i can think of these personages as possible speakers:

* someone from Franz (Lisp compiler or whatever Lisp people call it)

* Marilyn Davis of bayPIGgies -- personable, Python booster

* Paul Cubbage of Open Country (former Wallengong honcho)-- admin software product, supports linux community, he sponsors PenLUG, no reason why they should have him exclusively.

* someone from Gumstix (teeny, low power linux PCs)

personally, I think it'd be highly entertaining if anyone could talk Rick Moen to come and rant and rave--he's probably watching even now, but I'd be willing to brave the fires to ask him.

Bill Kendricks on Tux Paint could be interesting, too.

My guess is you all would rather i confine such posts to those specifically assigned to getting speakers: if so, please get me email addresses or otherwise direct me. jim

On Sep 26, 2006, at 9:46 AM, John Mark Walker wrote:

Sweet. By the way, Pat, from Splunk, recently had twins, so I haven't been able to reach him, but I hope to have a confirmation this week.

Thanks, John Mark

On Sep 26, 2006, at 8:34 AM, Michael Paoli wrote:

...

And one more to add to the list of "speaker coordinators": Jim Stockford

Jim Stockford, thanks for volunteering!

That brings the list of "speaker coordinators" up to:

Dick Verna Larry Platzek Michael Paoli John Mark Walker Jim Stockford

details to follow off-list.

references: http://lists.balug.org/pipermail/balug-admin-balug.org/2006- September/000247.html _______________________________________________ balug-admin mailing list balug-admin@lists.balug.org http://lists.balug.org/listinfo.cgi/balug-admin-balug.org

---

balug-admin mailing list balug-admin@lists.balug.org http://lists.balug.org/listinfo.cgi/balug-admin-balug.org

I've been to balug meetings. I think a chair on a stage and a respectfully silent audience would be sufficient, in your case. But you wanna prepare, great! Linux and Unix viruses is a super topic--how to detect them in the filesystem maze?

On Sep 26, 2006, at 2:23 PM, Rick Moen wrote:

Quoting jim stockford (jim@well.com):

...

personally, I think it'd be highly entertaining if anyone could talk Rick Moen to come and rant and rave--he's probably watching even now, but I'd be willing to brave the fires to ask him.

Eh, you need people with prepared presentations. I could do one on Linux and Unix viruses, if you like.

---

balug-admin mailing list balug-admin@lists.balug.org http://lists.balug.org/listinfo.cgi/balug-admin-balug.org

Quoting Jonathan Jefferies (jjefferies@gracenote.com):

At the risk of "me-to"ism this sounds like a very interesting subject well worth attending.

FWIW, I don't really recognise "malware detection" as a separate thing worthy of study, generally. By contrast, detecting _root compromise_ is worthwhile as a last-ditch measure when/if your primary measures fail, i.e. prevention, damage reduction, defence in depth, hardening.

In particular, file-based IDSes like AIDE, Integrit, Samhain, and Prelude-IDS are what "rpm -qa" wants to be when it grows up and gets serious. (Question for any Scarlet Chapeau guys who still seriously uses that to detect root compromise: Why would /var/lib/rpm/* be reliable on a compromised host?)

I've advised some sysadmins that they should sell use of file-based IDESes to management as "virus scanners for Unix". (Doing the right thing for the wrong reasons is a whole lot better than nothing, eh?)

Quoting John Mark Walker (johnmark@johnmark.org):

Rick is always highly entertaining.

Rick: what will you say about Unix and Linux viruses?

Pretty much a romp through the history of same, with lessons about system security drawn as we go.

I've done that talk before, for EBLUG, but it's been two years, so my hastily-thrown-together slides need revision -- but, for better or worse: http://linuxmafia.com/presentations/