The DMZ - 2011-02-07

« first day (53 days earlier) ← previous day next day → last day (4832 days later) »

3:59 AM

Kudos to @makerofthings - with over 12% of all questions on the site, about 3x as many as the second most curious member.

87

IT Security – security.stackexchange.com

Beta Q&A site for security professionals to discuss vulnerabilities like XSS, buffer overflows, SQL injection, CSRF, clickjacking, as well as system and network security. Discussions related to OWASP projects, tools, papers, and other materials are encouraged.

Currently in public beta.

4 hours later…

8:25 AM

@nealmcb Wow - that's pretty impressive really. As long as they are getting answered that is exactly what we want to see :-)

5 hours later…

1:31 PM

Judging from our answered percentage, we're doing a pretty good job on that front. Now, whether they actually answer the question is another matter.

1:49 PM

Mornin

@Iszi Good morning

2:07 PM

@packs @Iszi - morning

Mr. Alsop.

@packs @RoryAlsop Howdy howdy

Doing not bad at all. How are you guys?

Not to bad. Enjoying a nice cup of coffee while catching up on emails.

2:26 PM

It's Monday. And wardriving season!

And the weather outside is... meh, and not likely to get better.

Rainy and 77/25s. Yup. That sucks.

Fortunately, most of the "wardriving" is actually indoors "warwalking" - the "drive" part is just getting between buildings.

Still, it'll suck getting in and out of the vehicle if/when the rain hits.

I'll be installing at least one sensor today, which will involve similar levels of rain.

Just need to get this puppet module figured out first.

Snowing here today again - a miserable sleety snow :-(

@RoryAlsop We had that Saturday afternoon, and I expect it a bit more tomorrow.

I'm looking forward to spring.

2:34 PM

@packs - me too now

actually really looking forward to SF weather - seems like it's 17 degrees warmer than here

Sure, I'll have to mow, but it also means I get to see leaves. And hopefully get that damned hedge filled out!

SF weather is pretty fricken awesome.

There are something like 37 different weather zones across the city, but otherwise great.

hahaha

A few years ago I was out there towards the end of June. There's a great series of pictures that has me in a t-shirt, fleece, and jacket at the bay, then shorts and a t-shirt at a park.

15 minutes later, half a mile away

That's going to make packing complicated - tempted to just take t-shirts and jeans - all purpose clothing

Most locals tend to carry a bag of some kind with an extra layer.

During summer, at least, jeans/t-shirt with a light jacketish are a pretty good bet.

I just looked at their weather

How unfortunate.

2:40 PM

looks much better than here, so I'm happy

That's pretty much my point. How unfortunate that it costs so much to live there.

I'm actually trying to come up with a good response to the snort/base question except, "Go with a real siem"

hahaha - I've seen snort used really well in enterprise environments, but not at perimeter, just for specific targets

I've got sensors sprinkled liberally around campus, including perimeter :)

The trick is to take the time to tune, and to have a log aggregator that can actually do the heavy lifting for you.

how much time do you need to put in to manage tuning on each network or hardware change?

I used ACID then BASE when I was getting this project going, but ran into pretty hard core scaling issues quickly.

It's an ongoing thing.

I worry more about alert volume than I do performance

2:53 PM

yeah

that usually seems to be the best way

Whenever we see rules start to trickle to the top that we determine are either FPs, or we just don't care about, then I shut them off.

Some places required more attention when they were first deployed, like any areas that contained a machine room.

Things like AD and backups trigger some really wonky rules

7 hours later…

9:31 PM

And relax - voting is live for my band so I've been on a massive PR binge for the last hour. Crazy - and it's not even like it's my day job :-)

I dunno if it's just me, but the voting mechanism was non-obvious.

@packs -yeah, I thought it was odd. Apparently the web guy is a student of web design at local university

it's all written in wordpress

9:52 PM

@RoryAlsop Well there's your problem.

When are the results available?

results will be announced on the 25th at a glitzy award ceremony in Glasgow (at the Classic Grand - which is nice)

So does that mean glam rock makeup and a tux?

@packs - that is my plan certainly! :-)

and confetti cannons

« first day (53 days earlier) ← previous day next day → last day (4832 days later) »

Transcript for

Feb '117

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile