Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Tom Metro
Richard Pieri wrote: > The prototype is 512M and the target spec is 1GB. According to the Ubiquiti data sheet: http://www.ubnt.com/downloads/datasheets/edgemax/EdgeRouter_DS.pdf The EdgeRouter Lite (the $100 model) only has 512 MB RAM. (Powered by a "Dual-Core 500 MHz, MIPS64 with Hardware Accele

Re: [Discuss] Server/laptop full-disk encryption

2014-09-30 Thread Edward Ned Harvey (blu)
> From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- > bounces+blu=nedharvey@blu.org] On Behalf Of Rich Braun > > Following a recent burglary, in which a laptop was stolen, I want to go > through my systems and protect them with full-disk encryption. Based on your post, it sound

Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Richard Pieri
On 9/30/2014 5:36 AM, Tom Metro wrote: The EdgeRouter Lite (the $100 model) only has 512 MB RAM. (Powered by a "Dual-Core 500 MHz, MIPS64 with Hardware Acceleration for Packet Processing.") And as you noted, ER Lite does not do DPI which means it has more RAM available to handle active connect

Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Dan Ritter
On Tue, Sep 30, 2014 at 05:36:26AM -0400, Tom Metro wrote: > If they can deliver a 2-core, 1 GHz CPU w/1 GB RAM appliance for $150, > that'll be a good deal. They say in their FAQ, "Hobbyists and hackers > wishing to modify the iGuardian software to use the hardware platform > for other purposes ar

Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Tom Metro
Richard Pieri wrote: > ER Lite does not do DPI... > iGuardian will run out of RAM for active connections sooner than ER Lite. Agreed, but the thought experiment was how would the iGuardian compare to the ER Lite if you ran SNORT on the latter. Both are open platforms so you could configure either

Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Richard Pieri
On 9/30/2014 6:39 PM, Tom Metro wrote: Both are open platforms so you could configure either to have or not have DPI. Not entirely true. Ubiquiti's hardware is pretty open but their OS is proprietary and I have no idea how stable it would be after coercing it to do something unsupported. --

Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Tom Metro
Richard Pieri wrote: > Ubiquiti's...OS is proprietary... It's a Debian fork, 2-steps removed. (Fork of a fork.) Similarly iGuardian is packaging OpenWRT, which may or may not qualify as a fork. It might in the sense that they probably bundle binary blobs to support their hardware, which you are s

Re: [Discuss] iGuardian "enterprise-grade" home router

2014-09-30 Thread Richard Pieri
On 9/30/2014 8:28 PM, Tom Metro wrote: Richard Pieri wrote: Ubiquiti's...OS is proprietary... It's a Debian fork, 2-steps removed. (Fork of a fork.) I could have sworn I saw Ubiquiti's literature use the word "proprietary" in there somewhere. Yep, it's in the packet acceleration chunk.

Re: [Discuss] Server/laptop full-disk encryption

2014-09-30 Thread Bill Horne
On 9/30/2014 9:38 AM, Edward Ned Harvey (blu) wrote: In linux, I'm not aware of any product that does whole disk encryption without needing a power-on password. In windows, Bitlocker uses the TPM to ensure the OS gets booted untampered, and then your user logon password and OS security are us

[Discuss] Shellshock

2014-09-30 Thread Tom Metro
I assume most readers of this list are already well familiar with the Bash bug known as "Shellshock" by now. The general tech press has raised alarms about it, but they've generally done a rather poor job of explaining the actual ways in which the bug could be exploited remotely. Here are a few ar

Re: [Discuss] Shellshock

2014-09-30 Thread Tom Metro
Also... Repository of "Shellshock" Proof of Concept Code https://github.com/mubix/shellshocker-pocs -Tom -- Tom Metro The Perl Shop, Newton, MA, USA "Predictable On-demand Perl Consulting." http://www.theperlshop.com/ ___ Discuss mailing list Discuss

[Discuss] CipherShed: TrueCrypt fork

2014-09-30 Thread Tom Metro
Speaking of full disk encryption, TrueCrypt has been forked... -Tom CipherShed: A replacement for TrueCrypt http://www.net-security.org/secworld.php?id=17392 While the Open Crypt Audit Project, headed by cryptographer Matthew Green and Kenneth White, Principal Scientist at Social & Scientifi

Re: [Discuss] Shellshock

2014-09-30 Thread Bill Ricker
I take exception to the Lisp.org quote. Yes, it's a fair point that Gnu project is older than either Apache or Linux, but that doesn't exempt Bash from criticism. (And if this bug is only 20 years old as claimed, being when ENV function overrides were invented, it's maybe a year older than Apache.

[Discuss] Need speaker and topic for October BLU meeting

2014-09-30 Thread John Abreau
Hi, everyone. Jeff Schiller was to be the speaker for the October BLU meeting, but he had a scheduling conflict, and we had to reschedule him for November. Can anyone recommend a new speaker and topic for October? Thanks! -- John Abreau / Executive Director, Boston Linux & Unix Email: abre.