August 2017 - USHE-assess - lists.utahtech.edu

[Fwd: Re: WSU Security Assessment]
by Goble, Andrew 15 Sep '17

15 Sep '17

FYI, for those of you planning to participate at Weber, they want to go November 27 - December 1. Thanks, Andrew -------- Forwarded Message -------- From: Andrea Grover <andreagrover1(a)weber.edu> To: "Goble, Andrew" <Goble(a)dixie.edu> Cc: bretellis(a)weber.edu <bretellis(a)weber.edu> Subject: Re: WSU Security Assessment Date: Thu, 31 Aug 2017 07:41:05 -0600 I talked this over with Bret, and we think the week of the 27th to the 1st would be best. Andrea

1 2

WSU Assessment Schedule
by Goble, Andrew 24 Aug '17

24 Aug '17

So Weber said late September or November, with a preference for November. I think I feel the same way with as busy as September and October are shaping up to be with conferences, etc. What are your schedules looking like on the following weeks: November 13 - 17 November 27 - December 1 Thanks, Andrew

3 2

Re: [USHE-assess] [Ext] WSU Assessment Schedule
by Jake Johansen 23 Aug '17

23 Aug '17

November 13 – 17 will work best for me if we need to do a November assessment. Jake On 8/23/17, 2:46 PM, "USHE-assess on behalf of Goble, Andrew" <ushe-assess-bounces(a)lists.dixie.edu on behalf of Goble(a)dixie.edu> wrote: So Weber said late September or November, with a preference for November. I think I feel the same way with as busy as September and October are shaping up to be with conferences, etc. What are your schedules looking like on the following weeks: November 13 - 17 November 27 - December 1 Thanks, Andrew _______________________________________________ USHE-assess mailing list USHE-assess(a)lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

1 0

Re: [USHE-assess] [Ext] Re: Needs vs Wants
by Jake Johansen 23 Aug '17

23 Aug '17

I agree. On 8/18/17, 1:26 PM, "USHE-assess on behalf of Goble, Andrew" <ushe-assess-bounces(a)lists.dixie.edu on behalf of Goble(a)dixie.edu> wrote: Given what we are doing, I've always been just a little more comfortable with the hardware hypervisor separation provided by a standalone box. That said, yes, we could run it in our farm no problem. I see no signs of imminent hardware failure and I could stock a spare drive or two for the existing box, its just 7 or 8 years old and there are no guarantees. On Fri, 2017-08-18 at 11:41 -0600, Matt Lorimer wrote: > I was originally in the: Let's do the responsible thing and upgraded > the oldest hardware first camp. Then I thought about it and realized > that if that box dies, we can run those vm's on the virtualization > environment of any institution (or the USHE gear). Thinking more, I > realized that cracking hashes faster would make things a little > faster/smoother while on-site for audits. Plus having multiple spots > to be able to crack hashes is handy too. > > Think the cracking rig is the way to go as long as we are comfortable > running basegate workloads from one of the institutions in the event > of hardware failure. > > Matt > > On 08/18/2017 09:44 AM, Mark Walton wrote: > > Whatever you think is best... > > > > On Thu, Aug 17, 2017 at 11:03 AM, Jon Barclay <Jon.Barclay(a)uvu.edu> > > wrote: > > > I vote to build the bigger password cracking rig with the budget. > > > :-) > > > > > > > > > > > > > > > > > > > > > On Thu, Aug 17, 2017 at 10:43 AM -0600, "Goble, Andrew" <Goble@di > > > xie.edu> wrote: > > > > > > > So I am coveting a rig like this now: https://www.shellntel.com > > > > /blog/2017/2/8/how-to-build-a-8-gpu-password-cracker > > > > > > > > 4 card GTX 1080 ti set ups are doing NTLM and NetNTLM in the > > > > 200 and 100 GigaHashes/s range, respectively... this rig would > > > > double that. > > > > > > > > For reference, our 3 card GTX 980s do 64 GH/s for NTLM and 35 > > > > GH/s for NetNTLMv1 > > > > If we built this rig, we'd blow our whole upgrades budget on it > > > > and would have to live with our elderly VMware server down here > > > > for another round. > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > USHE-assess mailing list > > > USHE-assess(a)lists.dixie.edu > > > http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess > > > > > > > > > > > > > > _______________________________________________ > > USHE-assess mailing list > > USHE-assess(a)lists.dixie.edu > > http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess > > _______________________________________________ > USHE-assess mailing list > USHE-assess(a)lists.dixie.edu > http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess _______________________________________________ USHE-assess mailing list USHE-assess(a)lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

1 0

Needs vs Wants
by Goble, Andrew 18 Aug '17

18 Aug '17

So I am coveting a rig like this now: https://www.shellntel.com/blog/2017/2/8/how-to-build-a-8-gpu-password-crack… 4 card GTX 1080 ti set ups are doing NTLM and NetNTLM in the 200 and 100 GigaHashes/s range, respectively... this rig would double that. For reference, our 3 card GTX 980s do 64 GH/s for NTLM and 35 GH/s for NetNTLMv1 If we built this rig, we'd blow our whole upgrades budget on it and would have to live with our elderly VMware server down here for another round.

4 4

USHE Assessment Team Meeting
by Goble, Andrew 16 Aug '17

16 Aug '17

16th looks like it will work for most. Will likely use Google Hangouts unless somebody has access to something better. I'll get details out beforehand. Thanks, Andrew

2 3

Next Round
by Goble, Andrew 07 Aug '17

07 Aug '17

Hey guys, The CIOs approved us to keep going with the assessments for fiscal years 2018 and 2019. I'd like to get Weber scheduled this fall, but first I wanted to see if we can all jump on a Google Hangout or something like it for an hour or two to talk over our strategy and tactics and our whole process in general. Just want to make sure we are all on the same page and keep the assessments as high quality as we can. I'll throw out a couple of times and dates here, let me know what works. Would love to have everyone on the call, but even if we just had one per institution that would probably work. August 10 - Late morning 10 - 11ish August 15 - Morning or Afternoon August 16 - Morning or Afternoon August 17 - Morning or Afternoon The next week (August 21) is the first week of school here, the beginning of the week would be crazy but I can set something up late in that week if that is best for everyone else. Let me know what works for you all. Thanks, Andrew

3 2

Re: [USHE-assess] Next Round
by Allen Hill 07 Aug '17

07 Aug '17

I could do the 10th, but I’m out for vacation the 14th-22nd. Thanks! -Al On 8/7/17, 3:27 PM, "USHE-assess on behalf of Goble, Andrew" <ushe-assess-bounces(a)lists.dixie.edu on behalf of Goble(a)dixie.edu> wrote: Hey guys, The CIOs approved us to keep going with the assessments for fiscal years 2018 and 2019. I'd like to get Weber scheduled this fall, but first I wanted to see if we can all jump on a Google Hangout or something like it for an hour or two to talk over our strategy and tactics and our whole process in general. Just want to make sure we are all on the same page and keep the assessments as high quality as we can. I'll throw out a couple of times and dates here, let me know what works. Would love to have everyone on the call, but even if we just had one per institution that would probably work. August 10 - Late morning 10 - 11ish August 15 - Morning or Afternoon August 16 - Morning or Afternoon August 17 - Morning or Afternoon The next week (August 21) is the first week of school here, the beginning of the week would be crazy but I can set something up late in that week if that is best for everyone else. Let me know what works for you all. Thanks, Andrew _______________________________________________ USHE-assess mailing list USHE-assess(a)lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

3 2