NARC has been re-posted to SourceForge in zipped source form, as it was released at DEFCON 14. For those interested, see the NARC Project Page.

We have been working hard in the background migrating the disparate blogs, cms, and static pages that made up kaos.to into a single site and we are proud to say that we have finished. A slightly modified theme and a simpler navigation are just some of the benefits. Let us know what you think. Any old links, especially popular ones, should now point nicely to their new homes. If you find any broken or missing links let us know at inquiries AT kaos DOT to.

as you may have noticed, we’ve now combined two disparate domain spaces into one, merging data from our super old-school wordpress 1.5 blog and our joomla 1.5 cms home page into this shiny new wordpress v2.6.2 blog. hope you like it.

please pardon the mess temporarily while we re-arrange and re-organize existing content.

We’ve setup a new e-mail alias for general inquiries, project requests, join requests, etc. If you’d like to contact kaos.theory, send email directly to <inquiries AT kaos DOT to>. Thanks!

*For those that have the blog bookmarked and haven’t checked the front page recently*
*A note from dr.kaos on the availability of downloads for our latest work*

Since our presentatoin at DEFCON last Saturday, many have inquired about downloads for SAMAEL and NARC. In actuality, we had intended to provide both releases for download while still at the con, but due to unforseen hiccups, we were unable to.

At this point in time, NARC is being retrofitted with a few additional features that Atlas really wanted to push your way, while SAMAEL is undergoing minor surgery to correct a couple of interface bugs that would have otherwise annoyed the piss out of most of you. Bottom line, they’re not quite ready, but real darn close. At the very latest, both releases will be available for download, likely via torrent and Sourceforge, by Saturday, August 19th. You saw both tools working on stage, and we want you to have them for yourself as soon as possible! Though we apologize for the delay, we’re quite certain you’ll be happier to have the slightly more polished versions of both of these tools in your arsenal.

In the meantime, we will be posting our updated slides on the site for your enjoyment (i.e. the ones we used in our presentation, not the older ones from the DEFCON CD). Check back later today for the download link!

Respectfully yours,
./dr.k

UHOH. Last minute QA uncovered a few interface issues that could make setting up and configuring SAMAEL difficult, if not impossible. For this reason, we’ve temporarily pulled the download. Please don’t worry, we’ll have it back online very soon!

That’s right, from the 1337 hax0rs that brought you Anonym.OS, kaos.theory/security.research presents S.A.M.A.E.L. (Secure, Anonymous, Megalomaniacal, Autonomous, Encrypting Linux), the natural evolution of our secure, automagicically anonymizing operating system, Anonym.OS into a kick-ass anonymizing server!

In unison, we’re proud to introduce N.A.R.C…

Getting useful, attractive reports out of scanning tools is a bitch. People pay vendors thousands just for some slick charts and graphs. Why? Because SQL is hard for a boot-camp MCSE. So get your ‘Security for Dummies’ books and your free Nessus downloads ready, folks, because we’ve got scripts and queries all packaged up as pretty as your mom on a Friday night. kaos.theory’s newest member, jonathan white, joins atlas and crew to introduce N.A.R.C., the Network Analysis Reporting Console.

In its initial release, N.A.R.C. can utilize output from common security tools like Nessus, Paros, and NMap to populate a database via automated scripts for reporting purposes. Version 0.DC14 also includes rudimentary reporting capabilities.

For those planning on joining us in Las Vegas this year, check the schedule and the speakers page for more information!

It’s official, our talk was accepted at Defcon! This time, we’ve got two new projects to unveil, and we believe you’ll find them to be rather exciting.

That’s right, from the 1337 hax0rs that brought you Anonym.OS, kaos.theory/security.research presents S.A.M.A.E.L. (Secure, Anonymous, Megalomaniacal, Autonomous, Encrypting Linux), the natural evolution of our secure, automagicically anonymizing operating system, Anonym.OS into a kick-ass anonymizing server!

When kaos.theory released Anonym.OS at ShmooCon in January of this year, we received many requests for features we had already planned to implement: media players, smaller distribution size, office suites, better speed, USB functionality, etc. “Sure,” we collectively replied, “we’ll get right on that.”

Technorati Tags: anonymity, defcon, events, linux, presentations, privacy, projects, security

But we didn’t. We tried, but we realized that maintenance releases aren’t 1337. Instead, we’re back to release S.A.M.A.E.L., a blackbox gateway that creates — in a few simple steps — a secure, anonymizing, transparent firewall and proxy server, protecting its users’ love of sex, drugs, and rock and roll from embarrassing public disclosure (even better than the Kennedys).

But there’s one more thing. And it doesn’t involve sweatshop labor or black turtlenecks.

Getting useful, attractive reports out of scanning tools is a bitch. People pay vendors thousands just for some slick charts and graphs. Why? Because SQL is hard for a boot-camp MCSE. So get your ‘Security for Dummies’ books and your free Nessus downloads ready, folks, because we’ve got scripts and queries all packaged up as pretty as your mom on a Friday night. kaos.theory’s newest member, jonathan white, joins atlas and crew to introduce N.A.R.C., the Network Analysis Reporting Console.

In its initial release, N.A.R.C. can utilize output from common security tools like Nessus, Paros, and NMap to populate a database via automated scripts for reporting purposes. Version 0.DC14 also includes rudimentary reporting capabilities.

For those planning on joining us in Las Vegas this year, check the schedule and the speakers page for more information!

From The Kevin Experiment:

I WANT FREE SOFTWARE… if you do toooo… copy this to your blog

1. SubEthaEdit from CodingMonkeys
2. BLOGZOT 2.0 on MacZOT.com
3. MacZOT and TheCodingMonkeys will award $105,000 in Mac software
4. any comments you have about the software, the web site, or the promotion

So basically SubEthaEdit…. think textedit on steroids and networkable.

GET ON IT!!

Technorati Tags: mac, software

From The Kevin Experiment:

I WANT FREE SOFTWARE… if you do toooo… copy this to your blog

1. SubEthaEdit from CodingMonkeys
2. BLOGZOT 2.0 on MacZOT.com
3. MacZOT and TheCodingMonkeys will award $105,000 in Mac software
4. any comments you have about the software, the web site, or the promotion

So basically SubEthaEdit…. think textedit on steroids and networkable.

GET ON IT!!

Technorati Tags: mac, software

Quick request — several people ended up snapping photos of my keyboard at LayerOne, and I’d really like to have copies of any of the photos that were taken. If you were one of the aforementioned photographers, please email me. Also, if anyone plans to put these anywhere on the net, kindly mention my real name (Taylor Banks) with the posted photo (though you’re welcome to use my handle as well, if you’d like). Thanks!

For those who haven’t yet been, we’ve officially launched our new kaos.theory website and are beginning to work on new content including FAQs, documentation, a new downloads section, and daily security news from around the world.

Technorati Tags: miscellaneous, projects, security

Just found out yesterday (by accident, go figure) that Anonym.OS is nominated to be nominated for the 2006 SourceForge.net Community Choice Awards! Woot!

If you’ve downloaded, used and enjoyed Anonym.OS (or haven’t, but love the idea), please take a few moments to go to the SourceForge page and vote for us in the Security category! Nominations close today, so please take a few minutes to go there now!

Technorati Tags: anonymity, awards, bsd, privacy, projects, security

Just found out yesterday (by accident, go figure) that Anonym.OS is nominated to be nominated for the 2006 SourceForge.net Community Choice Awards! Woot!

If you’ve downloaded, used and enjoyed Anonym.OS (or haven’t, but love the idea), please take a few moments to go to the SourceForge page and vote for us in the Security category! Nominations close today, so please take a few minutes to go there now!

Technorati Tags: anonymity, awards, bsd, privacy, projects, security

Today, although it’s possible, Anonym.OS is not designed for easy installation. Remember, this was our first beta and the primary goal was pushing out a live operating environment that was [mostly] stable and effectively provided strong security, anonymity and encryption out of the box.

Seems we nailed that goal pretty well, so our next step is to address all of the optional but highy desirable features, like:

* Installation to HD/USB

* Automatic mounting of local HD partitions

* More “desktop” tools like office apps, multimedia, etc

These features are being included based on the number of requests we get, so make sure and let us know what you want to see most in future versions of Anonym.OS!

Lots been going on behind the curtain lately. Hopefully, in as little as a few short days, I’ll be implementing:

• improved RSS feeds courtesy of FeedBurner
• email syndication courtesy of FeedBlitz
• and a new website with frequently asked questions and answers, prominent download links for Anonym.OS, how-to’s and tutorials, and much, much more!

Technorati Tags: miscellaneous

I’m happy to say, we’re getting a lot of great feedback about Anonym.OS, as well as a ton of feature requests, many of which are already on our roadmap, which we’ll be posting here soon. In the meantime, here are a few of my favorite quotes:

Steve of NeighborGeek News says:

This project by the kaos.theory security research group, if successful, will be one of the greatest innovations in computer security in a long time.

Nobody:

Anonym.OS — Been waiting for something like this! WOW!

Of course there have always been homegrown solutions to what Anonym.OS offers, however it is *very* nice to have an .ISO based, live non-linux solution (OpenBSD, best OS!).

Anonym.OS is now used exclusively here for all secure communication needs, as well as one of my most reccommended utils.

Keep up the great job!

Student:

Awesome program! I don’t use it for privacy, I use it for the security.

Technorati Tags: anonymity, bsd, privacy, security

Your Kung Foo is strong, you have the force with you. Make us VMWare for x86 Intel MacBook Pro and you’ll do the world a favor, again

William:

…I was always wondering if something like this would ever come out. Well…you guys put it out. So lots of props and respect to all of you who took the time and made the effort to provide this for the community.

Bubblboy:

nice idea! I have been looking for something like this for quite a time now and the best thing of course is that I can optimise my own system to resemble this as much as possible. learning from the true masters.

Mikael:

Great stuff! Makes me feel much better about surfing/icq on WLAN! Don’t have to worry about anyone intercepting my conversations on the radio waves.

And my personal favorite, from Joel:

…[I’m] a froggy mother tongue.

Ever needed a personal STABLE OpenBSD install CD? Sure, we all have especially those tranny loving grannies.

It’s important to note that there are no official full CD install ISO’s of OpenBSD available for download, which is on purpose. Please respect Theo’s wishes and his copyright to the filesystem layout and be sure to order your official install CDs and support the project.

This howto assumes that you already have OpenBSD Installed with the needed development tools. It also assumes that all of the commands below are run as root. Not all commands need to be run as root, but in the interest of simplifying this howto I assume you either know when to use sudo or you’ve su’ed to root before any of the steps below.

Technorati Tags: bsd, security, openbsd

First we need to get the release sources before we update them. I prefer to ftp down the release sources and update to stable via CVS (seems faster to me).

# ftp ftp.crimelabs.net
# cd pub
# cd OpenBSD
# cd 3.8
# mget *.gz

Say yes to all the prompts except sys.tar.gz since it is contained within src.tar.gz
You will end up with ports.tar.gz, src.tar.gz and XF4.tar.gz

Untar the sources to their correct locations

# tar zxvf ports.tar.gz -C /usr/
# tar zxvf XF4.tar.gz -C /usr/
# tar zxvf src.tar.gz -C /usr/src/

Now that we have the release sources on our system it’s time to update them via cvs

# export CVSROOT=anoncvs@anoncvs.nyc.openbsd.org:/cvs

To update ports

# cd /usr/ports/
# cvs -d$CVSROOT up -rOPENBSD_3_8 -Pd

To update the X sources

# cd /usr/XF4/
# cvs -d$CVSROOT up -rOPENBSD_3_8 -Pd

To update the system sources

# cd /usr/src/
# cvs -d$CVSROOT up -rOPENBSD_3_8 -Pd

To build the X sources you’ll need a specific version of TCL and TK (8.4)

# cd /usr/ports/lang/tcl/8.4/
# make install clean

# cd /usr/ports/x11/tk/8.4/
# make install clean

You will also need cdrtools if you plan on making the ISOs on this box.

# cd /usr/ports/sysutils/cdrtools/
# make install clean

Now it’s time to basically follow man release(8)

Build and install a new kernel

# cd /sys/arch/i386/conf
# config GENERIC
# cd ../compile/GENERIC
# make clean depend bsd
# mv /bsd /bsd.old && mv bsd / && chown root:wheel /bsd

Reboot into the new kernel

# reboot

If you have troubles booting into the new kernel you can boot bsd.old

Now it’s time to build the system

The release(8) man page goes through how to make sure your object directories are clean but since this is a new install we won’t worry about it

# cd /usr/src
# make obj
# make build

Once this is done you should be running on stable code

Now we’ll basically create new install files from the stable code by making and validating the system release.

# mkdir /destdir-src
# mkdir -p /releasedir/3.8/i386

The /destdir-src directory will contain a full system install minus X when we’re done with this process

The /releasedir/3.8/i386 directory will contain a generic kernel and the install tarballs made from stable code.

We need the crunch tool to create the ramdisk images

# cd /usr/src/distrib/crunch
# make obj depend all install

Now to make the release

# export DESTDIR=/destdir-src
# export RELEASEDIR=/releasedir/3.8/i386

The DESTDIR should be empty if your following this howto from the beginning but if you aren’t make sure that it is.

# cd /usr/src/etc
# make release

Once that’s done we’ll validate the release

# cd /usr/src/distrib/sets
# sh checkflist
# unset DESTDIR

Now let’s build and install X

First we need an X build directory since building X doesn’t work the same as building the system it should be empty but if it isn’t it needs to be.

# mkdir /xf4-bld
# cd /xf4-bld
# lndir /usr/XF4
# make build

We need a DESTDIR to make the X release it also needs to be empty so don’t try to use the same DESTDIR from earlier.

# mkdir /destdir-xf4
# export DESTDIR=/destdir-xf4
# make release
# unset DESTDIR RELEASEDIR

You should now have all the install files needed in /releasedir/3.8/i386 for a stable install. Now you simply need to rip an ISO of /releasedir

# cd /releasedir
# mkisofs -vrTJV "OpenBSD38" -b 3.8/i386/cdrom38.fs -c boot.catalog -o OpenBSD38.iso /releasedir/

Your ISO is built and just needs to be burned to CD via whatever method you prefer. I use:

# cdrecord -v speed=24 dev=/dev/rcd0c -data /releasedir/OpenBSD38.iso

Well, looks like we’re continuing to get good coverage of Anonym.OS; we hit Bruce Schneier’s blog this morning! Since anybody who’s anybody in the security industry knows Bruce, I’m supposing that this alone may generate almost as much traffic as our recent Slashdotting. Thanks for noticing us, Bruce!

Technorati Tags: anonymity, bsd, privacy, projects, security