Thursday, June 30, 2016

Life updates and new things learned

After Toorcamp I went to company training, held in Orlando. There were 1800 people here, all associates, senior associates, and managers. I met many cool people, went on my first rollercoaster at Seaworld (and then six times more the next day on different rollercoasters at a different theme park), discovered that Moshiach has come in the form of kosher food, and did a bunch of networking. All in all, a useful exercise. Oh, there were also daily courses that had a nice bit of useful information.

New things learned: May 1, MSFT released a tool called LAPS which mitigates the effect of Pass-the-Hash attacks against Active Directory - based networks. Read about it here. However, there's an interesting attack I need to read about for privilege escalation on Windows boxen, which could help as an alternate attack.

Note-taking tools: Google Keep and Toodledo. Keep sounds nice, and Toodledo is useful too.

Monday, June 20, 2016

Updates on Toorcamp slides and Kali Linux Persistence

I didn't work on the slides today, on account of a lovely long bike ride. I'll work on them this week after each day's training (in Orlando) is over.

Just now I set up persistence on a live kali USB for the first time. It's the Kali Rolling distribution of Kali Light, which by default installs virtually nothing. The USB key is 32GB capacity, which can be had for 10 bucks or so on Amazon. You can get the top 10 tools, which cover the majority of good stuff, with kali-linux-top10, which is 1.5 GB when installed. Then I spent way too much time messing with pulseaudio and alsa to get the sound working. Turns out that for some reason the sound on this specific release of Kali comes muted. Here are the steps I followed:

1. Install alsa-mixer with: apt-get install alsa-mixer -y
2. Run the following and create it as a launcher (for now): amixer sset Master unmute
3. Open the Pulseaudio Volume Control. In my case there are two options in the Playback tab for the playback - "Built-in Audio Digital Stereo (HMDI)" which does not work, and "Built-In Audio Analog Stereo" which does work. I selected the second option and finally things worked.
4 (optional). Right-click on the panel, wherever it's placed, and add a "PulseAudio Plugin" plugin to control the audio.

Voila. And now it works after restarting. Eventually I'll figure out how to maybe just unmute on login or boot.

The bike ride was a new one, which I'd planned out using Google Maps. However, I neglected to allot enough time for the ride in light of it being new, and also did not notice that the route included one underpass and four overpasses. And of course I got lost, going well past the road that turns west and on to a rather seedy area with no bike path whatsoever. The road that I took as an alternative, going west, had several uncovered sewer drains which meant that occasionally the bike lane included holes at least nine feet deep. The ride took till 45 minutes after sunset, with a total of about 36 miles.

Wednesday, June 15, 2016

Toorcamp - Friday through Monday

The rest of Toorcamp was extremely busy. By mid-day Thursday I was loosing track of the people I'd met. Fortunately, the impressions are still fresh, and I went to several talks on Saturday, the last official full day. I've been asked to create a slide deck for a special Toorcamp presentation at the local Hadoop and Apache Spark meetup, so will work on that through Sunday and post it here via Slideshare or Prezi hopefully on Sunday.

Thursday, June 09, 2016

Toorcamp - Third day - Thursday - Part 1

After the last post, I walked over to the volleyball court to the wood-gas generation project, which connected two trashcans with air ducting to extract wood gas from burning wood chips to power a generator to power a heater. Again, interesting implementation with a somewhat pointless end result. After that, I walked over to the Pop-up cafe to get some club mate, which is concentrated sweetened mate syrup mixed with seltzer water. It's pretty good, and I got another before the introduction to the talks occurred. I sat next to a group from Las Vegas, the Psychoholics, who run a hacker/makerspace called Syn Shop. Great people, and I spoke for a while during the keynote presentation with a quilter and model house maker about gardening. She is in the middle of building a 1:12 scale model of a house, complete with working plumbing, bricks, and wooden jousts all the way down to the details. It's fiddly work.

After that, I walked over to the Lower Camp and met someone from RCCGroup which is sponsoring toorcamp and also supplying free beer. We talked about hacking webcams and other embedded devices. I also got a "stamp" on the information passport all the attendees have been given from 98.3 "the lol", which I'll have to check out with an actual radio, or when they start streaming online. Afterwards I was encouraged to find a kosher solution to cooking at Milliways, which is the cafe/restaurant at the end of the universe (from Hitchhiker's Guide to the Galaxy, a hacker manifesto among others).

Afterwards  I hung out with J, who showed me his large hacking box with various Arduino equipment and moisture and temperature sensors, as a side project to possibly integrate that into gardening applications. Shortly after the hard-drive launcher was put into action, and the quadcopter that came with my bag was also used to see if it could be destroyed by a flying hard-drive platter.

Toorcamp - Wednesday - Day 2

Dawn comes early here, at about 5:30 as the cock crows. The cock in the garden next door, that is. I would like to have strangled the cock but since this one has its spurs it might be a tossup who would cry last. At 6:30 I showered and washed, then prayed, taking care to avoid the scat from the numerous deer that browse this open field, usually (when there aren't tents there). Afterwards, I walked around a bit more and examined a different beach with interesting algae that has flotation bladders, making it look like the dread spawn of Chtulhu in the unborn state. The driftwood was also oddly feminine.

The office opened at last and I registered a spot to move the tent on Friday afternoon, to avoid having to pick up on Sunday. Unfortunately extra payment had to be made. I also signed in to the event, officially, and got a bag with a shirt, an inkable circuit pen (more about that later), a wristband, and a little quadcopter. The field set-aside just for drone racing just got a lot more interesting, especially since I'm pretty close to it.

After walking around, I went into the garden to examine it in greater detail and met a man who is the CTO of the company that makes the printable pen circuit thingy distributed in all the bags. He is a dedicated chemist, biologist, molecular biologist, and gardener, i.e. a maker in the biblical sense, which is amusing since he is also Jewish, and opened our conversation by telling of his great-grandfather's kippah, made of leather and died like a beachball, and now over a hundred years. He participates in the ArduCopter project, a project that after 10 years of effort and many shoulders of design has crafted a quadcopter seven feet in diameter that he and a friend plan to pilot to the island. It will rise in hover mode to a certain height, then convert to a flying wing almost and glide the rest of the way. It's being piloted from Seattle. The goal is to deliver a warm, non-burrito vegetarian taco to the man for his Thursday lunch.

The place continues to get more crowded, even as a steady drizzle has begun. More will be posted later, maybe when the wifi connection is finally made.

Part Two - this is being written Thursday morning. Wednesday for the most part passed quickly, and was all about registration and arrival. The field filled up with tents and people. In need of a grocery run, a welcoming couple allowed me a spot in their van, with their dog Lola who had her own Toorcamp shirt. We went into the town of Eastsound, which heavily caters to tourists. I bought a bunch of fruits, veggies, cereal, and a 12-pack of beer to share with people. The store had the largest (and best) selection I'd ever seen of 12-pack beer samplers, and I couldn't resist.

It also appears that everyone walks around either drinking beer or smoking weed, which is legal in Washington. I queried the couple who gave me a lift (T&A), who live in Seattle, and they felt that weed had a semi-taboo status on account of still being federerally forbidden. However, people say things like "I can't wait to eat, get a little bit stoned, it'll be just right" and the ability to say that without fear of retribution (even if there wouldn't have been retribution earlier in the privacy of your own home) is curiously enlightening. And T&A might be right, as even my friend L was oddly surreptitious when mentioning how much he had the night before.

You'll notice the lack of names. For whatever reason, whether to preserve anonymity, or because of the heavy use of IRC among some people, where nicknames are common, between half and all of the people here have nicknames or prefer to be called only by their nicknames. Hex (more about him later), _pronto (haven't seen him yet), the aforementioned L, etc. T&A have names, but I think it's nice to leave out the details.

After getting groceries, I continued walking around and while going with L to get a beer we came across a curious contraption, clearly, even to the uneducated eye, for some powerful force. It had 10 giant capacitors, connected to various coils and other things, and on top of the thick plexiglass in which all the electrical stuff was contained was a coil, like a stovetop heating element. After guessing and giving up, the pleased man standing next to it revealed that it is a device with no use whatsoever beyond Toorcamp. It shoots hard drive platters into the sky, via 2000 volts of energy and 3000 joules of power, by inducing a magnetic field in whatever metal part is placed on top of the coil and launching it on the big step for hard-drive kind (beep/beep-beep/krkrkrk) via opposing magnetic fields. The field is powerful enough to create a slightly concave shape in the hard-drive platter.

L had to shuttle people from the remote car lot, and I went over to the "Lower Field", the other assemblage, besides the "Upper Field" where I'm encamped, where makers and breakers are sitting. The Lower Field also hosts the in-camp phone network, ShadyTel, hopefully ShadyTelTV, the radio station 98.3 "the lol", a german group of CCCamp enthusiasts, and groups of cabins with tents pitched right up against them to give the illusion of inclusiveness in the wild. You can sign up with ShadyTel, via a form with carbon copy of course, to have a line run out to your tent anywhere on the camp. Every part of the form is real, thus my discovery of BORSCHT, without which some crucial element would not work. ShadyTel also satirizes the greedy excesses of telcos, right up to the banter of the techs (who do this as a hobby) and the voicemail.

Later I discovered that someone was brewing mate. Turns out that CCCamp in Germany has a favorite drink, which is basically mate with lemon or lime juice added, then carbonated. This is club mate, and is very popular among German hackers. It was brought to the HOPE conferences, by people such as Emmanuel Goldstein, and is now extending its reach to Defcon, Shmoocon, and at last to here. The brewing is done in large batches, then placed into some sort of kegs with knobs on top to cool, then carbonated. These kegs will be carbonated today and placed on tap for anyone. Hex pointed me to an Argentinian man, who turned out to be the wodrously knowledgable guru Martin, for more details about mate brewing. Martin being the being he is, the discussion swiftly turned to the divine properties of his mate cup, a small porcelain vessel glazed with Japanese Maple wood ash. Due to the absurd chemical and physical elements of the wood ash, the color of the vessel changes based on climate or what it holds, and due to body waarmth. Smoking fish turned it ochre, while holding it for merely a few hours turns it darker.

Shortly after, while discussing the certificates needed to join one of the wireless networks, I met E and offered him the certs on a USB key with the certs for wifi access. He showed me the yurt he's using, and we walked back to my side of the camp. He does DevOps and wondered at the composition of the attendees, as I had earlier. We sat around and talked a little longer, and he also offered me the best canned cider I've ever had. It had an extra taste almost of pretzels, and was absolutely amazing.

Later I tested the drone batteries in the main dome and talked to a former worker at the Doe Bay resort and some woman who was "being weird" in her own words, as she tried to direct a headlamp beam into the disco ball at the top of the dome to get it to reflect in people's eyes. At last sleep approached, and I fell asleep swiftly. Earplugs are indeed wondrous.

Today, Thursday, the talks begin at 9. Also, at last I have internet access, although it is recommended even on this one to use a VPN. So I will mostly type in vi and post when possible.

Pictures will come after the trip, or possibly later this week.

Update 6-15-16 - Some grammar edits