DC612

DC612 Regular meeting- Thursday July 10th, 2008@6pm

videoman@drstrangelove.net (VideoMan) — Mon, 07 Jul 2008 00:19:27 -0500

Topic: How malware can still subvert Anti-Virus and computer security
controls.
Speaker: Chris Secrest

"I'll talk a little about the presentation I give to users regarding
security awareness and how malware can still get by the controls we
know (particularly Anti-Virus and Firewalls). I'll go through some
netcat demos as I show this to users in a less technical format on
what exactly goes on when someone gets their machine compromised.
Then go over a backdoor tool called Tini. We'll modify Tini to evade
anti-virus on a target system. Then we'll go over Wrappers to show
how these are used to get past Firewalls by getting users to download
and run the tools for the attackers."

This will be in the big room at Elsie's (the room with the
projector). So please come, order food, beverages so we can continue
to use this space at no cost to DC612!

Meeting time: 6PM-10PM
6-7pm: order food
7-10pm: presentation and discussions

Thanks!

-VideoMan
DC612
Blog: http://www.dc612.org/
Email: info at dc612.org
GoogleGroup: http://groups.google.com/group/dc612

This Thursdays Meeting is at Town Hall Brewery

hbryan@dpntech.com (Heather) — Tue, 10 Jun 2008 14:46:36 -0500

We will not be at Elsie's for this Thursday's meeting.

Casual get together at Town Hall Brewery.

http://www.townhallbrewery.com/

Minneapolis Town Hall Brewery
1430 Washington Ave. South
Minneapolis, MN 55454
(612) 339-8696

Please go to the contact us page on their website for directions.

See you all there.

Heather

Sitting for the CISSP Exam maybe more difficult than taking the actual test.

hbryan@dpntech.com (Heather) — Fri, 09 May 2008 13:10:31 -0500

RANTS

Well as a few of you know, I should have taken the CISSP Exam ages ago, but never made time. Of course in order to make time, you would expect that one would possess open time slots in their schedule. I do not. At some point last week I saw that there was a CISSP exam scheduled for May 12th before Secure360. I started my mind numbing cram session a couple of days ago in anticipation of sitting for the exam. I even attempted to drag others with me to the test. Today I discovered the registration for the exam on May 12th is gone. No note of cancellation or overbooking, just simply gone.

So for those I attempted to talk into taken this exam...You are off the hook.

What does this mean for me? It could be another four years before I attempt to schedule time for this test again...they don't exactly make it available.

DC612 May 8th, 2008 - VoIP Presentation

videoman@drstrangelove.net (VideoMan) — Wed, 07 May 2008 16:52:25 -0500

David Bryan (myself) will be doing a dry run of the "Reducing the risks to VoIP" talk tomorrow night at the DC612 meeting!

http://www.dc612.org
Location: Elsie's Bar and Bowling Ally- Large conference room.
Time 6:00pm

Agenda:
6:00pm- order food
6:30pm- start VoIP presentation
7:30pm- open slot, or we keep talking.
8:30pm- go home.

Just a note- please order food when attending so that Elsie's can continue to provide this space for us at no cost to DC612.

Speaker: David M. N. Bryan - CISSP - (AKA: VideoMan)
Presentation name: Reducing the risks to VoIP.

Overview: Voice over Internet Protocol (VoIP) systems are not a new technology, and have been around in some form since the late 90’s. It’s been a technology that has been adopted very quickly due to the reduced costs of deployment, management, and maintenance. In many cases people ignore the risks based on the reduced operating costs.

This can be true for some organizations, as VoIP solutions allow for a reduced office deployment times, and reduced costs based on using existing, or shared infrastructures. These cost savings also extend to remote offices, as voice trunks can now be routed over existing WAN/MAN connectivity.

In this talk I will present threats and known vulnerabilities to VoIP systems, and ways to mitigate these risks. I will also cover areas of concerns around quality of service, voice and signaling privacy issues, and what can be used to protect such sensitive information. I will also talk about ways that organizations can deploy some of these technologies with security in mind. Time permitting; I will attempt a quick demo showing insecure and less insecure communication methods.

Speaker Bio: David has 8+ years of experience doing computer security. He started by working at several ISPs, and then transitioned into working for large enterprise financial institutions to secure their networks. In more recent years he has been a computer security consultant, and enjoys working for NetSPI’s clients to help them reduce their risks. In his spare time he and his wife run the local DefCon Group (DC612), and help to run the network at DefCon. He also likes to brew beer, and bike the many miles of pathways in Minnesota.

--David

Meeting Thursday April 10 presentation on crypto and PKI

hbryan@dpntech.com (Heather) — Thu, 10 Apr 2008 09:32:46 -0500

Jay has offered to give a presentation on cryptography and PKI for tonights meeting. We may have some weather issues but we will be there for sure.

Please note that they needed our normal banquet space for a large party. We will be in upper dining area of the bar. Go all the way to the back when you enter the dining area. We will have the partition drawn for the presentation so just come on in.

See you tonight!

Due to weather OWASP meeting cancelled.

hbryan@dpntech.com (Heather) — Mon, 31 Mar 2008 13:33:42 -0600

Just in case some of the DC612 members were planning to see Tony present at the OWASP meeting tonight, I wanted to post this asap. Due to weather, the presentation and meeting will be canceled tonight.

When Videoman or myself here about rescheduling we will post an update.

Heather

One of our own

hbryan@dpntech.com (Heather) — Thu, 20 Mar 2008 20:19:01 -0600

Good humor: Enjoy

http://securosis.com/2008/03/20/fighting-back-against-fraud-a-true-story/

Crypto Talk! March 13th, 2008

hbryan@dpntech.com (Heather) — Mon, 10 Mar 2008 12:48:22 -0600

Come join Tony Stieber and DC612 for a night of Crypto. Talk starts at 6:30 pm.

Meeting February 14th, Valentines Day! - With Guest

hbryan@dpntech.com (Heather) — Tue, 05 Feb 2008 14:05:07 -0600

Informal Discussion based meeting on Security and Voting!

This is a free form discussion on overall security of voting past, present, and future. Although we like to pick on Diebold, there are many other security issues related to voting. I will seed the discussion by providing other examples from the past both here in the US and in other countries.

We also have a special guest coming tonight- Zac Franken will bring his kit that he has been working! Should be fun to play with!

Bring your thoughts and join us for food and drink on Valentine's Day. I am waiting to hear which room we will be in. So if you don't find us in one of the two banquet rooms check the back area of the dining room.

See you there!
Heather

January 10th 2008 Meeting- Tiger Team TV show screening with Guest!

videoman@drstrangelove.net (VideoMan) — Wed, 02 Jan 2008 15:27:58 -0600

Some Goons of DefCon have created a TV series that is airing on CourtTV (Now TruTV) named Tiger Team, in the show they penetrate companies either via physical security attacks, or information security attacks. The show is done with quality, and much forethought put into it. We are going to screen some of these episodes. It's fun stuff and the majority of people don't seem to think that it can happen to them.

After one of the screenings we will do some Q and A with Pyro, he is one of the main information security experts of the show.

We have downloaded the shows, and have reserved the projector and larger room for that night.

http://en.wikipedia.org/wiki/Tiger_Team_%28TV_series%29

The shows are short- about 30 minutes with commercials, so it should be about a 23 minutes/show.

Tentative agenda (all times CDT)
6:00pm - Order food and drinks
6:30pm - Watch S01E01: The Car Dealership Takedown.
7:00pm - Do Q and A with Pryo via video conference
7:30pm - Watch S01E02: 24 Karat Caper
8:00pm - QA and general discussion

As always- please feel free to forward this on, as we should have the larger room at Elsie's that night.

-Heather and VideoMan

Tonight meeting.

videoman@drstrangelove.net (VideoMan) — Thu, 13 Dec 2007 14:31:22 -0600

As it's the holiday season, we will not have a formal meeting tonight, but people are welcome to gather in the bar or bowling alley tonight!

Thanks!

WRT54G Hacking- We Came, We Bricked, We Unbricked.

videoman@drstrangelove.net (VideoMan) — Sat, 10 Nov 2007 10:59:00 -0600

We loaded the new linux firmware, and by we I mean -I- loaded the openwrt.org firmware on to the device, but the firmware did not have the Web admin loaded. So I then grabed the x-wrt image and secure copied it to the device, and promply wrote the image to the flash and rebooted. I neglected to read the part about removing the header and promptly bricked the device. DOH!

So, after much playing, we were able to send the new image to the wrt54g via a tftp send. It took a lot of playing, but we finally got it. (Thanks Chris!)

For the next meeting we will setup the WRT54g to be a kismet drone, and explore some of the neat things that we can do with our newly converted access point!

Hope everyone can make it!

WAP54G Hardware Hacking session. - November 8th 2007

videoman@drstrangelove.net (VideoMan) — Wed, 07 Nov 2007 20:54:29 -0600

Meeting tomorrow night at Elsie's!

We will do a session hacking the Linksys WAP54G to be a real router, a firewall, a VPN server, a wireless IDS, etc. If you have one of these please bring it along, but we may void it's warranty!

Unfortunately we did not have enough time to put together a wireless war drive, but that is something that we may do in the month of December.

Please join us as we put Linux on this hardware, and make it much better.

-VideoMan

Meeting Thursday October 11th

videoman@drstrangelove.net (VideoMan) — Wed, 10 Oct 2007 09:34:43 -0500

We originally planed to have a hardware hacking session, but we have not received any feedback on what to hack. If you have stuff to hack, please bring it!

We will bring some stuff to play with- but the meeting will be informal in structure. So come and have a beer or soda with us!

If anyone would like to come early we will be bowling before hand. (About 5pm)

See you there!

Meeting Thursday Sept 13th...room change

hbryan@dpntech.com (Heather) — Tue, 11 Sep 2007 17:31:55 -0500

Hey everyone slight change in plans with our meeting space. A funeral
needs meeting area, so we are going to move into the upper restaurant
instead. If you come into the bar area there is a back room that is
up higher and that is where we will be.

Again we are working on VoIP this week. Hope to see you all there!

i...@dc612.org