____________________________PLAY ANN____________________________

____________________________PLAY OPENING MUSIC____________________________

[Keith] Welcome to the Mind Of Root. I'm Keith Albright

[Rich] and I'm Rich Niemeier.

[Steve] and I'm Steve Murawski and this is Episode 125 streaming live on Ustream.tv on Wednesday December 16th, 2009. Today's show is sponsored by Quest Software; Helping you rule your domain.

Chit-Chat - What's going on with you?

[Steve]

[Rich]

[Keith]

  • Fighting a cold since the weekend
  • Had the big neighborhood party over the weekend. 24 kids and a visit from Santa.

Housekeeping Items

[Rich]

[Steve]

[Keith]

  • 'License For That' segment got screwed up and I didn't have time to fix. Included with this episode.
  • Created the Mind Of Root Podcast group on Facebook. Join and share.

____________________________READ QUEST AD COPY____________________________

Before you acquire power, you must acquire knowledge – and Quest Software has what you need! In Jeffery Hicks’ e-book, “Managing Active Directory with Windows PowerShell,” learn how PowerShell helps you master local accounts and groups, password management, security and permissions and much, much more. You’ll also learn about the PowerShell extras and out-of-the-box features that will help you control Active Directory.

Don’t wait – visit www.quest.com/powershellbook to register for your free copy and see why PowerShell and Quest Power GUI are the ultimate Windows management tools. today.

____________________________READ TPN PROMO____________________________

  • Greater Milwaukee Script Club [STEVE]
-First meeting January 19th. Details at http://mkescriptclub.eventbrite.com/ or my blog.
-
-Link: http://blog.usepowershell.com/2009/12/script-club-coming-to-the-greater-milwaukee-area/
  • Next End User Problem [KEITH]
-First was Remote desktop (GoToMyPC?, etc), then rogue wireless AP's, now storage.
-PogoPlug? lets you put storage online and accessible from anywhere.
-What's next to challenge our security framework. (Bow before my firewall concept is dead)
-Link: http://www.networkworld.com/columnists/2009/120709-gearhead.html
  • WIX [STEVE]
-Windows Installer XML - declarative way to create an MSI file
-Not too bad if you need to deploy some custom files
-Get's much more complicated when you want install anything of significant size
-Link: http://wix.sourceforge.net/
  • AT&T - Boy Scouts 100 years [RICH]
- the so the Boy Scouts of America did an Audio Cast, sponsored by At&t
- I was wondering if you think it is rude for me to suggest they do a full Audio - Video Cast
- Besides the internet was cutting out. I hope it was on our side and not AT&T
-Link: http://
-Jonathan Medd (co-host of the Get-Scripting Podcast) has been doing a series on th enew cmdlets in Version 2 of PowerShell
-Great way to get exposed to the new stuff in PowerShell V2 with some nice context around it.
-Link: http://www.jonathanmedd.net/tag/cmdlet-series
-Link: http://get-scripting.blogspot.com/
  • Creative Way to Manage Friendships [STEVE]
-1.By categorizing your friends, you can then allocate your time and resources to your friends in proportion to their level of importance.
-2.It helps you to evaluate your friendships objectively rather than emotionally
-3.It is dynamic.
-4.It triggers action: review the list and do something for friends you have not contacted in a while.
-Link: http://www.gtdtimes.com/2009/11/26/a-creative-way-to-manage-your-friendships/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+GtdTimes+%28GTD+Times%29&utm_content=Google+Reader
  • More Performance Monitoring [STEVE]
-Been working with PAL and doing some perfmon work at a grand scale.
-Since PAL is written by a MS Premier Support guy - Clint Huffman, it's results carry some weight.
-The reporting from PAL is great, especially when you need to go to a customer and tell them a server is underpowered.
-Link: http://www.codeplex.com/PAL
  • How much data is too much for Gov't to collect? [KEITH]
-Data Driven Crim prevention
-What crosses the line in info collecting? How long should do/should they keep it?
-Link: http://www.informationweek.com/news/business_intelligence/information_mgt/showArticle.jhtml;jsessionid=ZGNFS2CSOA53ZQE1GHPCKHWATMY32JVN?articleID=221700005
-Link: http://www.informationweek.com/1248/index.jhtml;jsessionid=ZGNFS2CSOA53ZQE1GHPCKHWATMY32JVN
-Link: http://www.jsonline.com/news/wisconsin/78723127.html

____________________________PLAY SWEEPER____________________________

Listener Feedback

From listener....Mitch

I would not have even thought of friending you on facebook. I am not even broadcasting anything on the web and still have a large number of people try and friend me on FB. I only confirm my friends I actually know.

If you were to make a page I would be a fan of mind of root on FB. Love the show.

From listener....Petri

This has nothing to do with this episode but:

Just wondering where goes line between teaching peoples to hack or crack and just giving information about how crackers can do things so you could know how to protect?

I mean that I have some texts on my webpage where I wrote about example how to change mac-address of your nic but that is there just to show how easy it is so peoples would not trust too much to mac-filttering and so on. So is example that teaching peoples to hack or is it just giving out information so peoples could protect themself and their networks?

[KEITH]I think it all depends on how you view responsible disclosure. Notify vendor only then wait for patch before making info public. Some vendors take a long time and even when patch is available, end users don't always patch. Others feel making this info available immediately forces the vendors hand to produce a patch quickly (patch cycles be damned) and be more careful in the future. It also forces the end-users hand to patch as an exploit could be ready more quickly. I favor responsible disclosure as it is the best for the end-user and, after all, isn't that who you intend to protect.

In this case, it is not a flaw; MAC address changing is by design. I don't see it as irresponsible to teach this type of hack. yes, it circumvents some security measures, but so does jailbreaking an iPhone, etc.

Website Picks

Rich - http://noradsanta.orgwhere is that old man? wheres my present?

Steve - http://

Keith - http://www.youtube.com/watch?v=tgbNymZ7vqY&feature=PlayList&p=C9E4DEEA577A3A79&index=0&playnext=1

Last Call

Anyone....Anyone....Buehler.....Buehler....

Closing Test- I'd like to thank everyone in the chat on UStream?.tv we always enjoy the additional comments and interaction. everyone should remember that there are numerous ways one can interact with the show. For listener feedback post comments on the main show site, or email us at feedback[at] MindofRoot?.com.

It's always fun to see where our listeners live, put a pin on our frappr map there is a link to this on the main show site.

To become even more involved you can leave suggestions for future shows on the topics request wiki. Again a link to the wiki can be found on the main show site.

There is a link to the wiki on the main show site. If you would like to participate in the show; either through an interview, a segment contribution, or any other way, please let us know. We are also a member of the Techpodcast network. Check out some other great shows by going to Techpodcast.com.

test end-

All right, well that is it for the show. For listener feedback; you can email us at Feedback [at] mindofroot.com or post a comment on the main site at mindofroot.com. If you use iTunes, you could write a review. If you just want to show us your listening, drop a pin on the Frappr map...there's a link on the show site.

Lastly, you can drop any show ideas or topic requests on the wiki. There is a link to the wiki on the main show site. If you would like to participate in the show; either through an interview, a segment contribution, or any other way, please let us know. We are also a member of the Techpodcast network. Check out some other great shows by going to Techpodcast.com.