Richmond, VA

June 4th - 5th, 2015

RV4sec 2015: Ticket Transfers & Cancellations

Did you know you can transfer an RVAsec ticket to a co-worker or friend directly in Eventbrite?

Log in to your account and go to My Tickets (you may need to create an account using the email address you registered).

Then you can view your Current Orders (select RVAsec), and “Edit details” for the ticket. Changing the “Contact Information” will update the name of the person registered to check in at the conference. You can also change the questions asked at registration, which will help us plan for parking, catering and other items.

Also, please note that no refunds for training or the conference will be issued after May 26th.

Silver Sponsor Feature: Bit9+Carbon Black

Bit9+Carbon Black



bit9-plus-carbon-black-tagline.png (736×199)

Bit9 + Carbon Black provides the most complete solution against advanced threats that target organizations’ endpoints and servers, making it easier to see—and immediately stop—those threats. The company enables organizations to arm their endpoints by combining continuous, real-time visibility into what’s happening on every computer; real-time signature-less threat detection; incident response that combines a recorded history with live remediation; and prevention that is proactive and customizable.

Don’t have a ticket yet? Register now!

RV4sec 2015 Badge Build

Paul Bruggeman from HackRVA provided us with an update on the badges!

Badge Design



The printed circuit board, or PCB, is the backbone of any circuit board. It supplies the physical strength and fundamental wiring for the board. It also determines the minimum size.


The circuit design artwork is Badge2015-2drawn, usually with special software but hobbyists sometimes just draw them by hand. The gEDA software suite has a component called “pcb” that was used to draw the badge.


Badge Etching




The PCB board is fiberglass-reinforced epoxy laminated with a thin copper sheet which is etched away using ferric chloride to recreate the artwork.





One goal of this year’s badge was to use a professional process to cover the Badge2015-4boards with the acid resist. Attempts last year worked but were not consistent.





Badge Cutting




Once the boards are etched they have to be cut down to final size. PCBs are tough material to cut.




The addition of a sheet metal cutter this year has made it much easier to do.Badge2015-6 The steel blade is 1/2″ thick and the whole thing weighs 60 lbs!







Badge Parts



With the boards cut down, the next process is to put the surface mount parts on. Most of the 50+ parts are surface mount. This means they have no wires to solder, because they have metals pads that melt and attach when heated to 510F degrees.


The process of installing the parts is called “pick and place.” Not very Badge2015-8complicated, but it can be tedious to do, especially 350 times!







Badge pick+place

Badge2015-9First a solder paste containing thousands of beads of tin is drawn across a stencil that leaves the sticky grey paste where the parts will be placed. This stencil is etched copper foil. Stencils can also be plastic or steel.


The board then makes its way down the volunteer assembly line where parts Badge2015-10are carefully placed on the solder paste. We have had the help of over a dozen HackRVA people so far this year.



Badge Cooking

Badge2015-11The solder paste has to be melted or “re-flowed” to electrically connect the parts to the PCB. This currently is not very hi-tech: $20 donated ovens.  A volunteer last year built a micro- controlled unit but the heating element died on it.


The manual ovens require attention. Failures are usually of the distracted Badge2015-12human type. We had a board last year survive a 5-hour session underneath the oven, and it worked fine–though it looked like burnt toast!



Badge Wrap-up



The last things to go on are the hand- soldered parts: infrared transmitter and receiver, piezo buzzer, USB connector, USB detection wire, and the LCD panel.





If you plan on doing any software development we recommend the reset Badge2015-14button option (red in picture) which can be soldered across the middle and far right pin on the lower center 5-pin programming header.





Design: Paul, Morgan

Electronics: Paul

Coordinator: Morgan

Etch: Paul, Jon, Aaron

Pick+place: Jon, John, Bill, John, Yijie, Sidney,

Thad, Tony (so far)

CTF: Know A Local RVA Company That Needs Security Help?

Do you know any local RVA companies that need security help?  Whether they can’t afford to hire help, are a Non-Profit organization or something else, the RV4sec CTF team is here to help!

This year we are working with Bugcrowd to allow CTF participants the ability to give back to the community. The live bug hunting aspect will provide real organizations security testing so they can better understand and improve the security posture of their online presence.

Please help us spread the work that an organization can receive free security testing by signing up for the BugCrowd platform here:

Once you signup please email us so we can help you through the next steps.

The testing will provide real world feedback on what an attacker would be able to see from the Internet, allowing you to understand what needs to be fixed.

If you have any questions please contact us to discuss!

This year’s CTF is being sponsored and brought to you by United Network for Organ Sharing (UNOS), a non-profit 501(c)(3) organization.




RV4sec After Party Sponsored By Rapid7, Guidepoint and nVisium!

We are pleased to announce that Rapid7, GuidePoint and nVisium have all come together to sponsor the RV4sec after party!

The after party will be held at Pearl on Thursday, June 4th at 6:30pm!

The event takes place shortly after day one of the conference ends–and it is a quick ride over so you can head right from VCU for some cocktails and food!

Event Details:

Thursday June 5th 6:30pm-8:30PM (maybe longer!)
2229 West Main Street, Richmond, VA 23220


Google Maps Link

Thanks again to our sponsors for making sure RVAsec attendees will be well taken care of this year!


Guide Point Security


Get Your Hotel Room By 5/13!

Just a reminder that if you need a hotel room for RVAsec, you should book it before our block at the Crowne Plaza ends on 5/13.

RVAsec has reserved a block of rooms at the Crowne Plaza for out of town guests. The rate is $113/night (which includes parking).

You can either book online or call the hotel.

When you call (855-472-7802) the hotel please tell mention the block “RVAsec” to get the special rate.

Crowne Plaza Richmond Downtown
555 East Canal Street, Richmond VA 23219


View Larger Map

If for any reason you are unable to get the RVAsec rate or the block of rooms has been filled, please let us know so we can contact the hotel!

Once the block is full or expires we are not able to have it extended.

Make sure you check out information on getting to the conference.

Also you can check out things “ToDo” in RVA!

Silver Sponsor Feature: Capitol Technology University

Capitol Technology University


M7h4Z9KF.jpeg (192×192)

Educate. Innovate. Inspire. These three words capture the essence of Capitol Technology University.

Capitol is the only independent college in Maryland dedicated to engineering, computer science, information technology and business.

Founded in 1927, Capitol is a regionally accredited institution that blends academic excellence with practical learning experience. Capitol Technology University provides a hands-on education that prepares students for a range of challenging and competitive careers.

The college’s suburban location, halfway between Washington, DC and Baltimore, enables collaboration with major businesses and government agencies. At Capitol, we blend tradition with aspiration, a vision for the future and mission rooted in our history. The programs we offer, people we work with, students we teach, and businesses we develop partnerships with all contribute to the promise we live by.

Capitol Technology Universitys offers a relevant education in a supportive environment for career success.

Register now