
Hey guys,
Still nothing definite out of UEN, I'm considering an assessment there officially not happening any time soon at this point.
UofU is still very much alive, however. Working on getting a call this week with Dan and Corey to talk scope.
UofU can host us the week of October 13 - 17 or the week of November 3 - 7:
Based of prior responses:
----------------- Oct 13th - 17th Go - Jon, Dave, myself, Chuck (may need to skip out pretty early Friday) No Go - Mark (could be there Thursday / Friday)
If we go this week we would for sure need both of you Jon and Dave if Leroy will go for that. ----------------- Nov. 3rd - 7th Go - Me, Mark, Jon
Please let me know if this week is a possibility. We may have some options for additional help if we go this week. =================
I'd like to let the UofU guys know this week when we plan to come.
Thanks, Andrew

The week of October 13th is probably better for me.
We already talked with LeRoy and he is OK with us both being gone.
Jon
Sent from my iPhone
On Sep 15, 2014, at 11:50 AM, "Andrew Goble" goble@dixie.edu wrote:
Hey guys,
Still nothing definite out of UEN, I'm considering an assessment there officially not happening any time soon at this point.
UofU is still very much alive, however. Working on getting a call this week with Dan and Corey to talk scope.
UofU can host us the week of October 13 - 17 or the week of November 3 - 7:
Based of prior responses:
Oct 13th - 17th Go - Jon, Dave, myself, Chuck (may need to skip out pretty early Friday) No Go - Mark (could be there Thursday / Friday)
If we go this week we would for sure need both of you Jon and Dave if Leroy will go for that.
Nov. 3rd - 7th Go - Me, Mark, Jon
Please let me know if this week is a possibility. We may have some options for additional help if we go this week. =================
I'd like to let the UofU guys know this week when we plan to come.
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

Ok, more developments on this in the last couple days. I have a call with Dan and Corey next Tuesday to talk scope and they have settled on the week of November 3rd. Block out your calendars. Jon, let me know what's going to work for you that week, I'll either plan on both of you and Dave or start looking for extra help.
Thanks, Andrew
On 09/15/14 12:50, Andrew Goble wrote:
Hey guys,
Still nothing definite out of UEN, I'm considering an assessment there officially not happening any time soon at this point.
UofU is still very much alive, however. Working on getting a call this week with Dan and Corey to talk scope.
UofU can host us the week of October 13 - 17 or the week of November 3 - 7:
Based of prior responses:
Oct 13th - 17th Go - Jon, Dave, myself, Chuck (may need to skip out pretty early Friday) No Go - Mark (could be there Thursday / Friday)
If we go this week we would for sure need both of you Jon and Dave if Leroy will go for that.
Nov. 3rd - 7th Go - Me, Mark, Jon
Please let me know if this week is a possibility. We may have some options for additional help if we go this week. =================
I'd like to let the UofU guys know this week when we plan to come.
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

More updates:
Hotel rooms are booked for those staying during the UofU assessment. You should have your confirmations from me, let me know if you didn't get them.
I have patched strikedump and the nessus server for the CVE-2014-6271 bash issue. I haven't patched the Backtrack instances, but I will. Kvasir will need to be patched as well, not sure I have an account on that box.
On 09/19/14 11:10, Andrew Goble wrote:
Ok, more developments on this in the last couple days. I have a call with Dan and Corey next Tuesday to talk scope and they have settled on the week of November 3rd. Block out your calendars. Jon, let me know what's going to work for you that week, I'll either plan on both of you and Dave or start looking for extra help.
Thanks, Andrew
On 09/15/14 12:50, Andrew Goble wrote:
Hey guys,
Still nothing definite out of UEN, I'm considering an assessment there officially not happening any time soon at this point.
UofU is still very much alive, however. Working on getting a call this week with Dan and Corey to talk scope.
UofU can host us the week of October 13 - 17 or the week of November 3 - 7:
Based of prior responses:
Oct 13th - 17th Go - Jon, Dave, myself, Chuck (may need to skip out pretty early Friday) No Go - Mark (could be there Thursday / Friday)
If we go this week we would for sure need both of you Jon and Dave if Leroy will go for that.
Nov. 3rd - 7th Go - Me, Mark, Jon
Please let me know if this week is a possibility. We may have some options for additional help if we go this week. =================
I'd like to let the UofU guys know this week when we plan to come.
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

Well, good luck with the patches. Two more vulnerabilities were just announced. Totals now up to four, that I know of... Good ole reliable Bash is getting an audit, it looks like.
On Mon, Sep 29, 2014 at 3:49 PM, Andrew Goble goble@dixie.edu wrote:
More updates:
Hotel rooms are booked for those staying during the UofU assessment. You should have your confirmations from me, let me know if you didn't get them.
I have patched strikedump and the nessus server for the CVE-2014-6271 bash issue. I haven't patched the Backtrack instances, but I will. Kvasir will need to be patched as well, not sure I have an account on that box.
On 09/19/14 11:10, Andrew Goble wrote:
Ok, more developments on this in the last couple days. I have a call with Dan and Corey next Tuesday to talk scope and they have settled on the week of November 3rd. Block out your calendars. Jon, let me know what's going to work for you that week, I'll either plan on both of you and Dave or start looking for extra help.
Thanks, Andrew
On 09/15/14 12:50, Andrew Goble wrote:
Hey guys,
Still nothing definite out of UEN, I'm considering an assessment there officially not happening any time soon at this point.
UofU is still very much alive, however. Working on getting a call this week with Dan and Corey to talk scope.
UofU can host us the week of October 13 - 17 or the week of November 3
- 7:
Based of prior responses:
Oct 13th - 17th Go - Jon, Dave, myself, Chuck (may need to skip out pretty early Friday) No Go - Mark (could be there Thursday / Friday)
If we go this week we would for sure need both of you Jon and Dave if Leroy will go for that.
Nov. 3rd - 7th Go - Me, Mark, Jon
Please let me know if this week is a possibility. We may have some options for additional help if we go this week. =================
I'd like to let the UofU guys know this week when we plan to come.
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess

Or maybe six... and counting.
CVE-2014-6271 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2014-6277 CVE-2014-6278
On Sep 29, 2014, at 8:56 PM, Chuck Kimber <chuck.kimber@usu.edumailto:chuck.kimber@usu.edu> wrote:
Well, good luck with the patches. Two more vulnerabilities were just announced. Totals now up to four, that I know of... Good ole reliable Bash is getting an audit, it looks like.
On Mon, Sep 29, 2014 at 3:49 PM, Andrew Goble <goble@dixie.edumailto:goble@dixie.edu> wrote: More updates:
Hotel rooms are booked for those staying during the UofU assessment. You should have your confirmations from me, let me know if you didn't get them.
I have patched strikedump and the nessus server for the CVE-2014-6271 bash issue. I haven't patched the Backtrack instances, but I will. Kvasir will need to be patched as well, not sure I have an account on that box.
On 09/19/14 11:10, Andrew Goble wrote:
Ok, more developments on this in the last couple days. I have a call with Dan and Corey next Tuesday to talk scope and they have settled on the week of November 3rd. Block out your calendars. Jon, let me know what's going to work for you that week, I'll either plan on both of you and Dave or start looking for extra help.
Thanks, Andrew
On 09/15/14 12:50, Andrew Goble wrote:
Hey guys,
Still nothing definite out of UEN, I'm considering an assessment there officially not happening any time soon at this point.
UofU is still very much alive, however. Working on getting a call this week with Dan and Corey to talk scope.
UofU can host us the week of October 13 - 17 or the week of November 3 - 7:
Based of prior responses:
Oct 13th - 17th Go - Jon, Dave, myself, Chuck (may need to skip out pretty early Friday) No Go - Mark (could be there Thursday / Friday)
If we go this week we would for sure need both of you Jon and Dave if Leroy will go for that.
Nov. 3rd - 7th Go - Me, Mark, Jon
Please let me know if this week is a possibility. We may have some options for additional help if we go this week. =================
I'd like to let the UofU guys know this week when we plan to come.
Thanks, Andrew
USHE-assess mailing list USHE-assess@lists.dixie.edumailto:USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
USHE-assess mailing list USHE-assess@lists.dixie.edumailto:USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
_______________________________________________ USHE-assess mailing list USHE-assess@lists.dixie.edumailto:USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
_______________________________________________ USHE-assess mailing list USHE-assess@lists.dixie.edumailto:USHE-assess@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-assess
participants (4)
-
Andrew Goble
-
Chuck Kimber
-
Corey Roach (ISO)
-
Jon Barclay