David Bryan (myself) will be doing a dry run of the "Reducing the risks to VoIP" talk tomorrow night at the DC612 meeting!

http://www.dc612.org
Location: Elsie's Bar and Bowling Ally- Large conference room.
Time 6:00pm

Agenda:
6:00pm- order food
6:30pm- start VoIP presentation
7:30pm- open slot, or we keep talking.
8:30pm- go home.

Just a note- please order food when attending so that Elsie's can continue to provide this space for us at no cost to DC612.

Speaker: David M. N. Bryan - CISSP - (AKA: VideoMan)
Presentation name: Reducing the risks to VoIP.

Overview: Voice over Internet Protocol (VoIP) systems are not a new technology, and have been around in some form since the late 90’s. It’s been a technology that has been adopted very quickly due to the reduced costs of deployment, management, and maintenance. In many cases people ignore the risks based on the reduced operating costs.

This can be true for some organizations, as VoIP solutions allow for a reduced office deployment times, and reduced costs based on using existing, or shared infrastructures. These cost savings also extend to remote offices, as voice trunks can now be routed over existing WAN/MAN connectivity.

In this talk I will present threats and known vulnerabilities to VoIP systems, and ways to mitigate these risks. I will also cover areas of concerns around quality of service, voice and signaling privacy issues, and what can be used to protect such sensitive information. I will also talk about ways that organizations can deploy some of these technologies with security in mind. Time permitting; I will attempt a quick demo showing insecure and less insecure communication methods.

Speaker Bio: David has 8+ years of experience doing computer security. He started by working at several ISPs, and then transitioned into working for large enterprise financial institutions to secure their networks. In more recent years he has been a computer security consultant, and enjoys working for NetSPI’s clients to help them reduce their risks. In his spare time he and his wife run the local DefCon Group (DC612), and help to run the network at DefCon. He also likes to brew beer, and bike the many miles of pathways in Minnesota.


--David

Come join Tony Stieber and DC612 for a night of Crypto. Talk starts at 6:30 pm.

Informal Discussion based meeting on Security and Voting!

This is a free form discussion on overall security of voting past, present, and future. Although we like to pick on Diebold, there are many other security issues related to voting. I will seed the discussion by providing other examples from the past both here in the US and in other countries.

We also have a special guest coming tonight- Zac Franken will bring his kit that he has been working! Should be fun to play with!

Bring your thoughts and join us for food and drink on Valentine's Day. I am waiting to hear which room we will be in. So if you don't find us in one of the two banquet rooms check the back area of the dining room.

See you there!
Heather

Some Goons of DefCon have created a TV series that is airing on CourtTV (Now TruTV) named Tiger Team, in the show they penetrate companies either via physical security attacks, or information security attacks. The show is done with quality, and much forethought put into it. We are going to screen some of these episodes. It's fun stuff and the majority of people don't seem to think that it can happen to them.

After one of the screenings we will do some Q and A with Pyro, he is one of the main information security experts of the show.

We have downloaded the shows, and have reserved the projector and larger room for that night.

http://en.wikipedia.org/wiki/Tiger_Team_%28TV_series%29

The shows are short- about 30 minutes with commercials, so it should be about a 23 minutes/show.

Tentative agenda (all times CDT)
6:00pm - Order food and drinks
6:30pm - Watch S01E01: The Car Dealership Takedown.
7:00pm - Do Q and A with Pryo via video conference
7:30pm - Watch S01E02: 24 Karat Caper
8:00pm - QA and general discussion

As always- please feel free to forward this on, as we should have the larger room at Elsie's that night.

-Heather and VideoMan

As it's the holiday season, we will not have a formal meeting tonight, but people are welcome to gather in the bar or bowling alley tonight!

Thanks!

We loaded the new linux firmware, and by we I mean -I- loaded the openwrt.org firmware on to the device, but the firmware did not have the Web admin loaded. So I then grabed the x-wrt image and secure copied it to the device, and promply wrote the image to the flash and rebooted. I neglected to read the part about removing the header and promptly bricked the device. DOH!

So, after much playing, we were able to send the new image to the wrt54g via a tftp send. It took a lot of playing, but we finally got it. (Thanks Chris!)

For the next meeting we will setup the WRT54g to be a kismet drone, and explore some of the neat things that we can do with our newly converted access point!

Hope everyone can make it!

Meeting tomorrow night at Elsie's!

We will do a session hacking the Linksys WAP54G to be a real router, a firewall, a VPN server, a wireless IDS, etc. If you have one of these please bring it along, but we may void it's warranty!


Unfortunately we did not have enough time to put together a wireless war drive, but that is something that we may do in the month of December.

Please join us as we put Linux on this hardware, and make it much better.

-VideoMan

We originally planed to have a hardware hacking session, but we have not received any feedback on what to hack. If you have stuff to hack, please bring it!

We will bring some stuff to play with- but the meeting will be informal in structure. So come and have a beer or soda with us!

If anyone would like to come early we will be bowling before hand. (About 5pm)

See you there!

Hey everyone slight change in plans with our meeting space. A funeral
needs meeting area, so we are going to move into the upper restaurant
instead. If you come into the bar area there is a back room that is
up higher and that is where we will be.

Again we are working on VoIP this week. Hope to see you all there!

i...@dc612.org

We heard many comments on how nice the new space was. Decent food, beer and prices! We are moving the future meetings to the 2nd Thursday of the month. So we will see you all on September 13th, 2007 at 6 pm for the next meeting.

We are doing hands on VoIP in September. Videoman and I will be bringing 2 different Cisco IP Phones and one Wireless Linksys phone. We will have an Asterix server onsite and will be playing around with trunking. Don't forget the phones have vulnerabilities too. If anyone wants to bring their voip phones...please do.

In October we will be doing Hardware Hacking...the hardware has yet to be determined.

For November we are contemplating a War Drive...in a Limo. Mwaahahahaa! Old school in a wireless sense. This will also be a good time to talk about the current status of wireless security and the lack of real awareness. Bring your tools, your laptops and fun.

Same Bat time, different Bat channel.

We are going to be meeting at Elsie's Restaurant, Bar, and Bowling Center.
The address is:
729 Marshall St NE
Minneapolis, MN 55413

They have Fat Tire, and good food! We will be meeting in one of the areas off to the side of the bar.
Elsie's web site
Link to google map

From the South, 35W north to 94 West, go to West Broadway Ave East (right on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.
From the North, 35W South to 280 South, to 94 West, go to West Broadway Ave East (right on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.
From the East, 94 West, go to West Broadway Ave East (right on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.
From the West, 94 East, go to West Broadway Ave East (left on broadway), then take a right on Marshall, it is just after plymouth/8th st on the left.

Our topic for Thursday night will be post con discussion around what what good, and what people liked, and maybe share some of their experiences.