Entries by VideoMan

David Bryan (myself) will be doing a dry run of the "Reducing the risks to VoIP" talk tomorrow night at the DC612 meeting!

http://www.dc612.org
Location: Elsie's Bar and Bowling Ally- Large conference room.
Time 6:00pm

Agenda:
6:00pm- order food
6:30pm- start VoIP presentation
7:30pm- open slot, or we keep talking.
8:30pm- go home.

Just a note- please order food when attending so that Elsie's can continue to provide this space for us at no cost to DC612.

Speaker: David M. N. Bryan - CISSP - (AKA: VideoMan)
Presentation name: Reducing the risks to VoIP.

Overview: Voice over Internet Protocol (VoIP) systems are not a new technology, and have been around in some form since the late 90’s. It’s been a technology that has been adopted very quickly due to the reduced costs of deployment, management, and maintenance. In many cases people ignore the risks based on the reduced operating costs.

This can be true for some organizations, as VoIP solutions allow for a reduced office deployment times, and reduced costs based on using existing, or shared infrastructures. These cost savings also extend to remote offices, as voice trunks can now be routed over existing WAN/MAN connectivity.

In this talk I will present threats and known vulnerabilities to VoIP systems, and ways to mitigate these risks. I will also cover areas of concerns around quality of service, voice and signaling privacy issues, and what can be used to protect such sensitive information. I will also talk about ways that organizations can deploy some of these technologies with security in mind. Time permitting; I will attempt a quick demo showing insecure and less insecure communication methods.

Speaker Bio: David has 8+ years of experience doing computer security. He started by working at several ISPs, and then transitioned into working for large enterprise financial institutions to secure their networks. In more recent years he has been a computer security consultant, and enjoys working for NetSPI’s clients to help them reduce their risks. In his spare time he and his wife run the local DefCon Group (DC612), and help to run the network at DefCon. He also likes to brew beer, and bike the many miles of pathways in Minnesota.


--David

Some Goons of DefCon have created a TV series that is airing on CourtTV (Now TruTV) named Tiger Team, in the show they penetrate companies either via physical security attacks, or information security attacks. The show is done with quality, and much forethought put into it. We are going to screen some of these episodes. It's fun stuff and the majority of people don't seem to think that it can happen to them.

After one of the screenings we will do some Q and A with Pyro, he is one of the main information security experts of the show.

We have downloaded the shows, and have reserved the projector and larger room for that night.

http://en.wikipedia.org/wiki/Tiger_Team_%28TV_series%29

The shows are short- about 30 minutes with commercials, so it should be about a 23 minutes/show.

Tentative agenda (all times CDT)
6:00pm - Order food and drinks
6:30pm - Watch S01E01: The Car Dealership Takedown.
7:00pm - Do Q and A with Pryo via video conference
7:30pm - Watch S01E02: 24 Karat Caper
8:00pm - QA and general discussion

As always- please feel free to forward this on, as we should have the larger room at Elsie's that night.

-Heather and VideoMan

As it's the holiday season, we will not have a formal meeting tonight, but people are welcome to gather in the bar or bowling alley tonight!

Thanks!

We loaded the new linux firmware, and by we I mean -I- loaded the openwrt.org firmware on to the device, but the firmware did not have the Web admin loaded. So I then grabed the x-wrt image and secure copied it to the device, and promply wrote the image to the flash and rebooted. I neglected to read the part about removing the header and promptly bricked the device. DOH!

So, after much playing, we were able to send the new image to the wrt54g via a tftp send. It took a lot of playing, but we finally got it. (Thanks Chris!)

For the next meeting we will setup the WRT54g to be a kismet drone, and explore some of the neat things that we can do with our newly converted access point!

Hope everyone can make it!

Meeting tomorrow night at Elsie's!

We will do a session hacking the Linksys WAP54G to be a real router, a firewall, a VPN server, a wireless IDS, etc. If you have one of these please bring it along, but we may void it's warranty!


Unfortunately we did not have enough time to put together a wireless war drive, but that is something that we may do in the month of December.

Please join us as we put Linux on this hardware, and make it much better.

-VideoMan

We originally planed to have a hardware hacking session, but we have not received any feedback on what to hack. If you have stuff to hack, please bring it!

We will bring some stuff to play with- but the meeting will be informal in structure. So come and have a beer or soda with us!

If anyone would like to come early we will be bowling before hand. (About 5pm)

See you there!

Same Bat time, different Bat channel.

We are going to be meeting at Elsie's Restaurant, Bar, and Bowling Center.
The address is:
729 Marshall St NE
Minneapolis, MN 55413

They have Fat Tire, and good food! We will be meeting in one of the areas off to the side of the bar.
Elsie's web site
Link to google map

From the South, 35W north to 94 West, go to West Broadway Ave East (right on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.
From the North, 35W South to 280 South, to 94 West, go to West Broadway Ave East (right on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.
From the East, 94 West, go to West Broadway Ave East (right on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.
From the West, 94 East, go to West Broadway Ave East (left on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.

Our topic for Thursday night will be post con discussion around what what good, and what people liked, and maybe share some of their experiences.

Our next meeting is June 21st@6pm.

Out topic for discussion is RFID- this topic was brought up from both Major Malfunctions RFID talk and a recent news article. RFID and the Minnesota Department Of Corrections

Broadway Pizza is the place.

Agenda:
6:00 pm- meet and order some food
6:30 - Review RFID topics.
6:45 - 9:30 open forum

-VideoMan