates || -
|-
| Contact || volunteers@sha2017.org
|}

Volunteering

2017-05-28T11:35:56Z

Sling: /* Special Training Angeltypes */

[[File:StillHelpingAnyway.png|frameless|right|Still Helping Anyway]]Great if you're willing to participate by helping us out! SHA2017, in the tradition of the four-yearly hackers festivals, is entirely run by volunteers who pay for their tickets like every other visitor. Some of us are working on organizing the event months, years in advance.

The angel system is up and running at https://volunteer.sha2017.org/ so make sure you register an account there! Once the event starts you should then come to the volunteerdesk in the Infodesk tent to get yourself marked as 'arrived' and get more information about shifts.

For quick Q&A join us on IRC: [irc://irc.freenode.net/#sha2017-angel irc.freenode.net/#sha2017-angel]

If you want to help out before the event, check the [http://orga.sha2017.org Orga wiki] and the vacancies on it! Welcome! :)

=== Special Training Angeltypes ===

Note: For all the angeltypes, see https://angel.sha2017.org/?p=angeltypes

==== Harbour: Ferry Master ====
{| class="wikitable"
|-
| Required Skills || Must be able to run a boat with some experience.
|-
| Required Certificates || -
|-
| Would-be-nice Certificates || Limited license for inland and coastal waters (Vaarbewijs I/II)
VHF License (Marifoon bedieningscertificaat / Marcom B or Marcom A). There is a limited budget available to obtain VHF licenses!
|-
| Contact || orga@safeharbour2017.nl
|}

==== Harbour: Official ====
{| class="wikitable"
|-
| Required Skills || Have some experience with what goes on in a harbour.
|-
| Required Certificates || VHF License (Marifoon bedieningscertificaat / Marcom B or Marcom A). There is a limited budget available to obtain VHF licenses!
|-
| Would-be-nice Certificates || Limited license for inland and coastal waters (Vaarbewijs I/II)
|-
| Contact || orga@safeharbour2017.nl
|}

==== Volunteers: Coordinator ====
{| class="wikitable"
|-
| Required Skills || For this angeltype you should ideally have volunteered at a few other hacker events so you are familiar with what goes on. Some experience with the engelsystem is also a pre. Come to the volunteerdesk during the event if you are willing to take on shifts so we can confirm your registration for this type.
|-
| Required Certificates || -
|-
| Would-be-nice Certificates || -
|-
| Contact || volunteers@sha2017.org
|}

Volunteering

2017-05-28T11:33:08Z

Sling: /* Special Training Angeltypes */

Tickets

2017-05-27T16:02:24Z

Sling:

SHA2017 costs an incredible amount of money. We've made budgets ranging from 3500 visitors to 6000 and came to the prizes listed in the shop. A ticket pays for the terrain, large tents, angel catering, insurance, facilities and so on and so forth.

There are various tickets for SHA2017, from cost coverage to various supporter levels. In the shop you can also choose to rent village equipment such as tents, chairs and tables if you don't want to bring that yourself. You'll also find parking spots for cars and boats(!) and other optional items such as sleeping tents and t-shirts.

'''Because of the amount of sponsorship tickets sold (thank you), we were able to reduce ticket price for a batch of tickets. Check out the ticket shop!'''

All tickets are listed in the [https://tickets.sha2017.org ticket shop].

__NOTOC__
== How to buy tickets? ==
You can buy your tickets at the [https://tickets.sha2017.org online ticket shop]. Tickets are only sold via the ticket system, so not on-site!

If you're a volunteer and tickets should run out: don't worry, your team lead can probably get you a voucher which entitles you to buying a ticket.

== How many tickets have you sold already? ==
Not enough, if you haven't bought one yet! For the grand sum see https://sha2017.org/blog/answer-to-the-question-what-is-the-amount-of-tickets-sold for some big data.

== Why is the price so high? ==

We have kept the tickets in line with the CCC and EMF camp. This is simply needed to have a positive budget and not involve heavy commercial sponsoring.

* CCC Camp 2015 (Ticket that covers cost): € 240 (https://events.ccc.de/camp/2015/wiki/Static:Tickets)
* EMF Camp 2016 (2,5 day event): € 150

As a comparison, staying on a camping and having a regular vacation, has the same price. You won't get the lectures that we have at our event, of course.

== I cannot afford a ticket! ==

We don't have the budget to offer a low-budget ticket in the shop. If however you cannot afford a ticket, but feel you can make a unique contribution to the event, please contact us (tickets(at)sha2017.org). We can look into the possibilities.

== € 42 for parking? ==

The site doesn't have parking space for 2000 cars. For SHA a custom parking terrain will be built with 2000+ plates and various bridges. The parking ticket allows building this infra, preventing hundreds of cars to be stuck in the mud when it rains.

If you want to park your car somewhere else and travel by public transport, this is possible as well. Then you don't need to pay for a parking ticket.

== Can you explain what exactly causes the extra costs? ==

This is very hard, because a direct comparison between events (for example OHM and SHA) would lead to very misleading figures. For example, at SHA we will have a much more expensive terrain: it has some critical basic infrastructure already in place (such as fiber, power, water, sewage) so we're saving in those areas. Some events (like HAL and HAR) had some brick buildings, and saved on tents and sanitary facilities. Sponsors paid for a lot in the past and now we're going to rely on them less than we have before. Every number we release now will be compared to other numbers and might raise even more hard questions than it answers.

However, we are looking into ways of being more transparent, but please understand that this takes some time.

== Why is there a surcharge for credit card payments? ==
A credit card payment provider does take a percentage from each transaction. SHA2017 has very good payment provider (Stripe ... kudos here). However, we also want to discourage CC payments, because there could be fraudulent transactions.

== How can I pay for my ticket? ==

We accept wire transfers to our Dutch bank account, credit card payments and iDeal.

Paypal was an option the first day of the ticket sales, but they decided to withhold the money and because of this, we had to disable this option. Tickets that were already bought via Paypal will remain valid, even though we can't access the amounts paid.

== My payment provider requests an address, what should I put there? ==

Croeselaan 18

3500 HG

Utrecht

== I want to buy my ticket anonymously ==

We can help you with this. Please contact us in a way you feel appropriate and we can come to an arrangement.

== Will there be day tickets? ==

We have not planned on providing day tickets at this time.

== How can I download my ticket? ==

Before the event, we will generate tickets that you can download from the ticket shop.

== I need an invoice for my ticket ==

If you have purchased a business ticket, we can provide you with a VAT invoice. Your company name will be on the invoice then.

== Can a foreign business get an invoice at 0% VAT? ==

Reverse charge is not applicable, even for businesses with a VAT number, because that is for ''exported goods'', while the event is considered a ''service''. The place of performance is Zeewolde, Netherlands thus we have to charge Dutch VAT (21%).

== I would like to buy a corporate ticket ==

We have multiple business tickets available. We can provide an invoice with VAT for these tickets.

== I really like your event and want to contribute to the event by buying a more expensive ticket ==

We have two tickets available that will meet your need. Please contact us if you are interested in one of these tickets to get a voucher.

== I need the address of the recipient to initiate an international wire transfer ==

<pre>
Stichting IFCAT
Graan voor Visch 18515
2132 GW, Hoofddorp
The Netherlands
</pre>

== I want to bring my kids. Do they need a ticket as well? ==

Children under 6 get in for free. Between 6 and 12 the ticket is € 50. Between 12 and 18 the ticket is € 100.

We use the "start date of the event" to determine age.

== I'm a disabled person with a person accompanying me. ==

A single person officially accompanying a disabled person gets in for free. Only you will have to buy a ticket. Please send an email to tickets@sha2017.org and explain your situation. Then we will get back to you.

== I'm a speaker, do I need a ticket? ==

In general, everyone should buy a ticket. Exceptions can be made for speakers.

== Can i bring my campervan / trailer? ==

Currently, we're working with the terrain owner on the number of camper vans the terrain can handle and what the conditions are. When those answers are clear, they will be announced to the buyers of tickets and in the ticket shop. :)

== Can I join with the U-Boot in the harbour? ==

Please use a chinook to fly in the U-boot as the water might not be deep enough to join over water. That said, this is a special case and we're amazed that this question is asked frequently. Please get in touch with the [mailto:brenno@safeharbour2017.nl Harbour Master!] :)

Tickets

2017-05-27T16:01:46Z

Sling:

SHA2017 costs an incredible amount of money. We've made budgets ranging from 3500 visitors to 6000 and came to the prizes listed in the shop. A ticket pays for the terrain, large tents, angel catering, insurance, facilities and so on and so forth.

There are various tickets for SHA2017, from cost coverage to various supporter levels. In the shop you can also choose to rent village equipment such as tents, chairs and tables if you don't want to bring that yourself. You'll also find parking spots for cars and boats(!) and other optional items such as sleeping tents and t-shirts.

'''Because of the amount of sponsorship tickets sold (thank you), we were able to reduce ticket price for a batch of tickets. Check out the ticket shop!'''

All tickets are listed in the [https://tickets.sha2017.org ticket shop].

__NOTOC__
== How to buy tickets? ==
You can buy your tickets at the [https://tickets.sha2017.org online ticket shop]. Tickets are only sold via the ticket system, so not on-site!

If you're a volunteer and tickets should run out: don't worry, your team lead can probably get you a voucher which entitles you to buying a ticket.

== How many tickets have you sold already? ==
Not enough, if you haven't bought one yet! For the grand sum see https://sha2017.org/blog/answer-to-the-question-what-is-the-amount-of-tickets-sold for some big data!

== Why is the price so high? ==

We have kept the tickets in line with the CCC and EMF camp. This is simply needed to have a positive budget and not involve heavy commercial sponsoring.

* CCC Camp 2015 (Ticket that covers cost): € 240 (https://events.ccc.de/camp/2015/wiki/Static:Tickets)
* EMF Camp 2016 (2,5 day event): € 150

As a comparison, staying on a camping and having a regular vacation, has the same price. You won't get the lectures that we have at our event, of course.

== I cannot afford a ticket! ==

We don't have the budget to offer a low-budget ticket in the shop. If however you cannot afford a ticket, but feel you can make a unique contribution to the event, please contact us (tickets(at)sha2017.org). We can look into the possibilities.

== € 42 for parking? ==

The site doesn't have parking space for 2000 cars. For SHA a custom parking terrain will be built with 2000+ plates and various bridges. The parking ticket allows building this infra, preventing hundreds of cars to be stuck in the mud when it rains.

If you want to park your car somewhere else and travel by public transport, this is possible as well. Then you don't need to pay for a parking ticket.

== Can you explain what exactly causes the extra costs? ==

This is very hard, because a direct comparison between events (for example OHM and SHA) would lead to very misleading figures. For example, at SHA we will have a much more expensive terrain: it has some critical basic infrastructure already in place (such as fiber, power, water, sewage) so we're saving in those areas. Some events (like HAL and HAR) had some brick buildings, and saved on tents and sanitary facilities. Sponsors paid for a lot in the past and now we're going to rely on them less than we have before. Every number we release now will be compared to other numbers and might raise even more hard questions than it answers.

However, we are looking into ways of being more transparent, but please understand that this takes some time.

== Why is there a surcharge for credit card payments? ==
A credit card payment provider does take a percentage from each transaction. SHA2017 has very good payment provider (Stripe ... kudos here). However, we also want to discourage CC payments, because there could be fraudulent transactions.

== How can I pay for my ticket? ==

We accept wire transfers to our Dutch bank account, credit card payments and iDeal.

Paypal was an option the first day of the ticket sales, but they decided to withhold the money and because of this, we had to disable this option. Tickets that were already bought via Paypal will remain valid, even though we can't access the amounts paid.

== My payment provider requests an address, what should I put there? ==

Croeselaan 18

3500 HG

Utrecht

== I want to buy my ticket anonymously ==

We can help you with this. Please contact us in a way you feel appropriate and we can come to an arrangement.

== Will there be day tickets? ==

We have not planned on providing day tickets at this time.

== How can I download my ticket? ==

Before the event, we will generate tickets that you can download from the ticket shop.

== I need an invoice for my ticket ==

If you have purchased a business ticket, we can provide you with a VAT invoice. Your company name will be on the invoice then.

== Can a foreign business get an invoice at 0% VAT? ==

Reverse charge is not applicable, even for businesses with a VAT number, because that is for ''exported goods'', while the event is considered a ''service''. The place of performance is Zeewolde, Netherlands thus we have to charge Dutch VAT (21%).

== I would like to buy a corporate ticket ==

We have multiple business tickets available. We can provide an invoice with VAT for these tickets.

== I really like your event and want to contribute to the event by buying a more expensive ticket ==

We have two tickets available that will meet your need. Please contact us if you are interested in one of these tickets to get a voucher.

== I need the address of the recipient to initiate an international wire transfer ==

<pre>
Stichting IFCAT
Graan voor Visch 18515
2132 GW, Hoofddorp
The Netherlands
</pre>

== I want to bring my kids. Do they need a ticket as well? ==

Children under 6 get in for free. Between 6 and 12 the ticket is € 50. Between 12 and 18 the ticket is € 100.

We use the "start date of the event" to determine age.

== I'm a disabled person with a person accompanying me. ==

A single person officially accompanying a disabled person gets in for free. Only you will have to buy a ticket. Please send an email to tickets@sha2017.org and explain your situation. Then we will get back to you.

== I'm a speaker, do I need a ticket? ==

In general, everyone should buy a ticket. Exceptions can be made for speakers.

== Can i bring my campervan / trailer? ==

Currently, we're working with the terrain owner on the number of camper vans the terrain can handle and what the conditions are. When those answers are clear, they will be announced to the buyers of tickets and in the ticket shop. :)

== Can I join with the U-Boot in the harbour? ==

Please use a chinook to fly in the U-boot as the water might not be deep enough to join over water. That said, this is a special case and we're amazed that this question is asked frequently. Please get in touch with the [mailto:brenno@safeharbour2017.nl Harbour Master!] :)

Volunteering

2017-04-29T19:00:58Z

Sling:

Great if you're willing to participate by helping us out! SHA2017, in the tradition of the four-yearly hackers festivals, is entirely run by volunteers who pay for their tickets like every other visitor. Some of us are working on organizing the event months, years in advance.

The angel system is up and running at https://volunteer.sha2017.org/ so make sure you register an account there! Once the event starts you should then come to the volunteerdesk in the Infodesk tent to get yourself marked as 'arrived' and get more information about shifts.

For quick Q&A join us on IRC: [irc://irc.freenode.net/#sha2017-angel irc.freenode.net/#sha2017-angel]

If you want to help out before the event, check the [http://orga.sha2017.org Orga wiki] and the vacancies on it! Welcome! :)

=== Special Training Angeltypes ===

There will be info here soon!

Volunteering

2017-04-29T19:00:29Z

Sling:

Great if you're willing to participate by helping us out! SHA2017, in the tradition of the four-yearly hackers festivals, is entirely run by volunteers who pay for their tickets like every other visitor. Some of us are working on organizing the event months, years in advance.

The angel system is up and running at https://volunteer.sha2017.org/ so make sure you register an account there! Once the event starts you should then come to the volunteerdesk in the Infodesk tent to get yourself marked as 'arrived' and get more information about shifts.

Meanwhile, join the IRC channel: [irc://irc.freenode.net/#sha2017-angel irc.freenode.net/#sha2017-angel]

If you want to help out before the event, check the [http://orga.sha2017.org Orga wiki] and the vacancies on it! Welcome! :)

=== Special Training Angeltypes ===

There will be info here soon!

Volunteering

2017-04-29T13:45:07Z

Sling:

Great if you're willing to participate by helping us out! SHA2017, in the tradition of the four-yearly hackers festivals, is entirely run by volunteers who pay for their tickets like every other visitor. Some of us are working on organizing the event months, years in advance.

The angel system will be up soon. You can already register if you find it, but there are no shifts yet. :)

Meanwhile, join the IRC channel: [irc://irc.freenode.net/#sha2017-angel irc.freenode.net/#sha2017-angel]

If you want to help out before the event, check the [http://orga.sha2017.org Orga wiki] and the vacancies on it! Welcome! :)

=== Special Training Angeltypes ===

There will be info here soon!

How to survive

2017-04-01T14:16:23Z

Sling: New page

(This page is wildly under construction, and copied from https://events.ccc.de/congress/2015/wiki/Static:How_To_Survive )

Feel free to edit/update this page if you see anything outdated!

Also, as usual and as this is a wiki, do not trust everything blindly.

== Introduction ==

SHA2017 is a huge event with people from very diverse backgrounds. If not just the fact that this environment is largely driven by curiosity, an event of this size makes it inevitable that there are individuals with less noble motives.

This makes it advisable to take extra care in securing one's own equipment and also paying attention to the stuff around oneself.

If you don't feel comfortable or competent enough in doing so, please consider leaving your devices (laptop, smartphone, etc.) turned off. After all you might be there because of the people, who, in turn, might be able to help you learn how to secure your devices (e.g. CryptoParty assembly).

There are many ways to gain access to a system, physical – including theft and bad usb devices – and remotely over the network where the possible security holes are manifold – be it different services running on the machine, the sniffing of passwords and other data of the wired and/or wireless network or the active distribution of malware by social engineering or phishing attacks:

== closing/securing open ports/services ==

http://www.williamhpeters.net/syb_eng.png

=== How do I know, what services are secure? ===
* Bugtraq: http://www.securityfocus.com/archive
* Mailinglists
* Usenet
* follow the tech-news

=== Tools to find out what services are running ===
* netstat -tulpen (Linux, Windows, Mac)
* lsof -i -P
* ps (Linux, Mac)
* nmap -p- localhost (Linux, Windows, Mac)
* fuser (Linux)
* Network Utility (Mac)
** filemon
** Regmon
** TCPmon

=== Disabling services in Windows / Linux / Mac (/ other *BSD) ===

* Linux (System V style init)
*: <code>''/etc/init.d/$service'' stop</code> or <code>''/usr/sbin/$service'' stop</code>
* Linux (systemd, system and service manager)
*: <code>systemctl stop $service</code>
* {Free,Net,Open}BSD and others ([http://www.freebsd.org/cgi/man.cgi?query=rc RC]ng-style init)
*: <code>''/etc/rc.d/$service'' stop</code>
* Windooze
*: '/ Start / Systemsettings / Services' -> Properties of service -> Stop
*: If you want to make sure that the service stays stopped then set the Startup Type of the service to 'Disabled'
*: Good documentation about disabling services in windows (only german?) http://www.dingens.org/ && http://www.ntsvcfg.de/
*: Another (detailed) documentation on how to disable unnecessary windows services: http://www.hsc.fr/ressources/breves/min_srv_res_win.en.html
* Mac (OS X)
*: Go to System Preferences -> Sharing -> Services and uncheck all the things you don't need running. On the second tab you can also enable your firewall (which would be the 'smart thing' to do).

== Physical Security ==

=== Introduction ===

What good is a secure operating system, if the computer it is running on is rebooted or stolen? With one 40Mb boot CD all your security measures may be ignored.

=== Prevention of theft ===

: When a laptop or harddisc is stolen there is a financial damage through loss of hardware. But often the loss of data is much bigger when there is no backup. And then personal, classified or business data will then be in the hands of the thief.

What you can do:
* Backup your data before going to {{XC3}}
* Encrypt your hard disk
* Label your hardware:
** Put your name and cellphone number on it, so anyone can check whose hardware it really is.
** Put stickers on it. This usually makes it a unique piece.
** If you're scared that others might see your real name or that if stickers get lost: label phones and laptops inside the battery compartment.
* Set a BIOS password.
* Encrypt ALL the disks
* Backup your data.

Also, as a side note: Please make backups of your data.

==== Labeling at the {{XC3}} ====

There is no service of hardware labelling at the congress anymore – so be with friends and make sure your hardware is watched at all times!

==== The insecurity of locks ====

Lockpicking is part of the {{XC3}} program. Even if you don't know how locks work, you can learn how to pick them in a couple of hours.

Do not trust the security of Kensington products! These are only a partly effective simulation of security, which can not stop thiefs who can cut cardboard.

=== Being prepared, in case shit happens ===

But if you take other variables, for example the normal "Verpeilungsfaktor" (german, "mess-up factor"), into account, you should always assume that it is possible that your computer or your data get lost. There is no such thing as a absolutely secure system! (Also every system needs regular care in terms of security updates etc.).
Accidents happen.

Therefore you should as a matter of principle make a backup of all important data! Additionally it is important in case of theft to note down all your serial numbers in advance somewhere (especially of your hard disk, using hdparm -I, because data thieves might only steal your disk) if they are not already on your hardware invoice (which you should have available if you should need to contact the police).

The most simple rule for decent security is: Never lose sight of your laptop. The best thing is to carry it around with yourself all the time (greatly increasing the ability to take notes during lectures as a side effect). In addition you can as well ask trustworthy persons to guard your (portable) computer. This is especially useful if the box is hanging hard wired on the network, transfering large files, while you rather want to go to a lecture.

=== What to do if your equipment is gone ===

First of all, don't panic!

Check the area around you, sometimes people put equipment under the desk or shift it to the next desk and/or it may get buried under lots of other stuff.

If you can't find it, ask the people around you and ask your friends, maybe someone put the equipment in a safe place for you.

Check Lost+Found at the Ministry of Information. If your hardware was labeled it might happen that they contact you!

If the equipment is still missing, please contact Security ([[User:HonkHase|HonkHase]] or BugBlue) via DECT 110. They will clarify the next steps, e.g. complaint of an offence at the police to possibly get the money back from an insurance company, check the outgoing equipment at the exits of the {{XC3}}, search for it in the whole building, note your contact details to check if your equipment popped up at the end of the congress as "lost+found" stuff, etc.

Check Lost+Found afterwards!

== BIOS-Password ==

In order to ensure that nobody can break your password barriers with simple physical access, for example by booting a Knoppix live CD or something like that, you should prevent that directly in the BIOS. To do this, configure your BIOS to allow hard disk boots only and protect this setting with a BIOS setup password.

Some more or less smart people can in individual cases (insecure BIOSes) still boot from other media. Therefore we suggest (at least for the time of the congress) to set up a general boot password in the BIOS.

; Note
: In this text we will assume that you already know about password security (e.g., don't use passwords like "root", "$PASSWORD", "GoGetNaked", "hackme", "Jenny" or "Oak"...)

=== Macintosh Computers ===

Set an Open Firmware Password: https://support.apple.com/kb/HT1352

Please note that this also applies to Intel-based Macs although they're using EFI.

== Bootloader configuration ==

As another security measure you should take care that it is not possible to override the normal boot process by adding <code>init=/bin/bash</code> to the kernel parameters in your (Linux) boot loader. This would fire up a bash with root privileges and even without a prompt for the root password.

This step is very important! You can as well configure it so that you are only asked for the password if you want to add special parameters.

=== LILO security ===

To configure LILO for using a password, edit the /etc/lilo.conf:

password=""

If you want to be prompted at boot, if you try to append stuff to the kernel:

restricted

start <code>/sbin/lilo -p</code> and provide the password you want to use. It will be stored in /etc/lilo.conf.shs (or something)and gets encrypted.

If you want to use special characters, you have to change the heyboard layout:

/usr/sbin/keytab-lilo.pl de > /boot/de.ktl

and add the following line to /etc/lilo.conf:

keytable = /boot/de.ktl

=== GRUB-Security ===

First you should create a password using /sbin/grub-md5-crypt, which is returned as an MD5 hash. Then you add in GRUB's configuration file /boot/grub/grub.conf the line "password --md5 <hash>", replacing <hash> with the password returned by grub-md5-crypt.

If you require a more secure hashing algorithm, you can use /sbin/grub-mkpasswd-pbkdf2 and enter a chosen password. It will return a hash, starting with 'grub.pbkdf2.sha512', then edit your /etc/grub.d/00_header file, to include the following:

cat << EOF

set superusers="root"
password_pbkdf2 root <hash>

EOF

Where the hash is the string starting with 'grub.pbkdf2.sha512.10000' returned from the '/sbin/grub-mkpasswd-pbkdf2' command.

An additional "lock" will make it necessary to enter the password everytime you want to start an image. You should use this, if there are "other" operating systems available on your computer which don't have privleges management. They could be used to override your protection.

== Access control for the running System ==

Leaving a running system unguarded is a big risk for the security of your system.

* Always lock the screen / log out of your session
* Never leave an open rootshell

If your desktop environment does not have an obvious "Lock screen" or "Log out" feature, you can use programs such as "vlock" or "slock".

If you don't want to take your equipment with you everytime you go to take a leak, you should definitely, before handing your box over to others to guard it, close or lock all sessions.

These measures still don't protect you from attacks against hardware components as e.g. the usb, network or firewire ports which could be used to autoexecute code or even read out the computers memory.

=== Passphrase security ===

Use strong passphrases _everywhere_. Never use the same passphrase twice. Never let people see you passphrase (lower your laptop lid while typing it, sit with your back against the wall, ...). Depending on who you defend against, don't type in your passphrase while your laptop is hooked to the powerline.

== Saving your data from others, deletion or yourself ;o) ==

If you want to be sure that one cannot access your data if your hard disk gets stolen, you can for example use dm-crypt to encrypt your hard disk or single partitions (e.g. /home, /tmp and swap). You can find links to the "Disk Encryption HOWTO" and the "Encrypted Root Filesystem HOWTO" below under "Additional Information".

For Mac OS X there is an option called FileVault in the system settings, which cares automatically and transparently for encryption (which means: you just have to check a check box).

== Checklist ==

* Set BIOS-Password (at least setup password)
* LILO/GRUB-Password (at least restricted!)
* Password security (characters, non-trivial, etc.)
* Never leave a rootshell open!
* Backup all important data!
* Watch over your hardware, or ask someone trustworthy to do so
* Think of more access control
* Encrypt your hard drive and usb sticks.

== Surfing ==

* Don't use Internet Explorer, but Firefox or Chrome/Chromium instead.
* Uninstall Flash (and leave it uninstalled, you don't need it for nothing).

Assume that there will be many people at the congress who try to exploit security holes in e.g. Internet Explorer. Firefox is not rockhard secure, but it is a much better bet, than IE.

Something about encryption on the web: On an encrypted and authenticated site, Firefox displays a closed padlock to the left of the address bar. Locks may appear elsewhere, and many websites put them inside the webpage, but these are useless and should be entirely mistrusted. Besides a lock, also watch for the domain. By default, Firefox has a slight contrast difference between the domain (in black) and the rest of the URL (in grey). Despite this, make sure that the domain is followed by a slash (/). For example https://paypal.com.index.php.sessionida9c9e776d49388.tk is not actually PayPal, but https://paypal.com/index.php.sessionida9c9e776d49388.tk is.

If you are warned about a certificate error, you can either continue to the website or not continue. If you continue, the site will be equally secure to http (without s!), so all traffic may be read by a third party and all traffic may be modified by a third party. Do never ever enter personal data on unencrypted http or untrusted https websites. If you ever get these errors on websites like Gmail or other big companies, it means you are being attacked (either personally, randomly, or everyone there is being attacked). Also if you continue upon certificate warnings in Firefox, be sure to uncheck the "store exception permanently" box. You should be warned every time. If you don't, Firefox will always say it's a perfectly secure website and you might (e.g. next year) have forgotten that it was actually a security exception.

It's also recommendable to use private navigation mode or incognito mode (ctrl+shift+P in Firefox, ctrl+shift+N in Chrome) for https websites. Long story short: if you open incognito mode and only use https websites in there (and you don't get certificate warnings), that is rather secure. One could argue that it's safe enough to log in to your bank. If you open a single website with http (or a single website with a certificate warning) in that same incognito session, the security of the https websites may be partially compromised by the [https://en.wikipedia.org/wiki/BREACH BREACH exploit].

If you are german-speaking, you may want to read [http://www.heise.de/security/Einfallstor-Browser--/artikel/115254 Einfallstor Browser] on heise.de

=== Unencrypted - HTTP ===

Don't give personal data, when surfing unencrypted at congress, e.g.:
* Username and password for ANY SERVICE WHATSOEVER
* Cookies with user/pass (if you get logged in automatically)
* Personal data like address, name, gender, sexual desires ;o)

It could be a good idea to delete all your cookies before congress. If you need a backup of them, they are in ~/.mozilla/firefox/default/$chaos/cookies.txt (or cookies.sqlite). In preferences you can choose to be asked if a site wants to give you a cookie.

Use the SSH feature called "SOCKS port forwarding" ([[#SSH|ssh -D]]) to tunnel HTTP connections through your SSH host at home.

chromium-browser --proxy-server=socks5//:localhost:3129

Or in Firefox you can simply set the SOCKS proxy in the preferences (see preferences->advanced->network->settings).

=== Encrypted - HTTPS ===

Encrypted connections generally have the advantage that the data cannot be read by anyone sniffing on the network, because they are transmitted encrypted to the web server. You need to take some safety measures, though:

It is possible, that others try to intercept your connection ([Man in the Middle Attack]) (MITM), by placing themselves between you and the web server to read the data in cleartext. You can prevent this by adding a static ARP entry for the gateway (NOC#SecureNet) and by not simply clicking away messages of your browser that the certificate has been changed (which is a quite clear sign). But there are some sites, for example even this Wiki, which don't have their certificate signed by one of the common authorities. Therefore a warning message appears for them as well. You could load the page once before the Congress and tell your browser to accept this certificate automatically. (You may use Firefox 3 and add a security exception, which will be bound to the specific certificate. A repeated error message at a later time may indicate a MITM attack using a different certificate.)

== iStuff ==

Secure your iPhone:

# Backup your iStuff before congress. See [http://support.apple.com/kb/HT1414 Backing Up, updating, and restoring your iPhone,and iPod touch software]. Backup your backup somewhere else, just to be on the safe side.
# Erase iPhone content: Tap Settings > General > Reset > Erase All Contents and Settings*
# Enjoy congress. Optional: remove your sim-card
# At the end of congress: Transfer all your data of your iPhone but don't sync
# Click the "Restore" button in your iTunes-iPhone page. DON'T BACKUP! DON'T!!! It may erase your previous backup, you wouldn't want ''that''.
# Wait for your iPhone to reboot and restore your last backup*

<nowiki>*</nowiki> I never tried Erasing All Contents and Settings and restoring it from a backup. Don't hold me liable if it doesn't work [for you]. 

* Jailbreakers should change the standard Appel mobile pw and root pw. 
Change the standard Appel mobile pw
#Open the terminal ( you see something like "your iPhoneName": ~ Mobile$)
#type: ‘passwd’ (without the quotes) Your old PW should be ‘alpine’ (without the quotes), Make a new stronger pw, type this one twice.
#Type: 'logout'(without the quotes) 
Change the root pw 
#type ‘login’ command (without quotes) and press enter.
#Then type ‘root’ (without quotes) as your login and ‘alpine’ as your current root pw.
#Once are root, type ‘passwd’ command (without quotes) again and press enter.
#Enter a new password (twice).
#Type: 'logout'(without the quotes)
# done

== Reading mails ==

=== Webmail ===

Use an encrypted connection, like described above! Otherwise, you'll have to get your password from a blackboard. ;-)

=== POP3/IMAP ===

Use SSL/TLS and check for certificate validity (see your mail retrieval agent documentation for info on how to set it up).

== SSH ==

Use it to open a secure connection to your home PC. You can also use it to tunnel other TCP/IP connections through your home network... and be sure to know your home-servers fingerprint and authenticate with keys instead of password...

=== How to tunnel? ===

ssh -D 1234 user@example.com

This opens a SOCKS tunnel/proxy on port 1234.

=== How to tunnel everything (TCP, UDP and ICMP) transparently? ===

The following howto has been a great help in recent years:

http://blog.crash-override.net/index.php/206

==== On OS X ====

Problem: Ensure that ALL traffic from your laptop goes over your proxy. Including apps that don't take proxy config, like Skype.

; Answer:
<ol><li value="0">ping yourserver.com; note its ip [we're going to tunnel DNS in a sec, don't want a catch-22]</li></ol>
# ssh -C2fND 9999 yourserverip
#: The flags are: compressed, ssh v2 only, go into background and don't do anything on the remote other than proxy, and open up port 9999 as a socks proxy.
#: AFAICT this doesn't require root on either client or server. (Real tunnel devices do, on both. I wasn't able to get a tunnel device [ssh -w any:any] working on my VPS.)
# install http://www.proxifier.com/mac
# launch it and configure in 'options' menu:
#* proxy settings: 127.0.0.1 port 9999 socks 5
#* proxification rules: add; rule name: your server name; ip range: your server ip (NOT dns); click 'add' next to IP entry; ok. Most of the fields left blank.
#** these are the *exceptions*, by default - there's a radio button to invert that. Obviously we can't tunnel the ssh tunnel over itself, which is why we're making it an exception. :-P
#** add more exceptions if you want to access something on the LAN
#* name resolution: enable

The end. It also supports proxy chaining if you want to be fucking paranoid - in proxy settings just set it up from the perspective of each successive hop.

Just tested it, works perfectly. Might have some holes (e.g. low level stuff?), but I'm not seeing anything on local iftop other than LAN stuff and incoming direct connections.

It's a lot easier to use than tsocks, and more respected than merely setting a proxy in system settings / network / proxies (which e.g. Skype ignores).

If you run plain ssh commands now, they'll first get proxied - e.g. "ssh pony.noisebridge.net" will go via the proxy without any further config. Ditto everything else that's not in proxifier's exception list.

I suggest installing (via macports) iftop or the like on both machines; it's a nice tool to watch what's happening.

=== Too much work. ===

Try https://github.com/apenwarr/sshuttle

== IRC ==

Everything you write is blown out on the net, unencrypted. So DON'T authorise yourself against any bots/Nickserv/Chanserv etc. on the congress. If you need to authorise yourself against any service use SSL.

== What should I do before coming to the Congress? ==

* Make backups of everything, since you can never be guaranteed 100% security everywhere (short of unplugging your PC from the power outlet).
* Choose your password carefully. Anything written in a dictionary of any kind is insecure, and so are easy combinations. You should never have the same password as your username.
* Print your ticket!

== Useful programs ==
* Chat client: An IRC client, e.g. mIRC or X-Chat.
* Network diagnosis: nmap
* Ethernet configuration: dhclient / pump
* Browser: Any decent Web browser, e.g. Firefox, Chrome, or Opera. Internet Explorer not recommended.
* IPv6 support: (supported natively)
* WLAN drivers
* Wi-fi tool: Wavemon
* Sleep: Alarm clock
* Screensaver: Any screensaver with password locking, e.g. vlock, XLock, or Xscreensaver.
* SSL tunneling: stunnel
* [http://mackeeper.zeobit.com/mac-recovery-software Mac Data Recovery Software]

== Useful hardware ==

* Notebook
* [[static:POC | DECT phone]]. Just talk to the POC
* [[static:GSM | Cellphone]]
* Coffee cup with closeable lid (save that keyboard and no wasting of coffee)
* Junction Box for power outlets (think about the others and take more with you than you think you need). According to [http://en.wikipedia.org/wiki/AC_power_plugs_and_sockets wikipedia], the german type is CEE 7/4, they are also compatible with the following plugs: CEE 7/7 plug, CEE 7/16 Europlug, CEE 7/17, Soviet GOST 7396 C 1.
* If you have equipment with Australian, North American, British or an Asian (non Europlug) device, make sure to carry an adapter with you and also ensure that your device can live healthy from 230V AC at 50Hz as it is served in Germany.
* WLAN/WiFi card using a/g/n-technology
* Camera (but please respect other peoples privacy!)
* USB stick
* $Multimediatool aka geek gadget (MP3-player, PMR, PDA, bluetooth stuff, etc.)
* Be sure to have your laptop ready for the video projector, if you will hold a lecture
* Please tell us beforehand if you bring BIG hardware with you
* Bring switches (100+), cables, power sockets with you!
* Network cables are always useful
** There are retractable network cables available, they are very handy!
* Project documentation
* if necessary your Chaosnumber
* if necessary a (sufficiently convincing fake of a) document, in case we are in doubt about your age.
* The urge for wanting to know more and more and more and.....

== DO NOT ==

Just think of the netiquette in real life.
Don't be rude, stupid, selfish and whatnot.
If you have any problems, contact the Infotresen, an (arch)angel, or the CERT.

The following is just an excerpt of stuff NOT to do:

* NO Arpstorms
* NO Drug consumption equipment
* NO Game servers
* NO LAN-partying
* NO Nasty audio equipment
* NO Private WiFi access points
* NO Private DHCP servers
* NO Social hacking (don't trust anyone)
* DO NOT use POP3/telnet without encryption
* DO NOT use (Private) FTP without encryption
* DO NOT take photos of others without their permission
* DO NOT connect coffee machines (except in the coffee-rack)
* DO NOT stick anything onto the walls
* DO NOT stick nails, screws, etc. into the walls
* DO NOT carry around a magnet with 2 megatesla in your pants *g* (e.g. modern computer tomographs have 2T)
* DO NOT order food to the CCH.
* DO NOT sleep in the CCH. Please get some [[Static:Accommodation]] outside!
* DO NOT hack someone's bluetooth enabled phone. She or he could be outside in the queue...
* DO NOT hack someones GSM Phone, except they are on congress-gsm.

== Other Information ==

* Read the [[Static:FAQ|Frequently Asked Questions]], the congress reader, ask the Infotresen
* medical help in the [[static:CERT]]
* wRTFM (Write the f'ing manual)
* Go to the [[Static:Facilities#Information-Desk-infodesk]]
* Ask the [[Static:Volunteers|(arch)angels]]
* [http://www.mac-how.net/ Mac-How]

== Secure Internet Access ==

If you do not have access to a trusted VPN but want to access insecure sites or services outside the congress network without being eavesdropped on by fellow hackers, feel free to use the CAcert Community VPN tunnel. Basic documentation is available on the [https://wiki.cacert.org/openVPN/CommunityTunnel CAcert Wiki] or call / find [[User:Natureshadow]] (DECT 3128)!

'''Please note that the tunnel will most likely not be available this year. If you still need this very desperately, [[User:Natureshadow]] might still be able to help you!'''

== Operating System Specific Security ==

=== *nix ===

==== Terminal access ====
There are tools like xscreensaver or vlock, which can be used for this. Additionally, most window managers have a special "lock session" function.

If a person has physical access to a box where these preparations have been made, i.e. there are no open sessions, there are still ways of attacking. Here you should make sure your login.defs and login.access are configured reasonably (see the man page and the commented example files).

Additionally you can limit the consoles where root is allowed to log in in the configuration file /etc/securetty. A little "security by obscurity" hint: Don't allow it on the first console, this one's going to be tried most possibly. You could for example just allow console 13; seldom someone thinks of trying it there. It should be clear that manual "brute force" logins are nearly impossible, but you never know. Maybe somebody was looking over your shoulder... (My computer science teacher always sent everybody out of the room when he was entering important passwords.)

==== Physical access ====
Another thing worth mentioning: Even when all consoles are locked and the passwords theoretically unguessable, most recent notebooks and desktops are equipped with Firewire, which can be quite a lot of fun as well: http://www.ccc.de/congress/2004/fahrplan/event/14.de.html (German only) And who knows, maybe somewhere in the RAM there's a clear text copy of the necessary password...?

==== Firewall ====
Hint: If you rely on your packet filter to block incoming traffic, do not forget to filter IPv6 as well! (ip6tables on linux)

=== Mac OS X ===

An extensive OS X security whitepaper is available from Corsaire

SnowLeopard Security Config: [http://images.apple.com/support/security/guides/docs/SnowLeopard_Security_Config_v10.6.pdf SnowLeopard Security Config]

A little screencast in german covering the most important things can be found [http://t.co/bJzN5UUH here]

==== Screensaver/suspend lock ====

You should enable a password prompt when waking from sleep or screensaver. Do so by going to 'System Preferences' -> 'Security' and enable 'require password to wake this computer from sleep or screensaver' option. More options like 'disabling automatic login', 'logging out after a specific period of inactivity' and 'requiring a password to change any of secure system preferences' can also be enabled here.

==== Keychain Access ====

Also, you might want to prevent people from accessing your keychain (where all your passwords, from safari, IM clients, etc are stored). Start the Keychain utility (it's under Applications -> Utilities -> Keychain Access). Select the 'login' keychain from the sidebar and go to the menu 'Edit' -> 'Change Settings for Keychain "login"'. There you can choose to lock your keychain as you suspend your computer or after a specific time of inactivity.

By default, the password used to unlock your keychain is the same as the one you use to login to the system. You can change it in Keychain Access by going to the menu 'Edit' -> 'Change Password for Keychain "login"'. If you have some room left in your menubar you can also add the keychain status icon there (enable it via the Keychain Access preferences).

==== Pair your Mac with your Remote ====

Just point your remote at your IR-Receiver (mostly next to Power-LED) and press <Menu> + <Next> for 5 Seconds. (a big acknowledgement screen will appear, showing a chain and a remote control).
You need to be logged on as administrator, though.

==== Preventing traffic when (Open)VPN is not connected ====

http://superuser.com/a/468955

=== Windows ===

Disable the automatic logon feature. Don`t work as admin!

If you run an Windows XP Home Edition, boot your computer while holding the Shift key and log in as "Administrator". By default there is no password for this hidden admin account: you should change this! Patch your system with the newest updates and make sure to have at least the windows firewall running.

== Links ==

* http://www.ccc.de/congress/2004/fahrplan/event/14.de.html
* [http://images.apple.com/support/security/guides/docs/SnowLeopard_Security_Config_v10.6.pdf SnowLeopard Security Config]
* https://www.youtube.com/watch?v=Yv608m9d6ys

== Authors ==

This document seems to have been originated by aleχ and Scytale.

So:

"Have fun on the Congress, aleχ (translation by Scytale)"

Facilities

2017-03-30T21:56:42Z

Sling:

Below is a short list of the facilities there will be at SHA2017.

== Infodesk ==
The information desk (or info desk) is the first and main place to contact if you have any kind of problem or question. It is located in the portacabin complex and is reachabel online via info@sha2017.org or twitter @SHA2017Infodesk

Our friendly crew will try to help you, especially if you:

* need information
* think that the orga crew of the camp should be informed about an incident
* need a train/plane/spaceship ticket printed ASAP and NOW!!!! (if you ask nicely)
* need directions to a other venue off-field
* have a question regarding the organisation of the camp
* feel lost and want to know where to get Club Mate to get back in touch with life
* and if we're not busy helping people, we are also nice to have a chat with.

== Volunteers ==
The SHA2017 event can't happen without volunteers, so the Volunteers team is there to make sure all visitors who want to volunteer can do so and get all the TLC they need.

If you (maybe) want to volunteer register an account at https://volunteer.sha2017.org/ and once you arrive at the campsite walk over to the volunteer desk to let us know you're here. There you will receive further instructions about how you can help. No strings attached, you decide how many shifts you want to do. If you do volunteer however, expect a free and healthy meal, a lot of people who are happy to see you, and a warm and fuzzy feeling on the inside!

We provide:
* an angelsystem where people can register as volunteer and assign themselves to shifts
* a tent where all volunteers and crews can chill out (a.k.a. Heaven)
* distribution of food tokens for volunteers
* food and drinks for volunteers and crew, also during buildup and teardown
* volunteer coordinators to answer questions from volunteers and to make sure all teams get the help they need

Facilities

2017-03-30T21:51:59Z

Sling:

Below is a short list of the facilities there will be at SHA2017.

== Infodesk ==
The information desk (or info desk) is the first and main place to contact if you have any kind of problem or question. It is located in the portacabin complex and is reachabel online via info@sha2017.org or twitter @SHA2017Infodesk

Our friendly crew will try to help you, especially if you:

* need information
* think that the orga crew of the camp should be informed about an incident
* need a train/plane/spaceship ticket printed ASAP and NOW!!!! (if you ask nicely)
* need directions to a other venue off-field
* have a question regarding the organisation of the camp
* feel lost and want to know where to get Club Mate to get back in touch with life
* and if we're not busy helping people, we are also nice to have a chat with.

== Volunteers ==
The SHA2017 event can't happen without volunteers, so the Volunteers team is there to make sure all visitors who want to volunteer can do so and get all the TLC they need.

We provide:
* an angelsystem where people can register as volunteer and assign themselves to shifts
* a tent where all volunteers and crews can chill out (a.k.a. Heaven)
* distribution of food tokens for volunteers
* food and drinks for volunteers and crew, also during buildup and teardown
* volunteer coordinators to answer questions from volunteers and to make sure all teams get the help they need

User:Sling

2017-03-30T19:34:50Z

Sling: Created page with "{{User |Name=Sling |Arrival=2017/07/28 |Departure=2017/08/11 |EMail=sha2017@mathijs.info }} Hi! This event I'm teamlead for Team:Volunteers, contact us at team-volunteers@list..."

{{User
|Name=Sling
|Arrival=2017/07/28
|Departure=2017/08/11
|EMail=sha2017@mathijs.info
}}
Hi! This event I'm teamlead for Team:Volunteers, contact us at team-volunteers@lists.sha2017.org