evening folks!

just catching up on the TOCTOU chat - you guys have really covered all the bases. Think it is worth storing your chat as a wiki entry on the ramifications of delay in token refresh in Windows ACL's :-)

@AviD - under most Unixes, you can change the privileges of a process after you have initiated it, but if your privileges are revoked, the process won't be likely to know about it until next time you try to run it, or if it is told to check. Normally in the circumstances you are talking about, you would revoke privs then kill the process as a matter of course.

Although in saying that, the threat model is not usually that worried in the case of leavers and movers. In the case of dismissal where there is a perceived risk, you would kill the process and have them escorted from the building:-)

howdy @rory!

Hiya

@RoryAlsop yeah, thats what I thought.... so, effectively same as windows

pretty much - I only know the basics under windows, but it sounds remarkably similar

@RoryAlsop or kill the leaver, and escort the process from the building ;)

seem to remember that's @packs policy....

@AviD - talking of policy - check out this doc. Guidance to the Alexis Park hotel for the first Defcon picasaweb.google.com/lh/photo/…

well, you CAN change a process' privileges, but the question is does this happen automatically and forcefully. And I understand that it does not.

from my BSides photo album - picasaweb.google.com/frog51/…

No it doesn't happen automatically unless the developer coded it that way :-)

@RoryAlsop lol, whaaaat??

craaazy hotel....

I most like the "report ... deceased or dismembered.... farm animals...."

@RoryAlsop so yeah, same as windows....

and "missing or extra payphones"

omg cant believe i missed that one

farm animals? guests!

but look in the section on things which are allowed

underage drinking

debauchery!!

foreign dyes or bubbles in the pools or fountains

luvvit!

debauchery and libation

weell, those defcon guys really do know how to throw a party....

so, ya had a good time? :D

The B-Sides crew were brilliant. Awesome fun, and blagged an RSA pass as well, so got some decent swag (the last photo in my album)

Met some great folks - some very scary, but most really good fun

and met a few famous security folks

scary folk are the most fun

argued with one... Richard Bejtlich :-)

The scary folks chat at 3am on Monday was awesome - makes you wonder how civilisation exists

lol

Pizza's here, and the cable guy is now 3+ hours overdue.

Richard is one of the scary ones....

Gonna go scarf some dinner. Catch y'all later.

CAAAABLE GUYYYYY!!!

at least you got pizza @Iszi

Richard is very focused on APT, to the exclusion of all else

later @Iszi

He has some good ideas, but I am happy that others focus on the rest of the threat landscape

thanks for the talk!

hehe

I know a few like that...

so what was the final agenda?

I knew quite a few of the originally proposed speakers...

btw, luv all the pics of the booth babes...

Lots of securing supply chains and the cloud, heavy focus on APT, and some excellent stuff from Cisco on IPv6. Interestingly Aaron Barr didn't do his talk, and the HBGary booth was empty...

though they're not quite the way they used to be....

the NSA booth babes worried me - do they need them to attract in folks

hehe

I just loved getting to play with a real Enigma machine - an original, and I got to play with the rotors and everything

I blogged on blog.7elements.co.uk, and a wee bit on infosecfrog.blogspot.com

i'll catch up on those later tonite :)

Think I need some wine - away for a bit. Kids are now in bed so should go and say hi to my poor long suffering wife :-)

just saw your load of swag.... doesnt anyone do anything but tshirts anymore?

still, respectable haul, for an expenses-paid ;)

btw @RoryAlsop saw you were learning about Fortify....

only one thing you need to know: Fortify Sucks.

anything else you wanted to know? I think did my doctorate on that Piece O' Carp

@AviD I agree, that was a pretty big haul. Particularly considering the economy and the size of that event.

Wow, I go away for dinner and come back to a whole fistful of shoutouts.

@packs

awwww maaaaan

just tried giving you another handful, but chat.SE too smart for me

@AviD 1) re: food. Food is always an excellent topic of conversation. And as I type that I can smell a fresh apple stack cake taunting me...

@AviD That sounds vaguely like something that might constitute a workplace harassment complaint :)

That TOTTCCUUOOUDTOADATALOLZOTTUO chat you guys had was actually pretty interesting.