Rick subbed for me due to car trouble (ask me about it later; it was really stupid) causing me not to make it to the presentation last Sat. First time in two years I blew it! Don't impeach me!
April 11th - Katrina the Java Programmer on Linux Telephony
I don't know anything about this subject, which is why she's giving the talk rather than me.
April 25th - The World's Worst Linux Distribution
(not in my opinion but probably in yours)
May 9th - The Amazing Multi Distro CD
SEE! HEAR! FEEL the power and incredibleness of NINE distros on one live CD.
---
As always, second and fourth Saturdays at 2 within the Hal-PC offices.
Friday, March 27, 2009
Thursday, March 19, 2009
The Amazing Multiple Distribution
I don't EVEN believe it but I'm going to throw another new-distro show at you. This one's unprecedented. Suppose I told you that one could cobble together several TOTALLY UNRELATED distributions onto one live CD. Not DVD, CD. That would be nice, eh? Say, a security distro, a general use distro, then one with a bunch of media stuff, plus memtest-86 or some other tool. That's four distinct entities. Suppose I could show you a CD with considerably MORE THAN THAT on it?
And not only are they all crammed onto the (NOT DVD) CD, but that I have an i386-type laptop old and common enough that all the distros actually work and are OK to demonstrate on it? One review article of this collection disc that came up on a search consisted of about 40% complaints about what hardware platform the particular Linux distributions understood, and the reviewer had to hop from machine to machine to get his article done; not needed with my rig. I think his stuff was so new that neither Windows, Mac, Linux or whatever would be updated or drivered-up at press time.
Oh, yes. We'll see this on the 28th at 2pm, same bat time, same bat channel at Hal-PC HQ - barring preemption due to speakers' schedules, in which case we'd bump it one meeting. Plus we'll take a survey for what presentations people want to see in upcoming weeks. Oh, and I think it's a good idea to insert yet another continuing agenda item: we will henceforth brazenly rip off at least one Linux Journal article per meeting!
UPCOMING TOPIC:
Airsickness bags will be provided. Stay tuned.
And not only are they all crammed onto the (NOT DVD) CD, but that I have an i386-type laptop old and common enough that all the distros actually work and are OK to demonstrate on it? One review article of this collection disc that came up on a search consisted of about 40% complaints about what hardware platform the particular Linux distributions understood, and the reviewer had to hop from machine to machine to get his article done; not needed with my rig. I think his stuff was so new that neither Windows, Mac, Linux or whatever would be updated or drivered-up at press time.
Oh, yes. We'll see this on the 28th at 2pm, same bat time, same bat channel at Hal-PC HQ - barring preemption due to speakers' schedules, in which case we'd bump it one meeting. Plus we'll take a survey for what presentations people want to see in upcoming weeks. Oh, and I think it's a good idea to insert yet another continuing agenda item: we will henceforth brazenly rip off at least one Linux Journal article per meeting!
UPCOMING TOPIC:
THE WORLD'S WORST LINUX DISTRIBUTION
Airsickness bags will be provided. Stay tuned.
Sunday, March 15, 2009
DOCUMENTATION of the Security Distro program
On Saturday (yesterday now) I gave rundowns of four fairly current Linux distributions on live CD's.
(By the way, I apologize for making light of the STD distro last entry. I expect to be blown off the air any hour now.)
These distros feature pre-installed security and forensics tools, some command-line and some graphical - and a few with options in both directions. FCCU (a Knoppix-based product from the Belgian Federal Crime Control Unit) and DEFT (a small but serviceable Xubuntu-based distro with a forensic or repair/recovery emphasis) were the first two, but the stars of the show were my personal favorite of the moment, Protech, and a tough contender, BackTrack.
Protech is based on Ubuntu and uses Fluxbox as a thin desktop environment, helping low-mem machines like mine. It has many well-known useful tools like filesnarf, wireshark, Metacoretex, kismet, gkismet, airsnort, cowpatty and so on. There's also a firewall (Bastille) included, THREE honeypots including La Brea, two kit finders (chrootkit and rkhunter) and sticks with the spreading and very considerate ethic of automajically ejecting your live CD during shutdown before reboot. This distro is also one of a growing group that (unlike live-only concepts such as STD, TRK and others) is written with the option of HDD install in mind. Protech (as well as BackTrack 3 mentioned next) want to be your desktop as well, not just a live CD. It's your choice.
BackTrack 3 (or try this link if needed) is the most current final version of this distro (with 4 out in either alpha or beta by now). It offers more of everything and is insecure.org's result for most popular Linux security distribution; it's the most comprehensive distro I've seen so far and its organization is clever. At least every category of tool is represented with multiple tool options in almost all. Some categories have over 50 options. Talk about a shortcut reload strategy - you'd spend a lifetime installing and updating individual tools otherwise. In addition to the usual crowd (the SleuthKit / Autopsy package, tinyproxy, truecrypt, nMap, Zenmap, TCPtraceroute, SNMPwalk and so on, there's an "archive" category which includes only one option. But it's an important one, one that I've harped upon for years, claiming that everyone should take note. It's a link to archive.org, the maintainers of a search function called the Wayback Machine (a reference to the original Rocky and Bullwinkle show). Need to research a web page no longer in existence? If you know the URL, just plug it in and Zap - there's multiple hits on the dates that archive.org recorded the contents. I've tried it on pages of my own. Your mileage may vary, but maybe they'll have snapshotted what you need.
To cinch the deal, BackTrack has a boot-up option offering two desktops: Fluxbox for low-mem situations and KDE 3.5 for the full-service customer (and in a light enough build to run well on a P3 866 with 256 on the ram). I'm sticking with Protech for the moment, but BackTrack may win me over.
More info to come on the show in 2 weeks (HLUG does presentation meetings on the second and fourth Saturdays, 2pm, at the HQ of the Houston Area League of PC Users).
(By the way, I apologize for making light of the STD distro last entry. I expect to be blown off the air any hour now.)
These distros feature pre-installed security and forensics tools, some command-line and some graphical - and a few with options in both directions. FCCU (a Knoppix-based product from the Belgian Federal Crime Control Unit) and DEFT (a small but serviceable Xubuntu-based distro with a forensic or repair/recovery emphasis) were the first two, but the stars of the show were my personal favorite of the moment, Protech, and a tough contender, BackTrack.
Protech is based on Ubuntu and uses Fluxbox as a thin desktop environment, helping low-mem machines like mine. It has many well-known useful tools like filesnarf, wireshark, Metacoretex, kismet, gkismet, airsnort, cowpatty and so on. There's also a firewall (Bastille) included, THREE honeypots including La Brea, two kit finders (chrootkit and rkhunter) and sticks with the spreading and very considerate ethic of automajically ejecting your live CD during shutdown before reboot. This distro is also one of a growing group that (unlike live-only concepts such as STD, TRK and others) is written with the option of HDD install in mind. Protech (as well as BackTrack 3 mentioned next) want to be your desktop as well, not just a live CD. It's your choice.
BackTrack 3 (or try this link if needed) is the most current final version of this distro (with 4 out in either alpha or beta by now). It offers more of everything and is insecure.org's result for most popular Linux security distribution; it's the most comprehensive distro I've seen so far and its organization is clever. At least every category of tool is represented with multiple tool options in almost all. Some categories have over 50 options. Talk about a shortcut reload strategy - you'd spend a lifetime installing and updating individual tools otherwise. In addition to the usual crowd (the SleuthKit / Autopsy package, tinyproxy, truecrypt, nMap, Zenmap, TCPtraceroute, SNMPwalk and so on, there's an "archive" category which includes only one option. But it's an important one, one that I've harped upon for years, claiming that everyone should take note. It's a link to archive.org, the maintainers of a search function called the Wayback Machine (a reference to the original Rocky and Bullwinkle show). Need to research a web page no longer in existence? If you know the URL, just plug it in and Zap - there's multiple hits on the dates that archive.org recorded the contents. I've tried it on pages of my own. Your mileage may vary, but maybe they'll have snapshotted what you need.
To cinch the deal, BackTrack has a boot-up option offering two desktops: Fluxbox for low-mem situations and KDE 3.5 for the full-service customer (and in a light enough build to run well on a P3 866 with 256 on the ram). I'm sticking with Protech for the moment, but BackTrack may win me over.
More info to come on the show in 2 weeks (HLUG does presentation meetings on the second and fourth Saturdays, 2pm, at the HQ of the Houston Area League of PC Users).
Tuesday, March 10, 2009
Got Somethin For Ya
A few things are coming up in the future, like the Linux telephony subject and the rep-from-the-wonderful Linux Journal BUT FIRST let's look at this Saturday's 2pm show at Hal-PC: remember about a year ago when I did the show about Linux security distros? The stars of that show were STD and Hakin9 Magazine's yearly-or-so live CD. Well, there's two others that deserve a look - and not H-9's latest one, either. Although the version I showed last time (3.0, I think) was a crowd pleaser due to offering the KDE desktop with all its goodies, the latest version (3.1.2) is too heavy to run on my antique Louis XIV laptop. And STD offers many tools not updated in some years, plus is a bit scruffy in appearance. And we can't have that. So we'll move on to two other examples.
And I won't tell you which ones they are until you see them. Nyah nyah nyah. It'll be hard to guess since there are so many of these things, and as is often the case with OSS (open source software) security projects, many of these distros are out of date and reside in a Sargasso Sea of broken links. But here's a little help.
Clue: the first one will be one that claims to be the most popular security package going (and there may be more than several that make this claim).
Clue: the second one will be heavy on tools of a... suspicious nature, so I'll demonstrate it without using it online. It apparently is written by a couple of white hat penetration testers, but just in case that's a cover story I'll airgap the thing. To use it online (risking a few auto-updates) would only rile up Allan at the other end of the hall. Besides, due to the date and time of the event (plus location) he'd immediately know it was me. All told, this second specimen is the slickest thing I've seen so far, has a compact desktop option AND the tools are pretty current.
A possible extra will be two attempts at using a particular tool (often included in security distros) to do some data recovery, one attempt of which is guaranteed to fail. I can't resist putting you through this since failure is often instructive. BE THEREEEEEEEEEEEEEEEEEEEEE
And I won't tell you which ones they are until you see them. Nyah nyah nyah. It'll be hard to guess since there are so many of these things, and as is often the case with OSS (open source software) security projects, many of these distros are out of date and reside in a Sargasso Sea of broken links. But here's a little help.
Clue: the first one will be one that claims to be the most popular security package going (and there may be more than several that make this claim).
Clue: the second one will be heavy on tools of a... suspicious nature, so I'll demonstrate it without using it online. It apparently is written by a couple of white hat penetration testers, but just in case that's a cover story I'll airgap the thing. To use it online (risking a few auto-updates) would only rile up Allan at the other end of the hall. Besides, due to the date and time of the event (plus location) he'd immediately know it was me. All told, this second specimen is the slickest thing I've seen so far, has a compact desktop option AND the tools are pretty current.
A possible extra will be two attempts at using a particular tool (often included in security distros) to do some data recovery, one attempt of which is guaranteed to fail. I can't resist putting you through this since failure is often instructive. BE THEREEEEEEEEEEEEEEEEEEEEE
Monday, March 2, 2009
Meeting, LAN thang and onward
Saturday's meeting concerned my look at the offerings of Linux Journal. The important thing to first note is that there's about a 35% lack of overlap in mag-vs-site material. There's considerable stuff unique to both publishing channels, so don't neglect either one. One thing you get on the website would be the video production known as the "Linux Minute", hosted by one of the editors. We played back the segment that IN ONE MINUTE demonstrated OpenSUSE's equivalent of what most of us do in the Debian world via apt-get, which would be several command line updating options, specifically Zypper. It's about as easy as apt-get and now allows me to avoid Yast or the Gnome updater, which use more memory than the machine I loaded Suse on can conveniently provide. Without another crash. My fault; I knew what I was doing when I loaded a modern OS onto a 9 year old computer. But now I can update faster and safer, thanks to Linux Minute via linuxjournal.com.
Playback would have been more elegant had I solved the screen resizing difficulty I often get with Hal-PC's equipment. Maybe I need to find the controls on my own (naturally) different desktop (we're dillitants in the club, constantly changing our machines in every way)...sp? Other things covered were our "favorite flag" command review feature, my common question of "does this job offer sound proper or are they scrambling to replace 4 or 5 walkouts?", and a pitch for membership and support for our venue organization, the venerable Hal-PC.
The LAN party was next and I got killed 313 times in Urban Terror, one of the games recently ported over which uses the Quake 3 engine. If my caffeinated excitement doesn't drive 'em away, this event should continue to pack 'em (or us) in for quite some time.
Up next on the roster of speakers will possibly be a certain Java programmer on internet telephony alternatives, a certain webmaster of a certain Linux magazine published locally, and possibly either Russell or me again on a subject to be concocted shortly.
Playback would have been more elegant had I solved the screen resizing difficulty I often get with Hal-PC's equipment. Maybe I need to find the controls on my own (naturally) different desktop (we're dillitants in the club, constantly changing our machines in every way)...sp? Other things covered were our "favorite flag" command review feature, my common question of "does this job offer sound proper or are they scrambling to replace 4 or 5 walkouts?", and a pitch for membership and support for our venue organization, the venerable Hal-PC.
The LAN party was next and I got killed 313 times in Urban Terror, one of the games recently ported over which uses the Quake 3 engine. If my caffeinated excitement doesn't drive 'em away, this event should continue to pack 'em (or us) in for quite some time.
Up next on the roster of speakers will possibly be a certain Java programmer on internet telephony alternatives, a certain webmaster of a certain Linux magazine published locally, and possibly either Russell or me again on a subject to be concocted shortly.
Friday, February 20, 2009
Past And Future
Although my Mardi Gras parade prevented me from attending the paravirtualization show last Saturday, I have it on good authority that Mr. Lightsey provided a wonderful show. There's no way to prove it, however, since the video equipment wasn't present. However, it probably will be next time.
That will be Saturday Feb. the 28th at 2pm at the Hal-PC office and will feature me. Although contact has not yet been established with the Linux Journal staff to allow me to shanghai one of them for a presentation, I've gotta get something on soon regarding the stuff in their recent wonderful Security Issue (one back now). So I'll do it myself, covering at least six quite useful articles.
Plotting continues for the second Saturday in March, at which it is my wish that the programmer who knows about Linux Telephony will finally cave in (she's done such presentations for users' groups before, I'm told). And I understand that encryption issues will come up... always useful.
That will be Saturday Feb. the 28th at 2pm at the Hal-PC office and will feature me. Although contact has not yet been established with the Linux Journal staff to allow me to shanghai one of them for a presentation, I've gotta get something on soon regarding the stuff in their recent wonderful Security Issue (one back now). So I'll do it myself, covering at least six quite useful articles.
Plotting continues for the second Saturday in March, at which it is my wish that the programmer who knows about Linux Telephony will finally cave in (she's done such presentations for users' groups before, I'm told). And I understand that encryption issues will come up... always useful.
Thursday, February 12, 2009
Didn't think I was gonna update, did ya?
SATURDAY SATURDAY SATURDAY!! Mr. John Lightsey will present an overview of Xen Paravirtualization in Linux. I don't know what that means, but since HE DOES, come hear him Saturday, 2pm, Hal-PC HQ.
AND in two weeks I just might be able to deliver somebody who can do a program on Linux Telephony. Stay tuned.
I didn't make Tech Fest, but a glimpse at their website (linked below) will indicate what subjects their agenda covered. Looks to be more for the programmer than the admin.
Oh, yes - THE SUN BOX. Carlile must read my blog, since he thought it would be funny not to show up last night to the Wednesday lab meeting. So a few of us looked through man pages for likely commands and just as time ran out, we bumped into some promising dhcp stuff. So looks like I'm close to an answer...
AAAAAAND I made gaming night last Sat. and will probably make this Sat's night as soon as I'm released from another commitment. I was flayed, boiled, mangled and impaled. But I got a script into all the attackers and it flipped their language packs to Portugese JUST KIDDING.
AND in two weeks I just might be able to deliver somebody who can do a program on Linux Telephony. Stay tuned.
I didn't make Tech Fest, but a glimpse at their website (linked below) will indicate what subjects their agenda covered. Looks to be more for the programmer than the admin.
Oh, yes - THE SUN BOX. Carlile must read my blog, since he thought it would be funny not to show up last night to the Wednesday lab meeting. So a few of us looked through man pages for likely commands and just as time ran out, we bumped into some promising dhcp stuff. So looks like I'm close to an answer...
AAAAAAND I made gaming night last Sat. and will probably make this Sat's night as soon as I'm released from another commitment. I was flayed, boiled, mangled and impaled. But I got a script into all the attackers and it flipped their language packs to Portugese JUST KIDDING.
Subscribe to:
Posts (Atom)