Re: MadSec 24513 - 7pm, Thursday, Feb 7

Meeting was good, but in a small circle. People reported getting stuck in some snow for some reason... BTW, the waitress, Natasha, is recognizing us now.

Conversation topics that I still remember:

• my order of Idaho Nachos

• Coverity was added to Fortify and Ounce Labs as a maker of known good static analysis software

• enjoyable rantfest about OpenSSL and Kerberos not living up to their potential (complexity, tansitive trust issues, reference implementation serving as production UIs, misuse of one in places where the other would serve better)
  

• Splunk is super cool. Someone is using it to find, in days worth of logs from very busy servers, specific information (users who changed certain field to a value larger than X), all that in a minute or two.
  

• we were musing on the speed or rainbow table generation on the UW Condor grid. Eyes went round.

• perl.org "compromise" and other JavaScript malice.

• more? I think we spoke about SAS 70 and audits in general, but that was later in the evening, and my memory is failing.

See you next thursday!