diff --git a/docs/facilities.md b/docs/facilities.md index d57d693aa7641fc6edec41321c88db2df1b12134..37509aa7b745e20fefd7a880dbc313ca4ac8a732 100644 --- a/docs/facilities.md +++ b/docs/facilities.md @@ -80,5 +80,22 @@ Coordination of volunteers and angels. Contact for all angels and crews to manag ## POC ## GSM ## Network + +As usual there will be wired and wireless connectivity avaible. +See [Network](network.md) for more information. + +### Wired + +see [Network#wired](network.md#wired) + +### Wifi + +The following SSIDs are provided: + + * Camp2023 (WPA2 802.1X (see below), 2.4GHz+5GHz) ✅ noc recommended ✅ + * Camp2023-open (open/OWE, 2.4GHz+5GHz) + + + ## Power ## Membership Desk diff --git a/docs/how-to-survive.md b/docs/how-to-survive.md index 7defee5a36114a4bebfb6fbf6ebad8f7c5890d67..36e6d128e24ba392e4ac59089be7dc9596912581 100644 --- a/docs/how-to-survive.md +++ b/docs/how-to-survive.md @@ -4,9 +4,11 @@ ### Camping Equipment * a tent -* stable tent pegs (best use v-profile ones) +* **stable** tent pegs. The ground is hard. + * maybe a hammer or other tool to drive them into the ground * a sleeping bag * a mattress and a sleeping pad. Maybe a cushion. +* a sleeping mask if you are sensitive to light. * a drinking bottle. Drink more water - drinking not enough (water! not mate, not beer!) is the most common DoS-Attack at camps. * a rescue blanket: One of those silvery blankets you find in first aid kits. They are very good at reflecting sunlight away from your computer monitor, so you'll be able to hack during the day. Most tents let in a *lot* of light and rescue blankets are one of the cheaper ways to fix that. * blanket to sit on and place your laptop on. You might not want to sit on a dew covered ground in the morning diff --git a/docs/img/supporters/200px-Supporter-eventinfra.png b/docs/img/supporters/200px-Supporter-eventinfra.png new file mode 100644 index 0000000000000000000000000000000000000000..20e3fe755f73184386cff85684070e70c3f29da3 Binary files /dev/null and b/docs/img/supporters/200px-Supporter-eventinfra.png differ diff --git a/docs/img/supporters/babiel.png b/docs/img/supporters/babiel.png new file mode 100644 index 0000000000000000000000000000000000000000..8bc0848792cb52b4a580f994115104db2c6efd3b Binary files /dev/null and b/docs/img/supporters/babiel.png differ diff --git a/docs/img/supporters/bcix.png b/docs/img/supporters/bcix.png new file mode 100644 index 0000000000000000000000000000000000000000..26272153b8e28496730cc90686f2a2612b46911b Binary files /dev/null and b/docs/img/supporters/bcix.png differ diff --git a/docs/img/supporters/community-ix.png b/docs/img/supporters/community-ix.png new file mode 100644 index 0000000000000000000000000000000000000000..27184031fb7f0bfaabe5dc7cd6e1427e4d03e270 Binary files /dev/null and b/docs/img/supporters/community-ix.png differ diff --git a/docs/img/supporters/ediscom.png b/docs/img/supporters/ediscom.png new file mode 100644 index 0000000000000000000000000000000000000000..e58f19c9bbe0f9563e7b9af57d6fb4b5a763bdff Binary files /dev/null and b/docs/img/supporters/ediscom.png differ diff --git a/docs/img/supporters/eventinfra.png b/docs/img/supporters/eventinfra.png new file mode 100644 index 0000000000000000000000000000000000000000..20e3fe755f73184386cff85684070e70c3f29da3 Binary files /dev/null and b/docs/img/supporters/eventinfra.png differ diff --git a/docs/img/supporters/flexoptix.png b/docs/img/supporters/flexoptix.png new file mode 100644 index 0000000000000000000000000000000000000000..41d9a9caf4b7bf69ab0936e9772b59189542284d Binary files /dev/null and b/docs/img/supporters/flexoptix.png differ diff --git a/docs/img/supporters/telekom.png b/docs/img/supporters/telekom.png new file mode 100644 index 0000000000000000000000000000000000000000..752c50313690145349c50982f443b15e29571708 Binary files /dev/null and b/docs/img/supporters/telekom.png differ diff --git a/docs/network.md b/docs/network.md new file mode 100644 index 0000000000000000000000000000000000000000..3bbc7337c84dad415d0ab2676a28068ca1da3cba --- /dev/null +++ b/docs/network.md @@ -0,0 +1,110 @@ +# Network + +## Rules of Conduct + + * Be fair! Do not do to others what you do not wish done to yourself!🌈 + * Protect your computer! We cannot be held responsible for any damage your computer may face due to attachment to our network. Be reminded that both internet access and the local network are unfirewalled and unfiltered. Even well-maintained systems can be attacked and get hacked, even more so at a hacker event. + * Do not run your own DHCP server! Doing so is harmful. + * Do not send IPv6 Router Advertisements. + * Do not ARP spoof or otherwise impede the operation of the network! + * While we are generally quite able to find and disconnect you in case of network misuse if necessary, we still prefer to not have to do so and that everybody respects the other visitors. + * Think twice before you do something that affects others! If you hack someone, you might be prosecuted. Be aware that we cannot prevent law enforcement from acting within or related to our network.👮🚨🚔 + * Do not connect S/FTP or F/FTP (so called shielded cables) to a Datenklo; this is to prevent ground-loops. + * See also Rules for wireless equipment. + +## Wired + +There will be wired 100BASE-TX/1000BASE-T/10GBASE-T ethernet on the camping grounds and in the caravan area by means of so-called "Data Toilets" or "Datenklos". Look for construction toilets with tin foil wrapped around them. + +You can lay your own cables, but please do so in a tidy manner. You must not cross any roads, paths or borders between camping grounds. Always lay your cable from the Datenklo towards your tent to keep any slack close to your tent. Leave 5m of slack cable at the Datenklo. You can simply leave the end of your cable at the Datenklo, it will be connected by helpers at regular intervals (during reasonable work hours). If you want your cable back, make a proper spool of it and leave that at the Datenklo or mark it accordingly. It will be disconnected for you to pick up. + +The maximum line-of-sight distance to the next Datenklo will be approximately 50 meters. Cables will not be provided. A length of 50 meters is recommended. If that is insufficient, you will find someone within this range who has a switch and can plug you in. But bringing 60 or 75 meters won't hurt if you want to be sure. Do not bring SFTP or other shielded cables, this can cause harm you your and our equipment, we will not connect them (this is to prevent ground loops). + +Optionally, bring & connect a small ethernet switch when connecting multiple devices. Please disable Spanning-Tree Protocol if you would connect a managed switch. + +Wired connections are unfiltered. If you have (older) devices that cannot be trusted with unrestricted incoming connections, bring a router or firewall (and disable the wifi!). + +## Wireless + +You can't live without wireless access, so we've built an awesome wireless network again. + +### Camp2023 SSIDs + +The following SSIDs are provided: + + * Camp2023 (WPA2 802.1X (see below), 2.4GHz+5GHz) ✅ noc recommended ✅ + * Camp2023-open (open/OWE, 2.4GHz+5GHz) + +### WPA(2/3) 802.1X, encryption + +Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below). + +You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can use any username/password combination using EAP-TTLS with PAP to login (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data. + +Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "camp/camp" or "guest/guest" as "username/password". + +### Client Settings + +``` +SSID: Camp2023 + +EAP-TTLS: + +Phase 1: EAP-TTLS +Phase 2: PAP + +PEAP: + +Phase 1: PEAP +Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP + +CN = radius.c3noc.net +CA = ISRG Root X1 + +SHA256 Fingerprint = 6C:5E:71:4F:1E:AD:3A:D5:FE:1A:F6:F3:67:17:FD:63:13:2F:CA:9C:51:36:92:5E:1B:3A:D2:DF:5F:A8:D2:D7 +``` + +### Services VLANs + +We're using WPA2 802.1X to push your client in the correct VLAN. The reason we are doing this is to keep the number of SSID's per wireless band to a minimum; this way we are saving airtime by not wasting it too much with 802.11 beacons/mgmt-frames. Use the following user/password combinations: + +| Username | Password | Comments | +| ------------ | ------------ | -------- | +| camp | camp | Filtered connection with public IP address. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked. | +| outboundonly | outboundonly | Filtered connection with public IP address. Inbound connections from the Internet or camp-site are not possible. | +| allowany | allowany | Unfiltered connection with public IP address | + +### Rules + +To keep the wireless working for you, keep a few things in mind: + + * We're aware you can break the WiFi infrastructure. We're hoping that you won't and don't want to be chased by 5000 hackers through the Camp. + * If you want to download terabytes of data, you might be better off connecting to the wired network + * Don't set up your own accesspoint. However, if you have no other choice (for running experiments and such), please be nice and consider these rules: + * Please do not operate non-WiFi/analog equipment in these frequencies. + * 2.4GHz: use channels 1, 5, 9 or 13 @ 20MHz. Disable 802.11b. + * 5GHz: use channels 36 or 140 @ 20MHz. + * Minimum data-rate = 12Mbit/s, also for beacon-rate. Beacon interval 100ms or higher. + * Limit the number of broadcasted BSSID's per radio to 1 or 2. No SSID spamming etc is allowed. + * Do not prefix your broadcasted ESSID(s) with "Camp". Do not use "Camp2023" as your ESSID. Do not use other well-known ESSIDs. + * Do not use high-gain antennas. + * Limit your transmit-power for example to 6dBm or 4mW. + +## Co-location + +There will unfortunately be no co-location service at Camp. You are welcome to host a server in your tent/village and you can get a 10-gigabit copper uplink from one of the nearby datenklos. + +## Supporters + +This is a list of companies providing network hardware and connectivity services. The event would not have been possible without their support (and a few unlisted), and we thank them for it. + +| Who | | For | +| --- | ----- | --- | +|  | <http://www.babiel.com/> | Servers | +|  | <https://www.bcix.de/> | Peering | +|  | <https://community-ix.de/> | IP Upstream | +|  | <http://www.telekom.com/> | IP Upstream | +|  | <https://www.ediscom.de/> | Wavelength | +|  | <https://eventinfra.org/> | Network equipment loan | +|  | <https://www.flexoptix.net/> | Network equipment loan | + diff --git a/docs/travel.md b/docs/travel.md index 20d1a7f41094e99a9a5839bc7a8cc751378b704b..99c4b941107f53e43aa87a961c440e5aa6f045bd 100644 --- a/docs/travel.md +++ b/docs/travel.md @@ -52,7 +52,7 @@ You can use [the normal search at the Deutsche Bahn Site](https://reiseauskunft. #### Deutschlandticket -The [Deutschlandticket](https://www.bahn.de/angebot/regio/deutschland-ticket) enables you to take (nearly) any regional train and bus service there is in germany. +The [Deutschlandticket](https://www.bahn.de/angebot/regio/deutschland-ticket) costs 49€ for a month and enables you to take (nearly) any regional train and bus service there is in germany. ## via bus