prank@WSU Nov 5 awesome

"So far I've received emails from 3 news reporters, 1 job offer at Google, one from someone in Lighty, one from an angry "IT" guy, and hundreds from fans. All in all a good day. Now just to hope my real goal, students making this university a better place, will be achieved."

http://www.facebook.com/pages/WSU-1812/166561193368233?v=wall

http://twitter.com/search?q=%23wsu1812

https://chronicle.com/blogs/wiredcampus/hacker-makes-the-fifth-of-november-one-to-remember/28076?sid=wc&utm_source=wc&utm_medium=en

I admire this guy because

1. Awesome technical skills (IT actually had to pull the hardware to shut this thing off before his auto-off)
2. Whitehat (he included an auto-off at 5:01 pm and an uninstall script, with instructions on his website)
3. V for Vendetta is awesome (yes, I celebrate Guy Fawkes day by watching it)
4. He knows how to cover his tracks (hasn't been identified yet)
5. Google offered him a job without knowing his identity
6. He wants to improve his campus (yeah, I was in student government when I was in college... can you tell?)

I mean... isn't that enough? Dude.

Firesheep

Firesheep, Force-TLS, KB SSl Enforcer. I am playing* with them. Which is to say, installed TLS and KB, still trying to get Firesheep to run on ubuntu. Might boot into windows soon so I can play with them there.

News: http://techcrunch.com/2010/10/24/firesheep-in-wolves-clothing-app-lets-you-hack-into-twitter-facebook-accounts-easily/

Force-TLS (for Firefox): https://addons.mozilla.org/en-US/firefox/addon/12714/

KB SSL Enforcer (for Chrome): https://chrome.google.com/extensions/detail/flcpelgcagfhfoegekianiofphddckof

Code for KB: http://kbsslenforcer.googlecode.com/svn/trunk/

Firesheep: http://codebutler.com/firesheep

Further on the topic of packet capture... my main interest is security (whitehat), and I like playing with the toys. I hope to make my own toys someday- maybe even someday soon.

Thought- how does firesheep deal with login via openid?

linux

http://www.tcpdump.org/

sudo tcpdump -A -i en1 tcp port 80
http://www.blogher.com/frame.php?url=http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/
http://www.engadget.com/2006/03/21/how-to-ssh-tunnels-for-secure-network-access/

Wireshark (I installed it on my Windows partition just now)

http://portforward.com/networking/wireshark.htm

http://wiki.wireshark.org/

Also, a link from the illustrious https://twitter.com/#!/LaMenta3

http://www.metageek.net/products/inssider

For firefox 4 protection: https://addons.mozilla.org/en-US/firefox/addon/246797/

My fav blogpost on it so far http://hossgifford.com/firesheep/

*And by playing I mean playing. I won't damage anyone's anything with this; I won't use someone's data for nefarious purposes. Yadda yadda.

Evil wifi

Rocking blog post on evil wifi and how to defend against it is here. http://www.h-i-r.net/2010/09/evil-wifi-subversive-wireless-self.html