@Sadaluk In the past I've done local accounts for authz and pam_kerb against AD for auth. Works, but meh.

@ScottPack Hmmmmmm, yeah. I've never much changed pam - no real need.

@Sadaluk It's pretty handy for centralized authentication.

@ScottPack Actually that's a lie. I added a fingerprint authentication thingy as a login mechanism on a ubuntu laptop once! Yep, everywhere I've been its either already been done, or nobody's cared about central auth.

@Sadaluk Enabling a fingerprint reader these days is a checkbox, which is awesome.

What's less awesome is that it puts it before password auth in pam. Which makes sudo over ssh a bit of a pain.

@LucasKauffman The Rory approves.....

@ScottPack Really? I haven't had a laptop with one on since. It wasn't back then. it was a royal pain. Also, I think I fudged it at one point and had to auth with both a password and a fingerprint...

@Sadaluk I've never had a laptop with one. I do, however, have a usb reader on my desktop.

my kwallet is broken

@LucasKauffman That's by design.

> Addition of Clojure tooling packages to Fedora, including the Leinengen build tool and its configuration to use the system Maven repository, as well as Clojure libraries and frameworks, including Korma and Noir.

Whhhaaa?

@ScottPack It's a "cool language" one might use if one were an employee of a hip startup.

@Sadaluk Hip, or hipster?

@Sadaluk Puppet is as hip and startupy as I get.

Runs your toaster on the JVM and your kettle on the CLR, I believe.

@Iszi Whichever makes you look like the programmers in "the social network" movie.

@Sadaluk Isn't CLR for cleaning the kettle?

@Sadaluk Still haven't gotten around to seeing that. Should I?

@Iszi I guess that depends on whether you like watching films you may not enjoy. It's OK, but if it's that or something else, probably something else.

> I just touched it and the application fell over

Reminds me of one time I crashed a bunch of crappy switches with a simple asset discovery scan.

@Iszi I caused a site-wide 45 minute outage by launching a recon scan against a system that happened to be a Stormworm sub-controller.

we did that with an nmap scan once, took out a whole vpn applicance

and then there's also that one time I took out college because I had put a loop in a switch and someone hadn't turned on STP

I felt pretty retarded

@ScottPack took out a reverse-proxy once with an nmap UDP scan, wouldn't come back up...wouldn't power cycle either. We had to physically unplug its network card before it would reboot!

@RoryAlsop I've seen things like that before.

For you young kids, I should point out that Stormworm sub-controllers were set up such that if they detected an attack they would tell all of their nodes to start a DDoS against the attacker.

@ScottPack LOL

Interesting... danielmiessler.com/blog/…

@LucasKauffman Yeah, damn thing ended up overwhelming the border router and took us offline until they could clean things up. That was embarrassing. It was also my first week on the job.

@ScottPack well at least you found out the machine was infected

@LucasKauffman Mmm.

@ScottPack Heh. I think in my first month with ITSec, I'd gotten my workstation blocked from the network because the IDS (ran by another org) picked up something I'd caught that was trying to phone home. Never did figure out how I'd caught it.

I have a friend who, on his first day, had to do a social engineering test at company x

@Iszi tumblr.ru

so go in, bullshit and recon their network if he had the chance

he walked into the wrong company

ouch

@LucasKauffman Oh, this sounds juicy!

what did he walk out with?

did what he get suffice to get a contract to improve security from that company?

well his senior called to ask where he was because he didnt see his car in the parking lot

@LucasKauffman ...meanwhile, he'd rooted company y's fileserver?

then they both realized he was sitting there doing nmap scans illegaly

ooooooo - :-)

so he walked out as fast as posible

Important question: Did he get caught?

nope :p

Guessing he never told company y?

everyone knows

well not the company where he was illegaly xD

but shit happens I guess and it can always be worse!

@RoryAlsop of the new joiners they already fired 10 percent before the busy season :/

@LucasKauffman wow - new joiners across all disciplines? or just Sec?

Busy season is mostly audit anyway...

@RoryAlsop well security none, ITRA one in finance and one in normal

in security people tend to quit themselves these days :p

It is weird to see what cycles the hiring/firing works on - have seen too many senior business decisions downsizing teams just before the expected uptick in the need for that discipline

Security should be healthy, and getting healthier - cf increased regulatory environment, data protection, mobile apps, cloud, BYOD, attackers....yadda yadda

good career planning, you lot :-)

PwC isn't doing well in belgium for security I heard

well people wise

lot of the ascure people seem to not like the big 4 style

but the big four seem to be acquiring a lot of companies these days

@RoryAlsop who are you going to work for btw after you leave PwC?

@RoryAlsop we also havie a vacancy for director here atm should you be interested :P

@Iszi Yes. Because you can never hate Facebook too much.

so when did this room turn into bonafide softcore porn channel?

is this an attempt to testosterone it up, after the last couple days of the Oprah channel?

@AviD Sure. Let's use that scapegoat.

@ScottPack best crash story I've heard - the sysadmin head at a previous job told me this:

He took down the whole organization with his penis.

Tried squeezing behind the mainframe, it was a tight squeeze - his fly accidentally caught on the little on/off switch.

Oldschool mainframes did not deal well with sudden powerlessness.

Took quite a while for it to come back up...

To be fair, it's stupid for a mainframe to have a simple on/off switch. Later they learned to cover it with tape.

@AviD That's what she said!

@Iszi there ya go!

anyone seem @jrg here lately? I've got something for him.

@jrg discovered this facebook fan page and your own site

ohrely?

@LucasKauffman Off to RBS. Director role would have been interesting - that was my plan here at PwC in Scotland, but timing was not looking good

@RoryAlsop oh? very nice. What role are you taking there?

congrats, btw.

@AviD It's a senior oversight role - working with Sec, IT, Audit and reporting in to the CRO, so pulls together a lot of the stuff I have been doing over the last few years

excellent opportunity actually

@RoryAlsop wow, very cool. Sounds like you'll pretty much be defining your own platform, then?

@AviD pretty much :-)

so I'll start right after I get back from Tel Aviv

@RoryAlsop heh, good timing. You on gardening leave till then?

Just occurred to me - one of RBS' big security vendors is RSA, specifically the Israeli parts... Curious how much you'll be interacting with them.

@AviD not sure - hoping to very soon

@AviD not sure how much I'll be doing at that level yet either