- Roundtable - muug.ca

Fwd: [SkullSpace-Announce] Full-Day Class on Wireshark and SSL on Saturday
by Adam Thompson 09 Jun '13

09 Jun '13

Forwarded from the Skullspace announce list since I know this will be of interest to some of members. -Adam -------- Original Message -------- Subject: [SkullSpace-Announce] Full-Day Class on Wireshark and SSL on Saturday From: Mak Kolybabi <mak(a)kolybabi.com> To: announce(a)lists.skullspace.ca CC: Alex, Ron, and I will all be attending Sharkfest next Sunday through Thursday as presenters. Alex and I are looking to do a full test run of our material the day before we leave, Saturday, June 15th, at the next SkullSpace hackathon. We'd appreciate an audience. At Sharkfest, I'm teaching a full-day hands-on lab from 10:15 am to 4:45 pm. This is a huge chunk of time, large enough to strain my usual time-filling tactics of ranting while doing jazz hands and berating the audience. I've been called in to replace someone far more qualified than I am for this, so as not to embarrass myself at Sharkfest, I plan to do a full run-through of the course on Saturday. After the course is done, Alex will give his presentation. We will both be talking about packet captures and network analysis, which are useful in troubleshooting, reversing, and CTFs. My hands-on lab will be from 10:15 am to 4:45 pm and Alex will present at 5:00 pm. Below are our bios and other information shamelessly lifted from the Sharkfest site. Please reply out-of-band -- by making a separate, not reply-all, email to me -- if you are planning to attend the hands-on lab, so I can plan pizza (we'll take a lunch break) and seating accordingly. ******************************************************************************** SSL Troubleshooting With Wireshark Mak Kolybabi, Technical Lead, Reverse Engineering, Tenable Network Security SSL plays an important role in ensuring confidentiality, integrity and authentication of communication over a public network like the Internet. It is used for securing (web) applications as well as for implementing a public key infrastructure (PKI). A good understanding of the SSL protocol will help solve issues in setting up secure communication based on SSL. In this Hands-On Lab, we'll review the SSL protocol and how Wireshark and tshark can be used to analyze the different handshake messages, troubleshoot common problems in the SSL session setup and successfully decrypt SSL traffic for further analysis of the transported data. Who Should Attend: Network engineers, network security professionals, software developers What You'll Need: Bring your own laptop with Wireshark installed. Takeaway: A good understanding of the SSL and a sure footing in setting up secure communication based on the protocol. Mak Kolybabi lives in Canada and is the Technical Lead of Reverse Engineering at Tenable Network Security. He has written hundreds of Nessus plugins and currently maintains those related to SSL/TLS/X.509. In his spare time he gives talks locally and teaches classes at the local hackerspace, SkullSpace, which he co-founded. Recently, he's been working on organizing BSides Winnipeg and creating a learning CTF called The DangerZone." ******************************************************************************** ******************************************************************************** I Can Hear You Tunneling... Alex Weber, Security Software Developer SSH is the de facto standard for accessing remote Unix-like servers over a hostile Internet. SSH has many other capabilities, including secure file transfer and the ability to tunnel TCP-based protocols, providing an additional layer of transport security. All of this functionality is great for users that legitimately need to protect their communications, but without the ability for network administrators to do Deep Payload Inspection, SSH presents a very real risk to an organization's network security. In this presentation, Alex Weber will summarize previous research and present tools and techniques to passively analyze SSH traffic for evidence of policy violation and intrusion. Alex Weber is a Canadian software developer with an interest in network security, cryptography, and interesting programming languages. Outside of his day job, Alex has contributed patches to the Nmap network scanner, the FreeBSD Documentation Project, and has been featured on the front page of Threatpost for writing a malicious bootloader program to steal Windows passwords ******************************************************************************** -- Mak Kolybabi <mak(a)kolybabi.com> () ASCII Ribbon Campaign | Against HTML e-mail /\ www.asciiribbon.org | Against proprietary extensions _______________________________________________ SkullSpace Announce Mailing List Help: http://www.skullspace.ca/wiki/index.php/Mailing_List#Announce Archive: https://groups.google.com/group/skullspace-announce-archive/

1 0

recommendations for good linux web server based photo gallery software?
by Gilles Detillieux 07 Jun '13

07 Jun '13

After spending too much time figuring out how to install and configure My Photo Gallery (http://fuzzymonkey.net/software/photogallery/) on my CentOS 5 web server, only to realize it's completely inadequate for the task we have in mind, I thought I'd turn to the group for help before wasting a lot more time. Do any of you have experience with good photo gallery software for Linux? I want something web based, which would make it reasonably easy to invite select individuals to upload photos for various events (seminars & symposia) we hold. Ideally, we would set up a gallery for each event, then e-mail attendees access info (username & password) which would give them access to that gallery to upload photos taken at the event. After a time, we'd close off access for uploads, e.g. by changing the password, but keep the gallery up for public viewing from our site. It would have to be something really easy to use, simple and reliable, so that invitees don't have to spend a lot of time leaning or fighting with the site to upload a half-dozen pictures. It would be really nice if it allowed them to add comments to the photos too. I was thinking of trying Gallery 2 next, which is apparently available from EPEL for CentOS 5. But it looks like something pretty big and complicated with lots of packages, and it needs an SQL database on the back end, so I don't know how much of an effort it will be to install, configure and learn. So, I thought I'd ask before investing a whole lot more time on this. Any experience with this or other gallery software? What's good out there that would fit the bill for our needs? Or should we just give up on this idea and get everyone to upload to Flickr? Thanks! Gilles -- Gilles R. Detillieux E-mail: <grdetil(a)scrc.umanitoba.ca> Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/ Dept. Physiology, U. of Manitoba Winnipeg, MB R3E 0J9 (Canada)

9 14

MUUG Meeting, June 11, 7:30pm -- LyX, Meld, Asymptote
by gedetil＠cs.umanitoba.ca 04 Jun '13

04 Jun '13

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, June 11. The meeting topic for this month is as follows: LyX, Meld, Asymptote This month, we have three presenters giving short (5-10 minute) demonstrations of some software that they have found interesting. Adam Thompson will demonstrate LyX, a WYSIVRTWYG (What You See Is Vaguely Related To What You Get) document creation and editing front-end for TeX and LaTeX. Trevor Cordes will demonstrate Meld, a graphical diff viewer that's designed for those of us who will never be comfortable with text-based diff output syntax. And finally, Michael Doob will demonstrate Asymptote, a markup language for producing high-quality graphics, which, like TeX, separates the concepts of markup from presentation, allowing graphics to be drawn with very high precision. The June RTFM will feature Gilbert Detillieux talking about the dpkg(1), apt-get(8), apt-cache(8) and aptitude(8) commands, used for package management in Debian and similar Linux distributions. The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ***************************************************************** Please note our *NEW* meeting location for this month: Room 1L06, Lockhart Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ***************************************************************** For more information about MUUG, and its monthly meetings, check out their Web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ PO Box 130 St-Boniface Phone: (204)474-8161 Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609

1 0

Solaris printing again
by Kevin McGregor 04 Jun '13

04 Jun '13

I'm trying to set up a print queue in one Solaris zone to print to a "development" printer which is a BSD/lpd (?) print service running on another machine. The production zone already has a printer just like it defined in printers.conf like this: cowsvpprmom:\ :bsdaddr=192.168.59.113,GENERAL_ENTRY,Solaris: My question: How do I duplicate this on the development zone, but with a slightly different name and IP address? I've done a bunch of googling, but I never get anything that results in a "GENERAL_ENTRY" item (or what the heck *that* means) and I also get an extra line like :printer-uri-supported=lpd\://172... which I also don't understand. Can someone help me out with the commands I need to use? This is Solaris 10. Kevin

1 0

MUUG Meeting, May 14, 7:30pm -- Perl, PHP, Python
by gedetil＠cs.umanitoba.ca 07 May '13

07 May '13

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, May 14. The meeting topic for this month is as follows: Popular P's of Programming: Perl, PHP, and Python Trevor Cordes, Theodore Baschak, and Edwin Amsler will be presenting this month on 3 popular scripting langauages: Perl, PHP, and Python. The May RTFM will feature Robert Keizer, talking about GOCR, an Optical Character Recognition program, developed under the GNU Public License. It converts scanned images of text back to text files. The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ***************************************************************** Please note our *NEW* meeting location for this month: Room 1L07, Lockhart Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ***************************************************************** For more information about MUUG, and its monthly meetings, check out their Web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ PO Box 130 St-Boniface Phone: (204)474-8161 Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609

1 0

Celebrate Day Against DRM - Save 50% on all Ebooks & Videos. Today only.
by Gilbert E. Detillieux 03 May '13

03 May '13

FYI.... ------------------------------------------------------------- Save 50% on *all* ebooks & videos (View in browser <http://post.oreilly.com/rd/9z1z2fh7q3f5u9gm6hmj1ql0mqu833b9f1jvfr7e9go>) O'Reilly Media One Day Only In Celebration of *Day Against DRM* Save 50% on ALL Ebooks & Videos *(Save 60% on orders over $100)* Having the ability to *download files at your convenience, store them on all your devices, or share them* with a friend or colleague as you would a print book is liberating, and *is how it should be*. For one day only, you can *SAVE 50% on all ebooks and videos* from oreilly.com <http://post.oreilly.com/rd/9z1zm99jb5t95jtdian31tq8ac42r5s4s626le71d7o>, including titles from O'Reilly Media, Wrox, Morgan Kaufmann, Microsoft Press, Rosenfeld Media, No Starch, Rocky Nook, and many more. Ebooks from oreilly.com <http://post.oreilly.com/rd/9z1z89b1n4jj3c573sjfanvp1nrk6o3fl8gni0vp8so> are *DRM-free*. You get *free lifetime access, multiple file formats, free updates.* Sync with Dropbox -- your files, anywhere. *Use discount code: DRM2013* Browse Titles ? <http://post.oreilly.com/rd/9z1zqcmg4s7a71ftrhuv6doe1uf9c68ml3ff7gvnkt8> Soldiers <http://post.oreilly.com/rd/9z1z17chk6thluk9f19bmdu5vhi690hac0tqqg7658g> Deal expires May 3, 2013 at 11:59pm PT and cannot be combined with other offers. Offer does not apply to Print, or "Print & Ebook" bundle pricing. Spreading the knowledge of innovators oreilly.com <http://post.oreilly.com/rd/9z1z0h28f9gd6dav6ebnn1avb2hcq5k265pottpjrgo> You are receiving this message because you purchased directly from O'Reilly or registered titles. Keep up on all things O'Reilly by signing up for our *email alerts and newsletters* <http://post.oreilly.com/rd/9z1zv2cpklmbsirhkquobptu73u9ha0vc2pt0rn7uj0>. To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. To unsubscribe from all email announcements from O'Reilly, click here <http://post.oreilly.com/rd/9z1zo8bnukq22s0lb8g23mrq4hqjh3k5arj2kpcmoso>. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0

ZFS on Linux + Swap
by Robert Keizer 26 Apr '13

26 Apr '13

In case you ever found yourself needing swap while you're running the third party ZFS module for Linux, read on. Assuming all your disks are ZFS, doing a standard "dd if=/dev/zero of=./file bs=1024k count=4096 && mkswap file && swapon file" doesn't work. Why, I don't know - and I don't really care at the moment. Solution: "loop=`losetup -f` && dd if=/dev/zero of=./file bs=1024k count=4096 && mkswap file && losetup $loop file && swapon $loop". Go figure that piping it through a loopback device works just fine. +1 for compiz taking 1.7gb of ram. +1 for 5 VirtualBox windows images at 2gb per segfaulting with 12gb of system ram. Gah.

1 0

Final day! Save 50% on 1, 200+ ebooks from Elsevier - IT Developers, Security Experts, and more
by Gilbert E. Detillieux 23 Apr '13

23 Apr '13

FYI... ---------------------------------------------------- Save 50% - Elsevier ebooks (View in browser <http://post.oreilly.com/rd/9z1zlrrgsli9d45fokd9p93mc4b2eaq57mor92oatvo>) O'Reilly Media Books & Videos Welcome Elsevier -- Over 1,200+ Titles for Developers, Engineers, Security Experts, and more Final Day to Save 50% Elsevier <http://post.oreilly.com/rd/9z1z56n1l6g8p1s8fo30ujrt0qv4lbo7k01qjtl2ii0> Includes Morgan Kaufmann, Academic Press, Butterworth-Heinemann, Syngress, and Newnes We're excited to welcome Elsevier to oreilly.com <http://post.oreilly.com/rd/9z1z8q74fungjc2pur54j9m5v22e9hf4mgplo4js6f8>. Their six brands bring a wide selection of programming, security, and engineering titles for you to expand your knowledge. Today is your last chance to SAVE 50% on all Elsevier ebooks. Ebooks from oreilly.com <http://post.oreilly.com/rd/9z1z3ns3kpanu7qrnfqn6gpdg9j2dceldvsge7qnic8> are *DRM-free*. You get *free lifetime access*, *multiple file formats*, and *free updates*. Sync with *Dropbox* --- your files, anywhere. See all 6 Brands ? <http://post.oreilly.com/rd/9z1zcbacvomk3c2jtfptobcrfitp4ugv889qd9vloo8> Use discount code: WKESEVE This deal expires April 23, 2013 at 11:59pm PT and cannot be combined with other offers. Spreading the knowledge of innovators oreilly.com <http://post.oreilly.com/rd/9z1zp94cm1jbg9co9r1fob18753dp00mskbvt3rqico> You are receiving this message because you purchased directly from O'Reilly or registered titles. Keep up on all things O'Reilly by signing up for our *email alerts and newsletters* <http://post.oreilly.com/rd/9z1zvhp3voa0aufgpipk8s7q5a10o8cgl0qeoa6581o>. To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. To unsubscribe from all email announcements from O'Reilly, click here <http://post.oreilly.com/rd/9z1zf6fqm5o9q5m7brkc0r6drdn2dv1os2vs31k6odo>. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0

Internet Society Canada chapter established
by Dan Keizer 16 Apr '13

16 Apr '13

Some of you may have an interest in this ... Yesterday, there was a brief web broadcast on the Internet Society with the Canada chapter being formed. http://www.internetsociety.ca/ Initial (advocacy) prime issues (from the website) include: - Net neutrality, which pertains to Internet transparency, freedom of expression and user choice - Technical standards - Accessibility to quality Internet in rural and remote areas of Canada - Internet service provider concentration - Cross-ownership of content providers by Internet carriers Certainly, relevant hot topics in recent times ... Membership in the society is free -- via this link: http://www.internetsociety.ca/join-us/ You join the group by joining the Canada Chapter. A number of supporting groups/people were present - including CIRA CEO Byron Holland. Some other topics on the webinar: Youth outreach - Providing the appropriate channel of communication with appropriate topics. Access, rural and first nations. Advocating for internet community in Ottawa and Provincially. Dan.

1 0

Re: [RndTbl] Fwd: Security camera install course at Skullspace
by Adam Thompson 07 Apr '13

07 Apr '13

I now tend to agree, since it's almost impossible for me to reply to the sender using Android's mail client. Even if I use Reply All, the sender's email does not show up. Bill Reid <billreid(a)shaw.ca> wrote: >On a small list this is not a huge problem but on larger lists you can see why >they recommend not configuring Mailman this way. Reply should go to sender by >default. > >On 07/04/13 12:02, Adam Thompson wrote: >> Whoops. Forgot to double-check where my reply was going to, sorry about that. >> -Adam >> >_______________________________________________ >Roundtable mailing list >Roundtable(a)muug.mb.ca >http://www.muug.mb.ca/mailman/listinfo/roundtable

1 0