Topic: Tamper-evident boot with Heads
When: Tuesday April 10th, 7:30 PM to 9:00 PM
Speaker: Kyle Rankin
Location: O'Reilly Media, Sebastopol CA in the Tarsier conference room
past the metal statue and to the right ( http://nblug.org/locations )
Description:
Having a trustworthy boot process is the foundation of the rest of your
system's security. If your BIOS, kernel, or initrd have been tampered with,
an attacker can hide their backdoor from the rest of the system. This talk
will discuss the security threats against the boot process and briefly
cover some other approaches to protect against boot-time attacks but the
talk will primarily focus on Heads, an open source project that provides
tamper-evident boot. I will discuss how Heads works, how it differs from
other secure boot approaches, and demonstrate how it protects against
tampering.
Unless there are security concerns I (Allan Cecil) will be streaming the
talk at http://twitch.tv/dwangoAC - see you there either in person or
virtually!
When: TODAY, March 13, 2018 7:30 pm PDT
Location: O'Reilly Media at 1005 Gravenstein Hwy N, Sebastopol, CA in the Tarsier conference room past the metal statue and to the right <http://nblug.org/locations>
Title: Home Router Panel
Are you frustrated with the model/router/switch your ISP provides? Curious what your options are to improve performance or regain control? NBLUG will be holding a panel discussion about home networking, focusing on the humble router. We have representatives of several options:
* Improving existing hardware by flashing OpenWRT or similar
* Building your own router from an old PC or single-board computer
* Commercial products aimed at IT professionals
We expect a wide-ranging discussion of the pros and cons of each of these approaches, touching on the effort required, security implications, and flexibility of each option. Questions from the audience are welcome.
Best,
Tom
Hi all,
I'm hoping for a good turnout at this meeting as this is a fantastic opportunity to get PGP keys signed and exchanged with a very useful crowd of people. And by saying that, I mean I'm hopeful that some of the lurkers who are well connected can make it to the meeting (you! yes, you!).
This PGP keysigning party is very timely as Yahoo just announced PGP support:
http://arstechnica.com/security/2014/08/yahoo-to-begin-offering-pgp-encrypt…
...wait a minute, that's from 2014. Looks like I just got caught re-using an E-Mail from a couple of years ago. Oh well. :)
So, before the meeting, run gpg --gen-key and gpg --send-keys --keyserver keyserver.ubuntu.com <Key ID> as necessary then E-Mail the output of gpg --fingerprint <ID or eMail address> to frank(a)nblug.org to allow him to get a list ready (but if you don't get to this, come to the meeting anyway).
See you there!
A.C.
******
President, North Bay Linux Users' Group
On 02/12/2018 04:52 PM, E Frank Ball III wrote:
> This is tommorow night and I haven't gotten very many keys yet:
>
> Topic: GPG Key Signing Party
> When: Tues February 13th, 7:30 PM to 9:00 PM
> Coordinator: Frank Ball
> Location: O'Reilly Media, Sebastopol CA, in the Tarsier conference room past the metal statue and to the right - http://nblug.org/locations
>
> GPG Key Signing Party:
>
> It's time for another GPG key signing. We had one in May 2003 & August 2014.
>
> The point of this is to create a web of trust. By signing someone's
> public key, you state that you have checked that the person that uses a
> certain keypair, is who he says he is and really is in control of the
> private key. This way a complete network of people who trust each other
> can be created. This network is called the Strongly connected set.
> Information about it can be found at http://pgp.cs.uu.nl/
>
> Before the meeting:
>
> 1) Generate a public/private keypair with the "gpg --gen-key"
> command (accept the defaults), see man gpg for more info.
>
> 2) Upload your key to a keyserver:
> gpg --send-keys --keyserver keyserver.ubuntu.com
>
> 3) Print out the key fingerprint with gpg --fingerprint
> Also include your full name, email address, and Key ID#.
> Bring this to the meeting,
> and optionally make extra copies to hand out.
>
> 4) Email me at frank(a)nblug.org with the fingerprint, email address, full
> name, and Key ID. I'll have a list of everyone's info to hand out.
>
> During the meeting:
>
> Verify your GPG key fingerprint on the list I hand out and
> verify your identity (with photo ID).
>
> After the meeting:
>
> 1) Download the all of the keys for the fingerprints verified at the meeting
>
> 2) add them to your keyring
>
> 3) sign them
>
> 4) upload your key again.
>
> More info:
>
> https://help.ubuntu.com/community/GnuPrivacyGuardHowto
>
> http://cryptnet.net/fdp/crypto/keysigning_party/en/keysigning_party.html
>
> _______________________________________________
> talk mailing list
> talk(a)nblug.org
> http://nblug.org/cgi-bin/mailman/listinfo/talk
>
Topic: GPG Key Signing Party
When: Tues February 13th, 7:30 PM to 9:00 PM
Coordinator: Frank Ball
Location: O'Reilly Media, Sebastopol CA, in the Tarsier conference room
past the metal statue and to the right - http://nblug.org/locations
GPG Key Signing Party:
It's time for another GPG key signing. We had one in May 2003 & August 2014.
The point of this is to create a web of trust. By signing someones
public key, you state that you have checked that the person that uses a
certain keypair, is who he says he is and really is in control of the
private key. This way a complete network of people who trust each other
can be created. This network is called the Strongly connected set.
Information about it can be found at http://pgp.cs.uu.nl/
Before the meeting:
1) Generate a public/private keypair with the "gpg --gen-key"
command (accept the defaults), see man gpg for more info.
2) Upload your key to a keyserver:
gpg --send-keys --keyserver keyserver.ubuntu.com
3) Print out the key fingerprint with gpg --fingerprint
Also include your full name, email address, and Key ID#.
Bring this to the meeting,
and optionally make extra copies to hand out.
4) Email me at frank(a)nblug.org with the fingerprint, email address, full
name, and Key ID. I'll have a list of everyone's info to hand out.
During the meeting:
Verify your GPG key fingerprint on the list I hand out and
verify your identity (with photo ID).
After the meeting:
1) Download the all of the keys for the fingerprints verified at the meeting
2) add them to your keyring
3) sign them
4) upload your key again.
More info:
https://help.ubuntu.com/community/GnuPrivacyGuardHowtohttp://cryptnet.net/fdp/crypto/keysigning_party/en/keysigning_party.html
Hello NBLUG members!
With more and more information coming out about how insecure nearly
every computer is, come find out how to make your computer use just a
bit more secure...
When: January 9th, 2018 7:30 pm
Speaker: Robert Thille
Location: O'Reilly Media at 1005 Gravenstein Hwy N, Sebastopol, CA in
the Tarsier conference room past the metal statue and to the right
(http://nblug.org/locations <http://nblug.org/locations>)
Title: Enhancing Linux security with a Yubikey/Smart-Card
Description:
In this presentation, Robert will go over how to setup and use a Yubikey
to store PGP keys and PKI certs such that without physical access theft
of the keys is just about impossible, and even difficult with physical
access.
Other security enhancements like hardware password stores (Mooltipass)
and air-gapped machines will be covered. Further, I'm sure there will be
discussion of the recently disclosed Meltdown and Specter attacks.
Best,
Robert
--
Robert Thille 1228 Moss Rock Court; Santa Rosa, CA 95404
Cell: 707.217.7544 Office/VOIP: 707.780.1560
rthille(a)mirapoint.com IRC/IM:rthille http://www.rangat.org/
Cyclist, Mountain Biker, Freediver, Kayaker, Rock Climber, Hiker, Geek
May your spirit dive deep the blue, where the fish are many and large!
Note that our elections are tonight following Frank's talk and seeing as we haven't had any nominations submitted by E-Mail this year we'll be doing that process live at the meeting.
Come in person if you can not just to do your civic duty to vote but also to pick up free T-Shirts, stickers, and other shwag from Linux laptop maker System76. We'll also have lots of free O'Reilly books available for the taking at tonight's meeting.
Oh, and come for Frank's talk. I'm amazed how far the Chromebook community has come. See you tonight at O'Reily at 7:30,
A.C.
******
President, North Bay Linux Users' Group
On 11/13/2017 10:46 PM, E Frank Ball III wrote:
> Topic: Installing Ubuntu Linux onto a Chromebook / Chromebox with crouton
> When: Tues Nov 14th, 7:30 PM to 9:00 PM
> Speaker: Frank Ball
> Location: O'Reilly Media, Sebastopol CA in the Tarsier conference room
>
> Chromebooks and Chromeboxes are cheap, easy to use, and pretty secure;
> but after a while the shortcomings of Chrome OS get annoying and I want
> my Linux. Crouton is a script which installs Debian, Kali, or Ubuntu
> Linux into a chroot container that runs under Chrome OS. It's easy to
> install, and it works great.
>
Topic: Installing Ubuntu Linux onto a Chromebook / Chromebox with crouton
When: Tues Nov 14th, 7:30 PM to 9:00 PM
Speaker: Frank Ball
Location: O'Reilly Media, Sebastopol CA in the Tarsier conference room
Chromebooks and Chromeboxes are cheap, easy to use, and pretty secure;
but after a while the shortcomings of Chrome OS get annoying and I want
my Linux. Crouton is a script which installs Debian, Kali, or Ubuntu
Linux into a chroot container that runs under Chrome OS. It's easy to
install, and it works great.
--
E Frank Ball frankb(a)frankb.us
Hello NBLUG members!
It's that time again: North Bay Linux Users Group is holding its annual
elections.
Nominations may begin immediately. Nominations close when elections are
held on November 14, 2017 at 7:30PM at the regularly scheduled NBLUG meeting.
All positions are open, and all positions must be filled.
Any person may nominate any other person, and this includes
self-nominations. Nominations do not need to be seconded, but there is no
harm in doing so.
Positions are as follows, copied and pasted from the bylaws page (
http://nblug.org/bylaws/).
*President*: the glue that keeps it all together. She/he tries to keep
NBLUG on track. Duties of the president shall include:
1. To set the agenda for meetings
2. To act as chair of the meetings
3. To oversee the committees by keeping in regular contact with the
committee chairs
4. Share responsibility of duties assigned to absent officers
*Vice President*: does all the stuff that keeps NBLUG running. The duties
of Vice President shall include:
1. Making preparations for the meeting, including coordinating the
advertising, reservations, setup of any necessary equipment, and with the
guest speakers.
2. To take over the duties of any officers that may be absent, or to
arrange for someone else to.
3. Share responsibility of duties assigned to absent officers
*Treasurer*: keeps track of money, bills, expenses, and financial matters.
The duties of Treasurer shall include:
1. Provide a current financial report at each board meeting.
2. To keep track of the other key for the PO Box.
3. Delegation of checking the PO Box at least once each month
4. Share responsibility of duties assigned to absent officers
*Scribe*: does all the managerial and logistical work. The duties of scribe
shall include:
1. To take the minutes at regular meetings, as well as board meetings
and coordinate with the webmistress/master to have them made available at
the website.
2. To conduct elections for officership and Constitutional and Bylaw
amendments.
3. Share responsibility of duties assigned to absent officers
*Directors at Large*: two officers who share many duties. Duties are
determined after the election, but can include:
1. Public Relations - work with the media to “get the word out”
1. Publicize NBLUG meetings, and events like installfests
2. Represent NBLUG in a positive light as an open organization that
does not discriminate based on sex, race, creed, religion, sexual
orientation, political affiliation, economic standing, employer
3. Contact various media organizations such as newspapers, magazines,
SRJC, and SSU to publicize NBLUG events
4. Share responsibility of duties assigned to absent officers
5. Other duties as assigned
2. Outreach - coordinate events / help find new presenters
1. Work with librarian to ensure book lending service works well
2. Oversee Installfest and take over for Installfest Coordinator
when absent.
3. Oversee Linux Day events and take over for Linux Day Event
Coordinator if they should not be available.
4. Coordinate Other events when Event Coordinator is absent
5. Share responsibility of duties assigned to absent officers
6. Other duties as assigned
Use this thread for nominations, discussions, and general dialog.
Happy nominating!
Best,
Robert
--
Robert Thille 1228 Moss Rock Court; Santa Rosa, CA 95404
Cell: 707.217.7544 Office/VOIP: 707.780.1560
rthille(a)mirapoint.com IRC/IM:rthille http://www.rangat.org/
Cyclist, Mountain Biker, Freediver, Kayaker, Rock Climber, Hiker, Geek
May your spirit dive deep the blue, where the fish are many and large!
Due to the ongoing fires the regularly scheduled general meeting will not be held tonight. There will not be anyone present to unlock doors. Some NBLUG members are still unaccounted for at this time. Please consider using the time you would have spent at the meeting to volunteer, as many evacuation shelters are in need of supplies.
I'd like to (ab)use this announcement to highlight the help of one of our sponsors - Sonic.net generously uncapped full bidirectional gigabit fiber service to New Life Christian Fellowship which is one of the many evacuation centers currently open in Petaluma. I witnessed many evacuees there using various devices to either gather news or contact friends and family and I'm thankful for the help from Sonic.
Stay safe and see you next month,
A.C.
******
President, North Bay Linux Users' Group