Toorcon 7

URLs to Check

toorcon conference proceedings | Dan Anderson blog
lockpicking101.com | irvine underground | synacklabs | hackaday
Books: Greyhat Hacking, How Not to Program in C++, Absolute BSD, Hacking - Art of Exploitation, Wicked Cool Perl, The Phone Bug Book

basatille-linux.org/jay
PCs are a target of opportunity, window of vuln before patches applied
always reacting to incidents, metasploit injects into running dlls
need for Hardening: 1) least privilege 2) minimalism
lots of templates, easy to do, bastille just puts it all in one: an EDUCATIONAL product
can create and copy policy files over to other systems to enforce and score/weight
has “audit” function - definible by anyone (bastille -a)
good no-touch inspection of security of system, will not make changes in audit mode
weighted score - psychological power, an incentive, and competitiveness

darkircop - http://toorcon.org/2005/conference.html?id=3
new attack on wep with single packet
airjack and aircrack, functionality on fbsd wi driver. from atheros sw card driver
flaw in wep shared key authentication, mgmt frames can still force others offline