Ich habe also ein Lenovo Thinkpak T560 geholt. Problem: Die Bodenplatte geht nicht auf. Nach über sechs Stunden und verschiedenen Ressourcen, Input von Freunden und Tipps aus dem Netz habe ich es endlich geschafft.

Allgemein: Vorher Gerät vom Netz trennen, Akku entfernen und sich selbst erden. Offene Getränke am besten außer Reichweite stellen.

Tip 1: Sicherstellen dass alle Schrauben geöffnet sind. Die Positionen dieser sind im Hardware Manual des jeweiligen Modelles zu finden. Ansonsten sieht man in einigen YouTube Videos auch wie die Bodenplatte geöffnet wird. Hinweis: Da sieht das Öffnen sehr viel leichter aus als es bei mir ging, mehr wie ein leichtes "hochheben" oder "schieben/ziehen" (je nach Richtung).

Tip 2: Benutzt keinen Schraubendreher, sondern ein Plektrum. Ein Schraubendreher macht die kleinen "Haken" und ggfs. Teile des Innenlebens kaputt. Das sieht man bei mir recht gut an den Stellen an denen ich mit einem Spatel versucht habe das Gehäuse zu öffnen. Ich habe mir ein Set von iFixIt geholt, wobei es bestimmt genug andere Anbieter gibt.

Tip 3: Genug Zeit einplanen. Wenn es so wie bei mir festhängt und hakt, ist es gut nicht die Geduld zu verlieren.

Tip 4: Ich habe bei bereits geöffneten Seiten etwas dazwischengesteckt, damit diese nicht im weiteren Verlauf wieder zugehen. Dabei nicht zu weit, da sich das Gehäuse sonst möglicherweise verzieht.

Tip 5: Bei mir waren die Haken auf der Seite des Akkus sehr fest, gefühlt war auch innen auf der Platte noch ein Haken. Gelöst habe ich sie am Ende dadurch, dass ich alle anderen möglichen Haken gelöst habe, und dann an den Seitplatten mit einem Plektrum "herumgewackelt" habe.

Es war am Ende reine Nervensache und mit einem etwas kräftigeren Anheben (ich wollte darunter sehen wo es hängt), war recht plötzlich der Bodendeckel offen. Zu geht es wieder genauso - Bodendeckel aufsetzen, einklicken und dann schrauben.

Hi all,
I know I owe you some more information about Blackhoodie preparations and stuff. There has been so much going on, I just was into research and learning and stuff. I had three great days at the BlackHoodie18 Workshop. For a complete beginner, it was a bit demanding but also motivating. The energy is awesome!

For the preparations, I've read a lot of stuff and did exercises. Lucky me, my old laptop did work with the 12 GB RAM and a new SSD.

First day:
Talks! I was not able to follow all of them, but the thing is that you can ask questions, which I would highly recommend. :-) Now I know roughly what a bootloader does, what happend within the tinynuke-trojan and how a crypto miner attacked some servers. At the end of the day, Mari0n gave us her "usual rant" (her words!!). There is challenging stuff out there. There are many, many jobs and so much money to make. So have fun, be confident and make a loooooot of money. <3

Second day:
Beginners track. VM does work (yay!) but the speed is high. We're analyzing some sweet samples of malware. Where is the start, and the endpoint? What is happening within the boxes? We mainly used IDA for that. I made a page of notes for terms and stuff. Yes, reversing is a lot of researching, staring and coffee and staring. When we had breaks, we would talk to each other as much as possible. There are so many ladies out there, doing awesome stuff. One is doing security testing for new products (crashing a smart tv, anyone??), one is a technical expert for voting, some do incident response, others work on compiler security. There are pentesters, data analysts, web designers, and even some governance people. In the evening we had dinner sponsored by HERE. Thanks again! It was so awesome, seeing so much competence and fun in that restaurant hall. <3

Third day:
Again the beginners track. I started to see some structures: where is the information flow? How to find the function, pointer etc. (search engine is your friend)? Now I knew why it has not only been called workshop, but "bootcamp". At some point I was only able to note terms for research, write small comments and do renaming before going to the next issue. Our sample was a bot, which would load itself within the current version of windows. It will be executed, whenever the system is powered on, to create ongoing availability. Our homework now is to find out where it tries to send information to the server. We not only left with homework, but a presentation of a colleague with further tipps & tricks.

Challenge: There was a small challenge to be solved. Honestly, I didn't even try. There was so much to do and learn, I had no time or energy left.

Useful hints: Blackhoodie is challenging. It is really helpful to sleep enough and keep hydrated. Try to eat on a regular basis. We have been hosted by HERE, and the food was great. <3 Try not to cram in other dates or stuff like that. If you need some private (quiet) time, take it. Do your homework, come prepared. And most important: don't give up. Try again, and again. Talk to others, ask a lot of questions, take notes. If you don't understand, ask them to explain it in easier words.

PS: Curious? See twitter #BlackHoodie18 . You'd like to attend next year? Follow @blackhoodie_RE on twitter. See you 2019!