 Hello, YouTube, and welcome back to another video. Thank you for tuning in. This time I want to showcase Kringlecon, the Sands Holiday Hack Challenge for this year 2018. I am just at holidayhackchallenge.com. You can go to it in your browser, and it is the static page representation and rendition of Kringlecon. Actually, if we just scroll down here, it'll explain, this is the 2018 Sands Holiday Hack Challenge. This is one of my favorite things. I actually found this in 2015, which sounds to be, and seems to be anyway, the right time, the perfect time to find this. I'll cover some of the past challenges once I go through this here. It says, Greetings, holiday travelers, welcome to the North Pole for Kringlecon, the first ever cybersecurity conference hosted by Santa and his elves. So we have a little letterhead here for Kringlecon. It says, you can access all the objectives for this year's holiday hack challenge here at this link, and that's the same as the story right on top of the navigation there. As you work on those objectives, you can also attend Kringlecon to watch talks, now work with their attendees and work on your objectives by entering North Pole and visiting Santa's Castle, et cetera, et cetera. You can access Kringlecon here, which again is the same link for this and the navigation. Also, please do keep it on your badge for updates on the narrative and various happenings around Santa's Castle during the con, and gosh, we're hoping for a fun event this year without nefarious holiday capers impacting us. Cool. So, then it has kind of the regular Sands Holiday Hack Challenge boilerplate stuff. Submit all the answers by this date, January 14th, which I think is the second Monday in January. Hopefully, I'm releasing these videos after that because I'm going to consider that the end of the competition, in which case it's fine to showcase a lot of these solutions and walkthroughs. Yeah, so I had actually participated in 2015, played some of it, didn't like complete it all, played 2016, not as much as I did in 2015, didn't submit anything at all and didn't finish. So I told myself in 2017 I wanted to play it through and through and write a report and that was awesome. That was super fun. I actually got a super honorable mention here. You can see me right down there. I was very pleased with that, very proud of that. I got a personal email from Ed Skotis and that was probably one of the best things in my life. Not going to lie, it was super sweet. So I have not played anything beyond 2015, 2014, etc., etc., 2013. It looks like these are actually on back to the Sands webpage. They don't have a dedicated site for them. But if you go to haul2hackchallenge.com, like slash 2017, slash 2016, all the recent ones again up to 2015, they have that dedicated page but the others are here. So I have not played through 2014 and earlier. If you guys would like to see that, hey, maybe I can do that in a video and it'd be funsies. We'd enjoy it. So let's go back to haul2hackchallenge because I want to showcase now the story because that's where we're going to be spending most of our time. These are the objectives and the challenges for the actual challenge. The 2018 Sands haul2hackchallenge. I was so excited when this opened. There was so much hype waiting at the gates. I think I have a picture. I can put it up. As you walk through the gates, a familiar red-suited haul2hack figure warmly welcomes all of his special visitors to Kringlecon. Santa! Welcome, my friends. Welcome, my castle. Would you come forward, please? Welcome. It's nice to have you here. I'm so glad you could come. This is going to be such an exciting day. I hope you'll enjoy it. I know you will. I think you will. I can feel. I can hear anyway. Like I can't feel. That's weird. I could hear Ed Skotis being Santa right now. Today is the start of Kringlecon, our new conference for cybersecurity practitioners and hackers around the world. Kringlecon is designed to share tips and tricks to help leverage our skills to make the world a better and safer place. Look around, enjoy some talks by world-class speakers, and mingle with our other guests. If you're interested in the background of this conference, please check out Ed Skotis' talk called Start Here, and that will be crucial for the first challenge. It says, delighted to meet you, overjoyed, enraptured, and dranced. Entranced. Are we ready? Yes. In we go. And then we get to go through all of the different questions. I can't seem to remove my answers from here. I cleared my cookies. I cleared my local storage. And then I was like, screw it. I don't really want to worry about what is actually saving these things. I just won't scroll down enough that you can see the answer. So this is question one. I'll put it up in the center. What phrase is revealed when you answer all of the Kringlecon holiday hack questions? Holiday hack history questions. For hints on achieving this objective, please visit Bushy Evergreen and help them with the essential editor skills, cranberry pie terminal challenge. Okay. So from what I understand, all we can do to access these terminal challenges are part of Kringlecon. They're inside Kringlecon. At least once you get the URL, the URL is what's necessary, but then even getting the hints from that elf, you have to play them inside Kringlecon. A lot of people don't like the, at least a lot of the people that I know and talk to in IRL, right, personally in real life, they don't really like going through that minigame or walking through the world and chatting with other people. But I think it's fun and kind of necessary and cool things to do. So this is Kringlecon. You can click through it and it gives you a little bit of overview here. But we want to register a new account. I guess I'll just use a crap one that I have. If any of you see John Hammond YouTube walking around, you know it's me. Oh, I can't even write it. No. YouTube. YouTube with the you. Password, I don't know why I get sketched out when I type my password on camera, quote, unquote, on camera, even though obviously you can't see any of it. I am from the United States. I am at least 13 years of age. Actually, I have to I have to second guess myself sometimes. That's my character. So if you wanted to, sorry for the glitches here. Wow, the music. Let's turn that off. I don't know if you could hear that. Music is awesome, though, by the way. The soundtrack for the Holly Hack Challenge is probably another one of the most incredible things about these challenges and also being able to chat with everyone. This is incredibly incredible quality content is what Sans always offers. So if you wanted to, you can disable the menu. There's some help stuff that you want. If you wanted to read through this, that's just that question mark. I didn't find that too necessary. It's like the chat. And if you want to modify your person, you can change the colors in the head. And there's so many stuff to work with this before the game got started. A lot of people were, oh, I like that. Nice. A lot of people were curious what all of these things did and how were they changing, right? So if you actually open up your developer tools with just F12, you can see all these strange colors on the side here. And that's what I think people begin to call the DNA. And I mean, that's probably just what it really is, the genetic code of this person and their customization. Net Spanker, NetSparker. Oh, I'm sorry. I may have totally butchered that name. I'm pretty sure it's NetSpanker because NetSparker is another thing. NetSpanker had an incredible GitHub repository. And I chatted with him on centralsec.slack, centralsec slack, central security slack. I chatted with him and this is just really, really cool. He mess with it so much more and kind of learned what was behind this. He reverse engineered a lot of the JavaScript and even put together a nice little menu or infographic for all of these things. All right, that's going to be my dude. I want to be, I like that, I guess. He's my dude. Sorry. He totally didn't need to customize a character for a YouTube video. It's completely useless, I know. I'm sorry. I'm not even him. It didn't work. Do I have to refresh? I'll probably have to log back in if I do that. OK. Nope, still that thing. Whatever. I hit save changes. I thought I did anyway. But now you know that you can if you wanted to go ahead and modify your character. So you start off at the gates and there was so much hype when the gates weren't open. Hi, J Douglas. So as you move forward, you can see down below I had unlocked a narrative or something that I can hit on my badge. So if I click this little tree that's the icon on my character, this is inside the CrinkleCon game, the menu for all the narratives, objectives, and hints, et cetera. So if we get the first narrative as you walk through the gates, if you really receive a holiday figure, we'll really, we've covered this already in the static page. Objectives, we don't know yet. Hints, et cetera. Can we see the talks yet? OK, we can see the talks. So in the achievements. OK. So the talks. This is what makes CrinkleCon really cool and really unique out of all the other recent Hall to Hack challenges is that they wanted to make it a conference. So they have people, real people, John Strand, Derek Rook, Larry, et cetera, Jack Daniel. Jack Daniel, that was awesome. I didn't expect that. Chris Elgie, Chris Davis, et cetera, et cetera. The list goes on, right? Showcasing a talk, either on a technical thing, sometimes a lesser technical thing, just like a regular conference. And the way they do this is in a YouTube video. And I'll showcase that in the next video when we go through Ed Scottus' Start Here Talk. I won't show it, but I'll try and segment out parts that I can, or what I can show, right? But it's awesome. And they do this through YouTube, although in the game, inside Santa's Castle, you can walk into different rooms that have those cons or the talks going on, as if it were part of the con, right? Because it is. It is a conference. So you can keep clicking around, keep walking through, and then you will end up visiting Santa, who's right here. He looks so jolly. You gotta love it. This is weird. This feels like a let's play video, but I promise it's not. And he has the same dialogue as what we saw on the Static Holiday Hack Challenge page. So I won't go through all of it, but it is necessary to talk to him in the game, inside KringleCon, because just as we finish, we get all of those objectives unlocked and is more of the narrative, I believe. So now if we click the badge again, Jen Jackson, zero one, one zero. Get a little close there. Now we have all the objectives unlocked. So we can work through all of them. And the orientation challenge is the first one to go through. And that is, again, just as we saw in the Holiday Hack Challenge Static page. That's just the Holiday Hack history thing we need to work through. So I want to, in the next video, showcase that raspberry pie or cranberry pie challenge. Gotta make it cranberry so it's more Christmassy. And here we go, inside Santa's Castle, as we walk through the doors, there is the Kringle History kiosk and Bushy Evergreen is down here on the bottom right with the cranberry pie challenge essential editor skills. So if we were to click on this, or even if we were to talk to Bushy Evergreen, she says, hi. Do you think Bushy Evergreen is a boy or a girl? I went with girl because I think that's just, I don't know. People, Pepper says his editor is the best, but I don't understand why. He's forcing me to learn VI. He gave me a link, I'm supposed to learn the basics. Oh, cool. Can you assist me with one of the simple cases? I need to actually get out of VI. So this is not a hard challenge, but we'll cover it in the next one and then we can actually go through its video and all. So the hints here, Indiana University and VI tutorials. So let's click on this. Quit the VI editor without saving your changes. Looks like this explains it literally how to do the challenge. Well, bring me back. Okay, cool. Yeah, I was surprised I did that. So once we open this up, it's a little Docker container put together with WETI or WETTY and it's just an in browser terminal. I'm in quite a fix. I need a quick escape. You know what? Let's cover this in the next video. Thank you guys for watching. Hope you're enjoying this. I think this will be a really fun series. I haven't done this kind of thing before, but I would like to showcase more of the Sans Hall to Hag Challenge. And we'll keep rocking. Love you guys. See you in the next video. Thanks for watching. Hey, leave a like, comment and subscribe on the way up. Thanks.