Network Security - Revision history

BobJonkman: Removed stray text, comments

2019-03-25T09:55:11Z

Removed stray text, comments

BobJonkman: Moved Meeting Notes to own page

2019-03-25T09:50:08Z

Moved Meeting Notes to own page

BobJonkman: /* Resources */ Added UofW e-mail breach

2019-03-13T20:30:22Z

Resources: Added UofW e-mail breach

BobJonkman: Still more meeting notes

2019-03-12T00:58:56Z

Still more meeting notes

BobJonkman: /* Resources */ Add cartoon, another security breach report

2019-03-11T04:58:43Z

Resources: Add cartoon, another security breach report

MarcPare: Added the location. -- Marc

2019-03-04T20:31:12Z

Added the location. -- Marc

BobJonkman: Add shutdown anecdote

2019-03-01T06:25:56Z

Add shutdown anecdote

BobJonkman: /* Resources */ Add NetAdmin Error resources

2019-01-23T23:05:25Z

Resources: Add NetAdmin Error resources

BobJonkman: Add "Greatest Threats" section to Resources

2019-01-22T23:53:22Z

Add "Greatest Threats" section to Resources

BobJonkman: Unlink Nipper Tool image from Wikipedia

2019-01-02T08:50:41Z

Unlink Nipper Tool image from Wikipedia

@@ Line 3: / Line 3: @@
 ; Date: Monday, 11 March 2019 from 7&#x3A;00pm to 9&#x3A;00pm {{ical|url=https://www.meetup.com/NetSquared-Kitchener-Waterloo/events/257702185/ical}}
 ; Meetup Event: https://www.meetup.com/NetSquared-Kitchener-Waterloo/events/257702185/
-; Location: *** Room 1300 *** -- Conrad Grebel University College, 140 Westmount Rd. N., Waterloo, Ontario {{map|url=https://osm.org/go/ZXnbg2DSE--?m=}} <!-- xxxxx Revise as needed, of course --> <!-- xxxxx Revise as needed, of course -->
+; Location: *** Room 1300 *** -- Conrad Grebel University College, 140 Westmount Rd. N., Waterloo, Ontario {{map|url=https://osm.org/go/ZXnbg2DSE--?m=}}
 <!-- ; Event Announcement: [[xxxxx Page Name/Announcement xxxxx YYYY-MM-DD]] --> <!-- URL for the announcement message sent a few days before the meeting -->

@@ Line 5: / Line 5: @@
 ; Location: *** Room 1300 *** -- Conrad Grebel University College, 140 Westmount Rd. N., Waterloo, Ontario {{map|url=https://osm.org/go/ZXnbg2DSE--?m=}} <!-- xxxxx Revise as needed, of course --> <!-- xxxxx Revise as needed, of course -->
 <!-- Upper Board Room in First United Church, 16 William Street West, Waterloo, Ontario {{map|url=https://osm.org/go/ZXna93PBA?m=}} -->
-<!-- Communitech Jelly Bean Room 1st Floor, 151 Charles Street West, Kitchener, Ontario {{map|url=https://osm.org/go/ZXnwUqGU--?m=}} -->
+<!-- Communitech Jelly Bean Room 1st Floor, 151 Charles Street West, Kitchener, Ontario {{map|url=https://osm.org/go/ZXnwUqGU--?m=}} --> {{:Collaborative Work Space}}
 <!-- Room 1301 -- Conrad Grebel University College, 140 Westmount Rd. N., Waterloo, Ontario {{map|url=https://osm.org/go/ZXnbg2DSE--?m=}} -->
 <!-- ; Event Announcement: [[xxxxx Page Name/Announcement xxxxx YYYY-MM-DD]] --> <!-- URL for the announcement message sent a few days before the meeting -->
@@ Line 17: / Line 21: @@
 * [[Network Security/Meeting Notes 2019-03-11]]
 [[Category:NPSA]]
 [[Category:Events]]

@@ Line 31: / Line 31: @@
 * Claim: The greatest threat in Network Security is NetAdmin or User Error
 ** [[File:Network Security Dave.jpg|640px]]
 ** Data exfiltration due to user error:
 *** [https://www.thestar.com/politics/provincial/2019/01/21/privacy-breach-hits-45000-recipients-of-ontarios-disability-support-program.html Privacy breach hits 45,000 recipients of Ontario’s disability support program | The Star]
@@ Line 39: / Line 41: @@
 *** <blockquote>On Dec.19, the day following Solomon's exchange with Caissie, the city received notice from CentralSquare Technologies, the Florida company providing the Click2Gov parking server software, that there was no problem with the system. "Resolution: Checked Click2Gov server for evidence of malware/possible breach, no evidence found of breach/malware," says the statement signed only "Customer Support."</blockquote>
 ** Pre-emptive shutdown of mail system to prevent a virus attack that might shut down the mail system.
 === Meeting Notes ===

← Older revision		Revision as of 00:58, 12 March 2019
Line 39:		Line 39:
	*** <blockquote>On Dec.19, the day following Solomon's exchange with Caissie, the city received notice from CentralSquare Technologies, the Florida company providing the Click2Gov parking server software, that there was no problem with the system. "Resolution: Checked Click2Gov server for evidence of malware/possible breach, no evidence found of breach/malware," says the statement signed only "Customer Support."</blockquote>		*** <blockquote>On Dec.19, the day following Solomon's exchange with Caissie, the city received notice from CentralSquare Technologies, the Florida company providing the Click2Gov parking server software, that there was no problem with the system. "Resolution: Checked Click2Gov server for evidence of malware/possible breach, no evidence found of breach/malware," says the statement signed only "Customer Support."</blockquote>
	** Pre-emptive shutdown of mail system to prevent a virus attack that might shut down the mail system.		** Pre-emptive shutdown of mail system to prevent a virus attack that might shut down the mail system.
		+
		+
		+	=== Meeting Notes ===
		+	Spoke about resources, war stories
		+
		+	* Proprietary mail systems
		+	** Errors in implementation, makes mail inaccessible, or sends mail when unwanted.
		+	** Corporate culture prevents people from speaking of security flaws
		+
		+
		+	* Bugs in the software
		+	* Errors in procedures
		+	*
		+
		+
		+
		+	==== The Cloud ====
		+	* "If the data was in the cloud it would have been safe"
		+	* What is The Cloud?
		+	** Somebody manages the servers, still subject to human error
		+	** But reduces the human interaction that is needed
		+	** Maybe if '''everything''' is run by robots...
		+	*** But that's not the way Nonprofits operate, engaging people to be more involved
		+
		+
		+	* Open Source groups want more interaction, so still room for error
		+	** eg. LibreOffice: Get a professional to manage website? Or keep local group involvement? No to robots
		+
		+	* Robots have programmers too
		+	** One more level of abstraction
		+
		+
		+	* Problems solved?
		+	** Email spoofing, phishing schemes: Joe Jobs, third-party addressbooks breached
		+	** Could contact the apparent sender, but that person may not be involved in the message at all
		+
		+
		+
		+	=== Tour of pfSense ===
		+
		+
		+	=== Multiple connections to isolate traffic ===
		+
		+
		+
		+
		+
		+
		+
		+
		+
		+

@@ Line 30: / Line 30: @@
 * Claim: The greatest threat in Network Security is NetAdmin or User Error
 ** Data exfiltration due to user error:
 *** [https://www.thestar.com/politics/provincial/2019/01/21/privacy-breach-hits-45000-recipients-of-ontarios-disability-support-program.html Privacy breach hits 45,000 recipients of Ontario’s disability support program | The Star]
 ** NetAdmin failed to renew expired domain names:
 *** [https://arstechnica.com/information-technology/2019/01/godaddy-weakness-let-bomb-threat-scammers-hijack-thousands-of-big-name-domains/ GoDaddy weakness let bomb threat scammers hijack thousands of big-name domains | Ars Technica]
 ** Pre-emptive shutdown of mail system to prevent a virus attack that might shut down the mail system.
 [[Category:NPSA]]
 [[Category:Events]]

@@ Line 20: / Line 20: @@
 ==== Resources ====
 * Firewalls
-** The most secure firewall: [[File:Nipper for Electronic Wire (Old).png|150px|link=Wikipedia:Nipper (tool)]]
+** The most secure firewall: [[File:Nipper for Electronic Wire (Old).png|150px]]
 ** Another secure firewall: [https://www.pfsense.org/ pfSense]
 * Intrusion Detection Software