NSLU2 replacement?

[dninja at gmail.com (Robin Wood)]

2009/3/8 Jim Halfpenny <jim.halfpenny at gmail.com>:
> Hi all,
> Here's a thought, instead of investing in hardware how about a drop-vm? The
> ideas would be along the lines of a U3 USB stick or optical medium which
> auto-installs a visualization platform and VM image, boots it up and maybe
> even makes to persistent following reboots of the host. The
> stick-drop-in-the-parking lot modality would work and rather than
> trojanising a PC (with the risk of detection by AV software) you get a
> small, fully-operational virtual host on the target network.
>
> I know this is a different strategy and obviously involves compromising a
> target PC but it appeals to the frugal side of my nature. There's no
> cross-compiling, no hardware costs (other than the payload medium) and the
> resulting platform would probably have more resource and better performance
> than most embedded devices.
>
> Know ye of such a project?

I like this idea, if it doesn't exist I'll add it to my list of things
to think about.


> Jim
>
> 2009/3/8 MV <mvharley2 at gmail.com>
> > yummy
> >
> > 2009/3/6 Tim Mugherini <gbugbear at gmail.com>
> > > Per this link:
> > >
> > >
> > > http://www.globalscaletechnologies.com/c-2-globalscale-technologies-products.aspx
> > >
> > > "Note: We estimate the product will be ready to ship towards?the?end of
> > > March 2009."
> > >
> > > On Thu, Mar 5, 2009 at 10:47 PM, Adrian Crenshaw <irongeek at gmail.com>
> > > wrote:
> > > > Thanks, I'm looking at the sites, can you buy the hardware now?
> > > >
> > > > -----Original Message-----
> > > > From: John Fitzpatrick <thefitzman at gmail.com>
> > > > Sent: Thursday, March 05, 2009 9:55 PM
> > > > To: PaulDotCom Security Weekly Mailing List
> > > > <pauldotcom at mail.pauldotcom.com>
> > > > Subject: Re: [Pauldotcom] NSLU2 replacement?
> > > >
> > > > What about the Marvell "Plug Computer"?
> > > >
> > > > If this 'drop box' ?is going to be covert for a pen test it seems to be
> > > > probably the most inconspicuous small computer on the market. And at 99
> > > > dollars (soon to be as low as $49) it isn't going to break the bank if it
> > > > get's lost or stolen.
> > > >
> > > > More info:
> > > > http://www.tgdaily.com/html_tmp/content-view-41525-136.html
> > > >
> > > > http://www.marvell.com/featured/plugcomputing.jsp
> > > >
> > > >
> > > > On Fri, Mar 6, 2009 at 3:33 AM "Paul Asadoorian" <paul at pauldotcom.com>
> > > > wrote:
> > > > > This is a good reason NOT to store any info on the device, it should
> > > > > only ever provide access not store content.
> > > > >
> > > > > Typically they are lost in public areas like waiting rooms and lobbies
> > > > >
> > > > > Sent from my iPhone
> > > > >
> > > > > On Mar 5, 2009, at 1:50 PM, PJ McGarvey <pj_mcgarvey at hotmail.com>
> > > > > wrote:
> > > > >
> > > > > > Not being familiar with these types of pen tests, how exactly are
> > > > > > you losing these in the field?
> > > > > >
> > > > > > Just wondering aloud about who might be finding these, and what they
> > > > > > might be doing with the very sensitive information possibly already
> > > > > > captured on them. ?Are your pen test clients aware that their
> > > > > > information might fall into the wrong hands when such a device is
> > > > > > lost during a test?
> > > > > >
> > > > > > -PJ
> > > > > >
> > > > > > Thing
> > > > > > > is, for a pen test, you may have to be willing to lose a few in
> > > > > > > the
> > > > > > > process and you will need to make sure you put some extra $$ in
> > > > > > > the
> > > > > > > budget to cover your losses.
> > > > > >
> > > > > > _______________________________________________
> > > > > > Pauldotcom mailing list
> > > > > > Pauldotcom at mail.pauldotcom.com
> > > > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > > > Main Web Site: http://pauldotcom.com
> > > > > _______________________________________________
> > > > > Pauldotcom mailing list
> > > > > Pauldotcom at mail.pauldotcom.com
> > > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > > Main Web Site: http://pauldotcom.com
> > > > _______________________________________________
> > > > Pauldotcom mailing list
> > > > Pauldotcom at mail.pauldotcom.com
> > > > http://mail.pauldotcom.com/cgi-bin
> > > >
> > > > [The entire original message is not included]
> > > > _______________________________________________
> > > > Pauldotcom mailing list
> > > > Pauldotcom at mail.pauldotcom.com
> > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > Main Web Site: http://pauldotcom.com
> > >
> > >
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom at mail.pauldotcom.com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> >
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com