Undercover NBC Reporter Bolts from DEFCON2007


Recommended Posts

From George Ou's blog on ZDNet:

Undercover reporter Michelle Madigan (Associate Producer of NBC Dateline) got a little more than she bargained for when she tried to sneak in to DEFCON 2007 with hidden cameras to get someone to confess to a felony. When DEFCON staff announced the ?spot the undercover reporter? game and told the audience that an undercover reporter was taking video to catch someone confessing to a hacking crime, Madigan bolted from the conference premises followed by a pack of ~150 DEFCON attendees and reporters trying to photograph and video tape her. DEFCON officials never got the chance to bring Madigan on stage to offer her a press badge so that she could cover the rest of the event above board.

DEFCON organizers caught wind of this from undisclosed sources and casually contacted Madigan to see if she wanted official press credentials and a press badge to cover DEFCON. Reporters in the pressroom were then fully briefed on the situation before the ?spot the undercover reporter game? so that they could cover the event.

According to Senior DEFCON official ?Priest? who works for the Government in his day job, Madigan declined press credentials on four separate occasions (twice on phone and twice at DEFCON). Madigan proceeded to register as a regular DEFCON attendee and even told a DEFCON staffer that she was going to the bathroom to get her hidden camera ready. When a DEFCON goon (staffer) explained to Madigan that secret video taping wasn?t allowed, Madigan not knowing she was speaking to a goon replied that she didn?t think it wasn?t a problem. The staffer then followed Madigan around and watched her as she panned her hidden camera around the entire ?Capture the flag? room to get unauthorized video of the members.

Madigan was apparently trying to do a shock piece for NBC Dateline to show middle America how criminal underground hackers had descended on DEFCON Las Vegas to learn tricks of the trade and how Federal Agents were tracking them down. When a DEFCON staffer spoke to Madigan posing as regular attendee, Madigan commented that people in Kansas (reference to middle America) would be very interested in what was ?really? going on in DEFCON. DEFCON official ?Priest? also had reason to believe that that Madigan was planning to out uncover federal agents attending DEFCON and expressed some serious concern about the safety and privacy of those agents. Because of this, staffers used this to lure Madigan to the room where they planned to out her instead in front of DEFCON attendees in the ?spot the undercover reporter? game but Madigan bolted from the scene before her photo was put up on the projector.

The sad part of this story is that Madigan was given every opportunity to get a press pass and get access to any of the speakers and attendees above board. Even after the secret video taping she was offered a chance cover the rest of the conference with an official press badge. This is my second year covering DEFCON and I?ve never had any problems getting photos or video from willing attendees and speakers but that?s not what Madigan was going after. She wanted to paint a picture that would shock ?people in Kansas? about DEFCON and that?s not what DEFCON is about. The Feds, Press, and hacker community have built up a level of mutual trust at DEFCON so that we have a place to talk openly and honestly. After taking an unofficial poll in the press room here, not one person appreciated Madigan?s antics.

Source: http://blogs.zdnet.com/Ou/?p=653

Is DEFCON itself actually illegal, or is it just inticing to those who practice in illegal underground hacking?

If I'm not mistaken, this years DEFCON is attended by around 5000 people this year which makes it the worlds largest hacker convention. It is definitely more than just a group of people gathering showing off their latest monkey business.

For those who are interested DEFCON is packed with presentations about everything regarding computer, hacking and security related subjects, but there are also lots of events and great competitions such as Capture the Flag which is a hacking competition where teams of hackers attempt to attack another teams server to steal various data while obviously having to defend their own server against attacks from other teams. There's Hacker Jeopardy, Guitar Hero and lockpicking competitions and also other fun ones such as the Beverage Cooling Contraption Contest (self explanatory I guess), and the CoffeeWars which is all about showing off your best coffee beans and get your brew rated the highest. I've done a pretty poor job of summarizing, but there is much going on.

Oh, but to answer your question: No it's definitely not illegal.

I wonder how Dateline will have to restructure the show it was producing in light of this, or if they'll even show the episode at all. I'd hope that they wouldn't try to pass this off as the evil hackers attacking the innocent reporter, since there is ample video evidence to the contrary.

Is DEFCON itself actually illegal, or is it just inticing to those who practice in illegal underground hacking?

DEFCON itself is completely legal, as long as they don't do anything stupid amongst themselves that can be considered illegal.

Kevin Mitnick reportably gave an awesome speech about how much trouble you can get into when you hack things one year.

God I wish I'd been there.

DEFCON itself is completely legal, as long as they don't do anything stupid amongst themselves that can be considered illegal.

Kevin Mitnick reportably gave an awesome speech about how much trouble you can get into when you hack things one year.

God I wish I'd been there.

Ah, thanks, that explains it. So it's basically an annual meeting of people in the computer industry who talk about newly discovered vulnerabilities in software and hardware and all that? Do security companies attend these things to improve their own products?

From what I understand, DEF CON is basicly like an engineering event on security, but it's a real mixture of people from the pros to your casual person. Then chuck in lots of games to make it more fun and a learning experience for everyone.

Seems like some reporter was just trying to make the most out of nothing, sure there is going to be people that have/do illegal activities but sounds like she wants to take it out of context.

Ah, thanks, that explains it. So it's basically an annual meeting of people in the computer industry who talk about newly discovered vulnerabilities in software and hardware and all that? Do security companies attend these things to improve their own products?

Correct on both counts.

  • 3 weeks later...
I wonder how Dateline will have to restructure the show it was producing in light of this, or if they'll even show the episode at all. I'd hope that they wouldn't try to pass this off as the evil hackers attacking the innocent reporter, since there is ample video evidence to the contrary.

unless they can get michael moore to edit the video... he can turn it into just that "evil hackers attacking the innocent reporter"

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • How many other companies will follow Ford's lead? Or, have they already gotten lazy and become enslaved to AI--and now can't figure out how to get out of that mess.
    • Why would any self-respecting intelligent person follow any recommendation by Donald's GOP administration? With almost two years of fabrications, deceit, and blatantly illegal behavior, why believe them now? They had best be gone after the November 2026 election, so we'll wait and see.
    • AltSendme 0.4.1 by Razvan Serea AltSendme is a minimal, cross-platform application designed for fast, secure, and private peer-to-peer file transfers. It allows users to send files or entire directories directly between devices without relying on cloud servers, accounts, or any personal information. Everything is encrypted end-to-end using modern protocols like QUIC and TLS 1.3, ensuring both strong security and low-latency performance. Transfers are verified with BLAKE3 for data integrity, and interrupted downloads automatically resume, making the experience reliable even on unstable connections. You can transfer anything—images, videos, documents, and more. Integrity checks are performed on both ends, so your files are automatically verified for correctness during both sending and receiving. AltSendme works seamlessly across local networks or long-distance links, capable of saturating multi-gigabit connections for extremely fast delivery. With built-in NAT traversal and encrypted relay fallback, it connects devices almost anywhere. The app integrates with the Sendme CLI and will soon support mobile and web platforms. Fully free and open-source, AltSendme offers a lightweight, privacy-first alternative to traditional cloud-based services, removing size limits, upload costs, and unnecessary data exposure. AltSendme 0.4.1 changelog: Release Highlights Self-hosted relays: Run your own iroh relay so transfers don't rely on public infrastructure. Includes a full deployment template in deploy/relay/ with Docker Compose for a VPS and configuration examples for production use. Fly.io support: One-click deploy template for Fly.io, including a quick-start config (fly.dev.toml) for testing without a custom domain, plus production setup with Let's Encrypt and your own hostname. Relay settings UI: New Settings → Network panel to choose how AltSendme connects: automatic public relays, custom self-hosted URLs (with optional auth token), or disabled. Test connections, verify latency, and see live relay status in the footer. Disable relays: Turn off relay servers entirely when you only need same-network transfers (e.g. LAN). Direct connections only. No relay hop required when devices can reach each other. Android graduates from beta: Android is now part of the regular release cycle alongside desktop. APKs ship with each version (universal, arm64, and armv7). Other improvements Private relay access control via shared auth token Relay fallback notifications when a custom relay is unreachable Broadcast mode toggle in sharing settings Android release build fixes (split-per-ABI APKs, universal APK preservation) UI polish: mobile safe-area insets, dropzone layout, transfer progress animation Bug fixes for minification-related serialization issues and system tray icon loading What's Changed feat(relay): add relay status functionality and settings UI (a120cdf) feat(relay): implement custom relay server configuration and verification (51276c7) feat(relay): add configuration for private relay access and enhance observability features (48fbabf) feat(relay): enhance relay URL validation, display connection status (d4fffa0) feat(relay): add RelayChangeGuard component and enhance relay-related translations (16ba514) feat(broadcast): add toggle setting for broadcast mode in sharing UI (ca6d977) fix(relay): correct QUIC discovery port, pin image, templatize fly.dev (52a2ba5) fix: More broken serialization due to minification (67491a9) fix(android): preserve true universal APK across per-ABI builds (e9f256f) fix(ui): conditional safe-area insets padding on mobile (1182f0e) refactor(transfer): CircularRing component animation fix (944572b) chore(android): drop x86 and x86_64 release APKs, keep universal+arm64+armv7 (34ada0b) Download: AltSendme 0.4.1 | ARM64 | ~9.0 MB (Open Source) Download: AltSendme for MacOS | Android Links: AltSendme Home Page | GitHub | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • You are mostly right about the ephemeral nature of it. As I mention in the article, if you dont add a second device or take a backup of your account before uninstalling it, then yes you will lose access to your account. That said, in terms of actual user experience when you sync multiple devices your message history carries across and there's also a Saved Messages chat like there is on Telegram to send messages and attachments between your installs. But yh, what you point out are correct and its not trying to emulate Messenger or Telegram.
    • OK so SearXNG is a meta search engine that you can install locally or use via a public instance. It scrapes other search engines which you choose and then sorts the results. Not as complicated as multiple relays
  • Recent Achievements

    • Week One Done
      flexorcist earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      492
    2. 2
      +Edouard
      224
    3. 3
      PsYcHoKiLLa
      150
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!