Nov 22 2011
I got home Sunday from 3 days in Las Vegas, two of which were spent at the first ever Minecon. For those of you who aren’t the parents of Minecraft addicts or addicts yourselves, it’s a game where you create a whole world then mine it for resources and build just about anything you can imagine. It’s multiplayer, sometimes massively so, and it’s very easy to set up your own server and be hosting it for the world in a matter of hours. Unluckily, it may be too easy; people who can barely figure out what their IP address is are setting up servers on their desktops then sharing their systems with friends via Hamachi or simply opening their home network to the world. It’s enough to give a security professional an aneurism! I wrote up my own experience in creating a cloud server for Minecraft in April, but that server never caught on with the kids. So now I’m trying a different solution, MineOS Crux, a custom build distribution of Ubuntu specifically created for people who want a secure, lightweight Minecraft installation. I’m running it as a VM on my Mac Mini server and exposing it to the world on a non-standard port, plus I locked down the distro a little more than the standard build. I’m still more than a little paranoid about it, so if the kids aren’t using it, it’ll go away.
Oh, and the kids got me to start playing Minecraft as well. Good thing there are a lot of long holiday weekends coming up.
Open Tabs 11/22/11:
- Death by Exception – As a recovering QSA (the taint doesn’t wash off), I can sympathize with Michelle’s frustration with exceptions. It really isn’t an ‘exception’ once it becomes the rule.
- The “Off the Record” track – There’s really no such thing as “off the record”. But for some reason, I’ve noticed that people become more guarded and less likely to talk when they first
- AT&T tells users of ‘organized and systematic’ hack attempt – Glad to see they’re warning people and not invoking the “APT” card. Yet.
- Hacker says Texas town used three character password to secure internet facing SCADA system – I wonder if the three letters were “APT”?