<div dir="ltr"><div>If I implied you were not welcome to attend, I apologize. I only meant that we were unlikely to have time to participate in what you were suggesting with regard to security testing our systems. Even if our time were not required, I think you can understand that we would want to know what was being done and we most often would not have time for that.<br>
<br></div>You are certainly welcome to attend as are any who would volunteer to help or to seek assistance. No, it was not before my time that you did help out at the installfest unless you only did so prior to 2004. Since that time I have probably missed a total of 6 or fewer events and I was in charge of them ever since Alexander left us.<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 31, 2013 at 5:12 PM, Lisa Kachold <span dir="ltr"><<a href="mailto:lisakachold@obnosis.com" target="_blank">lisakachold@obnosis.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Larry,<div><br></div><div>Hi my friend, how are you! <br><br><div class="gmail_quote"><div class="im">On Fri, May 31, 2013 at 3:17 PM, Dazed_75 <span dir="ltr"><<a href="mailto:lthielster@gmail.com" target="_blank">lthielster@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Sorry Lisa, we are unlikely to have the time for that whether we have the inclination or not.<br><br>
</div>We have a few people known to be coming for various reasons though nothing out of the ordinary. One fellow set up dual boot with Win8 and Ubuntu and was coming because his wireless was not working but he got it fixed on his own so is no longer planning on being there.<br>
</div></blockquote><div><br></div></div><div>Larry, as in all pentesting, you (and the machines to be tested) would not need to be involved (other than turned on). But the process would be terribly boring and I would in fact find nothing, because Linux installations today have very few systems that can be exploited right out of the box. Since the first thing we do is to patch everything, there's no daemons that would be fingerprinted with exploit code by Metasploit. Additionally, the very small number of exploitable daemons (before patching) are not configured generally right out of the box. A good rule of thumb, especially since UAT has some of the best crackers to share a network (sending a team to DefCon every year) is to install, update (yum update or apt-get update) and THEN turn off selinux, configure cups, etc.</div>
<div><br></div><div>The possible period of time wherein exploitable code would/could be available would be very small should the owner have an insecure application to install (from backports for instance) and update. </div>
<div><br></div><div>Of course, we are not considering other forms of computer insecurity, such as SSH "password testing" or Man in the Middle attacks (sslstrip) which anyone can do sharing a network. </div><div>
<br></div><div>I have contributed to driver issue resolution, configuration for EDVO cards/modems, complex VPN configurations and kernel building at installfests; I think that might have been before your time? </div><div>
<br></div><div>I would come just to see the great outreach this Installfest is for our community, expanding Linux/Opensource use while saving older equipment from the Micro$oft agenda that would place them into the landfill.</div>
<div><div class="h5">
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Fri, May 31, 2013 at 11:24 AM, Lisa Kachold <span dir="ltr"><<a href="mailto:lisakachold@obnosis.com" target="_blank">lisakachold@obnosis.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>Anything good happening with the InstallFest tomorrow? <div><br></div><div>Can I come and "test" your systems with Metasploit </bad kitty>?<span><font color="#888888"><br clear="all">
<div><br></div>-- <br><div><br></div><a href="tel:%28503%29%20754-4452" value="+15037544452" target="_blank">(503) 754-4452</a> Android<br>
<a href="tel:%28623%29%20239-3392" value="+16232393392" target="_blank">(623) 239-3392</a> Skype<br><a href="tel:%28623%29%20688-3392" value="+16236883392" target="_blank">(623) 688-3392</a> Google Voice<br>**<br><a href="http://it-clowns.com/d/" target="_blank">it-clowns.com</a><br>
Chief Clown<br><br><br><br><br><br><br><br><br><br><br><br><br><br>
</font></span></div>
<br></div></div>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><span><font color="#888888"><br></font></span></blockquote></div>
<span><font color="#888888"><br><br clear="all"><br>-- <br>Dazed_75 a.k.a. Larry<br>
<br>Please protect my address like I protect yours. When sending messages to multiple recipients, use the BCC:
(Blind carbon copy). Remove addresses from a forwarded message body before clicking Send. <br>
</font></span></div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div></div></div><div><div class="h5"><br><br clear="all"><div>
<br></div>-- <br><div><br></div>
(503) 754-4452 Android<br>(623) 239-3392 Skype<br>(623) 688-3392 Google Voice<br>**<br><a href="http://it-clowns.com/d/" target="_blank">it-clowns.com</a><br>Chief Clown<br><br><br><br><br><br><br><br><br><br><br><br><br>
<br>
</div></div></div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br><br clear="all"><br>-- <br>Dazed_75 a.k.a. Larry<br>
<br>Please protect my address like I protect yours. When sending messages to multiple recipients, use the BCC:
(Blind carbon copy). Remove addresses from a forwarded message body before clicking Send. <br>
</div>