News

Well DefCon is around the corner...

And it has been a very busy summer, so were are hoping to do a meeting in August for post DefCon annoucments and lock picking fun.

Our next meeting with be on, as you may have guessed lock picking, and the DC14 talks. We will bring some tools, and other goodies that we pickup for those who were unable to attend.


The meeting date will be August 24th@6pm, and going forward we will make it the 4th thursday of every month.


I hope eveyone who get's to go to DefCon will have some fun learing the new stuff, it should be a really amazing year!

(and if you do make it, and can or can't get on the network, let us know...)

The presentation on Defcon from the MN-ISSA is up, here.
There is also a PDF available (Thanks to Keynote on a Mac!)

Links from the pressentation..
DefCon Official Site
Jennifer Granick Blog
BlackHat "CiscoGate" Video
Defcon WI-FI Shootout
RFID Read at 69 feet

Alan Amesbury of the U Of Minnesota has a good write-up about password attacks and does a good job to crunch the numbers!

http://www1.umn.edu/oit/security/passwordattackdiscussion.html

Looks like cisco finaly released the patch to the problem from July's BlackHat conference.

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers
http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml

They knew about this, why didn't they just fix it, rather then tear out the pages from the BlackHat books. They made such a big deal out of the issue, that it made it a bigger issue then it was. And now they have claimed to have fixed the real issue. Really, Cisco has now confrimed that cisco sucks when it comes to dealing with security holes.

Maybe we will all have to move to OpenBSD for core routing boxes (I know that drivers would need to be written, and hardware made for fiber, etc...).

DC612's DefCon Group very first post, it's been a long day juggleing systems to get this up, but dc612 now has a place for content, and soon will have a mailing list for all to see in Minneapolis.

We also want to have an informal gathering sometime in the not to distant future, if your interested, please let us know, info at dc612 dot org.

thanks!