• Archives

  • Topics

  • Meta

  • The Boogeyman - Working Vacation
  • Coming Home
  • Via Serica

Radio Silence

Off to move heavy antique furniture from one side of Louisville to another, then clean it up and re-assemble it at Casa de Oso.  Once that’s all done, I plan to sit down with an adult beverage, watch football, and see if there’s any energy left to blog.

In the meantime, enjoy this earworm:

A Warning

Gentlemen, telling your lovely wife that if she wanted a quiet and delicate child, then she shouldn’t have mated with Sasquatch, while funny, does not go a long way in promoting marital bliss.

Hackers for Charity

I don’t want to give the impression that the entire conference was an excuse for negative blogging.  I actually learned quite a bit, and a lot of good people were there exchanging ideas.  One bright spot was a presentation by Johnny Long.

Mr. Long is a security professional from when gods walked the Earth.  He’s written many articles on IT security and been the author or co-author on a lot of seminal books that I’ve read and used.

A few years ago, he decided that even though he was at the top of his industry, he needed more.  He and his wife decided to relocate to Africa and try to make a difference in the lives of the poorest of the poor there.  And he’s made a go of it.

The fruit of his labor is Hackers for Charity.  This NGO provides IT support, equipment, and training to schools, relief agencies, and everyday people in Uganda and other African countries.  It’s a worthy cause, and even with all of the frustrations of trying to do business in the third world, you could hear how much Long cares about his personal mission in his voice.

His speech amounted to a history of himself and the organization, a status update on the organization, and a big thank you to the security community.  You see, almost all of the funding, equipment, and talent in the organization is donated from the ‘hacker’ community.  For example, he asked for donations to a training center he had set up in Uganda, and through small donations from members of the community, he got enough to run the center for 14 months without charging the students a penny.  He gave many examples of people or organizations donating their time or equipment so that those who live in poverty might have a chance to have a better life.

HFC also works with another organization to help provide food to famine victims in Kenya, both in giving direct food aid, and in helping them learn the skills to grow their own food so that they can provide for themselves.

One aspect that never would have occurred to me was his work to provide IT support to relief agencies so that their systems were better protected from malware and hacking.  The amount of money lost in these organizations due to computer problems boggles the mind.

In addition to his work in Africa, Mr. Long mentioned plans to start doing work in the United States.  Hopefully he is at least as successful in that as he has been in Africa.

Thoughts on the Day

  • Security Conference: An opportunity to lock yourself into a crowded venue with a couple thousand people with few people skills, no respect for personal space, and a lifetime of being told they are the smartest people in the room.
  • Hints to Speakers:  If your presentation amounts to no more than chest beating or a war story, save it.  If you feel the need to spend an hour doing a code review on the buggy software package you wrote for your thesis, I’m not interested.  If you want to demo a new product from your company, but can’t explain in a few sentences how it could be used in a real world situation that actually comes from the real world, try again.
  • If you’re more interested in chatting up one of the young females who attended the conference than demo’ing and discussing your product and services to a guy from a Fortune 500 company, guess who’s going to have a bad day when you try to convince my company to buy said product and service?
  • Using the Star Trek TNG font in red on a black background for your slides isn’t cool, it’s annoying.
  • When attending a briefing on using the “hacker mindset” in a preparedness / survival situation, don’t sit in the back and make snide remarks when the presenter suggests that personal defense should at least be considered.  Especially to the guy carrying two pocket knives and wearing the ball cap from an ammunition dealer.  You know, the one who raised his hand to all of the “does anyone know how to…” or “has anyone ever….” questions.
  • Seriously, dressing up like the guy you imagined you looked like in CounterStrike is just sad, especially at a technical conference.  Especially if you volunteer that information.  Especially if you’re concealed carrying an airsoft gun.

Thought for the Day

Many thanks to Scott Adams for the chuckle.  My 401k statement arrived the other day.  I’m going to just file that one away.  No sense in looking at it.  It’s going to be a very long time before I can think about retirement.

Happy Puppet History Awareness Month!

October is Puppet History Awareness Month.  Let’s all take this opportunity to reach out to our neighbors, the puppets, or as they like to be called, Fabricated-Americans.

We should take this time to remember the words of Dr. Aben Mitchell: 

…we must all learn to tolerate and even celebrate our differences. Whether you’re flesh, fleece, purple, plaid or even Chinese.

Quote of the Day

Maybe your golf buddies are soft, and your union thugs are soft, and your legion of academics that have never held a real job are soft, and the societal leeches that depend on the democrat’s perpetual welfare state are soft, but most Americans are not soft.  — Larry Correia, commenting on President Obama’s assertion that all our problems are due to the fact that we’ve gone ‘soft’.



BTW, Larry seems to be closer to the Mormons I knew when we lived in Utah than Mitt Romney seems to be.  

Eagle Picture

This little fellow is a detail at the bottom of a bronze column on what Irish Woman tells me used to be the main passenger train terminal in Louisville.  The verdigris on him is bright green, but I adjusted the saturation a bit to bring out all of the details on him.  This isn’t an integral part of the structure, it’s a minor part of decoration that had a lot of time and effort put into it.  You don’t see craftsmanship like this on a steel and glass tower.

The Four Rules of IT Security

  1. All systems are always vulnerable.
  2. Never put important information on a system you are not willing to secure and defend.
  3. Keep your users away from powers and abilities that will make your systems less secure.
  4. Be aware of where your information is, how it moves, and who has access to it.

Thoughts on the Day

  • Why are conferences and conventions always held in city centers where the traffic is always a nightmare and parking is always at least 6 blocks away from the event?
  • Security conference demographics: 1/3 juvenile delinquents, 1/3 suits scared out of their minds, and 1/3 scarred up old shaman.
  • Someone needs to tell Steve Jobs that Kevin Mitnick raided his wardrobe and is stretching everything out.
  • On the other hand, Mitnick’s presentation showed just how easy it is to own the keys to the kingdom by snowballing a lot of little mistakes.
  • By the end of the day, I was making a shopping list for the ordnance it would take to slag all of our IT assets as a last resort when someone gets inside the wire.
  • Taking out of town visitors to Cunningham’s for one of their cheeseburgers or Kentucky Hot Brown sandwiches requires an explanation that you only eat like that once or twice a year, and it goes a long way towards explaining why Louisville has great stroke and cardio-pulmonary disease centers.
  • Hint to vendors at a conference:  When someone stands in front of your booth, wearing an ID badge and polo shirt with the emblem of one of your local customers, it behooves you to at least acknowledge their presence.  It’s almost budget time, and your competitors across the way at least talked to me about what their product could do for me.
  • Basically the speeches and presentations today came down to this:  minimize everything so you have less to worry about, prioritize your stuff, and pay attention to details.  Sounds familiar.
  • With the wife and daughter out of the house for the evening, it’s really nice to throw a Dad movie in, make a simple dinner, and relax with Boo after a long week.