Meeting Notes from August 5th 2016
Here is a quick summary of some of the topics covered in the August 5th, 2016 Spokane 2600 meeting...
- ISPConfig vulnerabilities in FCGI / PHP (never use ISPConfig product!) - http://techtalkhawke.com/news/do-not-use-ispconfig
- Discussion on various server compromises in general that each has experienced.
- Several members discussed their home server rooms/racks updates, and how to improve the chaos of the cabling - Photo 1 (Server Rack Mess) - Photo 2 (Music Studio), Photo 3 (studio)
- PPTP vulnerabilities (NEVER USE PPTP VPN Protocol!!!) - http://techtalkhawke.com/news/did-google-leave-out-pptp-for-chrome-os-because-of-my-paper
- Chrome OS
- $5 Mario CR 48 Developer Chromebook passed around (will see if can put full FreeBSD on when switch to Developer mode, and report next month) - http://techtalkhawke.com/news/picked-up-5-google-chromebook-mario-cr-48
- Assembly reverse engineering
- Experiences with Freelancer.com, guru.com.
- Libre boot (fork of core boot) - https://libreboot.org/
- Qmail - http://qmail.org/
- Ezmlm - https://cr.yp.to/ezmlm.html
- Postfix - http://www.postfix.org/
- Mailman - https://www.gnu.org/software/mailman/
- Fun learning Information Security (InfoSec) through a brand new tabletop role-playing game (RPG) Cryptomancy - http://rpgresearch.com/blog/have-fun-learning-infosec-through-an-rpg
- Discussion of experiences as a consultant for a multinational energy-oil company (~10k employees, company name kept obfuscated by NDA) and security problems and politics of security in large corporations and small
- Discussion about challenges of consultants accepted/denied by large companies
- Denyhosts - http://denyhosts.sourceforge.net/
- Fail2ban - http://www.fail2ban.org/
- Rkhunter - http://rkhunter.sourceforge.net/
- wifi https security bypass vulnerabilities for all OSes - http://techtalkhawke.com/news/new-attack-bypasses-https-protection-on-macs-windows-and-linux
- Hackerspaces - http://hackerspaces.org/
- Spokane Hackerspace, http://www.spokanecreate.org/
- spokane linux user group SLUG - http://spokanelinux.org/
See you all next month, September 2nd, 2016!