Know How... (Video)

We go over some of the technology that is must haves for summer fun! A waterproof speaker, easy to deploy pop-up tent, an ultrabook with great battery life, and more!

Summer Fun!

The Fugoo Style-S ~$140
* 4 Drivers (2 x 47mm full-range // 2 x 115mm Bass Radiators)
* 20 Watts (93db)
* Waterproof (IP67)
* Can be paired (Like the Fugoo GO!)
* 15 Hours of battery life
* Voice Speakerphone
* Bluetooth 4.2 for 100 feet range
* Less than 1.7lbs


Winterial POP UP Tent ~$65
* 90" x 50" x 42"
* Fits into a 25" diameter bag
* Instant Setup
* 2 side vents/pockets
* Tent door/screen
* 2 adults.. 3 kids.. or 1 Padre


Toshiba Portege X20W-D (PRT13-U049004)
* MSRP $2,059
* 7th Gen Intel i7-7600U (4MB Cache - Burst to 3.9GHZ)
* Integrated Intel 620 Graphics
* 16GB LPDDR3 Memory (Not Upgradeable)
* 256GB PCIe SSD
* 12.5" 1080p 16:9 Touch Screen
* Gorilla Glass protection & Toshiba "TruPen"
* Ports
-- 1 x USB3.1 Type C (Data, Power, Display, Thunderbolt 3 alternate modes)
-- 1 x USB 3.0
-- Combo Audio Port
* Magnesium Alloy Case
* Harman Kardon speakers with stereo sound
* Weighs 2.43lbs
* 16 hour, 3-cell 44wHr LiPoly battery
* 3-Year warranty

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

We go over the basics of how to monitor traffic on your network using taps and Wireshark!

Let's Talk Taps!


midBit Technologies: SharkTap Gigabit Ethernet Sniffer
* PoE Passthrough
* 350mA draw at 5volts (USB Powered)
* Auto-MDIX
* Aggregates both sides of the conversation to the receive port on the tap
-- (This DOES mean that if the total aggregate bandwidth exceeds 1Gbps, packets will drop
* Drops any packets going into the Tap port

Step 1: Get a Tapping device
* Gig, 10/100, aggregating, tap, hub, SPAN/Mirror port
* See episode 63 of "Know How"
* Padre prefers the Netoptics Gig Zero Delay Tap – But that runs $700-$1000 USED!
* A much more affordable option is the "Throwing Star LAN Tap Pro" from the HakShop - $39.99
* But my new AFFORDABLE favorite is the SharkTap

Step 2: Get a device capable of receiving the tap data stream
* Anything with a WIRED port that is capable of receiving the full speed of your chosen tap
* USB adapters are fine, but remember that USB 2.0 devices top out at 480Mbps. If you're using a Gig tap, you'll drop traffic once the pipe is less than half full.

Step 3: Get Wireshark (www.wireshark.org)
* Mac/PC/Linux – 32/64bit – Choose the version that is right for you.

Step 4: Choose where to place your tap
* The tap will capture the traffic going between the two devices on either side of the tap.
* Tapping the Externals will give you ALL devices on your network.
* Tapping the Wireless AP will give you ONLY the devices connected wirelessly
* Tapping a specific desktop/laptop/set-top box will give you ONLY that traffic

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

How to set up your own wireless bridge, how and why you would want to refresh your IP address, home switch recommendations, and backdoors placed on your computer after an infection by WannaCry.

Switch recomendation:
Netgear ProSAFE JGS516PE ~$150
* (PLUS) Management: Supports VLANs, QoS, Link Aggregation, Traffic Monitoring
* 8 Gigabit Ethernet // Gigabit Ethernet + PoE
* 15Watts per PoE Port
* Lifetime Warranty

HOWEVER... consider this:

Netgear ProSAFE JGS524PE ~$200

* PLUS Management
* 12 Gigabit Ethernet Ports // 12 Gigabit Ethernet + PoE
* 12 Watts per PoE Port
* Lifetime Warranty

And... if you're willing to buy used:
Enterasys D2 ~$150-$300 used
* 12 Gigabit Ethernet Ports + PoE
* Redundant power
* SILENT operation
* SFP X 2
* Full managment + Policy

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

What if we take relatively inexpensive hardware and use it to APPROXIMATE Segmented Security?

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

For full show notes, visit https://twit.tv/shows/know-how/episodes/315

We answer community questions about how WannaCry works and what files are affected, along with WanaKiwi which can help if you've been infected, but it's not guaranteed.

The original memory scrubbing, prime number searching WannaKey decryptor tool (for XP) was written by Adrien Guinet (@adriengnt) and then used as the base for Wanakiwi developed by Benjamin Delpy (@gentilkiwi).

How it works:

• WanaKey was developed by Ardien Guinet (@adriengnt)
• WanaKey was used as a base for WanaKiwi

WanaKey only works on XP

WanaKiwi works on XP, Vista, 7, 8, 8.1

They're "Memory Scrubbing" programs:

• The way that WannaCry works is that it generates a public and private key.
• The keys are generated using primes
• WannaCry then deletes the private key // you need to pay the ransom to get that key for decryption
  • WanaKey & WanaKiwi both take advantage of the fact that even though the program deletes the private key, the PRIMES that were used to generate that key is still in memory
  • However, this is VERY time sensitive
• WK scans the address space of the WannaCry process (This is why the PID is important)
  • We need to find the keys BEFORE the process reuses that memory space
  • This is why you can't reboot or kill the process

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

How to save conditions on an Arduino for a sprinkler project, is X-Point worth getting for a home PC, first look at the Acer Predator z271t, and why you should clean your PC once in a while.

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

We take a look at how the ransomware WannaCry works and how, along with how not to get infected and what to do if you are.

WannaCry

Infection
* Used the NSA-developed "Eternal Blue" that was released by the shadow brokers
* Initial infection was via emailed link or attachment
* Once Infected
1. Checks a domain to see if it responds (kill-switch)
2. Exploits an SMB vulnerability to move laterally
3. Installs the "DoublePulsar" Backdoor (which stays even if ransom is paid for decrypt)
4. Demands $300-$600 in bitcoin
* We have to wait for numbers, but anecdotally it seems that XP is taking the brunt of the attack

First Impact
* > 400,000 computers infected so far
* > 200 countries (Across Europe, Asia, some of the Americas)
* Shut down manufacturing at Renault in France and Romania
* Shut down Nissan in England
* Also affected health services in Brittian and required patients to be redirected

Mitigation
* Didn't hit the US as much b/c by the time the attack had turned, filters were attuned to the Phishing attack
* A British researcher, "@MalwareTechBlog" on Twitter, noticed that the malware was trying ot connect to a domain. He registered it and it mitigated the attacks.
- We know he's a 22-year old from south-west England who works for LA-based threat-intelligence company, "Kryptos Logic"

Second Impact
* Researchers are confirming that there is a second revision of WannaCry in circulation that removed the kill-switch check
* There have been MILLIONS of office computers left attended over the weekend, many probably left on.
- There WAS a rise in infections, but not the MASSIVE infection some were worried about

Second Mitigation
* Non-tech media (and even CNET/CBS) are speaking of this attack as if it is over. VERY not the case
* The second version does NOT check for the kill-switch site
* Steps to take:
1. Backup
2. No clicking, no attachments
3. If you are in a high-risk network, disconnect, d/l the patches from a secured machine, run offline, reconnect
4. If you have the tools, look for probing SMB attacks

Notes
* MS released a patch for this in March 2017
** They ALSO released a patch for XP and Sever 2003, even though those are no longer in use.

What to watch for LLMNR
* Local-Link Multicast Name Resolution
* This is a Windows protocol that provides name resolution for hosts on the same local link

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

How to run fiber in an existing conduit run, save videos from YouTube, alternative power sources, and Fugoo speaker review!

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.

WiFi is EVERYWHERE, so why run wires?

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

For full show notes, visit https://twit.tv/shows/know-how/episodes/310

Patrick shows us how to make our own resin castings for cosplay and we discuss the recent Silicon Valley Comic Con.

Silicon Valley Comic Con

Resin casting
Materials:

• Silicone Putty:
  • Smooth-On Silicone Mold Making Rubber
  • Alumilite Amazing Mold Putty
  • EasyMold Silicone Putty
• Mold release agent
  • Mann Release Technologies Ease Release 200
  • Castin'Craft Mold Release & Conditioner
• Resin
  • EasyCast Clear Casting Epoxy
  • Alumilite Amazing Casting Resin
  • Alumilite Amazing Clear Cast

Create a silicone mold

• Take equal parts of "Component A" and "Component B"
• Ball them up to make sure the balls are about the same size
• Mix them together so there are no swirls (about 1 minute)
• Roll it into a ball and then flatten slightly. Press object into putty.
• Allow sitting for 25 minutes before removing the object.
• Allow for additional curing time if possible. A hair dryer can be used to accelerate curing.

Pour the resin

• Pour equal amounts of "A" and "B" into separate plastic cups
• Pour them together into a mixing cup slowly until no swirls are seen.
• Pour slowly into mold and allow the resin to flow naturally
• Allow curing for 18-24 hours

Hosts: Fr. Robert Ballecer, SJ and Bryan Burnett

Guest: Patrick Delahanty

Connect with us!

• Don't forget to check out our large library of projects at https://twit.tv/shows/know-how.
• Join our Google+ Community.
• Tweet at us at @PadreSJ, @Cranky_Hippo, @PDelahanty, and @Anelf3.

Thanks to CacheFly for the bandwidth for this show.