docs/index.md

-# Chaos Communication Camp 2023
+---
+title: Chaos Communication Camp 2023
+---
+#
+![Chaos Communication Camp 2023](img/header.png)
 
 **15.-19.08.2023**, [Ziegeleipark Mildenberg, Zehdenick, Germany, Earth, Milky Way](location.md)
 
-The Chaos Communication Camp is an international, five-day open-air event for hackers and associated life-forms. It provides a relaxed atmosphere for free exchange of technical, social, and political ideas. The Camp has everything you need: power, internet, food and fun. Bring your tent and participate! 
+The Chaos Communication Camp is an international, five-day open-air event for hackers and associated life-forms. It provides a relaxed atmosphere for free exchange of technical, social, and political ideas. The camp has everything you need: power, internet, food and fun. Bring your tent and participate!
 
 ## Information Channels
 
 ### Info pages
 
-That's the site you are currently reading. We want to publish all relevant information in short and condensed form here.
-They will be updated as soon as new information is availbile or when informations changes. They serve as single source of truth regarding informations about the ccc camp.
+That’s the site you are currently reading. We want to publish all relevant information in short and condensed form here.
+They will be updated as soon as new information is availbile or when informations changes. They serve as single source of truth regarding informations about the camp.
 
 ### Event blog
 
-The [event blog](https://events.ccc.de) and this page are the main information channels of the event. We will gradually publish more information on this page, usually accompanied by a blog post explaining the details. If you don't wan't to miss an update, subscribe to the blog's [rss feed](view-source:https://events.ccc.de/feed).
+The [event blog](https://events.ccc.de) and this page are the main information channels of the event. We will gradually publish more information on this page, usually accompanied by a blog post explaining the details. If you don’t wan’t to miss an update, subscribe to the blog’s [rss feed](https://events.ccc.de/feed).
 
 ### EH20 Talk
 
-You can have a look at the "[Howto Camp 23](https://media.ccc.de/v/eh20-41-howto-cccamp-23)" talk from the last Easterhegg. It contains more details and goes into more detail about a few things.
+You can have a look at the “[Howto Camp 23](https://media.ccc.de/v/eh20-41-howto-cccamp-23)” talk from the last Easterhegg. It contains more details and goes into more detail about a few things.
 
 ## Communication Channels
 
 ### Public chat powered by matrix
 
-In order to be able to exchange information with other participants in advance, ask questions or look for like-minded people for your project, we offer an event chat based on Matrix. All you need is your own Matrix account. You can find the Camp 2023 space here: [#camp23:events.ccc.de](https://matrix.to/#/#camp2023:events.ccc.de). If you've never used Matrix before, there's some info about it [here](https://chat-info.events.ccc.de).
+In order to be able to exchange information with other participants in advance, ask questions or look for like-minded people for your project, we offer an event chat based on Matrix. All you need is your own Matrix account. You can find the Camp 2023 space containing all camp related channels here: [#camp23:events.ccc.de](https://matrix.to/#/#camp2023:events.ccc.de). If you’ve never used Matrix before, there’s some info about it [here](https://chat-info.events.ccc.de).
 
 ### Contacting the orga
 
@@ -35,4 +39,4 @@ If you have specific questions we offer several email addresses to get in touch
 | Logistics, Buildup & Teardown | <camp2023-logistik@cccv.de> |
 | Tickets | <camp2023-tickets@cccv.de> |
 | General Orga | <camp2023-orga@cccv.de> |
-
+| Caravans | <camp2023-caravan@cccv.de> |

docs/location.md

@@ -5,10 +5,63 @@ The Chaos Communication Camp takes place at the
     Ziegeleipark Mildenberg Zehdenick
     Ziegelei 10
     16792 Zehdenick (OT Mildenberg)
-    53° 01' 48" N, 13° 18' 27" E
+    53° 01′ 48″ N, 13° 18′ 27″ E
 
-([OpenStreetMap](https://www.openstreetmap.org/#map=17/53.03131/13.30736), [Google Maps](https://www.google.com/maps/place/Ziegeleipark+Mildenberg/@53.031938,13.306962,1331m/?hl=en))
+([Ziegeleipark](https://www.ziegeleipark.de/), [OpenStreetMap](https://www.openstreetmap.org/#map=17/53.03131/13.30736), [Google Maps](https://www.google.com/maps/place/Ziegeleipark+Mildenberg/@53.031938,13.306962,1331m/?hl=en))
 
-We will organize the basic infrastructure like power, internet, a bar, several food stalls, and beautiful illumination. Everything else is in your hands - so bring your camping gear, gadgets, Go boards, webapps, p2p-simulators, knitted hardware protectors, drones, lockpicking sets and whatever else you need for some days in the big room with the blue ceiling. Respect Ziegelei property and equipment, remember we may want to come back here next time.
+We will organize the basic infrastructure like power, internet, bars, several food stalls, and beautiful illumination. Everything else is in your hands – so bring your camping gear, gadgets, Go boards, webapps, p2p-simulators, knitted hardware protectors, drones, lockpicking sets and whatever else you need for some days in the big room with the blue ceiling. Respect Ziegelei property and equipment, remember we may want to come back here next time.
 
-The nearby town [Zehdenick](http://www.zehdenick.de/) provides infrastructure like several ATM, Gas Stations, supermarkets and a rather big Hardware Store (read: Hardware as in wood, nails and camping equipment, not as in motherboard). 
\ No newline at end of file
+The nearby town [Zehdenick](http://www.zehdenick.de/) provides infrastructure like several ATM, Gas Stations, supermarkets and a rather big Hardware Store (read: Hardware as in wood, nails and camping equipment, not as in motherboard).
+
+## Points of Interest
+
+### Money
+!!! danger "Attention"
+    On the Camp payment is **in cash only**.<br>
+    Local ATMs will probably be overwhelmed. **Bring enough money!**
+
+**Check the Banks Opening Hours. Not all ATM are accessible 24/7**
+
+| Bank | Adress | Distance |
+| ---- | ------ | -------- |
+| Mittelbrandenburgische Sparkasse | Marktstraße 14, 16792 Zehdenick | 9km |
+| Berliner Volksbank | Am Markt 6, 16792 Zehdenick | 9km |
+| Mittelbrandenburgische Sparkasse | Rudolf-Breitscheid-Straße 62, 16775 Gransee | 14km |
+| Berliner Volksbank | Rudolf-Breitscheid-Straße 50, 16775 Gransee | 14km |
+
+### Pharmacy
+| Name | Street | PLZ | Place | Distance |
+| ---- | ------ | --- | ----- | ---------|
+| Greifen Apotheke | Amtswallstraße 1 | 16792 | Zehdenick | 9.6km|
+| Kloster Apotheke | Berliner Str. 39 | 16792 | Zehdenick | 9.3km |
+| Apotheke an der Post | Berliner Str. 52 | 16792 | Zehdenick | 9.3km |
+
+### Supermarket / Food
+Thre are the ususal supermarkts in Zehdenick and Gransee, Aldi, Lidl, Netto, Rewe. A bigger variety can be found in Oranienburg or Templin but these are much further away.
+
+| Name | Street | PLZ | Place | Distance |
+| ---- | ------ | --- | ----- | ---------|
+| ALDI | Berliner Str. 21 | 16775 | Gransee | 13.1km |
+| Netto | Oranienburger Str. 64 b | 16775 | Gransee | 13.8km |
+| Penny | Templiner Str. 14A | 16775 | Gransee | 12.3km |
+| Thomas Philipps Sonderposten | Templiner Str. 14 | 16775 | Gransee | 12.3 |
+| Aldi | Falkenthaler Chaussee 57 | 16792 | Zehdenick | 9.6km |
+| Lidl | Bahnhofstraße 45 | 16792 | Zehdenick | 8.7km |
+| Netto | Philipp Müller Strasse 54-55 | 16792 | Zehdenick | 10.8 |
+| Netto | Marianne-Grunthal-Straße 1 | 16792 | Zehdenick | 9.2km |
+| Rewe | Falkenthaler Chaussee 57, | 16792 | Zehdenick | 9.6km |
+| Rewe | Grünstraße 11 | 16792 | Zehdenick | 10.7km |
+| Rewe to go bei Aral | Castrop-Rauxel-Allee 2 | 16792 | Zehdenick | |
+
+### Bakeries
+The [Bäckerei Stadige](https://www.baeckerei-stadige.de/) has a market stand in front of the event and are willing to deliver bigger orders to the marketplace to pick them up. For delivery please get in touch with them via phone or mail.
+
+### Butchers
+### Hardware / DIY store
+
+| Name | Street | PLZ | Place | Distance |
+| ---- | ------ | --- | ----- | ---------|
+| Obi |Grünstraße 12 | 16792 | Zehdenick | 10.8km |
+| Wentowsee Handelshaus GmbH | Meseberger Weg 2 |16775 | Gransee | 14.6km |
+
+### Fun

docs/network.md

+# Network
+
+As usual, [we](https://chaos.social/@c3noc/) will provide a fast wired and wireless network.
+
+## Rules of Conduct
+
+ * Be fair! Do not do to others what you do not wish done to yourself!🌈
+ * Protect your computer! Make sure your operating system is up to date and your firewall is enabled before arriving at the camp.
+ * If you want to download terabytes of data, you are better off connecting to the wired network.
+ * While we are quite able to find and disconnect you in case of network misuse, we prefer not to have to do so. Respect other visitors. Be aware that we cannot prevent law enforcement from acting within or related to our network.👮🚨🚔
+ * Do not connect shielded ethernet cables (STP or FTP) to any of our equipment.⚡
+ * Do not run your own DHCP server.
+ * Do not send IPv6 Router Advertisements.
+ * Do not ARP spoof or otherwise impede the operation of the network.
+ * If you want to run your own wireless equipment, there are a [few additional rules](#rules-for-wireless-equipment).
+
+## Wired 
+
+There will be wired 100BASE-TX/1000BASE-T/10GBASE-T ethernet on the camping grounds and in the caravan areas, provided by our state-of-the-art [Datenklos](https://de.wikipedia.org/wiki/Datenklo) (DKs or “Data Toilets”). Look for construction toilets with tin foil wrapped around them, or view the [Map.](https://map.events.ccc.de/camp/2023/map/#16.62/53.031366/13.307421/C,E,M,N,O)
+
+**Wired connections are completely unfiltered and will receive a public IP address**. If you have (older) devices that cannot be trusted with unrestricted incoming connections, bring a firewall. 
+
+You can lay your own ethernet cables (we don’t provide them), but please do so in a tidy manner. You must not cross any roads, paths or borders between camping grounds. Always lay your cable from the Datenklo towards your tent to keep most of the slack close to your tent, but leave a few metres of slack cable at the Datenklo. 
+
+**We will not connect shielded cables** (with metal plugs) – these can damage equipment due to ground loops.🔌⚡ As a workaround, you can bring a RJ45 coupler (bonus points for plastic version) and a (short) unshielded cable. 
+
+The maximum distance to your nearest Datenklo will be approximately 50 meters, but bringing a longer cable might be handy. If your cable isn’t long enough, you might find a nearby neighbour who has a switch to connect to …
+
+Simply leave the end of your cable at the Datenklo and it will be connected by helpers at regular intervals (during reasonable work hours). If you want your cable back, coil it up at the Datenklo or mark it accordingly. It will be disconnected for you to pick up.
+
+Optionally, bring a small ethernet switch when connecting multiple devices. Please disable Spanning-Tree Protocol if you connect a managed switch.
+
+We don’t support connections with 10Base-T or fibre/SFP+ in the DKs this time. Sorry.
+
+## Wireless
+
+You can’t live without wireless access, so we’ve built an awesome wireless network again. The following WiFi networks are provided on 2.4 GHz and 5 GHz:
+
+| SSID            | Security               |                      |
+| --------------- | ---------------------- | -------------------- |
+| `Camp2023`      | WPA2 Enterprise 802.1X | ✅ NOC recommended ✅ |
+| `Camp2023-open` | Open (OWE supported)   |                      |
+
+We recommend you use the `Camp2023` network. For the highest security, this requires some configuration, which we’ve documented here:
+
+* [Linux](network_dot1x_settings.md#linux-etc)
+* [Android](network_dot1x_settings.md#android)
+* [iOS](network_dot1x_settings.md#apple-ios)
+* [MacOS](network_dot1x_settings.md#apple-macos)
+* [Windows](network_dot1x_settings.md#windows)
+
+Connecting in this way allows your device to authenticate our wireless infrastructure, preventing your traffic from being intercepted by a malicious access point.
+
+The `Camp2023` network requires a username and password — you can use “camp/camp” or any random username and password, because we don’t care who you are, we just want to encrypt your data. There are some [special credentials](#services-vlans) which you can use to modify the firewall behaviour.
+
+The `Camp2023-open` network supports [Opportunistic Wireless Encryption](https://en.wikipedia.org/wiki/Opportunistic_Wireless_Encryption) (OWE) which will automatically provide security comparable to a normal WiFi network with a shared password, _if your device supports OWE_. Otherwise, it will be completely unencrypted.
+
+Keep in mind that wireless security won’t protect you from network attacks and you should still be aware that you are at a hacker conference! By default, wireless devices are firewalled from the Internet, but inbound connections from other users on the camp network are still allowed.
+
+### Services VLANs
+
+We have a few special usernames and passwords which you can use when connecting to the `Camp2023` network, which allow you to modify the firewall behaviour:
+
+| Username     | Password     | Comments |
+| ------------ | ------------ | -------- |
+| camp         | camp         | (Or any random username and password.) Filtered connection with public IP address. Inbound connections from the rest of the campsite are possible, but connections from the Internet are blocked.  |
+| outboundonly | outboundonly | Filtered connection with public IP address. Inbound connections from the Internet or campsite are not possible.  |
+| allowany     | allowany     | Unfiltered connection with public IP address.  |
+
+We’re using WPA2 802.1X to push your client into the correct VLAN. This keeps the number of SSIDs broadcast to a minimum, saving airtime.
+
+### Rules for wireless equipment
+Please don’t set up your own access point if at all possible. Wireless airtime is a precious commodity at hacker events, and every additional wireless network will transmit 802.11 beacons and management frames, slowing down wireless connectivity for everyone in the area.
+
+If you have no other choice (for running experiments and such), please be nice and follow these rules:
+
+* Do not operate non-WiFi equipment in these frequencies.
+* 2.4GHz: use channels 1, 5, 9 or 13 @ 20 MHz. Disable 802.11b.
+* 5GHz: use channels 36 or 140 @ 20 MHz.
+* Use a _minimum_ data and beacon rate of 12 Mbit/s. Beacon interval 100 ms or higher.
+* Limit the number of broadcasted SSIDs per radio to 1 or 2. No SSID spamming is allowed.
+* Do not prefix your broadcasted SSID(s) with “Camp”. Do not use other well-known SSIDs.
+* Do not use high-gain antennas.
+* Limit your transmit power as much as possible, for example to 6 dBm or 4 mW.
+
+## Co-location
+
+There will unfortunately be no co-location service at Camp. You are welcome to host a server in your tent/village and you can get a 10-gigabit copper uplink from one of the nearby datenklos.
+
+## Contact us
+
+Do you have some special requirements not listed above? We can try to help! You can contact us in English via [hello@c3noc.net](mailto:hello@c3noc.net). We might also post some updates on https://chaos.social/@c3noc/ if we have time.
+
+## Supporters
+
+This is a list of organisations providing network hardware and connectivity. We couldn’t build the network without them – plus a few unlisted - and we thank them their support. 
+
+| Who |       | For  |
+| --- | ----- |  --- |
+| ![Logo of babiel](img/supporters/babiel.png)        | <http://www.babiel.com/> | Servers |
+| ![Logo of bcix](img/supporters/bcix.png)          | <https://www.bcix.de/> | Peering |
+| ![Logo of community-ix](img/supporters/community-ix.png)  | <https://community-ix.de/> | IP Upstream |
+| ![Logo of dtag](img/supporters/telekom.png)          | <http://www.telekom.com/> | IP Upstream |
+| ![Logo of ediscom](img/supporters/ediscom.png)       | <https://www.ediscom.de/> | Wavelength |
+| ![Logo of eventinfra](img/supporters/eventinfra.png)  | <https://eventinfra.org/> | Network equipment loan |
+| ![Logo of flexoptix](img/supporters/flexoptix.png) | <https://www.flexoptix.net/> | Network equipment loan |
+| ![Logo of i3d](img/supporters/i3d.png) | <https://www.i3d.net/> | Network equipment loan |
+| ![Logo of dgties](img/supporters/dgties.png) | <https://www.dgties.team/> | ACD License |

docs/network_dot1x_certificate.md

+```
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----```

docs/network_dot1x_settings.md

+## Generic settings
+```
+SSID: Camp2023
+
+EAP-TTLS:
+
+Phase 1: EAP-TTLS
+Phase 2: PAP
+
+PEAP:
+
+Phase 1: PEAP
+Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP
+
+CN = radius.c3noc.net
+CA = ISRG Root X1
+
+SHA256 Fingerprint = 6C:5E:71:4F:1E:AD:3A:D5:FE:1A:F6:F3:67:17:FD:63:13:2F:CA:9C:51:36:92:5E:1B:3A:D2:DF:5F:A8:D2:D7
+```
+Make sure you check the certificate in order to know you are connecting to the correct network (you should check on both the CN and the CA).
+
+## Android 
+You can use our Android app to automatically configure the most secure WiFi settings on your Android device:
+
+* [Download on Google Play Store](https://play.google.com/store/apps/details?id=nl.eventinfra.wifisetup)
+* [APK download](https://eventinfra.org/Camp2023/app-release.apk)
+* [Source code](https://github.com/EventInfra/wifisetup)
+
+This app installs the certificate and WiFi profile which will allow your device to automatically connect. You can do it manually, as shown below, but it’s a bit more hassle.
+
+### Manual configuration
+If you don’t want to use the app, download the [ISRG Root X1](https://letsencrypt.org/certs/isrgrootx1.pem) certificate, and [install it](https://support.google.com/pixelphone/answer/2844832) into your device’s **Wi-Fi certificate** store, giving it any name you like. Then connect to the **Camp2023** network using the following information:
+
+* EAP method: TTLS *(not TLS)*
+* CA certificate: *(whatever name you gave the ISRG Root X1)*
+* Domain: radius.c3noc.net
+* Identity: camp
+* Password: camp
+
+It’s fine to leave **Online Certificate status** as “Do not validate”, and leave the **Anonymous identity** blank.
+
+## Linux, etc. 
+### Network Manager 
+You can use the following config file:
+
+Please note that some versions of NM are buggy and will only work with 802.1X using MSCHAPv2, or not at all. If that affects you, it may be easiest to use wpa_supplicant.
+
+/etc/NetworkManager/system-connections/Camp2023:
+
+Hint: chmod 600 this file to make the connection work.
+
+```
+[connection]
+id=Camp2023
+uuid=c80101e2-7b99-4511-846b-2388eb86a5ad
+type=wifi
+permissions=
+secondaries=
+
+[wifi]
+mac-address=42:23:42:23:42:23 <- !! Please change this !!
+mac-address-blacklist=
+mode=infrastructure
+seen-bssids=
+ssid=Camp2023
+
+[wifi-security]
+auth-alg=open
+group=
+key-mgmt=wpa-eap
+pairwise=
+proto=
+
+[802-1x]
+altsubject-matches=DNS:radius.c3noc.net
+ca-cert=/etc/ssl/certs/ISRG_Root_X1.pem
+eap=ttls;
+identity=camp
+password=camp
+phase2-altsubject-matches=
+phase2-auth=pap
+
+[ipv4]
+dns-search=
+method=auto
+
+[ipv6]
+dns-search=
+method=auto
+```
+
+### WiCD 
+You need an additional crypto setting for WiCD. Put this file into /etc/wicd/encryption/templates/eap-ttls (debian systems, might be different with other *nix flavours):
+
+```
+ name = EAP-TTLS Camp2023
+ author = Felicitus
+ require identity *Identity password *password
+ -----
+ ctrl_interface=/var/run/wpa_supplicant
+ network={
+  ssid="Camp2023"
+  scan_ssid=$_SCAN
+  identity="camp"
+  password="camp"
+  proto=WPA2
+  key_mgmt=WPA-EAP
+  group=CCMP
+  pairwise=CCMP
+  eap=TTLS
+  ca_cert="/etc/ssl/certs/ISRG_Root_X1.pem"
+  altsubject_match="DNS:radius.c3noc.net"
+  anonymous_identity="$_ANONYMOUS_IDENTITY"
+  phase2="auth=PAP"
+  #priority=2
+ }
+```
+Edit /etc/wicd/encryption/templates/active to include the eap-ttls config template. Restart the WiCD daemon, choose the proper encryption (EAP-TTLS Camp2023) and enter a random username/password.
+
+### Jolla/connman 
+/var/lib/connman/Camp2023wifi.config :
+
+```
+ [service_Camp2023]
+ Type=wifi
+ Name=Camp2023-legacy
+ EAP=ttls
+ Phase2=PAP
+ Identity=camp
+ Passphrase=camp
+```
+
+
+### wpa_supplicant
+This is the default option on Raspberry Pi OS.  Edit /etc/wpa_supplicant/wpa_supplicant.conf and add the network:
+
+```
+ network={
+ 	ssid="Camp2023"
+ 	key_mgmt=WPA-EAP
+ 	eap=TTLS
+ 	identity="camp"
+ 	password="camp"
+ 	# ca path on debian 7.x and raspberry pi OS, modify accordingly
+ 	ca_cert="/etc/ssl/certs/ISRG_Root_X1.pem"
+ 	altsubject_match="DNS:radius.c3noc.net"
+ 	phase2="auth=PAP"
+ }
+```
+
+### Interfaces
+As an alternative, you can specify the wpa_supplicant config options directly in /etc/network/interfaces:
+
+```
+ iface wlan0 inet dhcp
+ 	wpa-ssid Camp2023
+ 	wpa-identity camp
+ 	wpa-password camp
+ 	wpa-proto WPA2
+ 	wpa-key_mgmt WPA-EAP
+ 	wpa-group CCMP
+ 	wpa-pairwise CCMP
+ 	wpa-eap TTLS
+ 	wpa-phase2 "auth=PAP"
+ 	wpa-ca_cert "/etc/ssl/certs/ISRG_Root_X1.pem"
+ 	wpa-altsubject_match DNS:radius.c3noc.net
+```
+
+### Netctl
+
+```
+Description='Camp2023 secure WPA2 802.1X config'
+Interface=wls1
+Connection=wireless
+Security=wpa-configsection
+IP=dhcp
+ESSID=Camp2023
+WPAConfigSection=(
+    'ssid="Camp2023"'
+    'proto=RSN WPA'
+    'key_mgmt=WPA-EAP'
+    'eap=TTLS'
+    'identity="camp"'
+    'password="camp"'
+    'ca_cert="/etc/ssl/certs/ISRG_Root_X1.pem"'
+    'altsubject_match="DNS:radius.c3noc.net"'
+    'phase2="auth=PAP"'
+)
+```
+
+### IWD
+```
+[Security]
+EAP-Method=PEAP
+EAP-Identity=anonymous@Camp2023
+EAP-PEAP-CACert=/etc/ssl/certs/ISRG_Root_X1.pem
+EAP-PEAP-ServerDomainMask=radius.c3noc.net
+EAP-PEAP-Phase2-Method=MSCHAPV2
+EAP-PEAP-Phase2-Identity=camp
+EAP-PEAP-Phase2-Password=camp
+
+[Settings]
+AutoConnect=true
+```
+### NixOS
+
+```
+networking.wireless.networks."Camp2023".auth = ''
+  key_mgmt=WPA-EAP
+  eap=TTLS
+  identity="camp"
+  password="camp"
+  ca_cert="${builtins.fetchurl {
+    url = "https://letsencrypt.org/certs/isrgrootx1.pem";
+    sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
+  }}"
+  altsubject_match="DNS:radius.c3noc.net"
+  phase2="auth=PAP"
+'';
+```
+
+## Apple macOS
+To enable the most secure WiFi configuration on macOS:
+
+1. Download [this mobileconfig file](https://eventinfra.org/Camp2023/Camp2023.mobileconfig) and double-click on it. You’ll get an unhelpful notification.
+2. Open Settings and search for the “Profiles” pane.
+3. Click the “+” button and select the mobileconfig file.
+4. After you’ve finished the install, your computer should automatically connect to the camp WiFi.
+
+## Apple iOS
+To enable the most secure WiFi configuration on iOS, open this [mobileconfig file](https://eventinfra.org/Camp2023/Camp2023.mobileconfig) in Safari. After the file is installed, your device should automatically connect to the camp WiFi.
+
+## Windows
+Windows users (and other clients using MSCHAPv2) should use a fixed username and password. You can use “camp/camp” or “guest/guest” as username/password.
+
+Import one of these profiles for the most secure WiFi settings for Windows:
+
+* [Camp2023](https://eventinfra.org/Camp2023/Camp2023.xml) (2.4GHz+5GHz)
+
+To import and connect follow these steps:
+
+* Open a command prompt and execute: netsh wlan add profile filename=Camp2023.xml
+* Connect to the Camp2023 network; use “camp/camp” as the username/password when prompted. Alternatively, use “outboundonly/outboundonly” as the username/password to enable inbound traffic firewalling.