Electromagnetic Field - User contributions [en-gb]

Memories

2018-09-07T21:44:35Z

Davidc: remove 2016 playlist

{{link-banner}}
__NOTOC__

Please add links to photo albums, videos, etc.

Lots of stuff can be found on #emfcamp on Twitter, [https://www.facebook.com/hashtag/emfcamp Facebook], [https://medium.com/tag/emfcamp Medium]. Recorded talks will be the [https://www.youtube.com/c/ElectromagneticField Electromagnetic Field YouTube channel].

== Pictures, videos and 3D models ==
* [https://twitter.com/emfctf/with_replies]

=== Groups ===
* [https://www.flickr.com/groups/emfcamp/ EMFCamp Flickr]
* [https://www.instagram.com/explore/tags/emfcamp/ Instagram #emfcamp tag]

=== Picture albums ===
* [https://www.flickr.com/photos/chaoticeunoia/albums/72157670745765007 Pictures taken by the official EMF Photographer in Chief]
* [https://photos.google.com/share/AF1QipMGUevZQkIN0-QBbDPlfG5S3QxiSZY4Ac-a85_AUWEsi7ibHTska9WJYnGvHKlnDA?key=b0dsSU10aGUxMjlvNkFtT2l1SE5xTmpZNFlhREpB Pictures from the Bridge Building workshop - @Jeffrey_Roe]
* [https://1drv.ms/u/s!AlendFzr7YNK3BruX2leEilEzhdd High definition, ultra large, Aerial photo (orthographic/orthomosaic) created by Jared Reabow for EMF 2018]

=== Videos ===

[https://vimeo.com/287808031 Tentman]

[https://www.youtube.com/playlist?list=PL1Hr6VkuONaE4XM52ThiV-s3vXAUT0JCR EMF 2018 Talks Playlist]

[https://www.youtube.com/watch?v=AuGGYu7PMUc Timelapse from build to tear-down]

[https://www.youtube.com/watch?v=A1qRO1_CrC0 Drone flyover on day 2]

=== 3D models ===
* [https://1drv.ms/u/s!AlendFzr7YNK3BsiZTqVJ9emsG 1:1 scale, HD, 3D model of the EMF camp 2018 created by Jared Reabow (DOWNLOAD)]
*[http://www.dronedeploy.com/app2/data/5b8ff5c2df4a787331a85a44;jwt_token=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJ0eXBlIjoiUmVhZE9ubHlQbGFuIiwiaWQiOiI1YjhmZjVjMmRmNGE3ODczMzFhODVhNDQiLCJleHAiOjI1MzQwMjMwMDc5OX0.tTxuILHHjeMtPfHcsaPgoPSDXphH9zj7JbenisjAkBY4CZDWczsnGgkrbrwuXWQOESCOm5O-UyT_hAfRreb-3Q 1:1 scale, HD, 3D model of the EMF camp 2018 created by Jared Reabow (View online)]

== Press coverage ==

* [https://hackaday.com/2018/08/14/looking-forward-to-electromagnetic-field-2018/ Jenny List (Hackaday) - Looking Forward to Electromagnetic Field 2018]
* [https://hackaday.com/2018/08/30/gsm-phone-network-at-emf-camp-built-on-raspberry-pi-and-limesdr/ Jenny List (Hackaday) - GSM phone network at EMF Camp built on Raspberry Pi and LimeSDR]
* [https://www.space.com/41683-hacked-knitting-machine-builds-stellar-map.html Chelsea Gohd (space.com) - Software Engineer Hacks a Knitting Machine to Create Massive Stellar Map]

Memories

2018-09-07T21:40:33Z

Davidc: /* Videos */

{{link-banner}}
__NOTOC__

Please add links to photo albums, videos, etc.

Lots of stuff can be found on #emfcamp on Twitter, [https://www.facebook.com/hashtag/emfcamp Facebook], [https://medium.com/tag/emfcamp Medium]. Recorded talks will be the [https://www.youtube.com/c/ElectromagneticField Electromagnetic Field YouTube channel].

== Pictures, videos and 3D models ==
* [https://twitter.com/emfctf/with_replies]

=== Groups ===
* [https://www.youtube.com/playlist?list=PLfijmJ80EzesiFtnNIwh5nlNSekBC_gcS YouTube collaborative playlist of all videos on this page] - contact Sai (saizai on twitter/irc) for link that lets you add videos
* [https://www.flickr.com/groups/emfcamp/ EMFCamp Flickr]
* [https://www.instagram.com/explore/tags/emfcamp/ Instagram #emfcamp tag]

=== Picture albums ===
* [https://www.flickr.com/photos/chaoticeunoia/albums/72157670745765007 Pictures taken by the official EMF Photographer in Chief]
* [https://photos.google.com/share/AF1QipMGUevZQkIN0-QBbDPlfG5S3QxiSZY4Ac-a85_AUWEsi7ibHTska9WJYnGvHKlnDA?key=b0dsSU10aGUxMjlvNkFtT2l1SE5xTmpZNFlhREpB Pictures from the Bridge Building workshop - @Jeffrey_Roe]
* [https://1drv.ms/u/s!AlendFzr7YNK3BruX2leEilEzhdd High definition, ultra large, Aerial photo (orthographic/orthomosaic) created by Jared Reabow for EMF 2018]

=== Videos ===

[https://vimeo.com/287808031 Tentman]

[https://www.youtube.com/playlist?list=PL1Hr6VkuONaE4XM52ThiV-s3vXAUT0JCR EMF 2018 Talks Playlist]

[https://www.youtube.com/watch?v=AuGGYu7PMUc Timelapse from build to tear-down]

[https://www.youtube.com/watch?v=A1qRO1_CrC0 Drone flyover on day 2]

=== 3D models ===
* [https://1drv.ms/u/s!AlendFzr7YNK3BsiZTqVJ9emsG 1:1 scale, HD, 3D model of the EMF camp 2018 created by Jared Reabow (DOWNLOAD)]
*[http://www.dronedeploy.com/app2/data/5b8ff5c2df4a787331a85a44;jwt_token=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJ0eXBlIjoiUmVhZE9ubHlQbGFuIiwiaWQiOiI1YjhmZjVjMmRmNGE3ODczMzFhODVhNDQiLCJleHAiOjI1MzQwMjMwMDc5OX0.tTxuILHHjeMtPfHcsaPgoPSDXphH9zj7JbenisjAkBY4CZDWczsnGgkrbrwuXWQOESCOm5O-UyT_hAfRreb-3Q 1:1 scale, HD, 3D model of the EMF camp 2018 created by Jared Reabow (View online)]

== Press coverage ==

* [https://hackaday.com/2018/08/14/looking-forward-to-electromagnetic-field-2018/ Jenny List (Hackaday) - Looking Forward to Electromagnetic Field 2018]
* [https://hackaday.com/2018/08/30/gsm-phone-network-at-emf-camp-built-on-raspberry-pi-and-limesdr/ Jenny List (Hackaday) - GSM phone network at EMF Camp built on Raspberry Pi and LimeSDR]
* [https://www.space.com/41683-hacked-knitting-machine-builds-stellar-map.html Chelsea Gohd (space.com) - Software Engineer Hacks a Knitting Machine to Create Massive Stellar Map]

Telephony

2018-08-30T14:39:13Z

Davidc:

This page refers to the orga telephone system. Looking for information about [[DECT|the DECT network]]?

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|Info desk (1001)
|-
| 01908 870901
| Info desk (1001)
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (HQ & Logistics tents) (1002)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC) (1003)
| NOC
| NOC
|-
| 01908 870904
| Site Manager (routed to mobile at carrier/maybe fallthrough to HQ) (1004)
|
|
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent (1201)
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles, tent and DECT (1009)
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Comms team
| Unused
| Comms team leads
|-
| 01908 870911
| Green Room (1181)
| Unused
| Green Room
|-
| 01908 870912
| Conduct
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Bar manager
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Accounts (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

TBD

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Telephony

2018-08-30T14:38:37Z

Davidc:

This page refers to the orga telephone system. Looking for information about [[DECT|the DECT network]]?

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|Info desk (1001)
|-
| 01908 870901
| Info desk (1001)
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (HQ & Logistics tents) (1002)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC) (1003)
| NOC
| NOC
|-
| 01908 870904
| Site Manager (routed to mobile at carrier/maybe fallthrough to HQ) (1004)
|
|
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908 (1201)
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909 (1009)
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Comms team
| Unused
| Comms team leads
|-
| 01908 870911
| Green Room (1181)
| Unused
| Green Room
|-
| 01908 870912
| Conduct
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Bar manager
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Accounts (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

TBD

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

User:Davidc

2018-08-21T22:07:08Z

Davidc:

{{Attendee
|Name=davidc
|Arrival=2018/08/23 20:00
|Departure=2018/09/05 14:00
|Website=www.davidc.net
|Email=david at our domain
|IRC=davidc
|Twitter=davidcx
|Teams=Team:NOC
|Interests=Interest:Badge, Interest:Board Games, Interest:Electronics, Interest:Open Source Software, Interest:Python, Interest:Raspberry Pi, Interest:Role-Playing Games
}}
davidc delivers cat pictures to and around the field. His usage of antiquated memes is not considered dank. He is generally not found under direct sunlight.

Telephony

2018-08-21T16:04:13Z

Davidc:

This page refers to the orga telephone system. Looking for information about [[DECT|the DECT network]]?

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| Info desk
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (setup/teardown), HQ (during event) (Someone's mobile at the moment) (will be: HQ & Logistics tents)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC)
| NOC
| NOC
|-
| 01908 870904
| Site Manager (routed to mobile at carrier/maybe fallthrough to HQ)
|
|
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Comms team
| Unused
| Comms team leads
|-
| 01908 870911
| Green Room
| Unused
| Green Room
|-
| 01908 870912
| Conduct
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Bar manager
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Accounts (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

TBD

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Template:Village

2018-08-13T13:37:36Z

Davidc: remove location from help

<noinclude>
This is the "Village" template. The easiest way to use this template is to visit the [[Villages]] page and use the form to create a village.

It should be called in the following format:
<pre>
{{Village
|Description=
|Contact=
|WebAddress=
|Activities=
}}
</pre>
To not include the list of village members, add |HideList=true before the }}

</noinclude><includeonly>{| style="float: right; margin: 0 0 10px 10px; width: 269px; border-radius: 8px; background-color: #F9F9F9; border: 1px solid #AAAAAA;font-size: 95%;padding: 5px;"
! style="text-align: center; background-color:#07002c; color: white !important;" colspan="2" |<big>[[VillageName::{{#explode:{{PAGENAME}}|:|1}}]]</big>
|-
! colspan="2" |
{{GetVillageImage|Village-{{#explode:{{PAGENAME}}|:|1}}}}{{#if:{{{Description|}}}|<nowiki></nowiki>
{{!}}-
! Description
{{!}} [[Description::{{{Description|}}}|]] {{{Description|}}} |}}{{#if:{{{Contact|}}}|<nowiki></nowiki>
{{!}}-
! Contact
{{!}} {{#ifexist:User:{{{Contact|}}}|[[Contact::User:{{{Contact|}}}]]|{{#ifexist:{{{Contact|}}}|[[Contact::{{{Contact|}}}]]|[[Contact::{{{Contact|}}}|]]{{{Contact|}}}}}}}}}{{#if:{{{WebAddress|}}}|<nowiki></nowiki>
{{!}}-
! Website
{{!}} {{#ifeq:{{#explode:{{{WebAddress|}}}|:|0}}|http|[{{{WebAddress|}}} {{#explode:{{{WebAddress|}}}|/|2}}]|{{#ifeq:{{#explode:{{{WebAddress|}}}|:|0}}|https|[{{{WebAddress|}}} {{#explode:{{{WebAddress|}}}|/|2}}]|[http://{{{WebAddress|}}} {{{WebAddress|}}}] |}}}}}}{{#if:{{{Activities|}}}|<nowiki></nowiki>
{{!}}-
! Activities
{{!}} [[Activities::{{{Activities|}}}|]]{{{Activities|}}} |}}
{{InfoboxSubtitle|SubTitle=Location}}
{{!}}-
{{!}} colspan="2" {{!}}
<div id="villageMap">Map is loading.</div>
{{#if:{{{Interests|}}}|<nowiki></nowiki>
{{InfoboxSubtitle|SubTitle=Relevant interests}}
{{!}}-
{{!}} colspan="2" style="vertical-align:top" {{!}}
{{#arraymaptemplate:{{{Interests}}}|AnInterest|,|,}} }}
|-
!colspan="2"|[[Villages|View all Villages]]
|}{{#set: sidebaritem={{PAGENAME}}{{!}}{{#explode:{{PAGENAME}}|:|1}}}}{{#ifeq: {{{HideList|false}}}|true||{{inhabitants}}}}
[[Category:Villages]]
</includeonly>

Villages

2018-08-13T13:00:37Z

Davidc: grammar

__NOTOC__ __NOEDITSECTION__
{{link-banner}}
The camping areas at EMF are divided into villages: groups of people camping together, often because of a common interest. Some villages are big, some are small. Many villages organise their own events, workshops or talks.

There is a list of the villages below. Go ahead and join one that you'd like to be part of. Or if there isn't one about your biggest interest, start a new village and people can join you.

If you have any questions about villages, or you're planning to bring something especially big or in need of power to your village, drop an email to [mailto:[email address removed] [email address removed]], or [[IRC|drop into our IRC channel]].

== Register a Village ==

To create a village page on the wiki, enter a short name for it below. You must be logged in to the wiki to register a village.

{{#forminput:form=Village|query string=namespace=Village|button text=Create Village}}
If you have any issues creating your village, get in touch with us at [mailto:[email address removed] [email address removed]]. We're happy to help out.

== Village Map ==
<div id='map'>This should display a map. If it doesn't, try force-reloading the page OR do a short dance and say EMF three times.</div>

=== Add your village to the map ===
You can add your village to [https://map.emfcamp.org/ the map] to let others know where you're located. This doesn't guarantee you any space, unless you've hired a tent.

To add your village to the map:

* Make sure you're logged in to the main website (not the wiki) [https://www.emfcamp.org/account by visiting here].
* Visit [https://map.emfcamp.org/ the map] and click the "+" button.
* Enter your village name and the wiki page name (optional), click "set location" to place your village, and click create.
* Scout the terrain with streetview pictures here: [https://www.google.com/maps/@52.0321421,-2.3795074,878a,35y,39.19t/data=!3m1!1e3 streetview].

You can edit or delete your village on the map at any time by clicking on it.

== List of Villages==

{{#ask: [[Category:Villages]]
| mainlabel = Village
| ?VillageName=Name
| ?Description
| limit=1337
}}

(This list is automatically updated from villages registered on this wiki. It takes a little while to update.)

MediaWiki:Common.js

2018-08-13T12:47:55Z

Davidc: load village location from api and display map

/* Any JavaScript here will be loaded for all users on every page load. */

if ( mw.config.get( 'wgPageName' ) === 'User:Stitch/Test' || mw.config.get( 'wgPageName' ) === 'Villages') {
maplocation = document.getElementById('map');
maplocation.innerHTML = "<iframe src='https://map.emfcamp.org/' style='width: 100%; height: 600px'></iframe>";
}

/* Map for individual village pages */

var thisPage = mw.config.get('wgPageName');
var mapEl = document.getElementById('villageMap');

if (thisPage.substring(0, 8) == 'Village:' && window.fetch && mapEl) { // Can't use wgCanonicalNamespace as it's not a proper namespace
window.fetch("https://www.emfcamp.org/api/map")
.then(function (response) {
if (response.ok) {
return response.json();
}
})
.then(function (data) {
if (data.features) {
for (var i=0; i<data.features.length; ++i) {
var feature = data.features[i];
if (feature.properties && feature.properties.wiki_page == thisPage) {
var mapUrl = 'https://map.emfcamp.org/#17/' + feature.geometry.coordinates[1] + '/' + feature.geometry.coordinates[0];
mapEl.innerHTML = '<iframe src="' + mapUrl + '" style="width: 100%; height: 200px; border: 0;"></iframe>';
return;
}
}
mapEl.innerHTML = "This village hasn't placed a map pin yet!"
}
});
}

Template:Village

2018-08-13T12:46:43Z

Davidc: this is one supremely ugly way of emitting some fairly simple html

<noinclude>
This is the "Village" template. The easiest way to use this template is to visit the [[Villages]] page and use the form to create a village.

It should be called in the following format:
<pre>
{{Village
|Description=
|Contact=
|WebAddress=
|Activities=
|Location=
}}
</pre>
To not include the list of village members, add |HideList=true before the }}

</noinclude><includeonly>{| style="float: right; margin: 0 0 10px 10px; width: 269px; border-radius: 8px; background-color: #F9F9F9; border: 1px solid #AAAAAA;font-size: 95%;padding: 5px;"
! style="text-align: center; background-color:#07002c; color: white !important;" colspan="2" |<big>[[VillageName::{{#explode:{{PAGENAME}}|:|1}}]]</big>
|-
! colspan="2" |
{{GetVillageImage|Village-{{#explode:{{PAGENAME}}|:|1}}}}{{#if:{{{Description|}}}|<nowiki></nowiki>
{{!}}-
! Description
{{!}} [[Description::{{{Description|}}}|]] {{{Description|}}} |}}{{#if:{{{Contact|}}}|<nowiki></nowiki>
{{!}}-
! Contact
{{!}} {{#ifexist:User:{{{Contact|}}}|[[Contact::User:{{{Contact|}}}]]|{{#ifexist:{{{Contact|}}}|[[Contact::{{{Contact|}}}]]|[[Contact::{{{Contact|}}}|]]{{{Contact|}}}}}}}}}{{#if:{{{WebAddress|}}}|<nowiki></nowiki>
{{!}}-
! Website
{{!}} {{#ifeq:{{#explode:{{{WebAddress|}}}|:|0}}|http|[{{{WebAddress|}}} {{#explode:{{{WebAddress|}}}|/|2}}]|{{#ifeq:{{#explode:{{{WebAddress|}}}|:|0}}|https|[{{{WebAddress|}}} {{#explode:{{{WebAddress|}}}|/|2}}]|[http://{{{WebAddress|}}} {{{WebAddress|}}}] |}}}}}}{{#if:{{{Activities|}}}|<nowiki></nowiki>
{{!}}-
! Activities
{{!}} [[Activities::{{{Activities|}}}|]]{{{Activities|}}} |}}
{{InfoboxSubtitle|SubTitle=Location}}
{{!}}-
{{!}} colspan="2" {{!}}
<div id="villageMap">Map is loading.</div>
{{#if:{{{Interests|}}}|<nowiki></nowiki>
{{InfoboxSubtitle|SubTitle=Relevant interests}}
{{!}}-
{{!}} colspan="2" style="vertical-align:top" {{!}}
{{#arraymaptemplate:{{{Interests}}}|AnInterest|,|,}} }}
|-
!colspan="2"|[[Villages|View all Villages]]
|}{{#set: sidebaritem={{PAGENAME}}{{!}}{{#explode:{{PAGENAME}}|:|1}}}}{{#ifeq: {{{HideList|false}}}|true||{{inhabitants}}}}
[[Category:Villages]]
</includeonly>

Template:Village

2018-08-13T12:44:31Z

Davidc: make a map div

<noinclude>
This is the "Village" template. The easiest way to use this template is to visit the [[Villages]] page and use the form to create a village.

It should be called in the following format:
<pre>
{{Village
|Description=
|Contact=
|WebAddress=
|Activities=
|Location=
}}
</pre>
To not include the list of village members, add |HideList=true before the }}

</noinclude><includeonly>{| style="float: right; margin: 0 0 10px 10px; width: 269px; border-radius: 8px; background-color: #F9F9F9; border: 1px solid #AAAAAA;font-size: 95%;padding: 5px;"
! style="text-align: center; background-color:#07002c; color: white !important;" colspan="2" |<big>[[VillageName::{{#explode:{{PAGENAME}}|:|1}}]]</big>
|-
! colspan="2" |
{{GetVillageImage|Village-{{#explode:{{PAGENAME}}|:|1}}}}{{#if:{{{Description|}}}|<nowiki></nowiki>
{{!}}-
! Description
{{!}} [[Description::{{{Description|}}}|]] {{{Description|}}} |}}{{#if:{{{Contact|}}}|<nowiki></nowiki>
{{!}}-
! Contact
{{!}} {{#ifexist:User:{{{Contact|}}}|[[Contact::User:{{{Contact|}}}]]|{{#ifexist:{{{Contact|}}}|[[Contact::{{{Contact|}}}]]|[[Contact::{{{Contact|}}}|]]{{{Contact|}}}}}}}}}{{#if:{{{WebAddress|}}}|<nowiki></nowiki>
{{!}}-
! Website
{{!}} {{#ifeq:{{#explode:{{{WebAddress|}}}|:|0}}|http|[{{{WebAddress|}}} {{#explode:{{{WebAddress|}}}|/|2}}]|{{#ifeq:{{#explode:{{{WebAddress|}}}|:|0}}|https|[{{{WebAddress|}}} {{#explode:{{{WebAddress|}}}|/|2}}]|[http://{{{WebAddress|}}} {{{WebAddress|}}}] |}}}}}}{{#if:{{{Activities|}}}|<nowiki></nowiki>
{{!}}-
! Activities
{{!}} [[Activities::{{{Activities|}}}|]]{{{Activities|}}} |}}
{{InfoboxSubtitle|SubTitle=Location}}
{{!}}- <div id="villageMap">Map is loading.</div>
{{#if:{{{Interests|}}}|<nowiki></nowiki>
{{InfoboxSubtitle|SubTitle=Relevant interests}}
{{!}}-
{{!}} colspan="2" style="vertical-align:top" {{!}}
{{#arraymaptemplate:{{{Interests}}}|AnInterest|,|,}} }}
|-
!colspan="2"|[[Villages|View all Villages]]
|}{{#set: sidebaritem={{PAGENAME}}{{!}}{{#explode:{{PAGENAME}}|:|1}}}}{{#ifeq: {{{HideList|false}}}|true||{{inhabitants}}}}
[[Category:Villages]]
</includeonly>

What To Bring?

2018-08-12T21:29:05Z

Davidc: I approve of all the satirical unicode on this page, assuming it is in fact satirical

__NOTOC__
{{link-banner}}
This is an incomplete list and only a suggestion!

== Vital stuff ==
{|
|-
| align=right |⛺|| Tent (or space in someone else's)
|-
| align=right |🛌|| Bedding - a sleeping bag and a pillow, plus extra blankets in case it is cold
|-
| align=right |👚|| Clean clothes
|-
| align=right |🚿|| A towel (we have showers!)
|-
| align=right |🚿|| Shower gel, shampoo, soap, toothbrush, etc.
|-
| align=right |🔦|| Torch and extra batteries. The site will be well lit but there will be darker bits (e.g. inside your tent)
|-
| align=right |🥑|| Food and/or money for food (the bar will do cashback if you need more money)
|-
| align=right |👢|| Walking boots or wellies (the site is a field, good shoes are a must)
|-
| align=right |🧥|| Waterproofs. This is the UK: we do wet.
|-
| align=right |👕|| Warm clothing, for evenings and sleeping in if it gets cold
|-
| align=right |🎒|| Rucksack (or similar) for carrying valuables about with you (tents are NOT secure & we cannot guarantee things will be safe anywhere on site)
|-
| align=right |💊|| Medicines, hayfever tablets (you will be surrounded by hay bales all day)
|-
| align=right |🌞|| Sun cream and/or a sun hat
|-
| align=right |🎟️|| Your EMF ticket (printed or saved on your phone - these will be issued shortly before the event)
|}

== Useful things to bring ==
{|
|-
| align=right |🔌|| A 20-30m power lead. If you can, a 16A plug on the end is useful.
|-
| align=right |🔌|| A long (as long as the power lead) ethernet cable to connect your tent (although we have WiFi as well).
|-
| align=right |💻|| Computer, both for personal use and many of our workshops will use them
|-
| align=right |📱|| A DECT phone to make and receive phone call via the local DECT network
|-
| align=right |💻|| A micro USB cable to connect the badge to your computer
|-
| align=right |🔌|| Charging gear (for phones, laptops etc.)
|-
| align=right |🇪🇺|| Europe to UK plug adaptors (if you have non-UK equipment)
|-
| align=right |🔨|| Making gear (for any/all of your hobbies)
|-
| align=right |☕|| A water bottle and/or mug, useful for food & drink (when not got from vendors)
|-
| align=right |📼|| Tape, gaffer, LX, what ever, always useful for fixing things wot break (like tents)
|-
| align=right |🖊️|| Pen and paper
|-
| align=right |🚮|| Bin bags (for rubbish and dirty clothes)
|-
| align=right |🔥|| A few gold and silver space blankets and clothes pins to cover your tent and prevent it from turning into an oven in the morning sun
|}

== Advice for villages/large groups ==
{|
|-
| align=right |☕|| A small camping kettle may come in handy (larger kettles require care). We have food and drink vendors on site.
|-
| align=right |🍳|| A camping stove shouldn't be needed, but will be permitted as long as it's off the ground.
|-
| align=right |🖥️|| A network switch may reduce the amount of network cabling required, but please inform [[Network|the NOC]] if you need to connect more than 10 devices. Wireless access points are not allowed at all.
|-
| align=right |🖥️|| The switches in the DKs won't work at 10Mbps, so if you need 10baseT connectivity (e.g. for old or embedded things) please bring a switch.
|-
| align=right |🥛|| A mini fridge may be useful for storing milk.
|}

== Things to avoid if possible ==
{|
|-
| align=right |🍾|| Glass bottles: broken glass is a pain to clean up.

|-
| align=right |🔥|| Being on fire.

|-
| align=right |🛋️|| Repeatedly jumping on a pile of bean bags in the lounge: bean bag balls are a pain to clean up.
|}

Telephony

2018-08-12T10:34:54Z

Davidc: /* Telephony */

This page refers to the orga telephone system. Looking for information about [[DECT|the DECT network]]?

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| Info desk
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (setup/teardown), HQ (during event) (Someone's mobile at the moment) (will be: HQ & Logistics tents)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC)
| NOC
| NOC
|-
| 01908 870904
| Site Manager (routed to mobile at carrier/maybe fallthrough to HQ)
|
|
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Presently unused
| Unused
| Comms team leads
|-
| 01908 870911
| Green Room
| Unused
| Green Room
|-
| 01908 870912
| Presently unused
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Bar manager
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Accounts (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

TBD

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Telephony

2018-08-12T10:16:13Z

Davidc:

This page refers to the orga telephone system. Looking for information about [[DECT|the DECT network]]?

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| Nowhere yet
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (setup/teardown), HQ (during event) (Someone's mobile at the moment) (will be: HQ & Logistics tents)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC)
| NOC
| NOC
|-
| 01908 870904
| Site Manager (routed to mobile at carrier/maybe fallthrough to HQ)
|
|
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Presently unused
| Unused
| Comms team leads
|-
| 01908 870911
| Green Room
| Unused
| Green Room
|-
| 01908 870912
| Presently unused
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Bar manager
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Accounts (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

TBD

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Network

2018-08-11T21:23:47Z

Davidc: ssid names

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any road, trackway or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards and vehicle snags).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

EMF 2018 will have a 1 Gbps circuit out of the site, 1 Gbps transport from Sky For Business to London, and Internet connectivity from Sargasso Networks and LONAP.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy18

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emfcamp.org
CA = DST Root CA X3
SHA256 Fingerprint=A2:5F:69:B2:79:4D:D0:F0:EB:BA:7C:60:08:25:E5:A3:B9:42:00:08:6E:EB:70:43:D0:B3:EC:BD:CB:1C:73:2C

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy18 SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure18 SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

Sure. You can host a server anywhere on the network, and the long DHCP lease time will effectively give you a static IP address.

If you would like to house your server in our data centre (NOC-DC), please contact us before the event by e-mail to [email address removed] 1 Gbps copper ports are standard; if you require a 10 Gbps port, you'll need to supply a DAC or SFPs (our end Arista-coded) with fibre.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donations and sponsorship:

* [https://ethernet.business.sky.com Sky For Business]
* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-08-11T21:23:18Z

Davidc:

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any road, trackway or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards and vehicle snags).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

EMF 2018 will have a 1 Gbps circuit out of the site, 1 Gbps transport from Sky For Business to London, and Internet connectivity from Sargasso Networks and LONAP.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emfcamp.org
CA = DST Root CA X3
SHA256 Fingerprint=A2:5F:69:B2:79:4D:D0:F0:EB:BA:7C:60:08:25:E5:A3:B9:42:00:08:6E:EB:70:43:D0:B3:EC:BD:CB:1C:73:2C

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

Sure. You can host a server anywhere on the network, and the long DHCP lease time will effectively give you a static IP address.

If you would like to house your server in our data centre (NOC-DC), please contact us before the event by e-mail to [email address removed] 1 Gbps copper ports are standard; if you require a 10 Gbps port, you'll need to supply a DAC or SFPs (our end Arista-coded) with fibre.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donations and sponsorship:

* [https://ethernet.business.sky.com Sky For Business]
* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

FAQ

2018-08-07T17:52:58Z

Davidc:

__NOEDITSECTION__
{{link-banner}}

==General==

===Who are you?===
Electromagnetic Field is a non-profit event run entirely by a group of dedicated volunteers. EMF 2018 is the fourth major festival we've held in the UK, and a lot of us also help run other festivals in Germany and the Netherlands.

===Can I help out?===
EMF is organised entirely by volunteers. The event's success relies on attendees helping out to the extent they are willing.

More information on helping out during the event will appear on the [[Volunteering]] page in due course. If you are able to help plan and work before the event, check out the [[Teams]] page to see which teams need help.

===How accessible is EMF?===
We take accessibility very seriously, and we want to let as many people experience the fun of EMF. However, it is ultimately an event in the field, and we can't work miracles with our limited budget.

The site will be well-lit during the event, and we will aim to cover access to the stages with trackway. Travelling between stages may take some time. There will be accessible toilets and the current plan includes an accessible shower with a wheelchair ramp. We cannot guarantee 24/7 power, so it must not be relied on for medical needs, but the power infrastructure team will be on call through the night.

If you will be attending with a carer, they are entitled to a free ticket. Please [mailto:[email address removed] email us] once you've got your ticket so we can allocate your carer a ticket. Registered assistance dogs will be allowed.

If you have any other accessibility concerns, please [mailto:[email address removed] drop us an email].

===Is EMF family-friendly?===
Yes! We want EMF to be a great event for hackers of all ages.

In 2014 and 2016 we had licensed, free childcare provided by the award-winning [https://www.nipperbout.com/ Nipperbout], which was exceedingly well-received. We're aiming to provide this again, subject to sponsorship being secured (childcare is expensive!). There will be a designated family camping area, and a whole track of events and workshops for young people.

EMF has a comprehensive lost-child policy with DBS-checked staff available to help out.

There are a number of things to bear in mind:
* Children under the age of 14 must be accompanied by an adult at all times.
* There will be dangerous things on site, but they will be clearly marked.
* Licensed alcohol sales are only for people of age 18 and over. Bar staff will ask for ID.

===How old do you have to be to attend EMF by yourself?===
You need to be 16 or over on August 30th, 2018 to attend EMF without an adult.

==Ticket Sales==
===What does the ticket price include?===
The ticket price includes admission to the event, admission to all of the talks, and most of the workshops. Some workshop organisers charge a fee in order to cover material costs, and places on most workshops will be limited.

Your ticket also includes:
* Tent pitch
* Water
* Showers & Toilets
* [[Network|Fast internet]]
* Electricity

===Can I bring a caravan/camper van?===
Yes, we will have a dedicated camper van area on site, within the main fence, with 16A power provided. You'll need to buy an additional camper van ticket.

If you are coming with a caravan, parking for your towing car in the car park is included.

Please try to arrive before midday on Friday and leave after midday on Monday to reduce traffic movements on site. If you're planning on leaving earlier, please let us know when you arrive so we can park you close to the exit.

We unfortunately can't provide water hookups or drainage/emptying facilities. You will not be able to empty your tank during the event.

===If I tow a caravan with a campervan, will I need a ticket for each?===

Yes.

(Somehow this is actually a frequently asked question!)

===Do volunteers get a free ticket?===
Everyone who attends is expected to buy a ticket, including the founders and the core organisation team. So many people contribute to running EMF that it would be financially impossible to give everyone who helps out a free ticket, and unfair to draw a line past which volunteers receive free tickets.

The sole exception to this rule are first aiders, who must be trained to the high standards of our first aid team, and are expected to carry out three eight-hour shifts in return for a free ticket.

===The transaction reference you've provided isn't accepted by my bank!===
If you are having trouble entering the transaction reference into your online banking, just remove the hyphen. Some banks don't like it and don't tell you why.

===Can I transfer tickets to someone else?===

Yes - once you've bought a ticket you can transfer it to someone else by entering their email address on our site. We recommend you do this if you're buying tickets for other people, so that they can receive updates directly from us.

We would kindly request that you don't sell tickets to other people for more than the price you paid for them.

You can find people who may be interested in getting your ticket at [[Ticket_Exchange]].

===Can I get a refund?===

We may consider issuing refunds to those who can't attend if the event sells out. We will not issue refunds for any reason before then. (However, you can sell your ticket on to someone else - see above.)

===Why do you sell tickets in such annoyingly small batches?===

Because we don't want to take more of your money than necessary.

EMF is a non-profit, and we aim to end the event with enough surplus to let us comfortably run the next event, but not too much more. The budget for EMF isn't solid until about six months prior to the event (especially when we've moved to a new site) but we need cash earlier in order to pay deposits to key suppliers. These secure important things like toilets, temporary structures, and the site itself.

If we were to put all of our tickets on sale early, we would have to set ticket prices higher in order to make provision for potential budget changes. By selling smaller batches earlier, we ensure everyone's ticket is the best value, and that as many people as possible can have the chance to attend EMF.

==Planning your Attendance==
===Where is it? How can I get there?===
The EMF site is Eastnor Castle Deer Park, located just east of Ledbury, Herefordshire.

We'll be running a shuttle bus to Ledbury station which has direct trains to Birmingham and London. See [[Travel]] for more details

=== Can someone take me there? ===

See the [[Travel#Carpooling]] section of the [[Travel]] page

===When can I arrive? When do I have to leave by?===
The site will open to ticket holders on Thursday at 4pm. All ticket holders must leave the site by noon (12pm) on Monday. Talks and workshops won't start until after midday on the Friday so there's plenty of time to arrive on Friday morning.

We will be there before and afterwards setting up and packing up. If you want to help with this, please let us know (by emailing [mailto:[email address removed] [email address removed]]) and we'll let you know when you can turn up. If we have not confirmed that we're expecting you before or after the event you will not be admitted to the site. Anyone arriving before Friday morning or staying beyond Monday afternoon will be expected to help with set-up and tear-down (both of which are mostly manual labour).

===When do things kick off?===
The talks and workshops will begin after lunch on Friday, although people will be setting up earlier in the day.

Talks and workshops run daily through to the evening, although we expect villages will be doing things late into the night! The last talks will finish on Sunday evening by 9pm.

===What's the mobile phone coverage like?===

Mobile phone (a.k.a. cellphone) coverage is almost non-existent. Of all the carriers, Vodafone seems to be the best, with some signal in some areas - but with 2,500 more people on site there are no guarantees it will work at all.

Basically, you should expect to have no reception across most of the site and most of the time.

For data, that's no problem thanks to the [[Network|excellent WiFi]] across the site. If you need to be reachable by phone during the event, your best options are:

* Use a SIP/VoIP app on your smartphone over the wifi.
* Bring a DECT phone to connect to the [[DECT|DECT network]]. There will hopefully be a way to get yourself an external phone number to your DECT phone or for outside callers to dial an extension number to reach you.

===Will there be a bar?===
Yes, we'll be running a volunteer-staffed licensed bar selling beer and wine, as well as soft drinks and the hacker energy drink Club Mate. Far from the usual crap festival beer, we will be serving real ale from local breweries with all profits going towards making the next iteration of Electromagnetic Field more awesome.

The bar on-site opening hours are subject to licensing which will be finalised soon.

===Can I bring pets?===
Sorry, animals (except registered assistance animals) are not allowed.

===Can I smoke?===
Smoking (including vaping) is not allowed in any of the event tents or in the food/bar area. Elsewhere, please be considerate and very careful to extinguish your cigarettes to avoid setting the dry grass on fire. Please make sure cigarette butts are disposed of in rubbish bins rather than just thrown on the ground as the site is used by livestock at other times of the year, and it's a pain for the clean up crew to pick them up after the camp is over!

===Can I bring X/Y/Z?===
tl;dr Probably

Please let us know if it's going to be large/tall/use a lot of power/be noisy or anything else you think we should know. We don't plan on stopping people bringing the latest cool laser helmet for shark 3d printer arduino powered UAV thing, but we need to plan for it.

Things requiring special permission and may not be allowed: balloons, sky lanterns and the like.

===Can I bring/fly my drone?===
Yes - lots of attendees will be bringing drones and there will be a dedicated UAV flying field. It is against UK law to fly drones over the campsite unless you hold permission from the UK Civil Aviation Authority. EMF will be enforcing this rule, and for safety we will not allow UAVs to be flown over the site without prior arrangement.

===What power connectors will be available?===
Mostly 16A IEC309 ('Ceeform'/'Caravan') connectors although there will be some 13A UK sockets. See the [[Power|power page]] for more information.

===What if I don't like camping?===
Whilst we'd strongly recommend camping (so much happens late into the evening and it's a lot more fun) we realise not everyone wants to. There are several hotels in Ledbury.

===What are villages?===
[[Villages]] are areas of the campsite self-organised by attendees. The idea is that like-minded people get together, set up in an area of the campsite and enjoy each other's company. Villages are often set up around a topic or existing group (e.g. lock-picking or a hackspace). Some of them will run their own events parallel to the main schedule (for example last year one village hosted a weekend-long LAN party whilst another ran workshops on ring-making).

If you want to find out more, or see which villages are already proposed see the [[Villages| villages page]]

You don't need to join a village to attend.

==At the Event==
===Can i attach a hammock, slackline, or other things, to the trees?===
Nope. The site owners are very protective about them and have specified that we don't attach anything to them.

===Can i light a fire or BBQ?===
Yes as long as its contained and raised off of the ground so that the grass/ground arent burnt/scorched etc.

FAQ

2018-08-07T17:52:35Z

Davidc:

__NOEDITSECTION__
{{link-banner}}

==General==

===Who are you?===
Electromagnetic Field is a non-profit event run entirely by a group of dedicated volunteers. EMF 2018 is the fourth major festival we've held in the UK, and a lot of us also help run other festivals in Germany and the Netherlands.

===Can I help out?===
EMF is organised entirely by volunteers. The event's success relies on attendees helping out to the extent they are willing.

More information on helping out during the event will appear on the [[Volunteering]] page in due course. If you are able to help plan and work before the event, check out the [[Teams]] page to see which teams need help.

===How accessible is EMF?===
We take accessibility very seriously, and we want to let as many people experience the fun of EMF. However, it is ultimately an event in the field, and we can't work miracles with our limited budget.

The site will be well-lit during the event, and we will aim to cover access to the stages with trackway. Travelling between stages may take some time. There will be accessible toilets and the current plan includes an accessible shower with a wheelchair ramp. We cannot guarantee 24/7 power, so it must not be relied on for medical needs, but the power infrastructure team will be on call through the night.

If you will be attending with a carer, they are entitled to a free ticket. Please [mailto:[email address removed] email us] once you've got your ticket so we can allocate your carer a ticket. Registered assistance dogs will be allowed.

If you have any other accessibility concerns, please [mailto:[email address removed] drop us an email].

===Is EMF family-friendly?===
Yes! We want EMF to be a great event for hackers of all ages.

In 2014 and 2016 we had licensed, free childcare provided by the award-winning [https://www.nipperbout.com/ Nipperbout], which was exceedingly well-received. We're aiming to provide this again, subject to sponsorship being secured (childcare is expensive!). There will be a designated family camping area, and a whole track of events and workshops for young people.

EMF has a comprehensive lost-child policy with DBS-checked staff available to help out.

There are a number of things to bear in mind:
* Children under the age of 14 must be accompanied by an adult at all times.
* There will be dangerous things on site, but they will be clearly marked.
* Licensed alcohol sales are only for people of age 18 and over. Bar staff will ask for ID.

===How old do you have to be to attend EMF by yourself?===
You need to be 16 or over on August 30th, 2018 to attend EMF without an adult.

==Ticket Sales==
===What does the ticket price include?===
The ticket price includes admission to the event, admission to all of the talks, and most of the workshops. Some workshop organisers charge a fee in order to cover material costs, and places on most workshops will be limited.

Your ticket also includes:
* Tent pitch
* Water
* Showers & Toilets
* [[Network|Fast internet]]
* Electricity

===Can I bring a caravan/camper van?===
Yes, we will have a dedicated camper van area on site, within the main fence, with 16A power provided. You'll need to buy an additional camper van ticket.

If you are coming with a caravan, parking for your towing car in the car park is included.

Please try to arrive before midday on Friday and leave after midday on Monday to reduce traffic movements on site. If you're planning on leaving earlier, please let us know when you arrive so we can park you close to the exit.

We unfortunately can't provide water hookups or drainage/emptying facilities. You will not be able to empty your tank during the event.

===If I tow a caravan with a campervan, will I need a ticket for each?===

Yes.

(Somehow this is actually a frequently asked question!)

===Do volunteers get a free ticket?===
Everyone who attends is expected to buy a ticket, including the founders and the core organisation team. So many people contribute to running EMF that it would be financially impossible to give everyone who helps out a free ticket, and unfair to draw a line past which volunteers receive free tickets.

The sole exception to this rule are first aiders, who must be trained to the high standards of our first aid team, and are expected to carry out three eight-hour shifts in return for a free ticket.

===The transaction reference you've provided isn't accepted by my bank!===
If you are having trouble entering the transaction reference into your online banking, just remove the hyphen. Some banks don't like it and don't tell you why.

===Can I transfer tickets to someone else?===

Yes - once you've bought a ticket you can transfer it to someone else by entering their email address on our site. We recommend you do this if you're buying tickets for other people, so that they can receive updates directly from us.

We would kindly request that you don't sell tickets to other people for more than the price you paid for them.

You can find people who may be interested in getting your ticket at [[Ticket_Exchange]].

===Can I get a refund?===

We may consider issuing refunds to those who can't attend if the event sells out. We will not issue refunds for any reason before then. (However, you can sell your ticket on to someone else - see above.)

===Why do you sell tickets in such annoyingly small batches?===

Because we don't want to take more of your money than necessary.

EMF is a non-profit, and we aim to end the event with enough surplus to let us comfortably run the next event, but not too much more. The budget for EMF isn't solid until about six months prior to the event (especially when we've moved to a new site) but we need cash earlier in order to pay deposits to key suppliers. These secure important things like toilets, temporary structures, and the site itself.

If we were to put all of our tickets on sale early, we would have to set ticket prices higher in order to make provision for potential budget changes. By selling smaller batches earlier, we ensure everyone's ticket is the best value, and that as many people as possible can have the chance to attend EMF.

==Planning your Attendance==
===Where is it? How can I get there?===
The EMF site is Eastnor Castle Deer Park, located just east of Ledbury, Herefordshire.

We'll be running a shuttle bus to Ledbury station which has direct trains to Birmingham and London. See [[Travel]] for more details

=== Can someone take me there? ===

See the [[Travel#Carpooling]] section of the [[Travel]] page

===When can I arrive? When do I have to leave by?===
The site will open to ticket holders on Thursday at 4pm. All ticket holders must leave the site by noon (12pm) on Monday. Talks and workshops won't start until after midday on the Friday so there's plenty of time to arrive on Friday morning.

We will be there before and afterwards setting up and packing up. If you want to help with this, please let us know (by emailing [mailto:[email address removed] [email address removed]]) and we'll let you know when you can turn up. If we have not confirmed that we're expecting you before or after the event you will not be admitted to the site. Anyone arriving before Friday morning or staying beyond Monday afternoon will be expected to help with set-up and tear-down (both of which are mostly manual labour).

===When do things kick off?===
The talks and workshops will begin after lunch on Friday, although people will be setting up earlier in the day.

Talks and workshops run daily through to the evening, although we expect villages will be doing things late into the night! The last talks will finish on Sunday evening by 9pm.

===What's the mobile phone coverage like?===

Mobile phone (a.k.a. cellphone) coverage is almost non-existent. Of all the carriers, Vodafone seems to be the best, with some signal in some areas - but with 2,500 more people on site there are no guarantees it will work at all.

Basically, you should expect to have no reception across most of the site and most of the time.

For data, that's no problem thanks to the [[Network|excellent WiFi]. If you need to be reachable by phone during the event, your best options are:

* Use a SIP/VoIP app on your smartphone over the wifi.
* Bring a DECT phone to connect to the [[DECT|DECT network]]. There will hopefully be a way to get yourself an external phone number to your DECT phone or for outside callers to dial an extension number to reach you.

===Will there be a bar?===
Yes, we'll be running a volunteer-staffed licensed bar selling beer and wine, as well as soft drinks and the hacker energy drink Club Mate. Far from the usual crap festival beer, we will be serving real ale from local breweries with all profits going towards making the next iteration of Electromagnetic Field more awesome.

The bar on-site opening hours are subject to licensing which will be finalised soon.

===Can I bring pets?===
Sorry, animals (except registered assistance animals) are not allowed.

===Can I smoke?===
Smoking (including vaping) is not allowed in any of the event tents or in the food/bar area. Elsewhere, please be considerate and very careful to extinguish your cigarettes to avoid setting the dry grass on fire. Please make sure cigarette butts are disposed of in rubbish bins rather than just thrown on the ground as the site is used by livestock at other times of the year, and it's a pain for the clean up crew to pick them up after the camp is over!

===Can I bring X/Y/Z?===
tl;dr Probably

Please let us know if it's going to be large/tall/use a lot of power/be noisy or anything else you think we should know. We don't plan on stopping people bringing the latest cool laser helmet for shark 3d printer arduino powered UAV thing, but we need to plan for it.

Things requiring special permission and may not be allowed: balloons, sky lanterns and the like.

===Can I bring/fly my drone?===
Yes - lots of attendees will be bringing drones and there will be a dedicated UAV flying field. It is against UK law to fly drones over the campsite unless you hold permission from the UK Civil Aviation Authority. EMF will be enforcing this rule, and for safety we will not allow UAVs to be flown over the site without prior arrangement.

===What power connectors will be available?===
Mostly 16A IEC309 ('Ceeform'/'Caravan') connectors although there will be some 13A UK sockets. See the [[Power|power page]] for more information.

===What if I don't like camping?===
Whilst we'd strongly recommend camping (so much happens late into the evening and it's a lot more fun) we realise not everyone wants to. There are several hotels in Ledbury.

===What are villages?===
[[Villages]] are areas of the campsite self-organised by attendees. The idea is that like-minded people get together, set up in an area of the campsite and enjoy each other's company. Villages are often set up around a topic or existing group (e.g. lock-picking or a hackspace). Some of them will run their own events parallel to the main schedule (for example last year one village hosted a weekend-long LAN party whilst another ran workshops on ring-making).

If you want to find out more, or see which villages are already proposed see the [[Villages| villages page]]

You don't need to join a village to attend.

==At the Event==
===Can i attach a hammock, slackline, or other things, to the trees?===
Nope. The site owners are very protective about them and have specified that we don't attach anything to them.

===Can i light a fire or BBQ?===
Yes as long as its contained and raised off of the ground so that the grass/ground arent burnt/scorched etc.

FAQ

2018-08-07T17:51:16Z

Davidc:

__NOEDITSECTION__
{{link-banner}}

==General==

===Who are you?===
Electromagnetic Field is a non-profit event run entirely by a group of dedicated volunteers. EMF 2018 is the fourth major festival we've held in the UK, and a lot of us also help run other festivals in Germany and the Netherlands.

===Can I help out?===
EMF is organised entirely by volunteers. The event's success relies on attendees helping out to the extent they are willing.

More information on helping out during the event will appear on the [[Volunteering]] page in due course. If you are able to help plan and work before the event, check out the [[Teams]] page to see which teams need help.

===How accessible is EMF?===
We take accessibility very seriously, and we want to let as many people experience the fun of EMF. However, it is ultimately an event in the field, and we can't work miracles with our limited budget.

The site will be well-lit during the event, and we will aim to cover access to the stages with trackway. Travelling between stages may take some time. There will be accessible toilets and the current plan includes an accessible shower with a wheelchair ramp. We cannot guarantee 24/7 power, so it must not be relied on for medical needs, but the power infrastructure team will be on call through the night.

If you will be attending with a carer, they are entitled to a free ticket. Please [mailto:[email address removed] email us] once you've got your ticket so we can allocate your carer a ticket. Registered assistance dogs will be allowed.

If you have any other accessibility concerns, please [mailto:[email address removed] drop us an email].

===Is EMF family-friendly?===
Yes! We want EMF to be a great event for hackers of all ages.

In 2014 and 2016 we had licensed, free childcare provided by the award-winning [https://www.nipperbout.com/ Nipperbout], which was exceedingly well-received. We're aiming to provide this again, subject to sponsorship being secured (childcare is expensive!). There will be a designated family camping area, and a whole track of events and workshops for young people.

EMF has a comprehensive lost-child policy with DBS-checked staff available to help out.

There are a number of things to bear in mind:
* Children under the age of 14 must be accompanied by an adult at all times.
* There will be dangerous things on site, but they will be clearly marked.
* Licensed alcohol sales are only for people of age 18 and over. Bar staff will ask for ID.

===How old do you have to be to attend EMF by yourself?===
You need to be 16 or over on August 30th, 2018 to attend EMF without an adult.

==Ticket Sales==
===What does the ticket price include?===
The ticket price includes admission to the event, admission to all of the talks, and most of the workshops. Some workshop organisers charge a fee in order to cover material costs, and places on most workshops will be limited.

Your ticket also includes:
* Tent pitch
* Water
* Showers & Toilets
* [[Network|Fast internet]]
* Electricity

===Can I bring a caravan/camper van?===
Yes, we will have a dedicated camper van area on site, within the main fence, with 16A power provided. You'll need to buy an additional camper van ticket.

If you are coming with a caravan, parking for your towing car in the car park is included.

Please try to arrive before midday on Friday and leave after midday on Monday to reduce traffic movements on site. If you're planning on leaving earlier, please let us know when you arrive so we can park you close to the exit.

We unfortunately can't provide water hookups or drainage/emptying facilities. You will not be able to empty your tank during the event.

===If I tow a caravan with a campervan, will I need a ticket for each?===

Yes.

(Somehow this is actually a frequently asked question!)

===Do volunteers get a free ticket?===
Everyone who attends is expected to buy a ticket, including the founders and the core organisation team. So many people contribute to running EMF that it would be financially impossible to give everyone who helps out a free ticket, and unfair to draw a line past which volunteers receive free tickets.

The sole exception to this rule are first aiders, who must be trained to the high standards of our first aid team, and are expected to carry out three eight-hour shifts in return for a free ticket.

===The transaction reference you've provided isn't accepted by my bank!===
If you are having trouble entering the transaction reference into your online banking, just remove the hyphen. Some banks don't like it and don't tell you why.

===Can I transfer tickets to someone else?===

Yes - once you've bought a ticket you can transfer it to someone else by entering their email address on our site. We recommend you do this if you're buying tickets for other people, so that they can receive updates directly from us.

We would kindly request that you don't sell tickets to other people for more than the price you paid for them.

You can find people who may be interested in getting your ticket at [[Ticket_Exchange]].

===Can I get a refund?===

We may consider issuing refunds to those who can't attend if the event sells out. We will not issue refunds for any reason before then. (However, you can sell your ticket on to someone else - see above.)

===Why do you sell tickets in such annoyingly small batches?===

Because we don't want to take more of your money than necessary.

EMF is a non-profit, and we aim to end the event with enough surplus to let us comfortably run the next event, but not too much more. The budget for EMF isn't solid until about six months prior to the event (especially when we've moved to a new site) but we need cash earlier in order to pay deposits to key suppliers. These secure important things like toilets, temporary structures, and the site itself.

If we were to put all of our tickets on sale early, we would have to set ticket prices higher in order to make provision for potential budget changes. By selling smaller batches earlier, we ensure everyone's ticket is the best value, and that as many people as possible can have the chance to attend EMF.

==Planning your Attendance==
===Where is it? How can I get there?===
The EMF site is Eastnor Castle Deer Park, located just east of Ledbury, Herefordshire.

We'll be running a shuttle bus to Ledbury station which has direct trains to Birmingham and London. See [[Travel]] for more details

=== Can someone take me there? ===

See the [[Travel#Carpooling]] section of the [[Travel]] page

===When can I arrive? When do I have to leave by?===
The site will open to ticket holders on Thursday at 4pm. All ticket holders must leave the site by noon (12pm) on Monday. Talks and workshops won't start until after midday on the Friday so there's plenty of time to arrive on Friday morning.

We will be there before and afterwards setting up and packing up. If you want to help with this, please let us know (by emailing [mailto:[email address removed] [email address removed]]) and we'll let you know when you can turn up. If we have not confirmed that we're expecting you before or after the event you will not be admitted to the site. Anyone arriving before Friday morning or staying beyond Monday afternoon will be expected to help with set-up and tear-down (both of which are mostly manual labour).

===When do things kick off?===
The talks and workshops will begin after lunch on Friday, although people will be setting up earlier in the day.

Talks and workshops run daily through to the evening, although we expect villages will be doing things late into the night! The last talks will finish on Sunday evening by 9pm.

===What's the mobile phone coverage like?===

Mobile phone (a.k.a. cellphone) coverage is almost non-existent. Of all the carriers, Vodafone seems to be the best, with some signal in some areas - but with 2,500 more people on site there are no guarantees it will work at all.

Basically, you should expect to have no reception across most of the site and most of the time.

If you need to be reachable during the event, your best options are:

* Use a SIP/VoIP app on your smartphone over the wifi.
* Bring a DECT phone to connect to the [[DECT|DECT network]]. There will hopefully be a way to get yourself an external phone number to your DECT phone or for outside callers to dial an extension number to reach you.

===Will there be a bar?===
Yes, we'll be running a volunteer-staffed licensed bar selling beer and wine, as well as soft drinks and the hacker energy drink Club Mate. Far from the usual crap festival beer, we will be serving real ale from local breweries with all profits going towards making the next iteration of Electromagnetic Field more awesome.

The bar on-site opening hours are subject to licensing which will be finalised soon.

===Can I bring pets?===
Sorry, animals (except registered assistance animals) are not allowed.

===Can I smoke?===
Smoking (including vaping) is not allowed in any of the event tents or in the food/bar area. Elsewhere, please be considerate and very careful to extinguish your cigarettes to avoid setting the dry grass on fire. Please make sure cigarette butts are disposed of in rubbish bins rather than just thrown on the ground as the site is used by livestock at other times of the year, and it's a pain for the clean up crew to pick them up after the camp is over!

===Can I bring X/Y/Z?===
tl;dr Probably

Please let us know if it's going to be large/tall/use a lot of power/be noisy or anything else you think we should know. We don't plan on stopping people bringing the latest cool laser helmet for shark 3d printer arduino powered UAV thing, but we need to plan for it.

Things requiring special permission and may not be allowed: balloons, sky lanterns and the like.

===Can I bring/fly my drone?===
Yes - lots of attendees will be bringing drones and there will be a dedicated UAV flying field. It is against UK law to fly drones over the campsite unless you hold permission from the UK Civil Aviation Authority. EMF will be enforcing this rule, and for safety we will not allow UAVs to be flown over the site without prior arrangement.

===What power connectors will be available?===
Mostly 16A IEC309 ('Ceeform'/'Caravan') connectors although there will be some 13A UK sockets. See the [[Power|power page]] for more information.

===What if I don't like camping?===
Whilst we'd strongly recommend camping (so much happens late into the evening and it's a lot more fun) we realise not everyone wants to. There are several hotels in Ledbury.

===What are villages?===
[[Villages]] are areas of the campsite self-organised by attendees. The idea is that like-minded people get together, set up in an area of the campsite and enjoy each other's company. Villages are often set up around a topic or existing group (e.g. lock-picking or a hackspace). Some of them will run their own events parallel to the main schedule (for example last year one village hosted a weekend-long LAN party whilst another ran workshops on ring-making).

If you want to find out more, or see which villages are already proposed see the [[Villages| villages page]]

You don't need to join a village to attend.

==At the Event==
===Can i attach a hammock, slackline, or other things, to the trees?===
Nope. The site owners are very protective about them and have specified that we don't attach anything to them.

===Can i light a fire or BBQ?===
Yes as long as its contained and raised off of the ground so that the grass/ground arent burnt/scorched etc.

FAQ

2018-08-07T17:49:52Z

Davidc: mobile phones

__NOEDITSECTION__
{{link-banner}}

==General==

===Who are you?===
Electromagnetic Field is a non-profit event run entirely by a group of dedicated volunteers. EMF 2018 is the fourth major festival we've held in the UK, and a lot of us also help run other festivals in Germany and the Netherlands.

===Can I help out?===
EMF is organised entirely by volunteers. The event's success relies on attendees helping out to the extent they are willing.

More information on helping out during the event will appear on the [[Volunteering]] page in due course. If you are able to help plan and work before the event, check out the [[Teams]] page to see which teams need help.

===How accessible is EMF?===
We take accessibility very seriously, and we want to let as many people experience the fun of EMF. However, it is ultimately an event in the field, and we can't work miracles with our limited budget.

The site will be well-lit during the event, and we will aim to cover access to the stages with trackway. Travelling between stages may take some time. There will be accessible toilets and the current plan includes an accessible shower with a wheelchair ramp. We cannot guarantee 24/7 power, so it must not be relied on for medical needs, but the power infrastructure team will be on call through the night.

If you will be attending with a carer, they are entitled to a free ticket. Please [mailto:[email address removed] email us] once you've got your ticket so we can allocate your carer a ticket. Registered assistance dogs will be allowed.

If you have any other accessibility concerns, please [mailto:[email address removed] drop us an email].

===Is EMF family-friendly?===
Yes! We want EMF to be a great event for hackers of all ages.

In 2014 and 2016 we had licensed, free childcare provided by the award-winning [https://www.nipperbout.com/ Nipperbout], which was exceedingly well-received. We're aiming to provide this again, subject to sponsorship being secured (childcare is expensive!). There will be a designated family camping area, and a whole track of events and workshops for young people.

EMF has a comprehensive lost-child policy with DBS-checked staff available to help out.

There are a number of things to bear in mind:
* Children under the age of 14 must be accompanied by an adult at all times.
* There will be dangerous things on site, but they will be clearly marked.
* Licensed alcohol sales are only for people of age 18 and over. Bar staff will ask for ID.

===How old do you have to be to attend EMF by yourself?===
You need to be 16 or over on August 30th, 2018 to attend EMF without an adult.

==Ticket Sales==
===What does the ticket price include?===
The ticket price includes admission to the event, admission to all of the talks, and most of the workshops. Some workshop organisers charge a fee in order to cover material costs, and places on most workshops will be limited.

Your ticket also includes:
* Tent pitch
* Water
* Showers & Toilets
* [[Network|Fast internet]]
* Electricity

===Can I bring a caravan/camper van?===
Yes, we will have a dedicated camper van area on site, within the main fence, with 16A power provided. You'll need to buy an additional camper van ticket.

If you are coming with a caravan, parking for your towing car in the car park is included.

Please try to arrive before midday on Friday and leave after midday on Monday to reduce traffic movements on site. If you're planning on leaving earlier, please let us know when you arrive so we can park you close to the exit.

We unfortunately can't provide water hookups or drainage/emptying facilities. You will not be able to empty your tank during the event.

===If I tow a caravan with a campervan, will I need a ticket for each?===

Yes.

(Somehow this is actually a frequently asked question!)

===Do volunteers get a free ticket?===
Everyone who attends is expected to buy a ticket, including the founders and the core organisation team. So many people contribute to running EMF that it would be financially impossible to give everyone who helps out a free ticket, and unfair to draw a line past which volunteers receive free tickets.

The sole exception to this rule are first aiders, who must be trained to the high standards of our first aid team, and are expected to carry out three eight-hour shifts in return for a free ticket.

===The transaction reference you've provided isn't accepted by my bank!===
If you are having trouble entering the transaction reference into your online banking, just remove the hyphen. Some banks don't like it and don't tell you why.

===Can I transfer tickets to someone else?===

Yes - once you've bought a ticket you can transfer it to someone else by entering their email address on our site. We recommend you do this if you're buying tickets for other people, so that they can receive updates directly from us.

We would kindly request that you don't sell tickets to other people for more than the price you paid for them.

You can find people who may be interested in getting your ticket at [[Ticket_Exchange]].

===Can I get a refund?===

We may consider issuing refunds to those who can't attend if the event sells out. We will not issue refunds for any reason before then. (However, you can sell your ticket on to someone else - see above.)

===Why do you sell tickets in such annoyingly small batches?===

Because we don't want to take more of your money than necessary.

EMF is a non-profit, and we aim to end the event with enough surplus to let us comfortably run the next event, but not too much more. The budget for EMF isn't solid until about six months prior to the event (especially when we've moved to a new site) but we need cash earlier in order to pay deposits to key suppliers. These secure important things like toilets, temporary structures, and the site itself.

If we were to put all of our tickets on sale early, we would have to set ticket prices higher in order to make provision for potential budget changes. By selling smaller batches earlier, we ensure everyone's ticket is the best value, and that as many people as possible can have the chance to attend EMF.

==Planning your Attendance==
===Where is it? How can I get there?===
The EMF site is Eastnor Castle Deer Park, located just east of Ledbury, Herefordshire.

We'll be running a shuttle bus to Ledbury station which has direct trains to Birmingham and London. See [[Travel]] for more details

=== Can someone take me there? ===

See the [[Travel#Carpooling]] section of the [[Travel]] page

===When can I arrive? When do I have to leave by?===
The site will open to ticket holders on Thursday at 4pm. All ticket holders must leave the site by noon (12pm) on Monday. Talks and workshops won't start until after midday on the Friday so there's plenty of time to arrive on Friday morning.

We will be there before and afterwards setting up and packing up. If you want to help with this, please let us know (by emailing [mailto:[email address removed] [email address removed]]) and we'll let you know when you can turn up. If we have not confirmed that we're expecting you before or after the event you will not be admitted to the site. Anyone arriving before Friday morning or staying beyond Monday afternoon will be expected to help with set-up and tear-down (both of which are mostly manual labour).

===When do things kick off?===
The talks and workshops will begin after lunch on Friday, although people will be setting up earlier in the day.

Talks and workshops run daily through to the evening, although we expect villages will be doing things late into the night! The last talks will finish on Sunday evening by 9pm.

===What's the mobile phone coverage like?===

Mobile phone (a.k.a. cellphone) coverage is almost non-existent. Of all the carriers, Vodafone seems to be the best, with some signal in some areas - but with 2,500 more people on site there are no guarantees it will work at all.

Basically, you should expect to have no reception across most of the site and most of the time.

If you need to be reachable during the event, your best bet is to bring a DECT phone to connect to the [[DECT|DECT network]]. There will hopefully be a way to get yourself an external phone number to your DECT phone or for outside callers to dial an extension number to reach you.

===Will there be a bar?===
Yes, we'll be running a volunteer-staffed licensed bar selling beer and wine, as well as soft drinks and the hacker energy drink Club Mate. Far from the usual crap festival beer, we will be serving real ale from local breweries with all profits going towards making the next iteration of Electromagnetic Field more awesome.

The bar on-site opening hours are subject to licensing which will be finalised soon.

===Can I bring pets?===
Sorry, animals (except registered assistance animals) are not allowed.

===Can I smoke?===
Smoking (including vaping) is not allowed in any of the event tents or in the food/bar area. Elsewhere, please be considerate and very careful to extinguish your cigarettes to avoid setting the dry grass on fire. Please make sure cigarette butts are disposed of in rubbish bins rather than just thrown on the ground as the site is used by livestock at other times of the year, and it's a pain for the clean up crew to pick them up after the camp is over!

===Can I bring X/Y/Z?===
tl;dr Probably

Please let us know if it's going to be large/tall/use a lot of power/be noisy or anything else you think we should know. We don't plan on stopping people bringing the latest cool laser helmet for shark 3d printer arduino powered UAV thing, but we need to plan for it.

Things requiring special permission and may not be allowed: balloons, sky lanterns and the like.

===Can I bring/fly my drone?===
Yes - lots of attendees will be bringing drones and there will be a dedicated UAV flying field. It is against UK law to fly drones over the campsite unless you hold permission from the UK Civil Aviation Authority. EMF will be enforcing this rule, and for safety we will not allow UAVs to be flown over the site without prior arrangement.

===What power connectors will be available?===
Mostly 16A IEC309 ('Ceeform'/'Caravan') connectors although there will be some 13A UK sockets. See the [[Power|power page]] for more information.

===What if I don't like camping?===
Whilst we'd strongly recommend camping (so much happens late into the evening and it's a lot more fun) we realise not everyone wants to. There are several hotels in Ledbury.

===What are villages?===
[[Villages]] are areas of the campsite self-organised by attendees. The idea is that like-minded people get together, set up in an area of the campsite and enjoy each other's company. Villages are often set up around a topic or existing group (e.g. lock-picking or a hackspace). Some of them will run their own events parallel to the main schedule (for example last year one village hosted a weekend-long LAN party whilst another ran workshops on ring-making).

If you want to find out more, or see which villages are already proposed see the [[Villages| villages page]]

You don't need to join a village to attend.

==At the Event==
===Can i attach a hammock, slackline, or other things, to the trees?===
Nope. The site owners are very protective about them and have specified that we don't attach anything to them.

===Can i light a fire or BBQ?===
Yes as long as its contained and raised off of the ground so that the grass/ground arent burnt/scorched etc.

Telephony

2018-08-04T11:28:14Z

Davidc:

This page refers to the orga telephone system. Looking for information about [[DECT|the DECT network]]?

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| Nowhere yet
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (setup/teardown), HQ (during event) (Someone's mobile at the moment) (will be: HQ & Logistics tents)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC)
| NOC
| NOC
|-
| 01908 870904
| Site Manager (routed to mobile at carrier/maybe fallthrough to HQ)
|
|
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Presently unused
| Unused
| Comms team leads
|-
| 01908 870911
| Green Room
| Unused
| Green Room
|-
| 01908 870912
| Presently unused
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Bar manager
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Accounts (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

{| class="wikitable"
! Ext
! Routed to
! Purpose
! Temp SIP ext
|-
| 201
| hard phones in [[Team:InfoDesk]] tent
| [[Team:InfoDesk]]
| SIP/19&SIP/20
|-
| 202
| hard phones in HQ
| [[Team:Admin]]
| SIP/13&SIP/15
|-
| 203
| hard phones in NOC
| [[Team:NOC]]
| SIP/31&SIP/32
|-
| 209
| hard phone in First Aid tent
| [[Team:First Aid]]
| SIP/34
|-
| 8xx
| goes to same place as the corresponding geo number with the same last two digits, allowing e.g. volunteer lead mobiles to called even from extensions with no outbound calling allowed
|
|}

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

FAQ

2018-08-02T20:23:22Z

Davidc:

__NOEDITSECTION__
{{link-banner}}

==General==

===Who are you?===
Electromagnetic Field is a non-profit event run entirely by a group of dedicated volunteers. EMF 2018 is the fourth major festival we've held in the UK, and a lot of us also help run other festivals in Germany and the Netherlands.

===Can I help out?===
EMF is organised entirely by volunteers. The event's success relies on attendees helping out to the extent they are willing.

More information on helping out during the event will appear on the [[Volunteering]] page in due course. If you are able to help plan and work before the event, check out the [[Teams]] page to see which teams need help.

===How accessible is EMF?===
We take accessibility very seriously, and we want to let as many people experience the fun of EMF. However, it is ultimately an event in the field, and we can't work miracles with our limited budget.

The site will be well-lit during the event, and we will aim to cover access to the stages with trackway. Travelling between stages may take some time. There will be accessible toilets and the current plan includes an accessible shower with a wheelchair ramp. We cannot guarantee 24/7 power, so it must not be relied on for medical needs, but the power infrastructure team will be on call through the night.

If you will be attending with a carer, they are entitled to a free ticket. Please [mailto:[email address removed] email us] once you've got your ticket so we can allocate your carer a ticket. Registered assistance dogs will be allowed.

If you have any other accessibility concerns, please [mailto:[email address removed] drop us an email].

===Is EMF family-friendly?===
Yes! We want EMF to be a great event for hackers of all ages.

In 2014 and 2016 we had licensed, free childcare provided by the award-winning [https://www.nipperbout.com/ Nipperbout], which was exceedingly well-received. We're aiming to provide this again, subject to sponsorship being secured (childcare is expensive!). There will be a designated family camping area, and a whole track of events and workshops for young people.

EMF has a comprehensive lost-child policy with DBS-checked staff available to help out.

There are a number of things to bear in mind:
* Children under the age of 14 must be accompanied by an adult at all times.
* There will be dangerous things on site, but they will be clearly marked.
* Licensed alcohol sales are only for people of age 18 and over. Bar staff will ask for ID.

===How old do you have to be to attend EMF by yourself?===
You need to be 16 or over on August 30th, 2018 to attend EMF without an adult.

==Ticket Sales==
===What does the ticket price include?===
The ticket price includes admission to the event, admission to all of the talks, and most of the workshops. Some workshop organisers charge a fee in order to cover material costs, and places on most workshops will be limited.

Your ticket also includes:
* Tent pitch
* Water
* Showers & Toilets
* [[Network|Fast internet]]
* Electricity

===Can I bring a caravan/camper van?===
Yes, we will have a dedicated camper van area on site, within the main fence, with 16A power provided. You'll need to buy an additional camper van ticket.

If you are coming with a caravan, parking for your towing car in the car park is included.

Please try to arrive before midday on Friday and leave after midday on Monday to reduce traffic movements on site. If you're planning on leaving earlier, please let us know when you arrive so we can park you close to the exit.

We unfortunately can't provide water hookups or drainage/emptying facilities. You will not be able to empty your tank during the event.

===If I tow a caravan with a campervan, will I need a ticket for each?===

Yes.

(Somehow this is actually a frequently asked question!)

===Do volunteers get a free ticket?===
Everyone who attends is expected to buy a ticket, including the founders and the core organisation team. So many people contribute to running EMF that it would be financially impossible to give everyone who helps out a free ticket, and unfair to draw a line past which volunteers receive free tickets.

The sole exception to this rule are first aiders, who must be trained to the high standards of our first aid team, and are expected to carry out three eight-hour shifts in return for a free ticket.

===The transaction reference you've provided isn't accepted by my bank!===
If you are having trouble entering the transaction reference into your online banking, just remove the hyphen. Some banks don't like it and don't tell you why.

===Can I transfer tickets to someone else?===

Yes - once you've bought a ticket you can transfer it to someone else by entering their email address on our site. We recommend you do this if you're buying tickets for other people, so that they can receive updates directly from us.

We would kindly request that you don't sell tickets to other people for more than the price you paid for them.

You can find people who may be interested in getting your ticket at [[Ticket_Exchange]].

===Can I get a refund?===

We may consider issuing refunds to those who can't attend if the event sells out. We will not issue refunds for any reason before then. (However, you can sell your ticket on to someone else - see above.)

===Why do you sell tickets in such annoyingly small batches?===

Because we don't want to take more of your money than necessary.

EMF is a non-profit, and we aim to end the event with enough surplus to let us comfortably run the next event, but not too much more. The budget for EMF isn't solid until about six months prior to the event (especially when we've moved to a new site) but we need cash earlier in order to pay deposits to key suppliers. These secure important things like toilets, temporary structures, and the site itself.

If we were to put all of our tickets on sale early, we would have to set ticket prices higher in order to make provision for potential budget changes. By selling smaller batches earlier, we ensure everyone's ticket is the best value, and that as many people as possible can have the chance to attend EMF.

==Planning your Attendance==
===Where is it? How can I get there?===
The EMF site is Eastnor Castle Deer Park, located just east of Ledbury, Herefordshire.

We'll be running a shuttle bus to Ledbury station which has direct trains to Birmingham and London. See [[Travel]] for more details

=== Can someone take me there? ===

See the [[Travel#Carpooling]] section of the [[Travel]] page

===When can I arrive? When do I have to leave by?===
The site will open to ticket holders on Thursday at 4pm. All ticket holders must leave the site by noon (12pm) on Monday. Talks and workshops won't start until after midday on the Friday so there's plenty of time to arrive on Friday morning.

We will be there before and afterwards setting up and packing up. If you want to help with this, please let us know (by emailing [mailto:[email address removed] [email address removed]]) and we'll let you know when you can turn up. If we have not confirmed that we're expecting you before or after the event you will not be admitted to the site. Anyone arriving before Friday morning or staying beyond Monday afternoon will be expected to help with set-up and tear-down (both of which are mostly manual labour).

===When do things kick off?===
The talks and workshops will begin after lunch on Friday, although people will be setting up earlier in the day.

Talks and workshops run daily through to the evening, although we expect villages will be doing things late into the night! The last talks will finish on Sunday evening by 9pm.

===Will there be a bar?===
Yes, we'll be running a volunteer-staffed licensed bar selling beer and wine, as well as soft drinks and the hacker energy drink Club Mate. Far from the usual crap festival beer, we will be serving real ale from local breweries with all profits going towards making the next iteration of Electromagnetic Field more awesome.

The bar on-site opening hours are subject to licensing which will be finalised soon.

===Can I bring pets?===
Sorry, animals (except registered assistance animals) are not allowed.

===Can I smoke?===
Smoking (including vaping) is not allowed in any of the event tents or in the food/bar area. Elsewhere, please be considerate and very careful to extinguish your cigarettes to avoid setting the dry grass on fire. Please make sure cigarette butts are disposed of in rubbish bins rather than just thrown on the ground as the site is used by livestock at other times of the year, and it's a pain for the clean up crew to pick them up after the camp is over!

===Can I bring X/Y/Z?===
tl;dr Probably

Please let us know if it's going to be large/tall/use a lot of power/be noisy or anything else you think we should know. We don't plan on stopping people bringing the latest cool laser helmet for shark 3d printer arduino powered UAV thing, but we need to plan for it.

Things requiring special permission and may not be allowed: balloons, sky lanterns and the like.

===Can I bring/fly my drone?===
Yes - lots of attendees will be bringing drones and there will be a dedicated UAV flying field. It is against UK law to fly drones over the campsite unless you hold permission from the UK Civil Aviation Authority. EMF will be enforcing this rule, and for safety we will not allow UAVs to be flown over the site without prior arrangement.

===What power connectors will be available?===
Mostly 16A IEC309 ('Ceeform'/'Caravan') connectors although there will be some 13A UK sockets. See the [[Power|power page]] for more information.

===What if I don't like camping?===
Whilst we'd strongly recommend camping (so much happens late into the evening and it's a lot more fun) we realise not everyone wants to. There are several hotels in Ledbury.

===What are villages?===
[[Villages]] are areas of the campsite self-organised by attendees. The idea is that like-minded people get together, set up in an area of the campsite and enjoy each other's company. Villages are often set up around a topic or existing group (e.g. lock-picking or a hackspace). Some of them will run their own events parallel to the main schedule (for example last year one village hosted a weekend-long LAN party whilst another ran workshops on ring-making).

If you want to find out more, or see which villages are already proposed see the [[Villages| villages page]]

You don't need to join a village to attend.

==At the Event==
===Can i attach a hammock, slackline, or other things, to the trees?===
Nope. The site owners are very protective about them and have specified that we don't attach anything to them.

===Can i light a fire or BBQ?===
Yes as long as its contained and raised off of the ground so that the grass/ground arent burnt/scorched etc.

Network

2018-08-01T23:14:28Z

Davidc: uplink sponsor is no longer a secret

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any road, trackway or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards and vehicle snags).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

Sure. You can host a server anywhere on the network, and the long DHCP lease time will effectively give you a static IP address.

If you would like to house your server in our data centre (NOC-DC), please contact us before the event by e-mail to [email address removed] 1 Gbps copper ports are standard; if you require a 10 Gbps port, you'll need to supply a DAC or SFPs (our end Arista-coded) with fibre.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donations and sponsorship:

* [https://ethernet.business.sky.com Sky For Business]
* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-07-26T03:22:52Z

Davidc: /* Rules */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any road, trackway or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards and vehicle snags).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

Sure. You can host a server anywhere on the network, and the long DHCP lease time will effectively give you a static IP address.

If you would like to house your server in our data centre (NOC-DC), please contact us before the event by e-mail to [email address removed] 1 Gbps copper ports are standard; if you require a 10 Gbps port, you'll need to supply a DAC or SFPs (our end Arista-coded) with fibre.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donation and sponsorship:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Uplink sponsor and more sponsors will be announced soon!

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-07-26T03:21:08Z

Davidc: /* Is there a server I can use to host data on site? */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

Sure. You can host a server anywhere on the network, and the long DHCP lease time will effectively give you a static IP address.

If you would like to house your server in our data centre (NOC-DC), please contact us before the event by e-mail to [email address removed] 1 Gbps copper ports are standard; if you require a 10 Gbps port, you'll need to supply a DAC or SFPs (our end Arista-coded) with fibre.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donation and sponsorship:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Uplink sponsor and more sponsors will be announced soon!

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-07-26T03:19:45Z

Davidc: /* Can I bring a server? */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

Sure. You can host a server anywhere on the network, and the long DHCP lease time will effectively give you a static IP address.

If you would like to house your server in our data centre (NOC-DC), please contact us before the event by e-mail to [email address removed] 1 Gbps copper ports are standard; if you require a 10 Gbps port, you'll need to supply a DAC or SFPs (our end Arista-coded) with fibre.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donation and sponsorship:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Uplink sponsor and more sponsors will be announced soon!

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-07-26T01:52:15Z

Davidc: /* Supporters */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donation and sponsorship:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]

Uplink sponsor and more sponsors will be announced soon!

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-07-26T01:51:58Z

Davidc: immense gratitude > special thanks

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend our immense gratitude to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donation and sponsorship:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]
* [http://www.envicoengineering.com/ Envico Engineering]

Uplink sponsor and more sponsors will be announced soon!

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Network

2018-07-26T01:51:31Z

Davidc:

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making the EMF network and uplink happen through their donation and sponsorship:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]
* [http://www.envicoengineering.com/ Envico Engineering]

Uplink sponsor and more sponsors will be announced soon!

Special thanks to other companies that have gone above and beyond to help us:

* [http://www.envicoengineering.com/ Envico/Morgan Marine]

Telephony

2018-07-25T18:02:43Z

Davidc:

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! 2018 Allocation
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| Nowhere yet
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (Someone's mobile at the moment) (will be: HQ & Logistics tents)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc (will be: NOC)
| NOC
| NOC
|-
| 01908 870904
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Presently unused
| Unused
| Comms team leads
|-
| 01908 870911
| Presently unused
| Unused
| Speaker Ops
|-
| 01908 870912
| Presently unused
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Presently unused
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Purpose? (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

{| class="wikitable"
! Ext
! Routed to
! Purpose
! Temp SIP ext
|-
| 201
| hard phones in [[Team:InfoDesk]] tent
| [[Team:InfoDesk]]
| SIP/19&SIP/20
|-
| 202
| hard phones in HQ
| [[Team:Admin]]
| SIP/13&SIP/15
|-
| 203
| hard phones in NOC
| [[Team:NOC]]
| SIP/31&SIP/32
|-
| 209
| hard phone in First Aid tent
| [[Team:First Aid]]
| SIP/34
|-
| 8xx
| goes to same place as the corresponding geo number with the same last two digits, allowing e.g. volunteer lead mobiles to called even from extensions with no outbound calling allowed
|
|}

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Telephony

2018-07-25T18:02:03Z

Davidc: Update number allocation

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! Routed to
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| Nowhere yet
| Info desk
| Info desk
|-
| 01908 870902
| Logistics (Someone's mobile at the moment) (will be: HQ & Logistics tents)
| HQ
| Logistics
|-
| 01908 870903
| Currently davidc, will be NOC
| NOC
| NOC
|-
| 01908 870904
|-
| 01908 870905
|-
| 01908 870906
| Presently unused
| Unused
| Volunteers desk
|-
| 01908 870907
| Presently unused
| Volunteer team leads
| Volunteer team leads
|-
| 01908 870908
| First Aid tent
| First Aid tent
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Presently unused
| Unused
| Comms team leads
|-
| 01908 870911
| Presently unused
| Unused
| Speaker Ops
|-
| 01908 870912
| Presently unused
| Unused
| Accessibility & Conduct
|-
| 01908 870913
| Presently unused
| Unused
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
| Purpose? (Presently Russ's mobile)
| Unused
| Unused
|-
| 01908 870919
| Sponsors (Presently Jonty's mobile)
| Unused
| Sponsors
|}

=== Hunt Groups ===

{| class="wikitable"
! Ext
! Routed to
! Purpose
! Temp SIP ext
|-
| 201
| hard phones in [[Team:InfoDesk]] tent
| [[Team:InfoDesk]]
| SIP/19&SIP/20
|-
| 202
| hard phones in HQ
| [[Team:Admin]]
| SIP/13&SIP/15
|-
| 203
| hard phones in NOC
| [[Team:NOC]]
| SIP/31&SIP/32
|-
| 209
| hard phone in First Aid tent
| [[Team:First Aid]]
| SIP/34
|-
| 8xx
| goes to same place as the corresponding geo number with the same last two digits, allowing e.g. volunteer lead mobiles to called even from extensions with no outbound calling allowed
|
|}

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Telephony

2018-07-25T17:57:04Z

Davidc: Remove the phones, it is out of date and not useful here

== Telephony ==

[[Team:NOC]] operates a telephony system for use both prior to and during the event.

External numbers are implemented upstream at [http://www.sargasso.co.uk/ Sargasso]. Some of them switch on-site during the event, although many (notably first aid) remain directly routed at the carrier for reliability.

On site we will again have an Asterisk-based phone system for orga use. This year this will be expanded to include all orga and volunteer locations.

=== DDIs ===

{| class="wikitable"
! DDI
! Routed to
! 2014 Purpose
! 2016 Purpose
|-
| 01908 870900
|colspan="3"|IVR
|-
| 01908 870901
| 201
| [[Team:InfoDesk]] hunt group
| Info desk
|-
| 01908 870902
| Logistics ([[User:JMac|JMac]] mobile at the moment) (will be: 202)
| HQ hunt group
| HQ hunt group
|-
| 01908 870903
|
| [[Team:NOC]] hunt group
| see 203
|-
| 01908 870904
|-
| 01908 870905
|-
| 01908 870906
| 303
|
| Volunteers desk
|-
| 01908 870907
| Simultaneous ring of mobiles
| Volunteer team leads
|
|-
| 01908 870908
|
| First Aid tent
|-
| 01908 870909
| First Aid mobiles N.B. routed at the carrier, does not go via on-site PBX/network
| First Aid on-call
| First Aid on-call
|-
| 01908 870910
| Simultaneous ring of mobiles
|
| Comms team leads
|-
| 01908 870911
| dominicgs mobile
|
| Speaker Ops
|-
| 01908 870912
| Simultaneous ring of mobiles - NOT YET CONFIGURED
|
| Accessibility & Conduct
|-
| 01908 870913
| Mobile divert
|
| Bar manager
|-
| 01908 870914
|-
| 01908 870915
|-
| 01908 870916
|-
| 01908 870917
|-
| 01908 870918
|-
| 01908 870919
| Mobile
| -
| Sponsors
|}

=== Hunt Groups ===

{| class="wikitable"
! Ext
! Routed to
! Purpose
! Temp SIP ext
|-
| 201
| hard phones in [[Team:InfoDesk]] tent
| [[Team:InfoDesk]]
| SIP/19&SIP/20
|-
| 202
| hard phones in HQ
| [[Team:Admin]]
| SIP/13&SIP/15
|-
| 203
| hard phones in NOC
| [[Team:NOC]]
| SIP/31&SIP/32
|-
| 209
| hard phone in First Aid tent
| [[Team:First Aid]]
| SIP/34
|-
| 8xx
| goes to same place as the corresponding geo number with the same last two digits, allowing e.g. volunteer lead mobiles to called even from extensions with no outbound calling allowed
|
|}

=== Outbound ===

NOC and HQ phones will have direct outbound capability on the basis that they will be manned 24/7.

Other phones, including stage phones and participant registered extensions, will not be able to call outbound except with a PIN. A PIN will be e-mailed to everyone on the admin list the week prior to the event.

999 - Location has been set and 999 will be available from every phone, however given our network setup, it is strongly recommended that emergency calls are done by mobile phone if reception permits.

Team:NOC

2018-07-23T00:56:52Z

Davidc: /* We need people to help with */

{{Infobox Team
|name=NOC
|lead=User:Davidc
|desc=The internet connection, on-site network, and all systems administration.
|needvolunteers=Yes
|Location=52.039832, -2.376446
|Contact=noc at our domain
|MailingList=noc at lists dot our domain
}}
== What do we do? ==

Hi! We are Team NOC. We operate the [[Network|onsite network and wifi]], the [[Telephony|public and private telephony systems]] and the onsite-servers including the speaker [[Content Server]].

== Orga requests for VMs ==

E-mail the noc with the following details:

* Hostname (under emf.camp)
* vCPUs
* RAM
* Disk (please be conservative, we don't have a huge amount)

If you need us to install the OS, specify the distribution and version. Otherwise we'll send you the login details to install it yourself and we'll supply the IPv4 and IPv6 addresses to use.

The DNS servers are:
* 78.158.87.11
* 78.158.87.12
* 2a05:e201:0:57::11
* 2a05:e201:0:57::12

The NTP servers are the same.

Please be sure to install VMware tools or open-vm-tools.

== Team members ==

{{TeamUserList}}

==We need people to help with ==
* Servers - puppet, services (DHCP, DNS, NTP), monitoring (graphite, librenms, icinga2)

Teams

2018-07-23T00:56:01Z

Davidc: /* Teams currently looking for volunteers */

{{link-banner}}
For more information on how EMF is run, and the duties of team leaders, see the [[Organisation]] page.

==Teams currently looking for volunteers==
* [[Team:Decoration]]
* [[Team:Badge]]
* [[Team:Construction]]
* [[Team:Youth]]
* [[Team:Content]]
* [[Team:InfoDesk]]
* [[Team:Villages]]
* [[Team:Volunteering]]
* [[Team:Web]]
* [[Team:NOC]]

'''If you're interested in getting involved with a team, please get in touch on [[IRC]], or email [mailto:[email address removed] [email address removed]].'''

==Full list of teams==

{{#ask: [[Category:Teams]]
| mainlabel=Team
| ?TeamDesc=Description
| ?TeamLead=Lead
| ?TeamDeputy=Deputy
|format=template
|template=TeamListFormat
|introtemplate=TeamListIntro
|outrotemplate=TeamListOutro
|named args=yes
|limit=1500
}}

Team:NOC

2018-07-19T21:16:30Z

Davidc:

{{Infobox Team
|name=NOC
|lead=User:Davidc
|desc=Network Operations Centre: Networking and systems admin
|needvolunteers=Yes
|Location=52.039832, -2.376446
|Contact=noc at our domain
|MailingList=noc at lists dot our domain
}}
== What do we do? ==

Hi! We are Team NOC. We operate the [[Network|onsite network and wifi]], the [[Telephony|public and private telephony systems]] and the onsite-servers including the speaker [[Content Server]].

== Orga requests for VMs ==

E-mail the noc with the following details:

* Hostname (under emf.camp)
* vCPUs
* RAM
* Disk (please be conservative, we don't have a huge amount)

If you need us to install the OS, specify the distribution and version. Otherwise we'll send you the login details to install it yourself and we'll supply the IPv4 and IPv6 addresses to use.

The DNS servers are:
* 78.158.87.11
* 78.158.87.12
* 2a05:e201:0:57::11
* 2a05:e201:0:57::12

The NTP servers are the same.

Please be sure to install VMware tools or open-vm-tools.

== Team members ==

{{TeamUserList}}

Team:NOC

2018-07-19T21:08:37Z

Davidc:

User:Davidc

2018-07-14T16:36:08Z

Davidc:

Interest:Role-Playing Games

2018-07-14T16:35:51Z

Davidc: Created page with "{{Interest |name=Role-Playing Games }}"

Interest:Board Games

2018-07-14T16:35:38Z

Davidc: Created page with "{{Interest |name=Board Games }}"

Electromagnetic Field 2018

2018-07-14T16:35:00Z

Davidc: links to power and network

{{link-banner}}
[[File:Emf1.jpg|thumb|left|The EMF sign in 2014]]
Electromagnetic Field (EMF) is a non-profit UK camping festival for those with an inquisitive mind or an interest in making things: hackers, geeks, scientists, engineers, artists, and crafters.

Electromagnetic Field 2018 will take place between Friday 31st August and Sunday 2nd September 2018 in [[Location|Eastnor Castle Deer Park]] in Herefordshire. Just like in [https://wiki-archive.emfcamp.org/2012 2012], [https://wiki-archive.emfcamp.org/2014/w/index.php/Electromagnetic_Field_2014 2014] and [https://wiki-archive.emfcamp.org/2016/w/index.php/Electromagnetic_Field_2016 2016], hundreds of people will gather in a field for three days of talks and workshops covering pretty much everything. In 2016, this included blacksmithing, crocheting, [https://www.youtube.com/watch?v=wueRcp8QdBM robot dinosaurs], [https://www.youtube.com/watch?v=iqTLQ0T-MxU 3D printed 4D shapes], [https://www.youtube.com/watch?v=AcuwrU_bmUI key impressioning], and much more.

To help matters along, we will arrange [[Power|electrical power]], a [[Network|high-speed internet connection with reliable WiFi]], and a bar stocked with real ale and Club Mate.

To get an idea what EMF 2016 was like, you can view the [https://wiki-archive.emfcamp.org/2016/w/index.php/Talks list of talks, workshops and performances] and see recordings of a number of them on our [https://www.youtube.com/user/emfcamp1/videos Youtube channel]. If you are inspired by the past content, please consider giving a talk yourself or running a workshop this year!

The campsite will also have a number of [[villages]], where those with something in common can camp together. Keep an eye on this wiki, and pick a village to join, or start your own.

At each EMF event we give our attendees a programmable badge. In 2016, attendees received a MicroPython enabled [http://blog.emfcamp.org/post/145667126793/the-emf-tilda-badge-is-saved TiLDA Mkπ]. Information about past badges including TiLDA, SiNE and our next badge can be found [https://badge.emfcamp.org here].

If you want to get in touch, there is info on the [[contact]] page.

Network

2018-07-14T03:52:04Z

Davidc:

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making the EMF network and uplink happen:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://www.babiel.com/en Babiel]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]
* [http://www.envicoengineering.com/ Envico Engineering]

Uplink sponsor and more sponsors will be announced soon!

Network

2018-07-13T23:19:14Z

Davidc: /* Supporters */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making the EMF network and uplink happen:

* [https://www.flexoptix.net/en/ FlexOptix]
* [http://www.sargasso.co.uk/from/emfcamp Sargasso Networks]
* [https://eventinfra.org EventInfra]
* [https://www.lonap.net LONAP]
* [https://www.comtec.com Comtec Enterprises]
* [http://www.envicoengineering.com/ Envico Engineering]

Uplink sponsor and more sponsors will be announced soon!

Network

2018-07-13T23:13:54Z

Davidc: /* Is there a server I can use to host data on site? */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

This year, we intend to keep the content server up permanently, so the links can be used after camp.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making EMF Network happen:

TBD

Network

2018-07-13T23:13:33Z

Davidc: /* Is there a server I can use to host data on site? */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emfcamp.org'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around August 23rd, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emfcamp.org/~yournick/) let us know as well.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making EMF Network happen:

TBD

User:Davidc

2018-07-13T23:09:51Z

Davidc:

{{Attendee
|Name=davidc
|Arrival=2018/08/23 20:00
|Departure=2018/09/05 14:00
|Website=www.davidc.net
|Email=david at our domain
|IRC=davidc
|Twitter=davidcx
|Teams=Team:NOC
|Interests=Interest:Badge, Interest:Electronics, Interest:Open Source Software, Interest:Python, Interest:Raspberry Pi
}}
davidc delivers cat pictures to and around the field. He is generally not found under direct sunlight.

Team:NOC

2018-07-13T23:06:01Z

Davidc:

Team:NOC

2018-07-13T23:05:20Z

Davidc:

{{Infobox Team
|name=NOC
|desc=Network Operations Centre: Networking and systems admin
|needvolunteers=No
|Location=52.039832, -2.376446
}}
== What do we do? ==

Hi! We are Team NOC. We operate the [[Network|onsite network and wifi]], the [[Telephony|public and private telephony systems]] and the onsite-servers including the speaker [[Content Server]].

== Team members ==

{{TeamUserList}}

FAQ

2018-07-04T10:54:29Z

Davidc:

__NOEDITSECTION__
{{link-banner}}

==General==

===Who are you?===
Electromagnetic Field is a non-profit event run entirely by a group of dedicated volunteers. EMF 2018 is the fourth major festival we've held in the UK, and a lot of us also help run other festivals in Germany and the Netherlands.

===Can I help out?===
EMF is organised entirely by volunteers. The event's success relies on attendees helping out to the extent they are willing.

More information on helping out during the event will appear on the [[Volunteering]] page in due course. If you are able to help plan and work before the event, check out the [[Teams]] page to see which teams need help.

===How accessible is EMF?===
We take accessibility very seriously, and we want to let as many people experience the fun of EMF. However, it is ultimately an event in the field, and we can't work miracles with our limited budget.

The site will be well-lit during the event, and we will aim to cover access to the stages with trackway. Travelling between stages may take some time. There will be accessible toilets and the current plan includes an accessible shower with a wheelchair ramp. We cannot guarantee 24/7 power, so it must not be relied on for medical needs, but the power infrastructure team will be on call through the night.

If you will be attending with a carer, they are entitled to a free ticket. Please [mailto:[email address removed] email us] once you've got your ticket so we can allocate your carer a ticket. Registered assistance dogs will be allowed.

If you have any other accessibility concerns, please [mailto:[email address removed] drop us an email].

===Is EMF family-friendly?===
Yes! We want EMF to be a great event for hackers of all ages.

In 2014 and 2016 we had licensed, free childcare provided by the award-winning [https://www.nipperbout.com/ Nipperbout], which was exceedingly well-received. We're aiming to provide this again, subject to sponsorship being secured (childcare is expensive!). There will be a designated family camping area, and a whole track of events and workshops for young people.

EMF has a comprehensive lost-child policy with DBS-checked staff available to help out.

There are a number of things to bear in mind:
* Children under the age of 14 must be accompanied by an adult at all times.
* There will be dangerous things on site, but they will be clearly marked.
* Licensed alcohol sales are only for people of age 18 and over. Bar staff will ask for ID.

===How old do you have to be to attend EMF by yourself?===
You need to be 16 or over on August 30th, 2018 to attend EMF without an adult.

==Ticket Sales==
===What does the ticket price include?===
The ticket price includes admission to the event, admission to all of the talks, and most of the workshops. Some workshop organisers charge a fee in order to cover material costs, and places on most workshops will be limited.

Your ticket also includes:
* Tent pitch
* Water
* Showers & Toilets
* [[Network|Fast internet]]
* Electricity

===Can I bring a caravan/camper van?===
Yes, we will have a dedicated camper van area on site, within the main fence, with 16A power provided. You'll need to buy an additional camper van ticket.

If you are coming with a caravan, parking for your towing car in the car park is included.

As we restrict vehicle movements on site for safety, you may not be able to enter or leave in a vehicle during the public opening of the event. Plan to arrive early and leave late.

We unfortunately can't provide water hookups or drainage/emptying facilities. You will not be able to empty your tank during the event.

===If I tow a caravan with a campervan, will I need a ticket for each?===

Yes.

(Somehow this is actually a frequently asked question!)

===Do volunteers get a free ticket?===
Everyone who attends is expected to buy a ticket, including the founders and the core organisation team. So many people contribute to running EMF that it would be financially impossible to give everyone who helps out a free ticket, and unfair to draw a line past which volunteers receive free tickets.

The sole exception to this rule are first aiders, who must be trained to the high standards of our first aid team, and are expected to carry out three eight-hour shifts in return for a free ticket.

===The transaction reference you've provided isn't accepted by my bank!===
If you are having trouble entering the transaction reference into your online banking, just remove the hyphen. Some banks don't like it and don't tell you why.

===Can I transfer tickets to someone else?===

Yes - once you've bought a ticket you can transfer it to someone else by entering their email address on our site. We recommend you do this if you're buying tickets for other people, so that they can receive updates directly from us.

We would kindly request that you don't sell tickets to other people for more than the price you paid for them.

===Can I get a refund?===

We may consider issuing refunds to those who can't attend if the event sells out. We will not issue refunds for any reason before then. (However, you can sell your ticket on to someone else - see above.)

===Why do you sell tickets in such annoyingly small batches?===

Because we don't want to take more of your money than necessary.

EMF is a non-profit, and we aim to end the event with enough surplus to let us comfortably run the next event, but not too much more. The budget for EMF isn't solid until about six months prior to the event (especially when we've moved to a new site) but we need cash earlier in order to pay deposits to key suppliers. These secure important things like toilets, temporary structures, and the site itself.

If we were to put all of our tickets on sale early, we would have to set ticket prices higher in order to make provision for potential budget changes. By selling smaller batches earlier, we ensure everyone's ticket is the best value, and that as many people as possible can have the chance to attend EMF.

==Planning your Attendance==
===Where is it? How can I get there?===
The EMF site is Eastnor Castle Deer Park, located just east of Ledbury, Herefordshire.

We'll be running a shuttle bus to Ledbury station which has direct trains to Birmingham and London. See [[Travel]] for more details

===When can I arrive? When do I have to leave by?===
The site will open to ticket holders on Thursday at 4pm. All ticket holders must leave the site by noon (12pm) on Monday. Talks and workshops won't start until after midday on the Friday so there's plenty of time to arrive on Friday morning.

We will be there before and afterwards setting up and packing up. If you want to help with this, please let us know (by emailing [mailto:[email address removed] [email address removed]]) and we'll let you know when you can turn up. If we have not confirmed that we're expecting you before or after the event you will not be admitted to the site. Anyone arriving before Friday morning or staying beyond Monday afternoon will be expected to help with set-up and tear-down (both of which are mostly manual labour).

===When do things kick off?===
The talks and workshops will begin after lunch on Friday, although people will be setting up earlier in the day.

Talks and workshops run daily through to the evening, although we expect villages will be doing things late into the night!

===Will there be a bar?===
Yes, we'll be running a volunteer-staffed licensed bar selling beer and wine, as well as soft drinks and the hacker energy drink Club Mate. Far from the usual crap festival beer, we will be serving real ale from local breweries with all profits going towards making the next iteration of Electromagnetic Field more awesome.

The bar on-site opening hours are subject to licensing which will be finalised soon.

===Can I bring pets?===
Sorry, animals (except registered assistance animals) are not allowed.

===Can I smoke?===
Smoking (including vaping) is not allowed in any of the event tents or in the food/bar area. Elsewhere, please be considerate and very careful to extinguish your cigarettes to avoid setting the dry grass on fire. Please make sure cigarette butts are disposed of in rubbish bins rather than just thrown on the ground as the site is used by livestock at other times of the year, and it's a pain for the clean up crew to pick them up after the camp is over!

===Can I bring X/Y/Z?===
tl;dr Probably

Please let us know if it's going to be large/tall/use a lot of power/be noisy or anything else you think we should know. We don't plan on stopping people bringing the latest cool laser helmet for shark 3d printer arduino powered UAV thing, but we need to plan for it.

Things requiring special permission and may not be allowed: balloons, sky lanterns and the like.

===Can I bring/fly my drone?===
Yes - lots of attendees will be bringing drones and there will be a dedicated UAV flying field. It is against UK law to fly drones over the campsite unless you hold permission from the UK Civil Aviation Authority. EMF will be enforcing this rule, and for safety we will not allow UAVs to be flown over the site without prior arrangement.

===What if I don't like camping?===
Whilst we'd strongly recommend camping (so much happens late into the evening and it's a lot more fun) we realise not everyone wants to. There are several hotels in Ledbury.

===What are villages?===
[[Villages]] are areas of the campsite self-organised by attendees. The idea is that like-minded people get together, set up in an area of the campsite and enjoy each other's company. Villages are often set up around a topic or existing group (e.g. lock-picking or a hackspace). Some of them will run their own events parallel to the main schedule (for example last year one village hosted a weekend-long LAN party whilst another ran workshops on ring-making).

If you want to find out more, or see which villages are already proposed see the [[Villages| villages page]]

You don't need to join a village to attend.

==At the Event==
===Can i attach a hammock, slackline, or other things, to the trees?===
Nope. The site owners are very protective about them and have specified that we don't attach anything to them.

===Can i light a fire or BBQ?===
Yes as long as its contained and raised off of the ground so that the grass/ground arent burnt/scorched etc.

Network

2018-06-22T14:01:33Z

Davidc:

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100 Mbps or 1 Gbps, auto-negotiate, auto-MDX. Some may support PoE (802.3af), but likely not in camping areas.

Note that most of our ports will not support 10 Mbps - if you need it for old equipment or embedded things, please bring your own switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We may have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emf.camp'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around July 29th, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making EMF Network happen:

TBD

Network

2018-05-17T10:13:02Z

Davidc: /* Wireless */

<div style="float:right;padding-left:10px">__TOC__</div>

[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

=== Key points ===

* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
* You have a public IP address and there is no network firewall or filtering. [[#Security|Keep safe!]]
* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points|here's why]].

== Rules ==

* Be nice and friendly! Do not do to others what you do not wish done to yourself.
* Protect your computer! We cannot be taken responsible or held accountable for any damage your devices might sustain due to security problems, power spikes and other such perils.
* Do not operate your own WiFi access point. This causes a major slow-down for everybody else. Here's why: [[Network/Rogue Access Points]].
* If you are operating anything else in the 2.4GHz spectrum, please clear the frequencies in advance with us.
* Do not attempt to run a DHCP or RA server. You will be found and named and shamed!
* Cabling from your tent to the Datenklo must not cross any roads or fire lanes (this is to electrically protect our network hardware, as well as to reduce trip hazards).
* If you are connecting a Nanode / Arduino Ethernet / other microcontroller to the network please make sure it is using a unique MAC address. Many of the code examples for such devices use an identical MAC address and this will cause problems - if you aren't sure contact us.
* If you are connecting a switch, you need to contact the NOC if you are connecting more than 10 stations. You are only allowed one uplink from your switch to our network - do not attempt to connect multiple cables or to multiple DKs!

If you break these rules, we will track you down or triangulate you, but we'd rather spend the time maintaining the smooth operation of the network, so please don't waste our time. And if you think [[Team:NOC]] cannot locate you just because you're wireless - think again. ;-)

== Uplink ==

The camp site will have **not yet announced**.

== Wireless ==

The whole field has been covered with many wireless access points to ensure the best possible coverage and to allow you to roam seamlessly without interruption. Naturally, there is additional coverage in popular areas such as the talk tents. The following wireless networks will be available:

; emfcamp
: This is 5GHz and should you should use this one in preference, if you can see it. The username and password are "emf". This is the most secure, WPA2-Enterprise.
; emfcamp-legacy18
: This is 2.4GHz and less resistant to interference, use it only if you have to. The username and password are "emf". This is also WPA2-Enterprise.
; emfcamp-insecure18
: '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic.
; spacenet
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your hackerspace offers [https://spacefed.net/ spacenet].
; eduroam
: This is 2.4GHz + 5GHz and WPA2-Enterprise, you can connect with a valid account if your university/college/school is offering eduroam. More information can be found at [https://www.eduroam.org/ eduroam.org].

Use of the 5GHz SSIDs is recommended if your device supports them. 802.11b is disabled as it slows everyone else down.

Even if you are using an encrypted network, you should still [[#Encryption|encrypt any sensitive traffic]] sent over the air end-to-end to prevent snooping. Although some SSIDs offer encryption, it is only over-the-air.

We have airtime fairness configured on our wireless controllers, so if you wish to download large files please use a wired connection (there will be plenty about).

For proper wireless support under linux, you should have a kernel newer than 2.6.39.2. There is also a kernel panic with brcmsmac on linux 3.10.3 that can be fixed by downgrading to kernel 3.10.2.

=== WPA2 802.1X, encryption ===

Due to popular demand (and with security in mind) we provide WPA2 802.1X. This will encrypt your traffic, preventing attackers from sniffing your data. Keep in mind that this won't protect you from other network attacks and you should still be aware that you are at a hacker conference! Your link layer should be secure if you do certificate checking (see below).

You might think: "WTF!? Do I need to register a user and password blah, blah". Fortunately not. You can '''use any username/password combination using EAP-TTLS with PAP to login''' (example: "user: fbhfbhiaf pass: bgufwbnkqo" is valid), because we don't care who logs in and who you are. We just want to encrypt your data.

Users which use MSCHAPv2 (like Windows users with default 802.1X supplicant) should use a fixed username and password. You can use "emf/emf" or "guest/guest" as "username/password".

==== Client Settings ====
Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

SSID: emfcamp or emfcamp-legacy

EAP-TTLS:

Phase 1: EAP-TTLS
Phase 2: PAP

PEAP:

Phase 1: PEAP
Phase 2: MSCHAPv2 or EAP-MSCHAPv2 or PAP

CN = radius.emf.camp
CA = StartCom Certification Authority
SHA1 Fingerprint = '''TBD'''

Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate|here]] for the complete certificate.

=== Services / VLANs ===
Different services / VLANs are offered on the wireless network. On the emfcamp or emfcamp-legacy SSID you will be dropped into the correct VLAN using WPA2 802.1X. Use the following username/password combinations:

* internetofstuff/internetofstuff (for the "Internet of Stuff" VLAN; for projects that should not be reachable from the internet, but only from the camp network. Does offer outbound internet connectivity, not inbound.)
* emf/emf or emfcamp/emfcamp or guest/guest (for regular user VLAN)

Please note the username AND password are case-sensitive.

Projects that do not support WPA2 802.1X should use the emfcamp-insecure SSID. Based off the MAC address vendor, projects will dropped into the "Internet of Stuff"-VLAN automatically. If you think your project should or should not be in this VLAN, get in contact with us. The following vendors will be dropped into this VLAN (for MAC address to vendor list see [http://standards-oui.ieee.org/oui.txt here]):

* Texas Instruments
* Espressif Inc.

== Camping area and workshops ==

All camping areas will be within 60m of a Datenklo (Data Toilet), please bring around 60-70m of CAT5 cable. Unless a sponsor comes forward for it, we will be unable to supply cable on site. We will be budgeting only for the infrastructure requirements and necessary spares to deal with issues.

Lay your own cable neatly from your tent back to the nearest Datenklo, and leave 6m of slack coiled on the floor in front of it. And please lay it so that it can be clearly seen that it needs to be plugged in - or you risk having your cable overlooked. At regular intervals a member of the NOC team will connect it up and enable the port.

If you wish to be removed from a Datenklo again, contact the [[Team:InfoDesk|helpdesk]] directly.

All of our edge ports are at least 100Mbit or 1Gbit, some support PoE (802.3af), plus Auto-MDX.

Note that not all our edge ports will support 10Mbit - if you need it for old or embedded things please bring a switch to convert.

== Static IPs ==

If you need a static IP on the wired network, drop by the [[Team:InfoDesk]].

== IPv6 ==

Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk|NOC helpdesk]] if you need help.

== Multicast ==

We have a TV & radio multicast feed from the BBC. Simply open your media player and browse multicast streams (e.g. in VLC's main window, go to the sidebar "Local Network -> Network Streams (SAP)").

This is currently working on both the wired and wireless network; you will have some expected packet loss if you use wireless though.

Don't forget to turn on deinterlacing to get a proper picture (press 'd' in VLC).

== Services ==

* DNS: 78.158.87.11 and 78.158.87.12
* NTP: 78.158.87.11 and 78.158.87.12 (ntp1.emf.camp and ntp2.emf.camp)
* Nearest Debian mirror: http://debian.mirror.uk.sargasso.net
* Content distribution server - for use by speakers to upload their content to an on-site server - http://content.emf.camp/ . Speakers please contact noc@ to get an account.

== Security ==

=== Recent vulnerabilities ===

'''WARNING: Bring a recent DHCP Client'''. If your OS uses ISC DHCP dhclient make sure you don't run a vulnerable version. https://www.kb.cert.org/vuls/id/410676

=== Encryption ===

Please treat the network as wide open and full of attackers. Although [[Team:NOC]] themselves will not monitor the network, always assume that Alice flirting with Bob will be spied upon by The Third Party.

Any sensitive information including passwords must therefore be encrypted. Please make sure you don't use any software or web applications that send sensitive data or passwords in the clear.

The following mechanisms should be safe:
* Anything that goes through a VPN
* Any website that uses HTTPS
* Any application that uses SSL
** In the case of email, you need to have SSL enabled for both receiving mail (POP, IMAP) and sending it (SMTP)
* ssh and scp
* Where possible, use One-time passwords. Real tokens work best, many of those should be compatible with open source radius servers. [http://perlmonks.org/?node=967433 Here] is a simple Perl radius server implementation for [http://tools.ietf.org/html/rfc6238 RFC6238] tokens that works with ssh and other stuff on linux.

The following are almost always unsafe:

* FTP with login/password (are almost always sent in the clear)
* Telnet with login/password
* Email if you don't use SSL
* Webmail that doesn't use HTTPS
** Someone could trigger a password reminder and then intercept your email
* Websites that use HTTP (not HTTPS) where you need to fill in a password in the page itself

Possibly unsafe, make sure that you understand what you're doing:

* Websites where you need to fill in a password and your ''browser'' (not the website!) tells you it's going to be sent securely
* Websites that require an account but remember you're logged in
** The password ''may'' be protected but not the content or cookies that automatically log you in
* Any time your browser or other application brings up ''anything'' to do with a certificate
* Anything not protected with SSL: someone could be faking DNS answers to impersonate certain sites

Remember: if you're being stupid someone may feel the need to teach you a security lesson in a not so subtle way! (No, that doesn't mean it's ok to hack people just to see if their security is in order.)

=== Firewall ===

There is no network firewall. We operate an unfiltered network that is wide open to the Internet. There is no NAT, and everybody has a public IP address. This is our definition of "network neutrality" - a network that doesn't do anything whatsoever to your IP connection.

If you are used to feeling secure just because you've been sitting behind a NAT router, think again. You are now wide open to the whole Internet. Ensure your personal firewall is enabled and set to "Public Network" and that you have applied all security updates to your OS and applications.

== FAQ ==

=== Can I bring a server? ===

<strike>Yes, though we would rather these were stored centrally in our NOC. This allows us to provision power easily and you also get the added benefit of connecting directly to our core. If you intend to bring a server please email [email address removed] so we can fully understand your requirements prior to the event.</strike>

We have not yet determined whether we will be able to provide colocation space for servers, but we would like to in order to save bandwidth on the extensive site network. If this will be helpful for you, please e-mail [email address removed] so we can gauge demand.

=== Is there a server I can use to host data on site? ===

Yes, ''content.emf.camp'' will be available again for speakers and workshops to store data on site, providing faster access to local users. Prior to the event, the server will be online on a fast Internet connection until around July 29th, at which point it will be shipped to site and won't be available again until the site Internet connection is up.

If you would like to use this facility, please e-mail the NOC. If you need anything other than standard HTTP userdir hosting (http://content.emf.camp/~yournick/) let us know as well.

=== Can I use the 2.4GHz band for non-wifi projects? ===

The following channels are available for adhoc/mesh/other wireless stuff:

* 2.4Ghz: Channel 1
* 5Ghz: Channel 136, 140

We cannot force you to use these channels, but we are trying to build a functional wireless network for the other attendees too. So please, don't do any experiments on other channels.

=== Can I bring an access point? ===

No, this is strictly prohibited! We need all available channels to provide good quality coverage for the rest of the attendees. Please do not be selfish here as you will degrade performance for everyone else, and we WILL track you down.

If you think you can ignore this rule because one little access point can't hurt anyone, think again. This page has the calculations on just how huge a problem it is for an event of our size: [[Network/Rogue Access Points]].

If you are operating a village (using an EMF-supplied tent) that has poor coverage, we may be able to arrange to put an extra access point in it during the event to improve coverage. Stop by the NOC and ask.

=== Can I bring a switch? ===

Yes, but for stability purposes all edge ports are limited to 10 MAC addresses at a time. If you want to connect a switch with more stations, you need to stop by [[Team:InfoDesk]] and ask us to raise the port-security on your port. If you do this, you need to convince us that you know what you're doing and promise not to do anything that may harm the network - in particular, you must not connect the switch to our network by more than 1 cable (not even to a different DK).

=== My port goes up and down every couple of minutes ===

You have probably tripped port security. Most likely scenario is that you have connected more than 10 stations without consulting us (see answer to previous question).

== Supporters ==
We'd like to extend special thanks to the following people and organisations who have been instrumental in making EMF Network happen:

TBD