June 2013 - Roundtable

Re: [RndTbl] Roundtable Digest, Vol 102, Issue 5
by Michael Doob 11 Jun '13

11 Jun '13

On 13-06-11 12:00 PM, roundtable-request(a)muug.mb.ca wrote: > It has been an honour, privilege, and great fun to be part of this > community as I have matured from a high school student to (cringe) young > professional. > > MUUG is a great group that has a long history, and I will miss being an > active part in it. > > All the best to everyone, and I hope to see you all tonight! > Robert Keizer > > Actually, Robert, it has been fun watching you mature over the years. You have contributed a lot to MUUG. Your dad can really kvell (If you don't know that word, look it up. There is no equivalent word in English). Cheers, Michael -- ------------------------------------------------------------------ Michael Doob Telephone: (204) 474-9796 Department of Mathematics Fax: (204) 474-7606 University of Manitoba email: Michael_Doob(a)umanitoba.ca Winnipeg, MB, Canada R3T 2N2 ------------------------------------------------------------------

1 0

Fwd: [SkullSpace-Announce] Full-Day Class on Wireshark and SSL on Saturday
by Adam Thompson 09 Jun '13

09 Jun '13

Forwarded from the Skullspace announce list since I know this will be of interest to some of members. -Adam -------- Original Message -------- Subject: [SkullSpace-Announce] Full-Day Class on Wireshark and SSL on Saturday From: Mak Kolybabi <mak(a)kolybabi.com> To: announce(a)lists.skullspace.ca CC: Alex, Ron, and I will all be attending Sharkfest next Sunday through Thursday as presenters. Alex and I are looking to do a full test run of our material the day before we leave, Saturday, June 15th, at the next SkullSpace hackathon. We'd appreciate an audience. At Sharkfest, I'm teaching a full-day hands-on lab from 10:15 am to 4:45 pm. This is a huge chunk of time, large enough to strain my usual time-filling tactics of ranting while doing jazz hands and berating the audience. I've been called in to replace someone far more qualified than I am for this, so as not to embarrass myself at Sharkfest, I plan to do a full run-through of the course on Saturday. After the course is done, Alex will give his presentation. We will both be talking about packet captures and network analysis, which are useful in troubleshooting, reversing, and CTFs. My hands-on lab will be from 10:15 am to 4:45 pm and Alex will present at 5:00 pm. Below are our bios and other information shamelessly lifted from the Sharkfest site. Please reply out-of-band -- by making a separate, not reply-all, email to me -- if you are planning to attend the hands-on lab, so I can plan pizza (we'll take a lunch break) and seating accordingly. ******************************************************************************** SSL Troubleshooting With Wireshark Mak Kolybabi, Technical Lead, Reverse Engineering, Tenable Network Security SSL plays an important role in ensuring confidentiality, integrity and authentication of communication over a public network like the Internet. It is used for securing (web) applications as well as for implementing a public key infrastructure (PKI). A good understanding of the SSL protocol will help solve issues in setting up secure communication based on SSL. In this Hands-On Lab, we'll review the SSL protocol and how Wireshark and tshark can be used to analyze the different handshake messages, troubleshoot common problems in the SSL session setup and successfully decrypt SSL traffic for further analysis of the transported data. Who Should Attend: Network engineers, network security professionals, software developers What You'll Need: Bring your own laptop with Wireshark installed. Takeaway: A good understanding of the SSL and a sure footing in setting up secure communication based on the protocol. Mak Kolybabi lives in Canada and is the Technical Lead of Reverse Engineering at Tenable Network Security. He has written hundreds of Nessus plugins and currently maintains those related to SSL/TLS/X.509. In his spare time he gives talks locally and teaches classes at the local hackerspace, SkullSpace, which he co-founded. Recently, he's been working on organizing BSides Winnipeg and creating a learning CTF called The DangerZone." ******************************************************************************** ******************************************************************************** I Can Hear You Tunneling... Alex Weber, Security Software Developer SSH is the de facto standard for accessing remote Unix-like servers over a hostile Internet. SSH has many other capabilities, including secure file transfer and the ability to tunnel TCP-based protocols, providing an additional layer of transport security. All of this functionality is great for users that legitimately need to protect their communications, but without the ability for network administrators to do Deep Payload Inspection, SSH presents a very real risk to an organization's network security. In this presentation, Alex Weber will summarize previous research and present tools and techniques to passively analyze SSH traffic for evidence of policy violation and intrusion. Alex Weber is a Canadian software developer with an interest in network security, cryptography, and interesting programming languages. Outside of his day job, Alex has contributed patches to the Nmap network scanner, the FreeBSD Documentation Project, and has been featured on the front page of Threatpost for writing a malicious bootloader program to steal Windows passwords ******************************************************************************** -- Mak Kolybabi <mak(a)kolybabi.com> () ASCII Ribbon Campaign | Against HTML e-mail /\ www.asciiribbon.org | Against proprietary extensions _______________________________________________ SkullSpace Announce Mailing List Help: http://www.skullspace.ca/wiki/index.php/Mailing_List#Announce Archive: https://groups.google.com/group/skullspace-announce-archive/

1 0

recommendations for good linux web server based photo gallery software?
by Gilles Detillieux 07 Jun '13

07 Jun '13

After spending too much time figuring out how to install and configure My Photo Gallery (http://fuzzymonkey.net/software/photogallery/) on my CentOS 5 web server, only to realize it's completely inadequate for the task we have in mind, I thought I'd turn to the group for help before wasting a lot more time. Do any of you have experience with good photo gallery software for Linux? I want something web based, which would make it reasonably easy to invite select individuals to upload photos for various events (seminars & symposia) we hold. Ideally, we would set up a gallery for each event, then e-mail attendees access info (username & password) which would give them access to that gallery to upload photos taken at the event. After a time, we'd close off access for uploads, e.g. by changing the password, but keep the gallery up for public viewing from our site. It would have to be something really easy to use, simple and reliable, so that invitees don't have to spend a lot of time leaning or fighting with the site to upload a half-dozen pictures. It would be really nice if it allowed them to add comments to the photos too. I was thinking of trying Gallery 2 next, which is apparently available from EPEL for CentOS 5. But it looks like something pretty big and complicated with lots of packages, and it needs an SQL database on the back end, so I don't know how much of an effort it will be to install, configure and learn. So, I thought I'd ask before investing a whole lot more time on this. Any experience with this or other gallery software? What's good out there that would fit the bill for our needs? Or should we just give up on this idea and get everyone to upload to Flickr? Thanks! Gilles -- Gilles R. Detillieux E-mail: <grdetil(a)scrc.umanitoba.ca> Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/ Dept. Physiology, U. of Manitoba Winnipeg, MB R3E 0J9 (Canada)

9 14

MUUG Meeting, June 11, 7:30pm -- LyX, Meld, Asymptote
by gedetil＠cs.umanitoba.ca 04 Jun '13

04 Jun '13

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, June 11. The meeting topic for this month is as follows: LyX, Meld, Asymptote This month, we have three presenters giving short (5-10 minute) demonstrations of some software that they have found interesting. Adam Thompson will demonstrate LyX, a WYSIVRTWYG (What You See Is Vaguely Related To What You Get) document creation and editing front-end for TeX and LaTeX. Trevor Cordes will demonstrate Meld, a graphical diff viewer that's designed for those of us who will never be comfortable with text-based diff output syntax. And finally, Michael Doob will demonstrate Asymptote, a markup language for producing high-quality graphics, which, like TeX, separates the concepts of markup from presentation, allowing graphics to be drawn with very high precision. The June RTFM will feature Gilbert Detillieux talking about the dpkg(1), apt-get(8), apt-cache(8) and aptitude(8) commands, used for package management in Debian and similar Linux distributions. The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ***************************************************************** Please note our *NEW* meeting location for this month: Room 1L06, Lockhart Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ***************************************************************** For more information about MUUG, and its monthly meetings, check out their Web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ PO Box 130 St-Boniface Phone: (204)474-8161 Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609

1 0

Solaris printing again
by Kevin McGregor 04 Jun '13

04 Jun '13

I'm trying to set up a print queue in one Solaris zone to print to a "development" printer which is a BSD/lpd (?) print service running on another machine. The production zone already has a printer just like it defined in printers.conf like this: cowsvpprmom:\ :bsdaddr=192.168.59.113,GENERAL_ENTRY,Solaris: My question: How do I duplicate this on the development zone, but with a slightly different name and IP address? I've done a bunch of googling, but I never get anything that results in a "GENERAL_ENTRY" item (or what the heck *that* means) and I also get an extra line like :printer-uri-supported=lpd\://172... which I also don't understand. Can someone help me out with the commands I need to use? This is Solaris 10. Kevin

1 0