<div dir="ltr">Hi Phil,<div><br></div><div style>Here's some demos for your students:</div><div style><br></div><div style>BEef - Browser Exploitation Framework</div><div style><br></div><div style>MetaSploit/Armitage Videos</div>
<div style><br></div><div style>SSHStrip</div><div style><br></div><div style>And of Course AirCrack-Ng</div><div style><br></div><div style>They should be exposed at the very least to those things. </div><div style><br>
</div><div style><br></div><div style><br></div><div style>Sure I would setup all manner of fun honeypots for catching them - but what will you do when you do?</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Sun, Apr 21, 2013 at 3:47 PM, Phil Waclawski <span dir="ltr"><<a href="mailto:phil.waclawski@mesacc.edu" target="_blank">phil.waclawski@mesacc.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">I have an older laptop I was going to reimage, make sure there was no data on it I cared about, so if it gets stolen, I'll be annoyed, but that's about it. And I have no intentions of doing ANYTHING illegal, I just want to learn about what types of attacks are out there, and possibly some better ways to help my students defend against web based attacks etc. True, so long as I don't log into ANY account, I can still use the internet just to browse the web and so on, with the understanding that half the hotel will probably know what web sites I visit ;) It is tempting to set up a dummy ssh account with a password that I don't care about somewhere and see if it gets hacked.<div>
Phil W.</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Apr 21, 2013 at 10:23 AM, Lisa Kachold <span dir="ltr"><<a href="mailto:lisakachold@obnosis.com" target="_blank">lisakachold@obnosis.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p>Great post Bob! If you are going - do it right! Of course be aware while joining the fun of where you break the law; a great deal of surveillance occurs from which you could glean a Homeland Security tail for a good long time. </p>
<div><div>
<div class="gmail_quote">On 21 Apr 2013 08:58, "Bob Elzer" <<a href="mailto:bob.elzer@gmail.com" target="_blank">bob.elzer@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">There's no reason you can't bring your laptop, just do the steps</p>
<p dir="ltr">Backup your disk or remove it<br>
Put in a new disk or erase your current !!! If you backed it up !!!<br>
Install a fresh copy of your favorite installation or even backtrack<br>
Don't connect to your home or work networks<br>
Don't put any of your real info on the computer<br>
Go to Defcon, have fun, let them hack away<br>
Remember to not use any of your real personal sites or accounts<br>
When you're done, wipe everything<br>
Put your original disk back in, or restore</p>
<p dir="ltr">Then you can tell us all about your trip</p>
<p dir="ltr">The only thing you would have to worry about, is someone stealing the laptop<br></p>
<div class="gmail_quote">On Apr 19, 2013 11:52 PM, "Phil Waclawski" <<a href="mailto:phil.waclawski@mesacc.edu" target="_blank">phil.waclawski@mesacc.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Well, I'm attending it in the hopes of learning about how some of these attacks work, and how to defend against them. Helps me teach my students better practices (and myself as well).<div><br></div><div>
To be honest, I had planned on having an old laptop with a brand new kubuntu install on it (no data I care about) and just doing some blender work and note taking offline, and never connecting it to a network while at the convention.</div>
<div><br></div><div>However, I'm curious, if I set up an ssh tunnel to a server I've already established a Key system with, wouldn't ssh throw up a huge warning from a man in the middle attack not having the right "handshake"? At that point I'd only be hosed if I was dumb enough to say "connect anyway"?.</div>
<div><br></div><div>Phil W.</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 19, 2013 at 10:30 PM, der.hans <span dir="ltr"><<a href="mailto:PLUGd@lufthans.com" target="_blank">PLUGd@lufthans.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Am 19. Apr, 2013 schwätzte Alan Dayley so:<br>
<br>
moin moin Alan,<div><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Why in the world would anyone actually attend a conference where you KNOW<br>
people are going to attack your electronics and data? Erasing everyone's<br>
</blockquote>
<br></div>
It's in the city where people pay to let someone steal from them, so it<br>
fits the theme.<br>
<br>
<a href="http://www.newyorker.com/online/blogs/culture/2013/01/video-the-art-of-pickpocketing.html" target="_blank">http://www.newyorker.com/<u></u>online/blogs/culture/2013/01/<u></u>video-the-art-of-<u></u>pickpocketing.html</a><div>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
credit cards? For the lulz, I guess. It sounds like a bunch of very smart<br>
trolls getting together to see who can out-troll who. I would just<br>
be collateral damage in such a group. I guess it's an effective way to keep<br>
the non-trolls and newbies out of the "defcon club." Or maybe it is a from<br>
of hazing.<br>
<br>
And, if I HAD to go, cash, pen and paper is all I would bring.<br>
</blockquote>
<br></div>
Make sure to keep them somewhere safe ;-).<br>
<br>
ciao,<br>
<br>
der.hans<span><font color="#888888"><br>
-- <br>
# <a href="http://www.LuftHans.com/" target="_blank">http://www.LuftHans.com/</a> <a href="http://www.LuftHans.com/Classes/" target="_blank">http://www.LuftHans.com/<u></u>Classes/</a><br>
# Like the maid, I don't do (M$)Windows. - der.hans</font></span><br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br></div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div>
</div></div><br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br></div>
</div></div><br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><br></div>
(503) 754-4452 Android<br>(623) 239-3392 Skype<br>(623) 688-3392 Google Voice<br>**<br><a href="http://it-clowns.com" target="_blank">it-clowns.com</a> <br>Chief Clown<br><br><br><br><br><br><br><br><br><br><br><br><br><br>
</div>