Minutes 2024-10-03: Difference between revisions

← Older edit

Minutes 2024-10-03 (view source)

Revision as of 06:05, 4 October 2024

854 bytes added , 4 October 2024

m

forgot to add openbsd mailing list link

D2wn

Bureaucrats, Interface administrators, Administrators

476

edits

Revision as of 03:16, 4 October 2024 (view source) D2wn (talk \| contribs) (fixed links, added random NOT-RELATED-AT-ALL Shell tip) Tag: Visual edit ← Older edit		Latest revision as of 06:05, 4 October 2024 (view source) D2wn (talk \| contribs) m (forgot to add openbsd mailing list link) Tag: Visual edit
(3 intermediate revisions by the same user not shown)
# Met in Rekhi 114 for Install-a-thon at 5PM ## ~~everyone~~Everyone who showed up already had Linux installed on their laptops lol ## ~~talked~~Talked about hacking Bryce's router ### Putting it into 'warehouse' mode [https://github.com/MeisterLone/Askey-RT5010W-D187-REV6] # Moved to Rekhi 101 at 7PM for Nate's presentation on ~~Plan9~~Plan 9! ## Going over new members to LUG ### Why they wanted to learn Linux ### Processes are privileged by default ### Tools 'work backwards' to subtract privileges from processes #### <code>chroot</code> #### FreeBSD <code>jails</code> #### OpenBSD <code>pledge</code> and <code>unveil</code> #### Linux <code>cgroups</code> and <code>namespaces</code> ### Clustering is hard #### Proper clustering systems basically rewrite the entire application-level stack (e.g. Kubernetes) ### Scope creep in common utilities causes vulnerabilities #### <code>sudo</code> #### GTFOBins [https://gtfobins.github.io] ## What is ~~Plan9~~Plan 9? ## What ~~Plan9~~Plan 9 does better ### Networking stack is represented as multiple filesystems in /net #### <code>/net/tcp</code> #### <code>/net/udp</code> #### <code>/net/tcp</code> #### <code>/net/icmp</code> ### Graphical devices are represented as ~~files~~filesystems in <code>/dev</code> #### <code>/dev/screen</code> is your current screen #### "'screenshotting"' is just copying <code>/dev/screen</code> to a file, and converting it to png ### global mounts do not exist, all processes have their own namespace #### <code>mount</code> and <code>unmount</code> (not '<code>umount'</code>) to control filesystems #### ~~processes~~Processes without the audio ~~filesystems~~filesystem will not be able to play audio, processes without <code>/dev/net</code> can't send network traffic, etc ### 9p protocol backs all inter-process file-based communication ### 9p is network transparent #### ~~can~~Can mount remote audio filesystem to play audio on remote computers #### ~~interact~~Interact with <code>/dev/kbd</code> (keyboard) on remote computer ### Plan 9 is a distributed operating system #### An idealized Plan 9 lab consists of a number of servers ## 9Front fixes and improvements to Plan 9 ### All around better hardware support, especially on Thinkpads ### Improved filesystems (<code>cwfs</code>, <code>hjfs</code>) ## Who is Cirno ### Official 9Front mascot ## Using ~~9front~~9Front ### Demo! ### How does piping raw audio files to the audio filesystem work, given differing sample rates? #### Turns out, the audio filesystem expects a sample rate of 44.1 kHz by default (same quality of CDs). This is determined by the driver. #### The default tools on 9Front that convert different audio formats into waveforms automatically output with 44.1 kHz sample rate (so the output can be directly piped into the audio filesystem) ### Threat landscape for 9Front? #### ~~that~~That one path traversal exploit /g/ found on 9Front's homepage [https://cyber.vumetric.com/vulns/CVE-2022-28380/path-traversal-vulnerability-in-rc-httpd-project-rc-httpd/] ### ~~recompiling~~Recompiling the kernel #### It worked (woo) # Wrap up ## Josh has been converted, decided to install 9Front ## ....don't fork-bomb guardian (oops) ## Backdoored crypto ~~## Josh is switching to Plan9~~ ### Dual_EC_DRBG ## ...please don't host copyright-sussy material on your public Shell page▼ ### Security compliance forcing companies to obey FIPS is ironic [https://marc.info/?l=openbsd-misc&m=139819485423701&w=2] ### totally-unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about...▼ ▲## ~~...please~~Please don't host copyright-sussy material on your public Shell page ▲### ~~totally-~~Totally unrelated pro-tip: if you make an index.html file in a directory, shell won't display a list of its contents to web browsers. Just something to think about... ## No Schmidt's today :( ### most members had upcoming and/or take-home exams