(Apologies in advance for the short term 'wiki' look of these show notes, the public wiki will be up soon!)
On this Episode of Securabit:
Chris Gerling - Hak5chris
Chris Mills - ChrisAM
Anthony Gartner - AnthonyGartner
Jason Mueller - SecuraBit_Jay
Guest Chris Wilson
Episode 10 - A milestone!
We are all still alive even though the CERN Particle Collider has been started up.
OpenSource Projects, Software, Patches
Obama Sex Video Spam
New SecuraBit VPS! (We have since cancelled and will be moving to something else soon)
Linode with CentOS. However, no SELinux available
For CentOS help go to: #CentOS on irc.freenode.net
Tips for configuring the new server:
Disable root login on ssh Good passwords Lock down ports
The Securabit guys started using the CentOS distribution because of its interconnections with Snort
See this site for details on how to configure Snort on CentOS
In non-security related news:
Steve Jobs Apple Special Event "Let's Rock"
Apple did update QuicktTime and Bonjour: http://voices.washingtonpost.com/securityfix/2008/09/security_updates_for_ipod_touc.html?nav=rss_blog
Netbooks are everywhere: Even Commodore joins Netbook Crowd: http://news.cnet.com/8301-17938_105-10029963-1.html
Google Chrome:
Milworm Chrome Exploit/Vulnerabilities http://www.milw0rm.com/exploits/6353 http://www.milw0rm.com/exploits/6355 http://www.milw0rm.com/exploits/6365 http://www.milw0rm.com/exploits/6367 http://www.milw0rm.com/exploits/6372 http://www.milw0rm.com/exploits/6386 Google Chrome and Germany: http://www.salon.com/wires/ap/scitech/2008/09/09/D9338OT80_germany_google_chrome/index.html
MS commercial analysis: http://www.purpleslinky.com/Humor/Satire/A-Commercial-About-Nothing-Analysis-of-the-First-Microsoft-Seinfeld-Ad.245991
MS Mouse: http://www.maximumpc.com/tags/bluetrack
BREAK
Schneier and portable device security: http://www.schneier.com/blog/archives/2008/07/open_source_lap.html
http://www.schneier.com/blog/archives/2005/07/risks_of_losing.html
Latest happenings with Securabit Looking for a Team and mentoring
atmosphere Coming soon: New Site/wiki/forums on the Linode VPS
Chris Mills: Employer Security Expo
Talked about Password Security and showed off Rainbow Tables/Ophcrack (http://ophcrack.sourceforge.net/) and Driftnet (http://ex-parrot.com/~chris/driftnet/)
BREAK
Chris Wilson
