Main menu
You are here
Free Software
PLUG Security meeting topic for Aug 15th
Gavin Klondike: Machine Learning for Security Analysts
Description:
Today, over a quarter of security products for detection have some form of machine learning built in. However, “machine learning” is nothing more than a mysterious buzzword for many security analysts. In order to properly deploy and manage these products, analysts will need to understand how the machine learning components operate to ensure they are working efficiently. In this talk, we will dive head first into building and training our own machine learning models using the 7-step machine learning process.
Biography:
Gavin is a senior consultant and researcher who has a passion for network security, both attack and defense. Through that passion, he runs NetSec Explained; a blog and YouTube channel which covers intermediate and advanced level network security topics, in an easy to understand way. His work has given him the opportunity to be published in industry magazines and speak at conferences such as Defcon and CactusCon. Currently, he is researching into ways to address the cybersecurity skills gap, by utilizing machine learning to augment the capabilities of current security analysts.
Topics for Aug 8th's meeting
Description:
An introduction to Shell scripting.
- The basics of stringing together various commands
- Pipes and Parallelization
- Conditionals and Loops
- How to use these things to create useful scripts, like creating basic website generators, background switches, keyboard hotkeys, etc.
Biography:
Dhruva is a ASU Computer Science Freshman. He's been using Linux for the past 5 Years. He's been involved with the Indian Linux Users Group Bombay (ILUG-BOM) in their mission to introduce Linux to High School and College students by making it a default in the Indian Curriculum.
Austin Godber: Stream Processing with Python and Kafka
Description:
A quick intro to Kafka, a distributed log system, and how to interact with it using Python.
PLUG Security meeting on 7/18
Donald McCarthy: passiveDNS For fun and Profit (part1)
For more information:
http://phxlinux.org/index.php/meetings/20-plug-security.html
Description:
If you DNS infrastructure has a bad day, your network has a bad day. If your DNS infrastructure has a good day, something else is bound to go wrong. PassiveDNS generally wont help you fix either.
PassiveDNS is a historical look at observed DNS queries over time. It is akin to The Internet Archive's Way Back Machine, but for DNS zones. Its utility as an operations and security tool is valuable and not easily replaced by another type of data.
In this presentation we will cover exactly what passiveDNS is and isn't, passiveDNS architecture, some security use cases, and if time allows some live demonstration.
In part 2 of the presentation (another month) I will demonstrate some passiveDNS tooling and more in depth practical knowledge to turn theoretical use cases into automated assistance for a SOC or NOC.
About Donald:
Donald "Mac" McCarthy is a 15 year veteran of the IT industry with the last 8 years focused on InfoSec. He has worked on a variety of different systems ranging from cash registers to super computers. It was while serving as a systems administrator for a scientific computing cluster that he discovered his passion for using linux for highly distributed complex tasks. His current focus is using linux with open source technologies like kafka and elastic search to build tooling for security analysts and network operations. He is a proud Veteran of the United States Army and recently relocated from Atlanta to the East Valley.
PLUG meeting on Jul 11th
Artemii Kropachev: Red Hat Enterprise Linux 8 Beta 1 Overview
Description:
Learn about the first version release of Red Hat Enterprise Linux in over four years. The latest release features unprecedented ease of deployment, ease of migration, and ease of management enabling you to upgrade existing customers and attract new ones.
Red Hat Enterprise Linux 8 gives organizations a stable, security-focused, and consistent foundation across hybrid cloud deployments—and the tools they need to deliver applications and workloads faster with less effort.
About Artemii:
Worldwide IT expert and international consultant with over 20 years of high level IT experience and expertise. I have trained, guided and consulted hundreds of architects, engineer, developers, and IT experts around the world since 2001. My architect-level experience covers DC, Clouds, DevOps, NFV solutions built on top of any Red Hat and Open Source technologies. I am one of the highest Red Hat Certified Specialists in the world.
der.hans: Hey Buster! Debian 10 released
Description:
Debian 10 brings with it many ch-ch-changes.
Reproduciable Builds, Wayland, AppArmor, nftables, cups.
10 hardware architectures, 59000 packages, 28,939 source packages, 11,610,055 source files, and 76 languages.
Stretch updates.
Get or upgrade to Debian 10 now.
Coming soon on Blu-ray.
About der.hans:
der.hans is a Free Software, technology and entrepreneurial veteran. He is a repeat author for the Linux Journal with his article about online privacy and security using a password manager as the cover article for the January 2017 issue.
He's chairman of the Phoenix Linux User Group (PLUG), BoF organizer for the Southern California Linux Expo (SCaLE), and founder of the Free Software Stammtisch and Stammtisch Job Nights.
He often presents at large community-led conferences (SCaLE, SeaGL, LFNW, Tübix) and many local groups.
https://floss.social/@FLOX_advocate
https://mastodon.social/@lufthans
Topic for the Security meeting on June 20th
Aaron Jones: Introduction To Assembly - Part II
Description:
Introduction To Assembly Language is the second half to my reverse engineering course. This is part two of a multi part educational series on lower level software development and reverse engineering. Many developers and security experts are not familiar with assembly language or the lower levels of their hardware. This course is intended to begin familiarizing you with assembly language in order to build the foundation for future courses on reverse engineering.
Biography:
Aaron, the owner of Retro64XYZ, is a software developer who currently creates applications for law enforcement. He is also an AZ POST certified public speaker. He earned a B.Sc., in Computer Information Systems from Park University in 2013 and an M.A., in Intelligence Analysis with a focus in Cyber Security in 2014. During that period of his life he took a double course load and completed his Masters with a 3.695 GPA in a year. He has been the recipient of recognition from the El Paso Police Department, State Of Texas, Texas Military Forces, Chandler Police Department, and others.
Aaron is also active in the community as the founder of the Phoenix Linux Users Group Cyber Security Meetup and regularly teaches members of the public a myriad of topics related to Cyber Security. His audience includes students, teachers, law enforcement, military, government officials, and concerned members of the public with a strong desire to learn what is going on in the world of technology.
When Aaron isn’t teaching, working, or spending time with his family, he enjoys relaxing at the pond with a fishing pole while not catching fish, operating a pistol at the shooting range, or reading books. He owns a Sega Saturn and a Sega Dreamcast and his favorite video games are Panzer Dragoon, Road Rash, Phantasy Star Online 2, and Power Stone. He is currently engrossed in building content for his site and looking for more ways to reach the public. You should reach Aaron through his Mastodon or on Keybase. He would love to hear from you, answer your questions, or find out about the projects you are involved with.
Topics for Jun 13th's meeting
Description:
We will see how a $35 Raspberry Pi (or even the $9 version), a breadboard and a bit of circuitry connected to the SPI and I2C buses can control pretty much anything: a thermostat; a "self driving" model car; or a clock-radio that also displays software build progress and your corporate network uptime status.
Biography:
Mr. Lindley has been in the computer industry since he sold his first program (a printer driver for Heathkit HDOS) in 1980. He has used system from the earliest 8-bit microprocessors, through the PDP-11 and VAX, up to IBM mainframes, and has managed to write programs that did not crash on most of them. Mr. Lindley has been a GNU/Linux user since 1992 and has been free of proprietary software since 2001. Most recently he has been pleased to be an adjunct professor at Mesa Community College.
Rajendran Rathinasabapathy: In the crossroads of Agility, Microservices and Cloud computing
Description:
Being a project manager for a while evolving along with the evolution in the IT landscape of agility, microservices and cloud computer, I see a pattern in the painful ordeal teams go through, especially when collaboration is needed more than ever to build systems. The topic is very relevant when highly individualistic opensource programmers work together. In this presentation, as the subject is vast, I layout a list of critical blind spots and pitfalls the teams can avoid while designing and developing larger applications.
Biography:
Working in IT for the past 20 years from being a developer to a portfolio manager. Currently involved in strategizing CI/CD for a sub-domain in info security. with varied tech stacks. I am a proponent of microservices and also a scrum master. In my free time, I learn to make digital an analogue circuits. I teach programming and robotics to kids and I am learning Jiu-Jitsu :-)
0x68: Molly De Blanc at CopyleftConf 2019
Bradley and Karen enjoy and discuss Molly De Blanc's keynote at the first annual CopyleftConf, entitled The Margins of Software Freedom, followed by an exclusive interview with Molly!
Show Notes: Segment 0 (00:37)- Bradley mentioned (without the title) the film, When a Stranger Calls, which is indeed a real movie, not a TV movie, and was from the late 1970s — although Bradley saw it on TV sometime in the 1980s. (02:15) Segment 1 (04:11)
- Bradley and Karen discuss what ideas Molly's interview got them thinking about.
- Bradley wrote a blog post about Delta's anti-union marketing. (40:50)
- Molly De Blanc is now an employee at the GNOME Foundation and President of the Open Source Initiative (52:53)
A recording of Molly De Blanc's keynote at the first annual (2019) CopyleftConf, entitled entitled The Margins of Software Freedom. Slides for Molly's talk are available on her gitlab account.
Segment 2 (20:11)Bradley and Karen talk about the keynote and set up the interview.
Segment 3 (23:56)Extended interview with Molly from on site at CopyleftConf 2019!
Segment 4 (34:06)Send feedback and comments on the cast to <oggcast@faif.us>. You can keep in touch with Free as in Freedom on our IRC channel, #faif on irc.freenode.net, and by following Conservancy on on Twitter and and FaiF on Twitter.
Free as in Freedom is produced by Dan Lynch of danlynch.org. Theme music written and performed by Mike Tarantino with Charlie Paxson on drums.
The content of this audcast, and the accompanying show notes and music are licensed under the Creative Commons Attribution-Share-Alike 4.0 license (CC BY-SA 4.0).
Security Meeting Topic for May 16th
Description:
Nmap is a classic tool to discover hosts and services on a network. It is an essential tool that many Linux professionals have touch at one point. Yet, how many have they truly ever unlocked its full potential?
Whether you are a new or advanced user, join us as explore the typical Nmap use cases and dive into the versatile functionality that you may never have known existed.
About Anthony:
Anthony Kosednar is a multi-disciplined technology leader with a deep understanding in delivering cyber security and technology solutions. He works in the industry as a security engineer for enterprises. He holds a GIAC Exploit Research and Advance Penetration certificate (GXPN) as well as several certificates in Cyber Security for Industrial Control Systems from DHS.
0x67: Analysis of Two Backports of GPLv3 Termination Provisions to GPLv2
Bradley and Karen discuss two additional permissions that can be used to “backport” the GPLv3 Termination provisions to GPLv2 — the Kernel Enforcement Statement Additional Permission, and the Red Hat Cooperation Commitment. A blog post on Conservancy's site summarizes the discussion on this show.
Show Notes: Segment 0 (00:35)- Bradley mentioned irregardless is not actually a word, but it does appear to be slang, which dates back to 1795! (03:23)
- The additional permission system was codified as a formal part of GPLv3, but are generally more informal under GPLv2. (05:24)
- Karen explained what the Principles of Community-Oriented GPL Enforcement. (07:49)
- Karen mentioned that Daleks terminate! (08:51)
- Bradley mentioned the inbound=outbound FOSS licensing contributor assent system (18:15)
- Karen and Bradley discuss the term “non-defensive” and what it means.
- Bradley mentioned the Twin Peaks lawsuit as a non-hypothetical case where the RHCC would not apply where GPL enforcement was used by Red Hat itself as a retaliation tactic. (29:23)
- The Kernel Enforcement Statement and the RHCC are available online.
The next episode of will be an interview with Molly De Blanc and recording of her keynote at CopyleftConf 2019
Send feedback and comments on the cast to <oggcast@faif.us>. You can keep in touch with Free as in Freedom on our IRC channel, #faif on irc.freenode.net, and by following Conservancy on on Twitter and and FaiF on Twitter.
Free as in Freedom is produced by Dan Lynch of danlynch.org. Theme music written and performed by Mike Tarantino with Charlie Paxson on drums.
The content of this audcast, and the accompanying show notes and music are licensed under the Creative Commons Attribution-Share-Alike 4.0 license (CC BY-SA 4.0).
