DEF CON 24 - Hunter Scott - RT to Win: 50 lines of Python made me the luckiest guy on Twitter

[@mawstrange5269]

8:30 Snow forts, sleet is a location in the game club penguin (RIP) and a club penguin server respectively. So an invitation to a virtual party I suppose.

[@jadesprite]

dude i want an invite to a club penguin party!

[@hannah42069]

dude is it bad I guessed that lmao

[@PhilNEvo]

You could also make it easier for yourself, by finding one of these accounts-- then just make a script to retweet whatever they retweet xD Fuck all the searching stuff, when you can have someone doing it for you :b

[@Cfomodz]

One of the items on his list: "-100 dogecoin" oh wow - a whole Cent!

[@eliasbouhout1]

You joke, but in the future 1D will be equal to 1D

[@michaela5586]

He also one 1 mBTC which is around 6 USD

[@bloodyoil5660]

Why does mBTC make me throw up but BTC makes me happy?

[@Ниодин-ж1е]

about 2 cents now xD

[@Settings404]

@Sec Coder up to 0.08 recently

[@JoshTatum]

Absolutely brilliant. Opens up some ideas for programming projects. :)

[@kender1412]

they know who the number comes from based on the exchange and from reverse lookup databases. Most bulk phone number buys involve blocks in the same exchange. Some of the free phone number companies allow a certain amount of customization that allow you to pick a number or an exchange. Those need reverse lookup, which only give the provider on most numbers not business related. That's all you need, though.

[@EnergeticWaves]

I'm surprised he didn't guess that.

[@LuigiBrotha]

Awesome talk. Will try to make one myself :D

[@nalfmalf]

"-SAO volumes 1-4 (anime) on DVD or bluray"

[@Mr.Unacceptable]

When I first got sick I did the 4 hours a day thing. Entering every contest I could find for anything of value. I won $20K of products a year for 3 years. Lawn mowers, tools,phones, tablets, tickets and loads of odds and ends. I sold almost everything I won on Ebay auctions. I stopped because most contests were moving to FB. I don't ever want a FB account.

[@TheTravisweb]

then why are we friends on FB?

[@Fahnder99]

Camgirl refused to write maxwell equations =)

[@totally_not_a_bot]

Sad, right?

[@juliusjsudf2797]

like, come on, without electrodynamics your cam wouldnt work

[@chaidan9193]

so sad

[@ThePandaAgenda]

Would be funny if she did but he never saw because he didn't religiously follow her streams. Edit: Someone needs to find out who he's referring to and check.

[@Kriae]

Use an image instead of text, it won't be searchable.

[@hovnocuc4551]

@Kevin Morris Does Twitter OCR and index text in images, so you can search it? Asking as I don't have a Twitter account.

[@MarkPentler]

What a totally awesome and unique talk. Brilliant.

[@theyreheretokillus]

hey black hats, just a normie here with a question: creating multiple bot accounts automatically to avoid delay etc would be against tos and therefore illegal in usa, right?

[@thedosiusdreamtwister1546]

Check the "mystery party reply" for non-visible characters like U+2001. Twitter can and has been used for c&c.

[@RussellTeapot]

I'm not familiar with Twitter, since I don't have an account. Can you please elaborate more on this? Also, what do you mean for "c&c"?

[@DjAle1]

​@@RussellTeapot command & control. Programming a malware to check a twitter feed for commands is an easy way to control a botnet

[@RussellTeapot]

@@DjAle1 Ah, now I understand! Thank you very much

[@kwinzman]

From the title I thought it was about escaping a WindowsRT sandbox. ^^

[@TheSuperCommentGuy]

Great talk

[@KarRuptAssassin]

the real question is does it still work

[@Gameboygenius]

Of course it does. And the reason is that the people running the contests don't actually care about who wins. All they care about generally speaking is getting a bunch of retweets for PR.

[@TheCarpenterUnion]

@@Gameboygenius I think he meant did Twitter figure out how to ban him yet

[@michaela5586]

@@TheCarpenterUnion I think he stopped

[@Ниодин-ж1е]

@@michaela5586 maybe but i dont think so i mean there is no reson to stop its free stuff

[@cond.oriano4945]

This guy got so many fifa coins and a 750g of olives so random wtf.

[@RinksRides]

lolz, 50 lines of python running for 9 months defeats actual humans, nobody on TWITter is the wiser.

[@C23-o4o]

I’ve won several contests on social media. No cheating, no bots, pure luck and dedication haha. Very good prizes too.

[@kdvilla1148]

you could use a pizza joint's phone number or some random number you remember from you childhood. Jenny's number is a popular choice, I hear she's always ready for a good time.

[@theyreheretokillus]

this is supposed to be a grim a place. yet i can sense the grief in the audience that being mentally functional understands that the cast signed hat will never go to a poor fan, and im not judging here, instead ends up with a hacker who probably threw all the stuff away.

[@savorodrigues5936]

I swear this guy is from the show: Silicon Valley

[@MichaelOfRohan]

This aged well >.>

[@jody5661]

I wonder how many people on Twitter have Sinon as there profile photo...

[@pukesmiley2784]

This came to my mind when i was 14ish. I typed giveaway into twitch, entered a stream, won a game and left. Its the same idea, but manualy and with a win rate of 100%

[@busTedOaS]

pure luck is not the same as this at all

[@eleanor-forte]

Holy shit this dude won dude wipes. A few days ago, a very beaten up box of dude wipes (crushed by dog food) _that I did not order_ just appeared. It came in a box from amazon and everything.

[@jakeguard9099]

Someone probably is trying to give u a hint

[@shadowling77777]

You stink

[@CaptainTyler-xi9zs]

We had a dude get some dude wipes in basic training. It was pretty funny.

[@TheTravisweb]

@@CaptainTyler-xi9zs no way DUDE!

[@MrCraigtastic]

That is part of someone running a Brushing Amazon scam

[@uiopuiop3472]

I need that NCR pillow

[@Mark-uq9ty]

Omg my sub feed

[@iLLixer]

I know yeesh

[@miniwarrior7]

That was you

[@bashisobsolete.pythonismyn6321]

14:07 WTF..... WT actual F.

[@0xc0ffee_]

Well, he didn't say how many of those were actual real contests and of how many he really received the prize

[@Raid77]

python is awesome!

[@darth_dan8886]

Not python, programming in general is) You can do the same with most other languages

[@Jimmeh_B]

YEAH!!!! you can do ANYTHING with python!!! Badly.

[@liuton2005]

Python is really bad as a programming language but it's really fast so it's good for scripting

[@theenigma1109]

@@liuton2005 are you dumb? Py is actually slow, but easy to write in. You can choose to write 500 lines of fast c++/Java vs 50-90 lines of moderately slow python

[@tomerk7330]

@@liuton2005 You clearly dont know what you are talking about.

[@mathiasensimon]

I wonder how many tried doing this after this talk lol

[@bdnugget]

11:30 left looks like a dope ass membrane vacuum pump

[@bashisobsolete.pythonismyn6321]

i had one burning question and you have answered it! tx

[@TheTravisweb]

it's not that dope, prolly uses it for fractioning , but it's def more expensive then a crap CPS @@bashisobsolete.pythonismyn6321

[@ChaplainDaveSparks]

What would be interesting would be a script that would set off some sort of chain reaction.

[@jasondads9509]

check out the cross XSS exploiting where this guy managed to fit a piece of code into a tweet that would retweet itself to anyone who sees it. Heard it broke twitter

[@ambushb0y]

This made my day

[@woahdaggies]

Is this... is this NLP?

[@aminuteago101]

What’s the code

[@ko-Daegu]

6:00 anyone knows another way to get a Phone number

[@TheTravisweb]

yes

[@mattd773]

Winner winner chicken dinner.

[@RogerBarraud]

I hope you typed that in a really high and manic voice! :-)

[@mdgraller]

9:51 never apologize to anime profile pictures, they're not real humans

[@JC34258]

...I want to see a camgirl with Maxwell's equations written on her body in chocolate sauce. That would be awesome. Geeky girls are the best.

[@thewhitefalcon8539]

I'm not gonna comment on the porn aspect but that is totally hilarious.

[@timothyhaug2060]

Joe Carpenter that would be awesome sauce. (pun intended) lol

[@funnymyth1827]

There's no way he paid taxes

[@afivey]

If the coverage of the talk went viral, the tax question would come up, so I can completely believe he did. Besides, it would have been covered by selling some of the haul on eBay or wherever.

[@shannajones7417]

Haha on the list it says 'Entry to Pryzm nightclub in Cardiff, England.' Cardiff is the capital of Wales, JUST SAYING.

[@CobraAquinas]

So has anyone figured out how the fuck does google know where your number came from Driving me straight up nuts for other projects.

[@4esv]

Area code + Prefix gives it away. Companies like twillio buy phone numbers in chunks

[@CobraAquinas]

@@4esv no mean how do they know you’re not another person like if I get a burner phone right now with a brand new number. Google will straight up block the new one and not allow a new account.

[@4esv]

@@CobraAquinas Well, ever heard of callerID? Phone companies have lists of what phones are registered to who so when you call your grandmother your name shows up

[@CobraAquinas]

@@4esv it’s straight up not registered in my name

[@4esv]

@@CobraAquinas Are you trying to add it to an account that requires a name? It wouldn't be too hard to verify if the phone belongs to the name registering the account

[@mareli82]

well now i want a scrip to do this :p

[@altimmons]

I can tell you how the twilio deal works. Do you still need to know? I was forced to figure it out at one point due to being targeted by a scammer. let me know,

[@JohnDoe-nq4du]

By your criteria, I'm very obviously not a real person.

[@DirtiestJoe]

would be a good highschool project

[@nodvick]

how they know: CNAM

[@dharmeshsingh9050]

Maxwell's equation!!! 😂😂😂😂😂😂

[@expert20valvehlx]

Well it's time to learn phyton

[@danksupreme7078]

he took the 5 min video of a stripper

[@SashkoBljad]

awesome

[@mantasreika]

thats great

[@vadl9947]

in web so much bots and hackers, jerks that making money fraud or fake youtubers that for money tell anything and real fake world exc.

[@frnkmnc]

How to get the code?

[@user-iu3ii8sq6t]

Hilarious I love it

[@TheFlatronify]

So the first 3 seconds were painful for my ears. **Headphone users be aware...**

[@HorvathAndreas]

Very funny 🤣

[@Trophonix]

im gonna do this lol

[@samserios6428]

Great. So you won stuff signed by people you never heard of before and the real fans of those people, fans who wanted to win signed cds and other stuff, didnt get it. Therefore its very nice to see that he explains how to avoid this when doing a giveaway.

[@x3ICEx]

hscott,n3t/winnings.txt

[@x3ICEx]

hscott.net/winnings.txt

[@MisterBuckDancer]

@racer236

[@themaninawhitecoatandhat7503]

didn't this guy win a new shirt or a trip to the hairdressers?

[@superscatboy]

Not that you're shallow or anything.

[@miniwarrior7]

He declined a free strip club offer too

[@Chillypuwn]

pretty sick, but I still think this is immoral

[@miniwarrior7]

This is automation*

[@ThunderAppeal]

He thought the movie Real Genuis is 'so good'. Speaks to the low standards most of these 'nerds' have.

[@user-iu3ii8sq6t]

Why? that movie makes college look like Disneyland for nerds, and for some people it was! It's funny too

[@epicaf140]

That stuff he won is total rubbish which also makes this video rubbish.