Thursday, June 30, 2016

Life updates and new things learned

After Toorcamp I went to company training, held in Orlando. There were 1800 people here, all associates, senior associates, and managers. I met many cool people, went on my first rollercoaster at Seaworld (and then six times more the next day on different rollercoasters at a different theme park), discovered that Moshiach has come in the form of kosher food, and did a bunch of networking. All in all, a useful exercise. Oh, there were also daily courses that had a nice bit of useful information.

New things learned: May 1, MSFT released a tool called LAPS which mitigates the effect of Pass-the-Hash attacks against Active Directory - based networks. Read about it here. However, there's an interesting attack I need to read about for privilege escalation on Windows boxen, which could help as an alternate attack.

Note-taking tools: Google Keep and Toodledo. Keep sounds nice, and Toodledo is useful too.

Monday, June 20, 2016

Updates on Toorcamp slides and Kali Linux Persistence

I didn't work on the slides today, on account of a lovely long bike ride. I'll work on them this week after each day's training (in Orlando) is over.

Just now I set up persistence on a live kali USB for the first time. It's the Kali Rolling distribution of Kali Light, which by default installs virtually nothing. The USB key is 32GB capacity, which can be had for 10 bucks or so on Amazon. You can get the top 10 tools, which cover the majority of good stuff, with kali-linux-top10, which is 1.5 GB when installed. Then I spent way too much time messing with pulseaudio and alsa to get the sound working. Turns out that for some reason the sound on this specific release of Kali comes muted. Here are the steps I followed:

1. Install alsa-mixer with: apt-get install alsa-mixer -y
2. Run the following and create it as a launcher (for now): amixer sset Master unmute
3. Open the Pulseaudio Volume Control. In my case there are two options in the Playback tab for the playback - "Built-in Audio Digital Stereo (HMDI)" which does not work, and "Built-In Audio Analog Stereo" which does work. I selected the second option and finally things worked.
4 (optional). Right-click on the panel, wherever it's placed, and add a "PulseAudio Plugin" plugin to control the audio.

Voila. And now it works after restarting. Eventually I'll figure out how to maybe just unmute on login or boot.

The bike ride was a new one, which I'd planned out using Google Maps. However, I neglected to allot enough time for the ride in light of it being new, and also did not notice that the route included one underpass and four overpasses. And of course I got lost, going well past the road that turns west and on to a rather seedy area with no bike path whatsoever. The road that I took as an alternative, going west, had several uncovered sewer drains which meant that occasionally the bike lane included holes at least nine feet deep. The ride took till 45 minutes after sunset, with a total of about 36 miles.

Wednesday, June 15, 2016

Toorcamp - Friday through Monday

The rest of Toorcamp was extremely busy. By mid-day Thursday I was loosing track of the people I'd met. Fortunately, the impressions are still fresh, and I went to several talks on Saturday, the last official full day. I've been asked to create a slide deck for a special Toorcamp presentation at the local Hadoop and Apache Spark meetup, so will work on that through Sunday and post it here via Slideshare or Prezi hopefully on Sunday.

Thursday, June 09, 2016

Toorcamp - Third day - Thursday - Part 1

After the last post, I walked over to the volleyball court to the wood-gas generation project, which connected two trashcans with air ducting to extract wood gas from burning wood chips to power a generator to power a heater. Again, interesting implementation with a somewhat pointless end result. After that, I walked over to the Pop-up cafe to get some club mate, which is concentrated sweetened mate syrup mixed with seltzer water. It's pretty good, and I got another before the introduction to the talks occurred. I sat next to a group from Las Vegas, the Psychoholics, who run a hacker/makerspace called Syn Shop. Great people, and I spoke for a while during the keynote presentation with a quilter and model house maker about gardening. She is in the middle of building a 1:12 scale model of a house, complete with working plumbing, bricks, and wooden jousts all the way down to the details. It's fiddly work.

After that, I walked over to the Lower Camp and met someone from RCCGroup which is sponsoring toorcamp and also supplying free beer. We talked about hacking webcams and other embedded devices. I also got a "stamp" on the information passport all the attendees have been given from 98.3 "the lol", which I'll have to check out with an actual radio, or when they start streaming online. Afterwards I was encouraged to find a kosher solution to cooking at Milliways, which is the cafe/restaurant at the end of the universe (from Hitchhiker's Guide to the Galaxy, a hacker manifesto among others).

Afterwards  I hung out with J, who showed me his large hacking box with various Arduino equipment and moisture and temperature sensors, as a side project to possibly integrate that into gardening applications. Shortly after the hard-drive launcher was put into action, and the quadcopter that came with my bag was also used to see if it could be destroyed by a flying hard-drive platter.

Toorcamp - Wednesday - Day 2

Dawn comes early here, at about 5:30 as the cock crows. The cock in the garden next door, that is. I would like to have strangled the cock but since this one has its spurs it might be a tossup who would cry last. At 6:30 I showered and washed, then prayed, taking care to avoid the scat from the numerous deer that browse this open field, usually (when there aren't tents there). Afterwards, I walked around a bit more and examined a different beach with interesting algae that has flotation bladders, making it look like the dread spawn of Chtulhu in the unborn state. The driftwood was also oddly feminine.

The office opened at last and I registered a spot to move the tent on Friday afternoon, to avoid having to pick up on Sunday. Unfortunately extra payment had to be made. I also signed in to the event, officially, and got a bag with a shirt, an inkable circuit pen (more about that later), a wristband, and a little quadcopter. The field set-aside just for drone racing just got a lot more interesting, especially since I'm pretty close to it.

After walking around, I went into the garden to examine it in greater detail and met a man who is the CTO of the company that makes the printable pen circuit thingy distributed in all the bags. He is a dedicated chemist, biologist, molecular biologist, and gardener, i.e. a maker in the biblical sense, which is amusing since he is also Jewish, and opened our conversation by telling of his great-grandfather's kippah, made of leather and died like a beachball, and now over a hundred years. He participates in the ArduCopter project, a project that after 10 years of effort and many shoulders of design has crafted a quadcopter seven feet in diameter that he and a friend plan to pilot to the island. It will rise in hover mode to a certain height, then convert to a flying wing almost and glide the rest of the way. It's being piloted from Seattle. The goal is to deliver a warm, non-burrito vegetarian taco to the man for his Thursday lunch.

The place continues to get more crowded, even as a steady drizzle has begun. More will be posted later, maybe when the wifi connection is finally made.

Part Two - this is being written Thursday morning. Wednesday for the most part passed quickly, and was all about registration and arrival. The field filled up with tents and people. In need of a grocery run, a welcoming couple allowed me a spot in their van, with their dog Lola who had her own Toorcamp shirt. We went into the town of Eastsound, which heavily caters to tourists. I bought a bunch of fruits, veggies, cereal, and a 12-pack of beer to share with people. The store had the largest (and best) selection I'd ever seen of 12-pack beer samplers, and I couldn't resist.

It also appears that everyone walks around either drinking beer or smoking weed, which is legal in Washington. I queried the couple who gave me a lift (T&A), who live in Seattle, and they felt that weed had a semi-taboo status on account of still being federerally forbidden. However, people say things like "I can't wait to eat, get a little bit stoned, it'll be just right" and the ability to say that without fear of retribution (even if there wouldn't have been retribution earlier in the privacy of your own home) is curiously enlightening. And T&A might be right, as even my friend L was oddly surreptitious when mentioning how much he had the night before.

You'll notice the lack of names. For whatever reason, whether to preserve anonymity, or because of the heavy use of IRC among some people, where nicknames are common, between half and all of the people here have nicknames or prefer to be called only by their nicknames. Hex (more about him later), _pronto (haven't seen him yet), the aforementioned L, etc. T&A have names, but I think it's nice to leave out the details.

After getting groceries, I continued walking around and while going with L to get a beer we came across a curious contraption, clearly, even to the uneducated eye, for some powerful force. It had 10 giant capacitors, connected to various coils and other things, and on top of the thick plexiglass in which all the electrical stuff was contained was a coil, like a stovetop heating element. After guessing and giving up, the pleased man standing next to it revealed that it is a device with no use whatsoever beyond Toorcamp. It shoots hard drive platters into the sky, via 2000 volts of energy and 3000 joules of power, by inducing a magnetic field in whatever metal part is placed on top of the coil and launching it on the big step for hard-drive kind (beep/beep-beep/krkrkrk) via opposing magnetic fields. The field is powerful enough to create a slightly concave shape in the hard-drive platter.

L had to shuttle people from the remote car lot, and I went over to the "Lower Field", the other assemblage, besides the "Upper Field" where I'm encamped, where makers and breakers are sitting. The Lower Field also hosts the in-camp phone network, ShadyTel, hopefully ShadyTelTV, the radio station 98.3 "the lol", a german group of CCCamp enthusiasts, and groups of cabins with tents pitched right up against them to give the illusion of inclusiveness in the wild. You can sign up with ShadyTel, via a form with carbon copy of course, to have a line run out to your tent anywhere on the camp. Every part of the form is real, thus my discovery of BORSCHT, without which some crucial element would not work. ShadyTel also satirizes the greedy excesses of telcos, right up to the banter of the techs (who do this as a hobby) and the voicemail.

Later I discovered that someone was brewing mate. Turns out that CCCamp in Germany has a favorite drink, which is basically mate with lemon or lime juice added, then carbonated. This is club mate, and is very popular among German hackers. It was brought to the HOPE conferences, by people such as Emmanuel Goldstein, and is now extending its reach to Defcon, Shmoocon, and at last to here. The brewing is done in large batches, then placed into some sort of kegs with knobs on top to cool, then carbonated. These kegs will be carbonated today and placed on tap for anyone. Hex pointed me to an Argentinian man, who turned out to be the wodrously knowledgable guru Martin, for more details about mate brewing. Martin being the being he is, the discussion swiftly turned to the divine properties of his mate cup, a small porcelain vessel glazed with Japanese Maple wood ash. Due to the absurd chemical and physical elements of the wood ash, the color of the vessel changes based on climate or what it holds, and due to body waarmth. Smoking fish turned it ochre, while holding it for merely a few hours turns it darker.

Shortly after, while discussing the certificates needed to join one of the wireless networks, I met E and offered him the certs on a USB key with the certs for wifi access. He showed me the yurt he's using, and we walked back to my side of the camp. He does DevOps and wondered at the composition of the attendees, as I had earlier. We sat around and talked a little longer, and he also offered me the best canned cider I've ever had. It had an extra taste almost of pretzels, and was absolutely amazing.

Later I tested the drone batteries in the main dome and talked to a former worker at the Doe Bay resort and some woman who was "being weird" in her own words, as she tried to direct a headlamp beam into the disco ball at the top of the dome to get it to reflect in people's eyes. At last sleep approached, and I fell asleep swiftly. Earplugs are indeed wondrous.

Today, Thursday, the talks begin at 9. Also, at last I have internet access, although it is recommended even on this one to use a VPN. So I will mostly type in vi and post when possible.

Pictures will come after the trip, or possibly later this week.

Update 6-15-16 - Some grammar edits

Toorcamp - Tuesday (first day)

At last the writing can begin, currently using the vi editor on a little netbook purchased off Amazon for about 90 bucks. Vi is to save battery space.

Yesterday the journey to Toorcamp began with a trip from Houston to SeaTac, sitting next to a chatty lady who held my hand tightly during the takeoff.

After Seattle, I took an Uber to King County International Airport and checked in for a flight much later. The airport is used by the military as well and I was priviledged to see a Boeing AWACS surveillance plane landing. There are only about 30 or so in use by the USA, so this was an unexpected surprise. The terminal is much smaller than regular, and is used by just one airline. The little cafe inside played a lot of classical piano music and a strangely-abbreviated version of Rachmaninov's 2nd piano concerto. There I sat as little Caravan airplanes came and went, as well as larger military and UPS jets. At last we boarded the plane, which seats 10, and flew for 40 minutes to an airstrip on Eastsound Island. Where it was 78 and beautiful in Seattle, it was breezy and in the 60s on the island for a possibly even nicer atmosphere.

I'd reserved a taxi ahead, and the driver told me all about his gifted daughter, the history of the island, the sharp divide between the 80% of rich millionaires who make the laws, own most of the land, and forbid the chopping down of any trees, and the 20% of everyone else who cater to the tourists by driving taxis, raising hundreds of thousands of salmon, or other things. The road winds through a state park with glorious views, though unfortunately with no method of transport and insufficient clothing for the rain drizzzzling outside right now, it's unlikely I shall be able to visit it.

At last I arrived. No one was there. A very helpful employee of the Doe Bay Resort where Toorcamp is being held, as well as a helpful Toorcamp staff member, revealed to me that actually everyone is supposed to arrive on Wednesday. Eventually, they showed me to an empty field where time and space would be tortured into twisted shapes, as in the biblical temple courtyard that miraculously held six hundred thousand Jews at once, to be filled with tents of attendees. Having practiced erecting the tent beforehand, it was easier to set it up, and with sunset only at 9:30 PM there was plenty of light to finish and setup the solar lighting, and realize that my organization strategies do not extend beyond carry-on baggage.

It got surprisingly chilly at night and the windbreaker/rain jacket proved handy. After exploring some of the resort area with a headlamp at last it was time to sleep. At once I discovered what it's like to sleep outdoors in 50 degree weather, and spent some time tussling with the sleeping bag like Pooh with his honey jar during the Great Flood when the water came almost to Piglet's window. Additionally, the staff members do not sleep, and much merry-making was made through the late hours of the night.

Monday, June 06, 2016

T-1 to Toorcamp

One day 'till the traveling to Toorcamp. In a classic occurrence, I did not pack as planned yesterday, and instead procrastinated and went to an Indian Music concert:

Padamashri Ustad Shahid Parvez
(Sitar)
Vidwan Lalgudi Krishnan
(Violin)
Vidwan Trichy Sankaran
(Mridangam)
Pandit Gourishankar Karmakar
(Tabla)
My parents, who are special donors to the Asia Music Society this year and automatically have front-seat tickets to every concert, went to the 3:00 performance and said it was unlike anything ever. This convinced me to go at a repeat performance at 7:00. My last name was recognized and in an unexpected present my seat was upgraded from row M in the back to the penultimate row B, which provided an excellent view of the performers.
First, Lalgudi Krishnan and Trichy Sankaran played Carnatic duo, two pieces. Then Shahid Parvez and Gourishankar Karmakar (sporting quite a fashionable 70s look with a 'fro and mustache) played a Northern Indian Hindustani set of two pieces. Then the string players had a duo, then all together, then each string player with their opposite drums player, then just the drums "speaking" with each other. All in one two-hour set. It was delightful, the interchange and interaction of each player. Never have I been to a concert with so much of what you would call "call and response" between Indian classical music instruments (which is common in performances as it is). Truly it was a great fusion concert.

Aside from Shahid Parvez the other star of the show was Trichy Sankaran, playing the Mridangam, which is like a tabla except unified (actually a double-headed drum). Turns out that Vidwan Sankaran is a highly-respected professor of music at various universities and one of the most accomplished percussionists alive today, and it shows. Listening to the microphone-amplified twang of his drum was heavenly, even if my heart lies with the tabla. Here is a performance by Vidwan Sankaran. I'm totally buying a CD or two right now.

In other pre-Toorcamp news, turns out there won't be a power connection to the tent. So the mini-crockpot is out. Instead I've purchased a bunch of things such as instant milk, dried potatoes, and fish in packets. The weather will be near 50 at night and low-mid 60s during the high point of the day, with a chance of showers later this week. Thus the packing will need to include warmer clothing. Hopefully everything will fit within 50 lbs and 20 lbs personal carry-on, which apparently is United's policy too.

Edit: Another thing. After some serious discussion it was decided not to build a mini-eruv, as the laws are simply too complicated. Instead, the LED lights will be draped around the tent. In a test at night it was seen that they provide quite a bit of illumination actually. The effect should be great!

Wednesday, June 01, 2016

Toorcamp - one week out

Toorcamp is now one week out. In a surprising development, last week I discovered that Shavuot actually starts Saturday night rather than Friday night as I'd previously surmised. Thus all the flights and arrangements had to be moved one day forward. In other news, most of the supplies have been ordered by now. On Sunday I set up the tent for practice and found out how big a four-person tent really is:

Lots of extra space inside


What remains is to do a bunch of laundry and get some more stuff, such as an outdoor extension cord, as listed on the packing list I've been following, here. There might not be continuous power all the time, which is also making me reconsider bring along the 1.5-quart crock pot purchased for this trip. Might as well save on weight and depend on campfires for hot water or food, and bring along a bunch of dried fruit, fruit leather, and packets of tuna.