Meeting Date: 2024-04-26

4:30 pm Welcome to OSSEM

4:40 pm In the news

5:00 pm Show and Tell / cool hardware

•  https://bsideslv.org/
• A Small DEF CON Hotel Distance Update https://www.youtube.com/watch?v=z_l9LM3Siuw
• https://hackaday.com/2024/04/15/analyzing-the-code-from-the-terminators-hud/
• US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks – https://techcrunch.com/2024/04/22/cisa-chirp-systems-remotely-unlock-smart-locks/
• UnitedHealth says hackers possibly stole large number of Americans’ datahttps://www.reuters.com/technology/cybersecurity/unitedhealth-says-hack-could-impact-data-substantial-proportion-americans-2024-04-22/
• ‘ArcaneDoor’ Cyberspies Hacked Cisco Firewalls to Access Government Networks https://www.wired.com/story/arcanedoor-cyberspies-hacked-cisco-firewalls-to-access-government-networks/
• BatBadBut What?
  • https://www.secplicity.org/2024/04/15/batbadbut-what/
• Bad Month for Software Supply Chains
  • https://www.secplicity.org/2024/04/01/bad-month-for-software-supply-chains/
• Stupid Linux Tricks – bypass a stuck systemd module on boot *without* having to wait the full 5 minutes (network, anyone?)
  • https://www.reddit.com/r/linux/comments/15ubfuk/stupid_linux_tricks_bypass_a_stuck_systemd_module/
• How do I install the NVIDIA Proprietary driver on Red Hat Enterprise Linux 8 and 9 systems?
  • https://access.redhat.com/solutions/5679921
• ComplianceAsCode
  • https://github.com/ComplianceAsCode/content
• Digital Sundial
  • https://www.thingiverse.com/thing:1068443
• Cisco ArcaneDoor Vulnerabilities
  • https://community.veeam.com/cyber-security-space-95/cisco-arcanedoor-vulnerabilities-7374
• Ubuntu 24.04 LTS
  • https://ubuntu.com/
• Microsoft open-sources infamously weird, RAM-hungry MS-DOS 4.00 release
  • https://arstechnica.com/gadgets/2024/04/microsoft-and-ibm-release-source-code-for-one-of-the-weirdest-versions-of-ms-dos/
• TikTok owner has strong First Amendment case against US ban, professors say
  • https://arstechnica.com/tech-policy/2024/04/tiktok-owner-has-strong-first-amendment-case-against-us-ban-professors-say/
• Hackers try to exploit WordPress plugin vulnerability that’s as severe as it gets
  • https://arstechnica.com/security/2024/04/hackers-make-millions-of-attempts-to-exploit-wordpress-plugin-vulnerability/
• What happened when the world’s most populous nation turned off TikTok
• https://www.cnn.com/2024/03/14/tech/india-us-tiktok-ban-analysis-intl-hnk/index.html
• Updating California’s grid for EVs may cost up to $20 billion
  • https://arstechnica.com/cars/2024/04/updating-californias-grid-for-evs-may-cost-up-to-20-billion/
• Hertz To Sell Off Even More EVs As Depreciation Losses Mount
  • https://insideevs.com/news/717612/hertz-ev-sales-2024/
• Watch This Guy Build The World’s First Screw Bike With Wild 3D-Printed Wheels
  • https://www.rideapart.com/news/717184/james-bruton-screw-bike-mecanum/
• Dangerous People Panel | Open Sauce 2023
  • https://www.youtube.com/watch?v=uP4Dp9I_dA0
• IBM nearing deal for cloud software provider HashiCorp, source says https://www.reuters.com/markets/deals/ibm-nearing-buyout-deal-hashicorp-wsj-reports-2024-04-23/
• Open Tofu
  •  https://opentofu.org/
• How Are Intel GPUs in 2024? Games, Drivers, and MORE!
• https://www.youtube.com/watch?v=dleDdooh-XY

CERT Training

https://community.fema.gov/PreparednessCommunity/s/cert-trainings?language=en_US

ZimaBoard – Single Board Server for Creators

Download Fedora Workstation 40

https://fedoraproject.org/workstation/download

All New Atlas | Boston Dynamics

6:00 Home Lab Setup – Preping for Red Hat Certified System Administarator (RHCSA) Exam

Main talk:

Follow up question:

systemctl tasks limit – can use user this on sshd to limit DDOS attackts?

https://unix.stackexchange.com/questions/606514/systemd-tasks-and-limit

sshd.service – OpenSSH server daemon
     Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; preset:>
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: active (running) since Fri 2024-04-26 16:09:22 PDT; 2h 22min a>
       Docs: man:sshd(8)
             man:sshd_config(5)
   Main PID: 1364 (sshd)
      Tasks: 1 (limit: 18775)
     Memory: 200.0K (peak: 2.5M swap: 1.2M swap peak: 1.2M)
        CPU: 40ms
     CGroup: /system.slice/sshd.service
             └─1364 “sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startup>

Apr 26 16:09:22 framework systemd[1]: Starting sshd.service – OpenSSH serve>
Apr 26 16:09:22 framework (sshd)[1364]: sshd.service: Referenced but unset >
Apr 26 16:09:22 framework sshd[1364]: Server listening on 0.0.0.0 port 22.
Apr 26 16:09:22 framework sshd[1364]: Server listening on :: port 22.
Apr 26 16:09:22 framework systemd[1]: Started sshd.service – OpenSSH server>