I will be there for B-Sides & Defcon let me know when and where for drinks!

Slimjim100

Tom that is just too cool I will make sure to DVR it so i can watch it.

Brian

I found a useful site to collect daily news and info from alot of my favorite sites and thought I would share it with you guys/gals.

http://popurls.com/

Cheers,

Brian

My little experience with the CISSP..

I took the CISSP at Chicagocon 2007 Boot-Camp (I was also a speaker at the con) and used the Shon Harris book but I was not so disciplined as most and only studied about a month. After 5.5 hours I finished the test and was sure I failed but I passed the test some how. I was also the lucky guy that got audited and it took 2 months to finish the Audit due to alot of my past employers where DoD contractors that no longer exists so verifying experience was a bit of a challenge for the auditor. I have to say I normally feel I am good with taking test but the CISSP has been the most difficult test I have taken. Anyway I would highly recommend studding more than a month and maybe if you can afford it take a boot-camp.

My 2 cents,

Brian

HD Moore announced Joshua Drake is joining the Rapid7/Metasploit team this week.
 http://blog.metasploit.com/

So with Rapid7 now owning Metasploit they have full-time paid engineers making it better.

Cheers,

Brian

I feel if you just make a proof of concept that's ok but releasing a real virus only can cause issues. In the end your true ethics will be tested and if a company is willing to risk the legal actions possible from an employee with such ethics then I guess they found there man. Just remember that any thing you do on the internet is forever and everything you do is just going to become a part of your rep so make sure you make wise decisions.

my 2 cents

Brian

Anytime you have physical access to a PC you can call it quits for security. I think the Evil Maid stuff is just a little over the top.

Brian

Well if this post sounds like someone trying to get another IP hacked for them just e-mail abuse@cox.net and tell them there is a residential customer hosting a server and send them the IP address. The TOS for home cable modem service states you are not allowed to host servers from residential accounts and 99% of business account are given a static IP.

My 2 cents,

Brian

So as alot of the members here have there CISSP's I wanted to know what you do to get your CPE requirements?

I currently go to and speak at Security Cons but I wanted to know what others do. Also do you feel watching Videos of recent Security Cons would count for CPE's and if not what if the Con is running the talks via streaming media would it count then as attending.

Let me know what you guys/gals think.

Cheers,

Brian

I would recommend the Security+ as it will not expire on you and it's recognized by just about everyone. The Sec+ is also an elective on many other Security certs and the DoD requires it on most IS roles now. I think it gives you the most bang for your buck.

Cheers,

Brian

Thanks to Don and the EH-Net community and we will continue to grow and help others!

Cheers,

Brian

Awesome Work Ryan you are a true asset to EH-Net!

Regards,

Brian

Hey Guys/Gals,

          Ryan Linn & I did a talk at Phreaknic13 in Nashville a few weekends back and the video is now online.

Its 9AM Do You Know Where Your Hashes Are?

http://www.phreaknic.info/Videos/PN13/Brian_Wilson_&_Ryan%20Linn_-_Its_9AM_do_you_know_where_your_hashes_are_(PN13).avi

Download size is 100MB

The video quality is not the best but you should be able to understand what is being delivered.

Cheers,

Brian

Switch101,

    As a side note some of the ports you listed where NetBIOS/MS ports and NetBIOS should never be routed over the internet as its supposed to be used on the local LAN only. I would recommend having a small home/Office firewall on you internet facing line to keep alot of un-needed scans and traffic hitting you PC. Just cause you do not have personal data on the PC its your responsibility as the PC's owner to keep the device safe and prevent it from becoming a zombie or hosting illegal content. If you want to play and learn run Ethereal/Wireshark on the PC and review you logs. There are tons of places online and here on the forum to learn how to use Ethereal/Wireshark.

just my 2 cents add...

Brian

Try to take a look over at www.plain-text.info and see if you can find it there.

Cheers,

Brian