Re: OT, vintage memories

2010-05-22 Thread Angus Scott-Fleming
On 20 May 2010 at 14:52, Bob Fronk  wrote:

> 
> Yep.. Remember all of it.

Ditto.  *_ALL_* of it.  Egad, I'm getting old.

> Except gas was about $0.75 when I started driving. 

Cheapest gas I remember was $ 0.179 (17.9 cents per gallon) during the "gas 
wars" in Port Jervis, NY -- our Boy Scout troop used to fill up there on our 
way to the weekend trips.

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


Re: script SSID for wireless configs

2010-05-22 Thread Angus Scott-Fleming
On 21 May 2010 at 11:23, Micheal Espinola Jr  wrote:

> Obscurity != Security
> 
> And with that, let the soapboxing begin... 

And what is a password but "obscurity"?

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


Re: OT, vintage memories

2010-05-22 Thread Angus Scott-Fleming
On 21 May 2010 at 10:48, paul d  wrote:

> My first car was a 72 Nova SS 350; 4 bbl. Didn't have a Hurst, tho, so 
> it tended to lock going from 1st to 2nd. Otherwise, great car. 

My "first car" was a Honda 305 bike with megaphone pipes that I bought for 
$300.  Sounded like a Harley 1200 at low RPMs.  Rode that puppy from Palm Beach 
to "Hangover", NH, where I was a starving student in the early 70s.  "What a 
trip"  in the vernacular of the day.  I miss those wheels.

Of course, that was back when we carved our own ICs out of the locally 
available wood ... and walked uphill to and from school in snow too deep to 
shovel [g,d,rlh]...

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


RE: script SSID for wireless configs

2010-05-22 Thread Ken Schaefer
-Original Message-
From: Angus Scott-Fleming [mailto:angu...@geoapps.com] 
Sent: Saturday, 22 May 2010 4:07 PM
To: NT System Admin Issues
Subject: Re: script SSID for wireless configs

On 21 May 2010 at 11:23, Micheal Espinola Jr  wrote:

>> Obscurity != Security
>> 
>> And with that, let the soapboxing begin... 
>
> And what is a password but "obscurity"?

?!? 

A password is an authenticator - it's meant to be secret. Hiding your 
identifier is usually "obscurity"

Cheers
Ken


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~



Re: script SSID for wireless configs

2010-05-22 Thread KenM
To the OP. I did not read through the whole chain so if this has been posted
sorry for the repost.

This may work for you.
http://technet.microsoft.com/en-us/library/bb878069.aspx
The last time I used this was a few years ago on XP so I am not sure about
newer OS's. We were migrating from WEP to WPA2 and we needed away of
migrating from using the intel software to manage the wireless to have
windows manage it. This was a way we could put our old WEP settings on the
windows profile and use GPO for the WPA2 settings. There are some
limitations of this though. It is meant to be used from a USB thumb drive.
So the EXE has to be on the root of a drive. The why I ran it was to put it
on a company shared drive and had our desktop team run the exe when
converting to our new wireless. I also had it in a logon script for some
users but I forget if there was something that needed to be done to get it
working in the logon script.







On Sat, May 22, 2010 at 5:07 AM, Ken Schaefer  wrote:

> -Original Message-
> From: Angus Scott-Fleming [mailto:angu...@geoapps.com]
> Sent: Saturday, 22 May 2010 4:07 PM
> To: NT System Admin Issues
> Subject: Re: script SSID for wireless configs
>
> On 21 May 2010 at 11:23, Micheal Espinola Jr  wrote:
>
> >> Obscurity != Security
> >>
> >> And with that, let the soapboxing begin...
> >
> > And what is a password but "obscurity"?
>
> ?!?
>
> A password is an authenticator - it's meant to be secret. Hiding your
> identifier is usually "obscurity"
>
> Cheers
> Ken
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Dell Just Bought Kace

2010-05-22 Thread Tom Miller
Old thread, I know.  I purchased a KBOX a few weeks ago; it is replacing 
Microsoft Configuration Manager here.  
 
Yes, you can customize installs.  Just use your install builder/packager like 
you would otherwise. Or you can use scripting for that.
 
It's very easy to use.  I like patching, too.  It includes MS updates, Abode 
updates, and some A/V vendor updates.
 
Now that Dell owns it I expect Dell to put some serious $$$ dollars into it, 
and it will just get better.
 
Tom Miller
Engineer, Information Technology
Hampton-Newport News Community Services Board
757-788-0528 

>>> Kurt Buff  2/17/2010 5:20 PM >>>
Discussion warranted, I presume.

Can you customise software installs? In particular, I'd like to
customise FF and Adobe Reader installs - turn of javascript in Reader,
and add in NTLM auth and a few other things that we do manually here
with FF.

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Confidentiality Notice:  This e-mail message, including attachments, is for the 
sole use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure, or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Firewall for small biz

2010-05-22 Thread justino garcia
PFsense (FreeBSD based), I like it simple to use, and stable (use a
supermicro case 1u, with more then one ethernet jack), and 512mb of ram or
more and you should be fine.

On Fri, May 21, 2010 at 6:21 PM, Ben Scott  wrote:

> On Thu, May 20, 2010 at 1:43 PM, David Lum  wrote:
> > I have a 17-user client (one SBS server, same one discussed with the
> PE840)
> > with a 5+yr old SonicWALL SOHO firewall and I believe it’s time to
> upgrade
> > them to something more current. They used to VPN but have found SBS
> remote
> > access much faster.
> >
> > What kinds of things should I look for in a new workgroup firewall?
>
>   It really depends on what you're looking to have it do, and the expected
> load.
>
>  Say it's a typical consumer Internet connection (cable, DSL, etc.),
> and all they're doing is web surfing and email and remote access, and
> they're using SBS to remote in, and they're not looking for any kind
> of filtering, deep inspection, intrusion detection, etc.  In that
> case, you could use an old PC running "free" firewall "appliance"
> software like IPcop, pfsense, etc.  Or a SOHO gateway running
> third-party firmware like DD-WRT.
>
>  If you're looking for more advanced features... tell us what you're
> looking for.  :-)
>
> -- Ben
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
>


-- 
Justin
IT-TECH

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: OT, vintage memories

2010-05-22 Thread Steve Ens
We had a gas war in town about a dozen years ago, the prices kept dropping
lower (why don't we see those anymore?) and lower.  One gas station started
giving away the gas for free.  Emptied his tanks, and became the gas
retailer choice of many due to loyalty.

On Sat, May 22, 2010 at 2:42 AM, Angus Scott-Fleming wrote:

> On 20 May 2010 at 14:52, Bob Fronk  wrote:
>
> >
> > Yep.. Remember all of it.
>
> Ditto.  *_ALL_* of it.  Egad, I'm getting old.
>
> > Except gas was about $0.75 when I started driving.
>
> Cheapest gas I remember was $ 0.179 (17.9 cents per gallon) during the "gas
> wars" in Port Jervis, NY -- our Boy Scout troop used to fill up there on
> our
> way to the weekend trips.
>
> --
> Angus Scott-Fleming
> GeoApps, Tucson, Arizona
> 1-520-290-5038
> Security Blog: http://geoapps.com/
>
>
>
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Dell Just Bought Kace

2010-05-22 Thread Rod Trent
That could be true.  Let's hope it doesn't go the way of everdream.  

"Tom Miller"  wrote:

>Old thread, I know.  I purchased a KBOX a few weeks ago; it is replacing 
>Microsoft Configuration Manager here.  
> 
>Yes, you can customize installs.  Just use your install builder/packager like 
>you would otherwise. Or you can use scripting for that.
> 
>It's very easy to use.  I like patching, too.  It includes MS updates, Abode 
>updates, and some A/V vendor updates.
> 
>Now that Dell owns it I expect Dell to put some serious $$$ dollars into it, 
>and it will just get better.
> 
>Tom Miller
>Engineer, Information Technology
>Hampton-Newport News Community Services Board
>757-788-0528 
>
 Kurt Buff  2/17/2010 5:20 PM >>>
>Discussion warranted, I presume.
>
>Can you customise software installs? In particular, I'd like to
>customise FF and Adobe Reader installs - turn of javascript in Reader,
>and add in NTLM auth and a few other things that we do manually here
>with FF.
>
>Kurt
>
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
>
>Confidentiality Notice:  This e-mail message, including attachments, is for 
>the sole use of the intended recipient(s) and may contain confidential and 
>privileged information.  Any unauthorized review, use, disclosure, or 
>distribution is prohibited.  If you are not the intended recipient, please 
>contact the sender by reply e-mail and destroy all copies of the original 
>message.
>
>~ Finally, powerful endpoint security that ISN'T a resource hog! ~
>~   ~
-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~



Re: script SSID for wireless configs

2010-05-22 Thread Kurt Buff
On Sat, May 22, 2010 at 01:07, Angus Scott-Fleming  wrote:
> On 21 May 2010 at 11:23, Micheal Espinola Jr  wrote:
>
>> Obscurity != Security
>>
>> And with that, let the soapboxing begin...
>
> And what is a password but "obscurity"?

Password != obscurity

Time to read some Schneier.

Kurt

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~



Re: script SSID for wireless configs

2010-05-22 Thread Ben Scott
On Sat, May 22, 2010 at 4:07 AM, Angus Scott-Fleming
 wrote:
>> Obscurity != Security
>>
>> And with that, let the soapboxing begin...
>
> And what is a password but "obscurity"?

  A password is a "secret key".

  The difference between a "secret key" and "security by obscurity" is
that you can change a key easily and quickly, without changing the
architecture.  Thus, unwanted disclosure of a secret key does not
invalidate the security design; you simply change the key.  You can
even do this preemptively.  In contrast, once a "security by
obscurity" vulnerability is disclosed, you must change the security
design.  That could mean anything from changing configuration options
to installing new software to buying all new equipment.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~


RE: script SSID for wireless configs

2010-05-22 Thread Malcolm Reitz
Jenny, is that you?

-Malcolm

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, May 21, 2010 17:14
To: NT System Admin Issues
Subject: Re: script SSID for wireless configs

On Fri, May 21, 2010 at 15:08, Ben Scott  wrote:
> On Fri, May 21, 2010 at 2:23 PM, Micheal Espinola Jr 
>  wrote:
>> And with that, let the soapboxing begin...
>
>  On that note:
>
>  It is important to remember that wireless is inherently a broadcast 
> medium.  So everyone around you is always receiving *everything* you 
> transmit.  What matters is how you protect what you transmit.  :)
>
>  It's like a bunch of people standing in a room together.  If you say, 
> "Hey, Ben, your shoe is untied", most other people in the room aren't 
> going to bend down to tie their shoes, too.  But they'll still hear 
> what you said to me.  That is what things like "hidden" SSIDs and MAC 
> address filtering do.
>
>  If you say, "Hey, Ben, seven six two three nine four eight five one 
> nine six", everyone again knows you said something to me, but they 
> don't know *what* unless they know the code.  That is encryption.
>
> -- Ben

What about "eight six seven five three zero nine"?

Hm? Is that encryption?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~