Minutes 2024-10-03 - Revision history

D2wn: forgot to add openbsd mailing list link

2024-10-04T06:05:45Z

forgot to add openbsd mailing list link

← Older revision		Revision as of 06:05, 4 October 2024
Line 79:		Line 79:
	## Backdoored crypto		## Backdoored crypto
	### Dual_EC_DRBG		### Dual_EC_DRBG
	### Security compliance forcing companies to obey FIPS is ironic		### Security compliance forcing companies to obey FIPS is ironic [https://marc.info/?l=openbsd-misc&m=139819485423701&w=2]
	## Please don't host copyright-sussy material on your public Shell page		## Please don't host copyright-sussy material on your public Shell page
	### Totally unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...		### Totally unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...

D2wn: forgot we talked about backdoored crypto at the end too

2024-10-04T06:03:21Z

forgot we talked about backdoored crypto at the end too

← Older revision		Revision as of 06:03, 4 October 2024
Line 77:		Line 77:
	## Josh has been converted, decided to install 9Front		## Josh has been converted, decided to install 9Front
	## ....don't fork-bomb guardian (oops)		## ....don't fork-bomb guardian (oops)
			## Backdoored crypto
			### Dual_EC_DRBG
			### Security compliance forcing companies to obey FIPS is ironic
	## Please don't host copyright-sussy material on your public Shell page		## Please don't host copyright-sussy material on your public Shell page
	### Totally unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...		### Totally unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...

D2wn: minor fixing-up of some details and grammar

2024-10-04T05:38:32Z

minor fixing-up of some details and grammar

← Older revision		Revision as of 05:38, 4 October 2024
Line 34:		Line 34:
	#### <code>/net/tcp</code>		#### <code>/net/tcp</code>
	#### <code>/net/icmp</code>		#### <code>/net/icmp</code>
	### Graphical devices are represented as ~~files~~ in <code>/dev</code>		### Graphical devices are represented as filesystems in <code>/dev</code>
	#### <code>/dev/screen</code> is your current screen		#### <code>/dev/screen</code> is your current screen
	#### 'screenshotting' is just copying <code>/dev/screen</code> to a file, and converting it to png		#### 'screenshotting' is just copying <code>/dev/screen</code> to a file, and converting it to png
	### global mounts do not exist, all processes have their own namespace		### global mounts do not exist, all processes have their own namespace
	#### <code>mount</code> and <code>unmount</code> (not <code>umount</code>) to control filesystems		#### <code>mount</code> and <code>unmount</code> (not <code>umount</code>) to control filesystems
	#### Processes without audio ~~filesystems~~ will not be able to play audio, processes without <code>/dev/net</code> can't send network traffic, etc		#### Processes without the audio filesystem will not be able to play audio, processes without <code>/dev/net</code> can't send network traffic, etc
	### 9p protocol backs all inter-process file-based communication		### 9p protocol backs all inter-process file-based communication
	### 9p is network transparent		### 9p is network transparent
Line 67:		Line 67:
	## Using 9Front		## Using 9Front
	### Demo!		### Demo!
	### How does piping raw audio files to audio filesystem work given sample rates?		### How does piping raw audio files to the audio filesystem work, given differing sample rates?
			#### Turns out, the audio filesystem expects a sample rate of 44.1 kHz by default (same quality of CDs). This is determined by the driver.
			#### The default tools on 9Front that convert different audio formats into waveforms automatically output with 44.1 kHz sample rate (so the output can be directly piped into the audio filesystem)
	### Threat landscape for 9Front?		### Threat landscape for 9Front?
	#### ~~that~~ one path traversal exploit /g/ found on 9Front's homepage [https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/]		#### That one path traversal exploit /g/ found on 9Front's homepage [https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/]
	### Recompiling the kernel		### Recompiling the kernel
			#### It worked (woo)
	# Wrap up		# Wrap up
			## Josh has been converted, decided to install 9Front
	## ....don't fork-bomb guardian (oops)		## ....don't fork-bomb guardian (oops)
	## Josh is switching to 9Front
	## Please don't host copyright-sussy material on your public Shell page		## Please don't host copyright-sussy material on your public Shell page
	### Totally-unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...		### Totally unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...
	## No Schmidt's today :(		## No Schmidt's today :(
	### most members had upcoming and/or take-home exams		### most members had upcoming and/or take-home exams

D2wn: formatting improvements

2024-10-04T03:43:04Z

formatting improvements

← Older revision		Revision as of 03:43, 4 October 2024
Line 1:		Line 1:
	# Met in Rekhi 114 for Install-a-thon at 5PM		# Met in Rekhi 114 for Install-a-thon at 5PM
	## ~~everyone~~ who showed up already had Linux installed on their laptops lol		## Everyone who showed up already had Linux installed on their laptops lol
	## ~~talked~~ about hacking Bryce's router		## Talked about hacking Bryce's router
	### warehouse mode [https://github.com/MeisterLone/Askey-RT5010W-D187-REV6]		### Putting it into 'warehouse' mode [https://github.com/MeisterLone/Askey-RT5010W-D187-REV6]
	# Moved to Rekhi 101 at 7PM for Nate's presentation on ~~Plan9~~!		# Moved to Rekhi 101 at 7PM for Nate's presentation on Plan 9!
	## Going over new members to LUG		## Going over new members to LUG
	### Why they wanted to learn Linux		### Why they wanted to learn Linux
Line 18:		Line 18:
	### Processes are privileged by default		### Processes are privileged by default
	### Tools 'work backwards' to subtract privileges from processes		### Tools 'work backwards' to subtract privileges from processes
	#### chroot		#### <code>chroot</code>
	#### FreeBSD jails		#### FreeBSD <code>jails</code>
	#### OpenBSD pledge and unveil		#### OpenBSD <code>pledge</code> and <code>unveil</code>
	#### Linux cgroups and namespaces		#### Linux <code>cgroups</code> and <code>namespaces</code>
	### Clustering is hard		### Clustering is hard
	#### Proper clustering systems basically rewrite the entire application-level stack (e.g. Kubernetes)		#### Proper clustering systems basically rewrite the entire application-level stack (e.g. Kubernetes)
	### Scope creep in common utilities causes vulnerabilities		### Scope creep in common utilities causes vulnerabilities
	#### sudo		#### <code>sudo</code>
	#### GTFOBins [https://gtfobins.github.io]		#### GTFOBins [https://gtfobins.github.io]
	## What is ~~Plan9~~?		## What is Plan 9?
	## What ~~Plan9~~ does better		## What Plan 9 does better
	### Networking stack is represented as multiple filesystems in /net		### Networking stack is represented as multiple filesystems in /net
	#### /net/tcp		#### <code>/net/tcp</code>
	#### /net/udp		#### <code>/net/udp</code>
	#### /net/tcp		#### <code>/net/tcp</code>
	#### /net/icmp		#### <code>/net/icmp</code>
	### Graphical devices are represented as files in /dev		### Graphical devices are represented as files in <code>/dev</code>
	#### /dev/screen is your current screen		#### <code>/dev/screen</code> is your current screen
	#### "screenshotting" is just copying /dev/screen to a file, and converting it to png		#### 'screenshotting' is just copying <code>/dev/screen</code> to a file, and converting it to png
	### global mounts do not exist, all processes have their own namespace		### global mounts do not exist, all processes have their own namespace
	#### mount and unmount (not 'umount') to control filesystems		#### <code>mount</code> and <code>unmount</code> (not <code>umount</code>) to control filesystems
	#### ~~processes~~ without audio filesystems will not be able to play audio, processes without /dev/net can't send network traffic, etc		#### Processes without audio filesystems will not be able to play audio, processes without <code>/dev/net</code> can't send network traffic, etc
	### 9p protocol backs all inter-process file-based communication		### 9p protocol backs all inter-process file-based communication
	### 9p is network transparent		### 9p is network transparent
	#### ~~can~~ mount remote audio filesystem to play audio on remote computers		#### Can mount remote audio filesystem to play audio on remote computers
	#### ~~interact~~ with /dev/kbd (keyboard) on remote computer		#### Interact with <code>/dev/kbd</code> (keyboard) on remote computer
	### Plan 9 is a distributed operating system		### Plan 9 is a distributed operating system
	#### An idealized Plan 9 lab consists of a number of servers		#### An idealized Plan 9 lab consists of a number of servers
Line 62:		Line 62:
	## 9Front fixes and improvements to Plan 9		## 9Front fixes and improvements to Plan 9
	### All around better hardware support, especially on Thinkpads		### All around better hardware support, especially on Thinkpads
	### Improved filesystems (cwfs, hjfs)		### Improved filesystems (<code>cwfs</code>, <code>hjfs</code>)
	## Who is Cirno		## Who is Cirno
	### Official 9Front mascot		### Official 9Front mascot
	## Using ~~9front~~		## Using 9Front
	### Demo!		### Demo!
	### How does piping raw audio files to audio filesystem work given sample rates?		### How does piping raw audio files to audio filesystem work given sample rates?
	### Threat landscape for 9Front?		### Threat landscape for 9Front?
	#### that one path traversal exploit /g/ found on 9Front's homepage [https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/]		#### that one path traversal exploit /g/ found on 9Front's homepage [https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/]
	### ~~recompiling~~ the kernel		### Recompiling the kernel
	# Wrap up		# Wrap up
	## ....don't fork-bomb guardian (oops)		## ....don't fork-bomb guardian (oops)
	## Josh is switching to ~~Plan9~~		## Josh is switching to 9Front
	## ~~...please~~ don't host copyright-sussy material on your public Shell page		## Please don't host copyright-sussy material on your public Shell page
	### ~~totally~~-unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...		### Totally-unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...
	## No Schmidt's today :(		## No Schmidt's today :(
	### most members had upcoming and/or take-home exams		### most members had upcoming and/or take-home exams

D2wn: fixed links, added random NOT-RELATED-AT-ALL Shell tip

2024-10-04T03:16:30Z

fixed links, added random NOT-RELATED-AT-ALL Shell tip

← Older revision		Revision as of 03:16, 4 October 2024
Line 2:		Line 2:
	## everyone who showed up already had Linux installed on their laptops lol		## everyone who showed up already had Linux installed on their laptops lol
	## talked about hacking Bryce's router		## talked about hacking Bryce's router
	### warehouse mode ~~(<nowiki>~~https://github.com/MeisterLone/Askey-RT5010W-D187-REV6~~</nowiki>)~~		### warehouse mode [https://github.com/MeisterLone/Askey-RT5010W-D187-REV6]
	# Moved to Rekhi 101 at 7PM for Nate's presentation on Plan9!		# Moved to Rekhi 101 at 7PM for Nate's presentation on Plan9!
	## Going over new members to LUG		## Going over new members to LUG
Line 26:		Line 26:
	### Scope creep in common utilities causes vulnerabilities		### Scope creep in common utilities causes vulnerabilities
	#### sudo		#### sudo
	#### GTFOBins (https://gtfobins.github.io)		#### GTFOBins [https://gtfobins.github.io]
	## What is Plan9?		## What is Plan9?
	## What Plan9 does better		## What Plan9 does better
Line 54:		Line 54:
	### Development slowed in 1990's		### Development slowed in 1990's
	### Fourth edition was released under custom open-source license in 2002		### Fourth edition was released under custom open-source license in 2002
	#### Allen finds a statement from Stallman ~~in the early 2000's~~ about it not being 'FOSS' lol		#### Allen finds a statement from Stallman about it not being 'FOSS' lol [https://www.gnu.org/philosophy/plan-nine.en.html]
	### All editions released under GPL in 2015		### All editions released under GPL in 2015
	### 2021 control given to Plan 9 Foundation, license changed to MIT for all editions		### 2021 control given to Plan 9 Foundation, license changed to MIT for all editions
Line 69:		Line 69:
	### How does piping raw audio files to audio filesystem work given sample rates?		### How does piping raw audio files to audio filesystem work given sample rates?
	### Threat landscape for 9Front?		### Threat landscape for 9Front?
	#### that one path traversal exploit /g/ found on 9Front's homepage (https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/)		#### that one path traversal exploit /g/ found on 9Front's homepage [https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/]
	### recompiling the kernel		### recompiling the kernel
	# Wrap up		# Wrap up
	## ....don't fork-bomb guardian		## ....don't fork-bomb guardian (oops)
	## Josh is switching to Plan9		## Josh is switching to Plan9
	## ...please don't host copyright-sussy material on your public Shell page		## ...please don't host copyright-sussy material on your public Shell page
			### totally-unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...
	## No Schmidt's today :(		## No Schmidt's today :(
	### most members had upcoming and/or take-home exams		### most members had upcoming and/or take-home exams

D2wn: initial commit

2024-10-04T03:08:09Z

initial commit

New page

# Met in Rekhi 114 for Install-a-thon at 5PM
## everyone who showed up already had Linux installed on their laptops lol
## talked about hacking Bryce's router
### warehouse mode (<nowiki>https://github.com/MeisterLone/Askey-RT5010W-D187-REV6</nowiki>)
# Moved to Rekhi 101 at 7PM for Nate's presentation on Plan9!
## Going over new members to LUG
### Why they wanted to learn Linux
## What is UNIX
### UNIX philosophy (do one thing and do it well)
## UNIX-likes
### Linux
### FreeBSD
### AIX
## Limitations of UNIX
### Not everything is a file (syscalls, sockets)
### Graphics
### New features tacked-on after the fact rather than designed from within the operating system.
### Processes are privileged by default
### Tools 'work backwards' to subtract privileges from processes
#### chroot
#### FreeBSD jails
#### OpenBSD pledge and unveil
#### Linux cgroups and namespaces
### Clustering is hard
#### Proper clustering systems basically rewrite the entire application-level stack (e.g. Kubernetes)
### Scope creep in common utilities causes vulnerabilities
#### sudo
#### GTFOBins (https://gtfobins.github.io)
## What is Plan9?
## What Plan9 does better
### Networking stack is represented as multiple filesystems in /net
#### /net/tcp
#### /net/udp
#### /net/tcp
#### /net/icmp
### Graphical devices are represented as files in /dev
#### /dev/screen is your current screen
#### "screenshotting" is just copying /dev/screen to a file, and converting it to png
### global mounts do not exist, all processes have their own namespace
#### mount and unmount (not 'umount') to control filesystems
#### processes without audio filesystems will not be able to play audio, processes without /dev/net can't send network traffic, etc
### 9p protocol backs all inter-process file-based communication
### 9p is network transparent
#### can mount remote audio filesystem to play audio on remote computers
#### interact with /dev/kbd (keyboard) on remote computer
### Plan 9 is a distributed operating system
#### An idealized Plan 9 lab consists of a number of servers
#### User-facing terminals are thin clients with no local storage
#### CPU servers for compute
#### File servers for data storage
#### Auth servers for authentication
## State of Plan 9 today
### Failed to gain significant market share, UNIX and UNIX-likes got 'good enough'
### Development slowed in 1990's
### Fourth edition was released under custom open-source license in 2002
#### Allen finds a statement from Stallman in the early 2000's about it not being 'FOSS' lol
### All editions released under GPL in 2015
### 2021 control given to Plan 9 Foundation, license changed to MIT for all editions
## 9Front
### Developed by cat-v, self-described "Random Contrarian Insurgent Organization"
### 9Front website
## 9Front fixes and improvements to Plan 9
### All around better hardware support, especially on Thinkpads
### Improved filesystems (cwfs, hjfs)
## Who is Cirno
### Official 9Front mascot
## Using 9front
### Demo!
### How does piping raw audio files to audio filesystem work given sample rates?
### Threat landscape for 9Front?
#### that one path traversal exploit /g/ found on 9Front's homepage (https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/)
### recompiling the kernel
# Wrap up
## ....don't fork-bomb guardian
## Josh is switching to Plan9
## ...please don't host copyright-sussy material on your public Shell page
## No Schmidt's today :(
### most members had upcoming and/or take-home exams

[[Category:Meeting Minutes]]