2022 edition after it was cancelled last year.<\/p>\n\n\n\n
As I said in the last entry, I’m really leaning towards not going again. I’ll probably do the Shmooze-a-student, and sell the ticket that comes with it at cost.<\/p>\n\n\n\n
Physically, I just can’t do it anymore.<\/p>\n\n\n\n
Reflecting on it, though, notably absent were both the detest of the “other side” of US politics, and the self-assured consensus that the participants’ political views were going to make everything okay.<\/p>\n\n\n\n
One of the things from the last one was the whole Russian collusion narrative about President Trump. This was my thinking <\/p>\n\n\n\n
There are many people who still believe that stuff.<\/p>\n\n\n\n
But there’s still, too, people who believe that Trump won in 2020.<\/p>\n\n\n\n
I think there’s something about admitting when your initial take on something was incorrect.<\/p>\n\n\n\n
It’s probably not fair to expect a speaker at a convention to come back and say, “yeah, about that,” but continued silence from others makes me wonder.<\/p>\n\n\n\n
I’m not saying that you come out and shit on previous speakers’ bits, but you can, at least, revisit a bit later.<\/p>\n\n\n\n
But on to the individual talks’ reax….<\/p>\n\n\n\n
First Up<\/a>….<\/p>\n\n\n\n Log capture and analysis. If a bear splints in a forest, does anybody care? (That’s what I typed at the time, and I’m not sure if that was the correct word. MacBook Air doesn’t stay on my belly reliably.)<\/p>\n\n\n\n Part of what I’m doing in my current role is dealing with implementing a Commercial-Off-The-Shelf product to do log monitoring. <\/p>\n\n\n\n But, for my situation, there’s enough multi-layer security that these COTS products aren’t really useful.<\/p>\n\n\n\n At least, now, I’m not getting pressured to loosen layers of the security stack to let these commercial products work as designed.<\/p>\n\n\n\n Next up<\/a><\/p>\n\n\n\n I tend to use ProtonVPN because I’m cheap, and it’s included with my ProtonMail subscription.<\/p>\n\n\n\n (I went with ProtonMail because I felt better about the Swiss protecting customers’ privacy. The Swiss government’s response to Russia gives me a bit of pause, but I still feel better about it than anything in the US, EU, or Soviet Canuckistan…)<\/p>\n\n\n\n The tagline of this site works in reverse, too. Anytime you do something online, somebody can probably snoop on it. Deal with it. <\/p>\n\n\n\n Temporal connections are tougher to crack, but everything can be cracked..<\/em> It’s not a question of if, it’s a question of when.<\/p>\n\n\n\n The talk went into something about APIs, and I think I started to lose the handle on the talk(s). Maybe the next part was about a different presentation, altogether? I don’t know.<\/p>\n\n\n\n Use modern web API programming techniques for …?<\/p>\n\n\n\n ARM microcontrollers are ubiquitous.<\/p>\n\n\n\n You can tell from the headers of the binaries. Mix and match thereafter.<\/p>\n\n\n\n Stepped out because I didn’t think IU’d get a lot of benefit out of it, and I wasn’t feeling well.<\/p>\n\n\n\n Scheep<\/a>.<\/p>\n\n\n\n Reading the description, it sounds a bit like a new form of a honeypot; something there just for people to fuck with to no avail.<\/p>\n\n\n\n I’m having flashbacks to when I put a GNU\/Hurd box on a publicly-accessible IPv4 address to see how long it took someone to break in. With Telnet enabled.<\/p>\n\n\n\n It took a Navy Red Team friend several days, but he eventually cracked the password, get a command shell, then didn’t know what the fuck to do with it.<\/p>\n\n\n\n Due to technical difficulties, presentation didn’t start until nearly twenty minutes late.<\/p>\n\n\n\n This is an attempt to create a Web Service, not a regular binary on the host.<\/p>\n\n\n\n Good sandbox for both red and blue teams; tracks everything<\/p>\n\n\n\n Using a packet sniffer, the developer was able to capture HTTP packets, and assemble an HTTP session. From that assembled HTTP session, he could start figuring out some things.<\/p>\n\n\n\n Bulk command shove; no idea who ran which command.<\/p>\n\n\n\n The developer used remote shell over HTTP to sites around the world.<\/p>\n\n\n\n For the Windows stuff, he was operating on the WinSock DLL. <\/p>\n\n\n\n (When I did some programming, I found that DLL to be, ummm…ancient. Maybe it’s gotten better since I was plunking away on it in 2006.)<\/p>\n\n\n\n He is planning to “open source” the code, but Larry Ellison executing his jerk options again. <\/a><\/p>\n\n\n\n It does sound like neat tech. I’m not sure I completely understand how it’s used, but, then, I’m not a pen tester.<\/p>\n\n\n\n This<\/a> one about broadcast satellites.<\/p>\n\n\n\n Yes, this is fascinating stuff for me, with my past in the broadcast industry.<\/p>\n\n\n\n I’m having flashbacks to cleaning fourteen inches of snow out of a C-Band reciever.<\/p>\n\n\n\n (I ended up buying every jug of windshield washer fluid at the 7-Eleven on the way to the transmitter site, and pouring that over the dish until I could get the dish clear enough to pull a signal again.)<\/p>\n\n\n\n The bit about the higher orbit for spent satellites is fascinating to me. I kind of had just figured they let them fall out of orbit. But that they send them higher, so they’re out-of-the-way explains the ring of space junk.<\/p>\n\n\n\n Discussion of odd WordPress plugins that might have security issues.<\/a><\/p>\n\n\n\n I understand it, but this, and the work call that had me watching this over the stream link from my hotel room, really reinforce my commitment to not using anything that’s not supported directly by a vendor.<\/p>\n\n\n\n Trying to do this stuff in-house is just too fraught with peril for my tasted.<\/p>\n\n\n\n Interesting aside that the totes-didn’t-used-to-do-evil search company downlinks sites that have WP vulgarities. I, generally, think that SEO is snake oil, but if that’s what that formerly not-evil company is doing, well…<\/p>\n\n\n\n Static front page that gets picked up, then escort users in after they land on the static site with tons of keywords in the HEAD element.<\/p>\n\n\n\n There’s been a big push the past couple of years to force everything behind SSL. Maybe it makes sense, now, to put most content back in a place where the search engines can’t capture it?<\/p>\n\n\n\n The tagline for this blog is, “everything gets deleted, eventually.” I’m sure there’s things on the Internet I wrote years ago that don’t reflect my views today. Whatever.<\/p>\n\n\n\n As more things get pushed behind paywalls, the less background you can find on someone. I’m okay with that.<\/p>\n\n\n\n
\n\n\n\n
\n\n\n\n
\n\n\n\n
\n\n\n\n
\n\n\n\n