Every year or so you hear about how the Internet is about to run out of IPv4 addresses. When that happens we will all need to be able to migrate to IPv6. In this talk Owen will discuss what IPv6 is and cover how to use IPv6 from a sysadmin perspective.

Many Websites mix secure and insecure content on the same page, like
Facebook. This makes it possible to steal all the data entered on such a
page easily, using Moxie Marlinspike's SSLstrip tool. I will explain and
demonstrate this attack.

Slowloris is a very new layer 7 denial-of-service attack created by RSnake
that stops Apache web servers completely with very low bandwidth--one packet
every 2 seconds. The Apache developers were notified of this vulnerability
and decided it was unimportant and not worth patching. I will explain and

Everyone likes pretty pictures. Visualizing your data is one of the
best ways to see the "Big Picture"(tm) and a great tool to do that
is RRDtool. In this talk, Aaron will discuss the basics of how to use
RRDtool, how to write RRDTool scripts in bash and python, including some
discussion on cricket and munin. Aaron also will give a few demo examples
of some interesting graphs and generic scripts he created for the talk.

From the LTIB website (www.bitshrine.org):
The LTIB (Linux Target Image Builder) project is a simple tool that can
be used to develop and deploy BSPs (Board Support Packages) for various
target platforms. Using this tool a user will be able to develop a
GNU/Linux image for their target platform.

This talk with demonstrate the configuration and use of LTIB for
assembling the components of an embedded Linux system. Topics will
include uboot, Linux kernel, and root file system options.

Still using ssh in a for loop to manage server clusters? Rewriting the entire hard drive of hundreds of workstations just to tweak one setting? Managing your systems by hand? Having trouble keeping up with all the changes to all the systems? Maybe it's time to try something new.

Puppet is a system for automating system administration tasks. Puppet is also a declarative language for expressing system configuration, a client and server for distributing it, and a library for realizing the configuration.

In this talk Kyle Rankin will provide an introduction to performing forensics analysis on Linux machines using the popular Sleuthkit tools with their easy-to-use Autopsy web-based front-end. The talk will cover initial installation and configuration of Sleuthkit and Autopsy, basic concepts and considerations for a forensics investigation, and at the end there will be a demo with a compromised Linux image.

Ruby on Rails is an open-source web framework that's optimized for programmer happiness and sustainable productivity. It lets you write beautiful code by favoring convention over configuration."

Matt Hargett, Director of Security Product Development at LogicLibrary, will talk about common patterns that lead to exploitable vulnerabilities. He will also demonstrate how LogicLibrary's tool, BugScan, can detect these vulnerabilities in application binaries, without any source code.

Matthew Smith will be giving a talk about advanced usage of Linux on the WRT54G.

Short description of talk:

Topic 1: Using the WRT54G to make a cheap network bridge.

Topic 2: Using the WRT54G to monitor and control the physical world. I'll
talk about how you can monitor input pins and turn on/off output pins. With
a simple circuit (which I'll show) you can control anything you want.

Extra Links

Knoppix is a complete Linux distribution that runs directly from CD. One of its most popular uses is as a rescue and recovery CD since it includes a wide range of incredibly flexible tools to fix a computer that won't boot.

In this talk Kyle will discuss a number of different system recovery scenarios and how to use Knoppix (or another live CD) to restore both Linux and Windows systems. Among the recovery scenarios, Kyle will cover:

* Restoring the Linux boot loader
* Recreating the partition table from scratch
* Imaging hard drives, including drives with failures