SOURCE Conference Blog

L0phtCrack is back! At a special information session at SOURCE Boston (Thursday, 10:15am), the team that brought you L0phtCrack will be releasing version 6 of the highly-acclaimed Windows password auditing tool. Come to the session to learn about this release, its new features and platform support, and the story of the product from the days of the L0pht, to @stake, Symantec, and finally back to the L0pht. Expect www.l0phtcrack.com to go live soon! See you at SOURCE!

you can download the videos straight to your ipod or iphone now by subscribing to the following podcast

http://sourceboston2008.blip.tv/rss/itunes

As you may have noticed SourceBoston is releasing video of the talks to the public free. We could use some help with various aspects of dissemination however.

1. Transcripts for each talk
2. Upload to Youtube, Metacafe, etc
3. Post to your blog

1. We could really use transcripts for the various talks so we can post them on the main board. If someone sets up a wiki this could even be done in stages by various people. Our choice of Creative Commons licensing means you don’t have to fear us acting like the RIAA and suing you for doing us this kindness.

2. In particular Youtube is a bit behind the times and won’t allow video which is more then 10 minutes long. Transcoding the video is fairly time consuming and we are currently offering two sizes (web video at 320×240 and dvd size at 720×480) which means we spend a lot of time in front of Handbrake. It would be great if someone could slice up the talks into 10 minute segments and cross post. (alternatively one could takeover Youtube and institute a new policy that allowed for realistic video lengths…). Again, our licensing choice means you don’t have to worry about us suing you for posting this material.

3. We really enjoy having the talks from SourceBoston out there and when you blog about one of the talks or speakers feel free to embed the video itself. Blip.tv has a nifty drop down menu on the video page which generates the code to embed video.

Lastly, I’m forced to decide what videos come out when and I’ve been choosing rather arbitrarily at this point. If you would like to voice your opinion on which videos get released publicly sooner please leave a comment with your preference. We’ll post a time table soon with the schedule. If the video you want to see is going to take longer then you would like it is always an option to buy the video

EDIT: This is not an April Fools post.  I really could use the help!

Click To Play

Careers in information security are often difficult to navigate, with the industry changing more and more radically every year. This is even more true in an economy that isn’t necessarily thriving. We’re going to talk about the important skills, traits and knowledge that a security pro needs to build a long-term and successful career – not just the usual stuff (like “get certified”), but the real-world knowledge that teaches you how to have the job that keeps you challenged, growing and well-compensated.

Talk by Raffael Marty:

With the ever-growing amount of data collected in IT environments, we need new methods and tools to deal with them. Event and Log Analysis is becoming one of the main tools for analysts to investigate and comprehend the state of their networks, hosts, applications, and business processes. Recent developments, such as regulatory compliance and an increased focus on insider threat have increased the demand for analytical tools to help in the process. Visualization is offering a new, more effective, and simpler approach to data analysis. To date, security visualization, has mostly failed to deliver effective tools and methods. This presentation will show what the New York Times has to teach us about effective visualizations. Visualization for the masses and not visualization for the experts. Insider Threat, Governance, Risk, and Compliance (GRC), and Perimeter Threat all require effective visualization methods and they are right in front of us – in the newspaper.

L0pht Heavy Industries, the reknowned Boston-area hacker think-tank, reunited for a panel discussion on March 14 to discuss the last decade of the security industry and how it has evolved.Discussion included insights on new security technologies and their predictions on the future of the industry. Panel members included:

• DilDog
• John Tan
• Mudge
• Silicosis
• Space Rogue
• Weld Pond

Dr. Dan Geer is currently Vice-President and Chief Scientist at Verdasys, a software solutions company designed to protect and manage the flow of data essential to the operation of businesses on a global basis. Geer is considered to be an expert in computer security and has testified before Congress on multiple occasions and has served in formal advisory roles for the Federal Trade Commission, the National Science Foundation, the Treasury Department, the National Research Council, the Commonwealth of Massachusetts, the Department of Defense, the National Institute of Justice and the Institute for Information Infrastructure Protection.The full text of this talk is available here

As you may have heard by now SourceBoston is releasing the video of all the speaker talks free to the public. We have opted for the Creative Commons BY-SA-NC license which means you are free to do whatever you like with the video with the exception of commercial uses. We are busily encoding the videos right now for optimized web distribution and they will be available in full DVD quality formats via Blip.TV. If you don’t have a spiffy way to read video RSS feeds we’ve even teamed up with Miro (a free and open source Internet TV client) to provide you a cobranded player which is automatically tuned to receive all the videos just as fast as this author’s jankity PowerBook G4 can churn them out. If you would like them faster please consider donating a spiffy new laptop

We will initially release the videos that everyone is clamoring for (the keynotes, the l0pht panel, and the Tor talk) followed by a release every week. Let’s go over that one more time. Every week for the next 36 weeks we here at SourceBoston will release a new talk for you. You are free to do just about anything you like with these videos. Copy them, post them to Youtube, post them to TPB, whatevs. Your only constraints are as follows:

1. Attribute the video to us (SourceBoston)(a link back would be appropriate)
2. Retain the exact same license (CC BY-SA-NC)
3. Don’t profit off this work without asking us first

As for number three we do not consider deriving ad revenue from posting the clip to your blog profiting. So feel free to do that too. In fact the whole idea is that we encourage you to post the videos and talk about it. These are some amazing speakers and should be shared. For those who require the instant gratification of web video we’ve even setup a channel for you here:

http://sourceboston2008.blip.tv/

Here are the links to our cobranded players. This will automatically download the high quality DVD rips in Divx format.

OS X

Windows