Hey,

That time frame sounds great.  Sorry about not making it out to the bbq this weekend, I had to deal with a hostile roommate situation that still isn't fully resolved.  Long story short, if you have a buddy who's looking for a room across from campus for $300 a month, send 'em my way.
    Anyhow, I wanted to go into a little further detail about opportunities that I see for WCSC and the potential for expansion / reinvigoration for the club.  First off, if we can get a room for Saturdays anywhere, it'll be extremely advantageous.  It'll also involve a lot of legwork to set up everything and get everyone acquainted with the resources at our disposal.  I'm not entirely sure about what are setup is right now in terms of resources and their configs, so if some of this is already done (like I know we have a vpn and selected FreeBSD jails) pardon the repetition.
    What I would like to do for Saturdays has 3 main requirements, which we already have: 1) Networking hardware - a switch & cat5; 2) FreeBSD jails or any sort of shell acct for attendees; 3) VMware Image farm, hosting VM's of old contests, os'es, etc.  I'd like to be able to have the Vmware box on the same VPN as the FreeBSD jails, but on a separate subnet. 
    The way that I see the actual sessions on Saturdays going is basically having those who show up pick a project from a list of topics, and go through hands on labs using different VMs.  I think the only rules insofar as restrictions on usage goes should be 1) no being silly enough to launch attacks from your target box to your target box, and 2) no munging around with pre-existing VM snapshots.  
    In order to generate support and interest for Saturdays, I think that we should have an official sounding name for it, so we can build it up as an item for a sales pitch for people interested in the group, and it lends credibility for further publicity we receive.  I also think that we should also eventually try for inter-club CTFs using old game images, since we'll already have the VM's easily accessible.  I think we could call the whole setup something along the lines of a "Vulnerability Research Lab," and have Saturdays be "Lab Sessions."
    Also, in order to pull in more MIS people, it'd be nice to throw up some images that are of interest to those of us more corporate-minded, ie, Exchange Server, MSSQL, Win Server 2k3, etc.  We could advertise it as a resume building opportunity, and have a routine where we see how quickly / well they can harden a MS system before we start throwing canned exploits at them, similar to a laid-back version of SECCDC.  I really think we can gain membership and support by reaching out to the MIS majors and luring them in with the promise of a resume-builder. 
    Back to CTF land; I know we don't really have in place a generic scoring system for a CTF or an automated key-dispersal/judging system.  But back in August after Defcon, Kenny and Dustin apparently started writing some tidbits to create such a system.  I don't know what happened there, but I'd definitely like to get that off the ground and, once functioning, use it for mock CTF's once a month.
    As for resources that I can throw into the ring, we have that 5U monster here at work, and I'm more than willing to do the setup legwork for that and any other boxes we have access to.  What I'd like to do next is get organized and in the loop as far as our current resources go, so I can gauge where we're at and what needs to be done to get to the point where we can actually host Saturdays.  

Sorry if this was a more verbose response than you were expecting ;P

- Zak

On 1/28/08 6:52 PM, "Sterling Jay Little" <sterling.little@gmail.com> wrote:

> Hey,
> So I'm going to try requesting a room for Saturdays. Does 10am-5pm sound good?
> 
> -Jay