- WLUG - wlug.mailman3.com

Building a PC for another arch? PPC64?

by Tatsh

Where can I find parts to build a PC based on PPC64? Really, I'd like to build something similar to the Xbox 360 for development purposes and for fun. It seems like it's impossible to find the parts though (at least with Google). Anyone know suppliers? If it's way out of price range I'll step out but I'd like to at least see where to get this stuff. This is the hardware, generically: http://www.free60.org/Main_Page Some of it needs specific type, such as the RAM, and etc. The video card could be any recent ATI HD I'm imagining. The motherboard for this would need PCI-extreme slots. Yes I am aware it has been hacked with JTAG and all. I am not looking to hack mine. Just to build a similar machine for development where I'll run Linux and hopefully put together a complete (free, GPL) toolchain. Thanks -- Tatsh www.tatsh.net ddrtist(a)gmail.com

Jan. 29, 2010

Re: [Wlug] Penetration Tester

by Tal Cohen

It actually is specified, I just didn't include it in the email. Tal PS PCI ----- Original Message ----- From: "Nick Nassar" <nassar(a)alum.wpi.edu> To: "Worcester Linux Users Group" <wlug(a)mail.wlug.org> Sent: Monday, January 18, 2010 4:51 PM Subject: Re: [Wlug] Penetration Tester > That's certainly a legit reason. :) > > What compliance requires penetration testing but doesn't specify what > test suite to use? > > > Tal Cohen <wlug(a)cohen123.com> wrote: > >> Not to mention, it is a requirment for for certain compliance that I am >> trying to meet :) >> >> Tal > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 19, 2010

Re: [Wlug] Penetration Tester

by Nick Nassar

That's certainly a legit reason. :) What compliance requires penetration testing but doesn't specify what test suite to use? Tal Cohen <wlug(a)cohen123.com> wrote: > Not to mention, it is a requirment for for certain compliance that I am > trying to meet :) > > Tal

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Tal Cohen

Not to mention, it is a requirment for for certain compliance that I am trying to meet :) Tal ----- Original Message ----- From: "Gregory Boyce" <gregory.boyce(a)gmail.com> To: "Worcester Linux Users Group" <wlug(a)mail.wlug.org> Sent: Monday, January 18, 2010 3:47 PM Subject: Re: [Wlug] Penetration Tester >I agree with most of what you're saying except I thinking you're > mixing up vulnerability scanning with pen testing. A good pen tester > will actually demonstrate the vulnerability and can find new issues in > your custom web app code. > > The one benefit of pen testing would be convincing decision makers > that the steps you outlined are necessary. > > On Jan 18, 2010, at 12:32 PM, Nick Nassar <nassar(a)alum.wpi.edu> wrote: > >> Don't bother. It's security theater. >> >> It easy to run automated tests, but the chance it will actually catch >> something that you wouldn't know about by reading the proper security >> mailing lists is negligible. >> >> These days most malware gets in through end users doing stupid things. >> China hacked Google with a phishing attack. There's no completely >> technical solution for that. Educate users as best you can. If >> there's >> sensitive data on your network, make sure only people who need access >> have access. >> >> Assume that your network will be compromised. Have a strategy to >> restore things quickly when that happens. >> >> >> >> Tal Cohen <wlug(a)cohen123.com> wrote: >> >>> I need a penetration tester (individual or firm) to run some tests >>> against my >>> network. >>> >>> Anyone have any recommendations they care to share? >>> >>> Thanks! >>> >>> Tal >>> >>> _______________________________________________ >>> Wlug mailing list >>> Wlug(a)mail.wlug.org >>> http://mail.wlug.org/mailman/listinfo/wlug >> _______________________________________________ >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Gregory Boyce

I agree with most of what you're saying except I thinking you're mixing up vulnerability scanning with pen testing. A good pen tester will actually demonstrate the vulnerability and can find new issues in your custom web app code. The one benefit of pen testing would be convincing decision makers that the steps you outlined are necessary. On Jan 18, 2010, at 12:32 PM, Nick Nassar <nassar(a)alum.wpi.edu> wrote: > Don't bother. It's security theater. > > It easy to run automated tests, but the chance it will actually catch > something that you wouldn't know about by reading the proper security > mailing lists is negligible. > > These days most malware gets in through end users doing stupid things. > China hacked Google with a phishing attack. There's no completely > technical solution for that. Educate users as best you can. If > there's > sensitive data on your network, make sure only people who need access > have access. > > Assume that your network will be compromised. Have a strategy to > restore things quickly when that happens. > > > > Tal Cohen <wlug(a)cohen123.com> wrote: > >> I need a penetration tester (individual or firm) to run some tests >> against my >> network. >> >> Anyone have any recommendations they care to share? >> >> Thanks! >> >> Tal >> >> _______________________________________________ >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Nick Nassar

Don't bother. It's security theater. It easy to run automated tests, but the chance it will actually catch something that you wouldn't know about by reading the proper security mailing lists is negligible. These days most malware gets in through end users doing stupid things. China hacked Google with a phishing attack. There's no completely technical solution for that. Educate users as best you can. If there's sensitive data on your network, make sure only people who need access have access. Assume that your network will be compromised. Have a strategy to restore things quickly when that happens. Tal Cohen <wlug(a)cohen123.com> wrote: > I need a penetration tester (individual or firm) to run some tests against my > network. > > Anyone have any recommendations they care to share? > > Thanks! > > Tal > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 18, 2010

Re: [Wlug] Penetration Tester

by Gregory Boyce

Never hired one myself, but I do know a number of them. Locally Netragard or Rapid 7 certainly have smart people working there. On Jan 15, 2010, at 4:07 PM, "Tal Cohen" <wlug(a)cohen123.com> wrote: > Thanks guys! > > I already run vulnerability scans. I need an actual pen-tester at > this point. > > Tal > ----- Original Message ----- > From: Gregory Boyce > To: Worcester Linux Users Group > Cc: Worcester Linux Users Group > Sent: Friday, January 15, 2010 4:03 PM > Subject: Re: [Wlug] Penetration Tester > > On Jan 15, 2010, at 3:48 PM, Karl Hiramoto <karl(a)hiramoto.org> wrote: > >> On 15/01/2010 21:28, Tal Cohen wrote: >>> >>> I need a penetration tester (individual or firm) to run some tests >>> against my network. >>> >>> Anyone have any recommendations they care to share? >> >> 1st step would be to run nessus (http://www.nessus.org/nessus/) >> and nmap (http://nmap.org/) on your network > >> > > If you're talking about an external network you can also look at > Qualys's free scanning. > > http://www.qualys.com/products/trials > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Jan. 15, 2010

Re: [Wlug] Penetration Tester

by Tal Cohen

Thanks guys! I already run vulnerability scans. I need an actual pen-tester at this point. Tal ----- Original Message ----- From: Gregory Boyce To: Worcester Linux Users Group Cc: Worcester Linux Users Group Sent: Friday, January 15, 2010 4:03 PM Subject: Re: [Wlug] Penetration Tester On Jan 15, 2010, at 3:48 PM, Karl Hiramoto <karl(a)hiramoto.org> wrote: On 15/01/2010 21:28, Tal Cohen wrote: I need a penetration tester (individual or firm) to run some tests against my network. Anyone have any recommendations they care to share? 1st step would be to run nessus (http://www.nessus.org/nessus/) and nmap (http://nmap.org/) on your network If you're talking about an external network you can also look at Qualys's free scanning. http://www.qualys.com/products/trials ------------------------------------------------------------------------------ _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Jan. 15, 2010

Re: [Wlug] Penetration Tester

by Gregory Boyce

On Jan 15, 2010, at 3:48 PM, Karl Hiramoto <karl(a)hiramoto.org> wrote: > On 15/01/2010 21:28, Tal Cohen wrote: >> >> I need a penetration tester (individual or firm) to run some tests >> against my network. >> >> Anyone have any recommendations they care to share? > > 1st step would be to run nessus (http://www.nessus.org/nessus/) > and nmap (http://nmap.org/) on your network > If you're talking about an external network you can also look at Qualys's free scanning. http://www.qualys.com/products/trials

Jan. 15, 2010

Re: [Wlug] Penetration Tester

by Karl Hiramoto

On 15/01/2010 21:28, Tal Cohen wrote: > I need a penetration tester (individual or firm) to run some tests > against my network. > Anyone have any recommendations they care to share? 1st step would be to run nessus (http://www.nessus.org/nessus/) and nmap (http://nmap.org/) on your network

Jan. 15, 2010