Ableton On Air is sponsored by Green Mountain Support Services, empowering people with disabilities to be home in the community. Washington County Mental Health, where hope and support comes together. Media sponsors for Ableton On Air include Park Chester Times, Muslim Community Report, WWW, This Is The Bronx.info, Associated Press Media Editors, New York Parrot Online Newspaper, U.S. Press Corps, Domestic and International, Anchor FM, and Spotify. Partners for Ableton On Air include Jihad, New York, and New England, where everyone belongs, the Orthodox Union, the Vermont Division for the Blind and Visually Impaired, the Vermont Association for the Blind and Visually Impaired, the Montpelier Sustainable Coalition, Central Vermont Habitat for Humanity. Ableton On Air has been seen in the following publications, Park Chester Times, New York Parrot Online Newspaper, Muslim Community Report, WWW, This Is The Bronx.info, and www.h.com. Ableton On Air is a member of the National Academy for Television Arts and Sciences Boston, New England Chapter. The floor has to get ripped up and in front of the door has to get ripped up because we've got to put some insulation in the floors and we've got to put some more insulation in here. Once all the insulation is in place, then we can frame off the floor and put the plywood down. So that's going to close that area off. We also have to go upstairs and frame this off and get some plywood up on the floor. So this was a staircase that was here last week, taken out. Once we've got this one installed, we had that one taken out. So that's going to be our inside project. There'll be four or five people in the basement, four or five people upstairs, and a couple of people cutting framing. So I'll try to separate everybody. What I will have to know is who knows what end of the hammer to use? Who is comfortable? Not everybody does. I say get a hammer to get a screwdriver. It's pretty close. Oh, we have a list of those? Keep the screwdriver. You may need it. So I need to know who is comfortable with power equipment if I'm having them doing any cutting and if I'm having them direct anything with some of the less skilled workers. So we have all levels.  We work with whoever shows up. So I will need to know your comfort level and your ability to work with power equipment for things of that nature. So that's the work we're going to do today. If we're going to do safety, it's going to be any power equipment you'll get. I'll go through a quick training on it even if you know it. So you're familiar with the piece of equipment, whether it's a circular saw, chop saw, table saw, screw gun. Anytime you're using any power equipment here, hearing protection, eye protection, we have all that here, we should. So we'll provide the safety equipment and the training. And then I'll be jumping back and forth, losing weight, running up and down the stairs or running inside and outside, making sure everybody's safe. If anybody feels unsafe, like working around here, if you have any hazards and feel safe, you just let me know. I don't want to put anybody in a position that they feel uncomfortable.  You don't have to make a big announcement about it and we'll make corrections. If we're working in groups and we're four or five people more or less together, if one person says to me, I will feel more comfortable if everybody wears a mask than we all wear a mask. And you just have to come and tell me, I won't make any announcements and point anybody out. We'll just say everybody put a mask on and we'll just respect everybody. That's all. We'll know who went and talked to you. We'll know who went and talked to you because they love to group. No, just kidding. I'll wait 10 minutes. Okay. A couple people would have went to the bathroom at that time period, right? But the point is we want to respect everybody's safety. That's all. We're all here for Sean and we obviously don't want to get anybody hurt in any way, shape or form. So I want y'all back again. And I always kid about my crew used to say, if you get cut, that's okay because everybody should bleed for the company at least once a day. I always do. I don't say that with volunteers. We want no bleeding. How long have you been doing this construction? How long has the house been in construction right now? That's a hard question. It's been in full-time construction since this spring. Over the winter, two or three of us were working on tearing things apart and bringing stuff to the warehouse and cleaning it out, which wasn't really construction. It was more deconstruction and getting ready for spring. So around April-May, we actually started digging out the foundation and working. So if we can get a go from April to December, that'll be a record. That's our goal to be in by Christmas. I'm not sure how we're going to do that, but that's our goal. You mean to have this whole thing destructible? We're hoping to have them move in for Christmas. That's my goal. I know it. North University students there, right? Got three, any more? We got two more. Two more. Have you been here before? You look familiar. What branches? I'm pursuing Air Force, sir. Air Force? I'm also pursuing Air Force. I'm Army. Pursuing Navy. Damn, my son was in a Marine Corps. About 10 years ago, we were doing a house in the valley and we brought a bunch of rooks out and I literally had like eight Army Navy and about four Marines. I said, that's about equal. So we're going to dig trenches. We're going to dig trenches and we're going to see who finishes first. Any guesses? Marines. They were. I was the only guy who did this. So anyway, there's an ongoing battle between the Air Force and the Marines. My son will tell you all about it. I used that to get a competition. And boy, did we get a lot of work done that day. Yeah. It was dirt flying. Anyway, does any of your crew comfortable with power tools? Know how to read a tape measure? All right, good. So I'm only here to about 1130. Oh, you're going to work too? I thought that was your work. Well, this is important. This is my work. I'm here to about 1130. Get as much as I can. And edit a lot. Yes. And please make sure when you guys are using the glue gun, it doesn't sorry, you know, use the right tool. Are we all signed in? Everybody's all set. Thank you guys very much for sticking with us. This Delta variant has thrown a bit of us into a, you know, we're trying to make sure, keep everybody safe as nobody wants to work in here with masks on for six hours. So vaccines and everything like that requirements and keep you all safe. But yeah, we are all set, Bruce. Okay. We will be doing some framing, some flooring. We'll be doing some insulating. The insulation downstairs is pretty simple. Not a lot of power tools, although there may be a saw or two, but it's mostly cutting, fitting, gluing, rigid insulation. We will be framing flooring and putting plywood down. We'll be ripping flooring up. And upstairs we'll be getting this opening framed off. And then the entire upstairs gets a couple of layers of plywood, three quarter inch or one quarter inch, which we got to take out of the truck before it gets too wet. It's not raining that much. So that's the, that's what our goal today is to get this close, get the basement insulated, get this framed, get some plywood down and get as much of the flooring accomplished up there as possible today. Does anybody have any questions? Perfect group. You scared them. You scared them all. Scared them all. Well, and for the folks coming from the faith community church, so Sean Bates is a member of your congregation. He's, and so that's why Pastor Octry has invited you all to come and join us. It's a really important piece of our work is that we build community. We have homeowners, not just renters, and that means that these people are in this community for a long time. And so it's great to have people from his church for more of his workplace to come and support him that builds that community. So you all are part of that. But in addition to that, as you know, Egan knows from last time when he was here, our work, our mission, we build affordable housing and that is made possible because we use volunteers. If we didn't build volunteers, this house would probably use volunteers. This house would probably be double what it's actually cost me. This is about, it's going to cost us about $150,000 to build. And that's with lots of grants and everything. With labor it'd be over $300,000 and it would be really hard for us to make this affordable. So you guys are actually part of how we make that possible so that we can offer them a really low affordable mortgage. Again, it's not a giveaway program. We partner with our homeowners. Those mortgage payments get recycled back into our homeownership programs so we can build more houses.  So just can't thank you enough for being here and helping out. And we appreciate you all being patient with us as we figure out how to work 11 people indoors where we were planning for being outside. So thanks Bruce. Just to let you guys know, just all today that I'm here for the next hour or so, two hours, will be part of a public service announcement for Habitat for Humanity and second part. We're going to put this into a second part for Habitat for Humanity. Larry's with Ableton on Air, which is an ORCA program. And he had us on to talk about how we build a homeownership opportunities for mobility challenge individuals. And he's come in here to get some B-roll. We've also offered to do a public service announcement when you're a nonprofit occasionally. TVs and radio stations advertise your programming for free. So that's what Larry's doing for us. Thank you Larry. So really quickly this is a one-of-a-kind. So central Vermont Habitat builds only so far in the last three high performance homes by efficiency Vermont standards. So that means. Defined high performance. Right. So that means that the walls are really thick. Like this one's going to be seven, nine inches thick with rigid insulation and rock wall insulation. It also is going to be air tight, which means that the air change per hour, the volume of air in this house will naturally escape but only one air change per hour, which is really tight by construction standards. Those are very high benchmarks. There's only a couple of Habitat's doing it. There's only a dozen or so contractors doing it. This entire house will be heated by a heat pump mini-split. Just an electric compressor. It's going to heat the entire house 95% at the time of the year. It's not there yet, by the way. It's just motion to where it will be. It's a compressor outside. It's a little electric head up here where it blows heat in. It looks pretty simple. But most people cannot do this. And nobody in Habitat World, in Vermont, has ever attempted to take a 1920s house converted into a 1920. It's a 100-year-old house and we are the first one, the only ones, to try to do a rehab up to high performance standards. Most of the Habitat's are not even building new up to high performance standards. So we have a very high benchmark. So you guys are part of that process of a one-of-a-kind house here. And we hope to build more, rehab more houses like this in Berry. The only way we can do it, the house has to be donated to us. And we have to have a half a million hours of volunteers and I have to learn how to go and beg. I'm really good at begging. I've learned that if you beg the right way somebody will install the minis, but free. It's called borrowing too, right? Mostly begging. This house has a balanced ventilation system. The air inside this house will be cleaner than the air outside. Once the system is out, the house is very tight. All the air coming in when the windows are shut in the winter, when it's the worst time, is all filtered air and all your bathrooms and kitchens are exhausted outside. So it's a very healthy house. And we use very low VOC products everywhere because it is so house. I even put in a radon sealed sump pump down in the basement. We'll test it for radon after the occupants are in here for a year. And if we have to put in a fan and a radon pump, we can. It will be all installed ahead of time. So just wanted you to know that we're not just building a normal house. We're not just renovating an old house. We are, but we're doing so much more. Our houses, when they're done, their heating bills are like one third of what everybody else's are. We did a passive house, which is even tighter than, well, tighter than this house and more insulated. And it got 75% of its sun. Heat energy from the sun has about $1,000 a year energy bill. So the older the house, the less it costs. Correct? As far as like the heat and everything around that. The older the house? Yeah. No. The age has nothing to do with the house. The age has to do with, it's a very difficult project. Asbestos, lead. All of that stuff. We had to get grant money and spend lots of money just for testing. We had to get the place all cleaned up before any volunteers could come in. So we had to do that first. The hard part is in an old house is like this floor. I've got framing in the way where I want to put eight inches of rigid. I sort of make little boxes of rigid insulation to get in every little cavity. New construction, you just design it. It's really simple.   And you do a wonderful job. Right. So this is a very difficult job because every single day we're problem solving. I'll rip up a floor. There'll be extra framing I didn't know about and we got to deal with it. So the jobs just take forever. So that's where we are today. We're going to try to close up that rigid insulation that has not been closed up because the staircase was in the way and I couldn't take the staircase out until I got a manufacturer to make the stairs and there was a delay. So everything just backs up. So today we want to we want to get it all insulated and the floor is closed up and if we have time we're going to get the whole floor upstairs done. So next week I've already promised people I'm going to start building walls. I may be working tomorrow. Now do you have any questions? Perfect.  All that plywood goes upstairs. All right. I know our university stands. Let's let's unload. Yeah. I'm going to bring the rooks upstairs. Get them started. Okay.  All right. So I was joking. No, it's all right. So you said you have other food stuff. No, I got buns and I got a tablecloth and napkins and plates and a scoop. So that's what I got. Okay. I wonder what we can do to I'm here because basically for my church, church for my very mark, the community church, I've been involved in public service like over 25, 30 years. What is your background? What is your background in construction? It's not in construction, but I was public service. I was a police officer in Boston for eight, nine years. I worked for the state of Rhode Island by 10 years working corrections. I was part of public service. I was part of a homeless shelter in charge of that like 50, 10 years in a Nash war. So my basically all my life is involving community service and helping people. So that's, that's the main reason I'm here today also. Well, I know they need people to help somebody with this house. So I've created the person who has four, which is Sean Babes. So that's the reason why I'm here today mostly to help out most, most I can. I just gave a little bits and pieces. Don't scuff the walls. I'm getting bits and pieces. I'm putting it in sections too. Say yeah, we asked. Yeah, the other way. Bits and pieces. This is the buffet. All the rest of the stuff is right here. I brought food. I did it. I'm joking. I'm joking. No. By the way, thank you so much for letting me come today. Actually, what else did just mentioned 20 house have that you guys are fixing? Well, so it had asbestos in the basement. It had led all the side of the building is painted with lead paint. So we had a grant from the Roman housing and conservation board to paint the building. They just came this week. There was an 800 square foot two story, basically uninsulated shed in the back. And it was uninsulated and not very stable. Well, there was a coal shoot in the basement. That was fun. Yeah. Still still dirt floor and no foundation. No foundation. This was no corner foundation. No corner foundation. It was a stone wall on top of dirt. And in Barry, of course, we've got all this granite as well. So in 1920s even was that when that was when the granite industry was thriving. So all these houses are built on granite stone foundations. So this has granite stone foundation, but it was right on top of the dirt. So what we had to do was build interior concrete foundation walls. So interior foundation walls insulated with a vapor barrier. That's the base of your building on below. You don't want cool air coming in from the basement, right? Because then what happens is air hot air goes out of the top right creates a vacuum sucks in the cold air. You literally create a vacuum. But yeah, so Larry, there was a two-story building on the back of this that we used. We used heavy machinery to take down. Oh yeah? Yeah. Just tore it down because it was. No, but no gold mine in the basement. No gold mine in the basement. No. All right, guys. We're changing it up. Just a little bit heavier now. So I'll take two people on each one. Michael and I always had a great because I'm in production stuff. He always had a great outlook on how to deal with the family in his productions. Oh yeah. He was like a he was really a father figure. I saw documentary on with Laura Ingalls. What's her name? Melissa Gilbert? With her talking about me. I'm not being very productive. Is there something I can do live? And if I can help somebody else to have a place to live and a home ownership, I'll be more than happy down. And your name is? Susan Landry. And you, what position are you? Do you work? I'm retired. I'm retired. And your job? I was a cook.  Yeah. Chef. No, I wasn't a chef. Well, I like to think that was a chef, but I just, yeah. Once you get a couple of them up. Well, I told you that was safe. Yeah, be careful if you can not to do it. I'm going to reuse it. Hey guys, and try your best to not break anything because we're we're going to reuse them. We're going to use them. Yeah. So you're reusing and repurposing, right? That's right. Yeah, we're just going to actually sand all the floors and make these look like brand new. Wow. Yeah. Well, this house, when Sean comes in here, it's still going to be. So, I have a question. So, we can use this. In terms of repurposing, in terms of repurposing, supply.  But how do you repurpose them? I'm a little confused there. Well, look, you're seeing it right here. Oh, yeah. We're pulling up the old floor boards, taking out the nails. And that's currently a hole where the stair was. The stair is there. It's supposed to be old-fashioned, too. Found anything in the walls?  No, I'm serious. We did a house one time and there was newspaper. There was newspaper in the wall. We found an old newspaper. We found working on my house. My house is way older than this one. We found old shoes in the walls and all sorts of stuff. Yeah? Yeah. It was it was weird. Did you keep them there? Uh, no. Thought about it, but my wife throws out everything. Why would somebody mind? From here up. So, we're going to go here, there, to here. And then we're taking all of this off. This thing leaving this. This thing leaving this piece right here, too. Right. Okay. So, we'll break up that one. Right underneath here is a bay that we want to put insulation in from the top. It just started this hole right here. This eyeball it. And pull the first layer out. Remember what happened last time? Yeah. Don't need me more first aid. Okay, I got to get it. Look at the nail. Wow. You know, I'm going to make something with them. Save me as many as you can, okay? One, two, cut. Yeah, I see what you mean. That's better. She's this stuff. I can't get my hands out of here. I'm bad. I'm bigger than mine. Okay. We'll double check to see if she fits. Yeah. And put a two by 10 in the middle here. Okay. Bruce, are we good to start nailing the boards down upstairs? Yeah, I'll be right up. This board here makes it come out. Because I'm going to have two inch rigid insulation go right down. Okay. So, we're going to rip that one out. That one can get cut out with a sawzall and get it out. Yeah. 99. And a little more. What is that? Don't think that bit's going to work. No, it's not. What tool is that? What is that? A saw? This is a sawzall. Yeah. Right now the blade is bent. Bruce, I'm here. Abledon On Air is sponsored by Green Mountain Support Services, empowering people with disabilities to be home in the community. Washington County Mental Health, where hope and support comes together. Media sponsors for Abledon On Air include Park Chester Times, Muslim Community Report, Www, this is the Bronx dot info, Associated Press Media Editors, New York Parrot Online Newspaper, US Press Corps, Domestic and International, Anchor FM and Spotify. Partners for Card New York and New England, where everyone belongs. The Orthodox Union, the Vermont Division for the Blind and Visually Impaired, the Vermont Association for the Blind and Visually Impaired, the Montpelier Sustainable Coalition, Central Vermont Habitat for Humanity. Abledon On Air has been seen in the following publications. Park Chester Times, New York Parrot Online Newspaper, Muslim Community Report, Www, this is the Bronx dot info and www.h.com. Abledon On Air is a member of the National Academy for Television Arts and Sciences, Boston, New England Chapter.


Alright, so I guess I'm ready to get started. Anybody who attended my presentation yesterday knows that we are off to a terrific start because the actual PowerPoint presentation has come up there, or the open office presentation. Yesterday I spent 10 minutes getting that done, so yes. Yay to not fail. Okay, so my presentation is Breaking Bluetooth by Being Board. My name is Ronan, and this is DEF CON 2010 slash 18. So the title comes from my research. I'm a graduate student. I'll talk about that in just a second. But the title comes from, I feel like my best ideas, hacking-wise, almost always come when I'm incredibly bored. So like, math class is awesome, long drives are great, airplane rides. I actually developed one of these tools last year on the flight to DEF CON because what are you going to do in there? So yeah, so that's the reason behind the title. About me, I'm a graduate student at Virginia Tech. My thesis is actually on Bluetooth security. So these are a couple of tools I've developed while doing my research, but it's a much broader scope of things. And my website where all this stuff is going to be posted is hackfromacave.com. I'm graduating soon, looking for a job. I had to do that plug. I'm sorry, shameless plug. So if this goes well, which already started off well, see me afterward. Moving on to the important stuff. Bluetooth, I'm going to give just a brief over. I'm sure most people here know if you're in this talk because you're interested in Bluetooth. But Bluetooth is a short-range technology. So Wi-Fi generates a lot of power. Bluetooth is supposed to be basically, they call it a cable replacement. It's low power, designed perfectly for smart phones or PDAs. It creates an ad hoc PicoNet. So while most of us end up preparing just two devices, you can actually pair more than that in the little PicoNet and have devices communicate with each other. But most of the time, you're pairing a headset to a single, like a smartphone or something like that. But it can do more. And it's a very highly-growing technology. The Bluetooth website, and this was a couple years ago actually, in I think 2006, posted that there are over one billion Bluetooth devices in the world right now, or Bluetooth-enabled devices. So that's a little bit of Bluetooth. Now we're going to the fun stuff. So part of how Bluetooth communicates is they have a Bluetooth profile. You're probably very familiar with it through the access point side of things. Wi-Fi access points have a very similar style, where you have a device address, which is the MAC address. You have a device class in this case, which describes what the device is. So it tells you if it's a phone or if it's a phone slash smartphone. It gives you a little bit of information about the device, and the device name can be anything you want it to be. So cloning that information is doable. And this isn't something that I created. This has been, you know, done years in the past. But all you have to do is, you know, the first two, the class, and the name, easy to do. The other one, the device address, you have to have some certain chipsets. The CSR chipsets are great. You scan for a device, you get it. You can clone it. Or you could change your profile. It's the same as, like, MaxBoofing. So if you ever do MaxBoofing, you do the same thing where you generate a new Bluetooth profile. And now you've obfuscated who you are or what your device is. So previously the method for doing this was just manual. I mean, so you'd have to scan for a device. You'd have to manually change settings. So I created Spoof Toof as a way to automatically do a lot of these things. And it does a little bit more. So it's great for obfuscation. Or impersonations. You can actually pretend to be somebody else. Or something I didn't really intend when I wrote it was actually to observe devices in range and actually log that. So I'm going to go through a couple of different modes that Spoof Toof has right now. The first one is a basic scan. So what it's doing is it's using the dash i. The HCI0 is like a WLAN for everybody who's Linuxy and does ifconfig. This is HCIconfig and it's got the same kind of thing. So that's the interface. And it's scanning and dumping it to the log. So basically just scanning the local area and dumping everything to the log. I should have mentioned this before. I forgot to. Bluetooth has two modes, discoverable and nondiscoverable mode. It will function in both. And this is the key for securing it. You want to have it in nondiscoverable mode. The only reason to have it in discoverable is for initial pairing. So you want the two devices to connect. And once they know about each other, they have the information. They don't need to scan for each other after that. So then you turn the device into nondiscoverable. So this only finds devices in discoverable mode. It's not like you might be familiar with the tool Red Fang, if you're a big Bluetooth hacker, which tries to find devices that are in nondiscoverable mode. This is only for discoverable mode devices. Okay, so moving on to mode two. Mode two is actually just a randomly generated profile. So you really want to obfuscate and you don't want to actually have to think about anything. You just type the dash R flag and it creates you an entirely new profile for your device. An Easter egg that I didn't actually put in the documentation, kind of on purpose, because I wanted to release something at DEF CON. If you change from the dash lowercase R to dash uppercase R, I have a list of all kinds of science fiction names instead of normal names. The previous one took the top 100 first and last names and generates it from that. This will take your favorite science fiction characters, so you can be Yoda's phone or Malcolm Reynolds peripheral or Bender Bending Rodriguez's audio video device. So now you know. Mode three. Oh, this mode is where you actually get to specify the information you want to change your device information to. So this is a little more of the manual side of things. So new name, the device address, and the device class. Not all. You can't just put anything for the device class. I mean, you could and it'll just say unknown. So if you're going to put something in there, you know a little bit how the device class works, which I'm not going to really go into too much today. Mode four is, oh, it's a load, previously a log scan. So if you want to scan, save for later, log it in, make one of the selections and then clone that device later on. You can do that. And the last one is the incognito mode. You can have a spoof tooth randomly generate a profile every X number of seconds. So if you don't want to be seen, you can keep changing your profile. This will mess up persistent connections. So don't think you're going to be connected to something and keep changing that. It will mess it up. But if you're just running these scans or whatever, it will change your information every 10 seconds. So this is what the interface looks like. Pretty straightforward. It will run the scan, especially the device that pops up with this menu. It'll list all the devices there. I'm not that great with the interface programming so far. So instead of having nice little, it's similar to how Kismet, the menu interface is for Kismet, except I know a lot less.  So sorry about that. Maybe in a future version, it will be a little more slicker interface. So yeah, that's showing you four of the scans. You can see there's a couple pages at the bottom. So you just previous, next, and it will show the rest of the scans, which I have obfuscated people's names and the addresses in this slide. But we'll show you real quick a live demo of who's in this room. All right. Can you guys hear me clicking? Is that really loud out there? It sounds really loud up here. Okay. This is actually, I don't know if it's going to pick up, it might pick up stuff up here, because actually I'm not hooking it up to a long range device. So Bluetooth has three different classes. Yeah, okay. Popped up, done. One thing to note, so I'll go for the class first. The class of devices, there's three different ones, one meter, 10 meter, 100 meter. Those are somewhat accurate numbers. So if you're looking to do anything with Bluetooth, you want to get a class one, because that's the longer range. So Bluetooth scanning for this, you see that the, actually no, all these got their names. Sometimes the scans, they have an initial scan and then a follow-up. So you can see under, I think it's four. Yeah, device four, it says unknown. What? Oh. Yeah, sorry, that's going to, is that a little better? I know it's all blur and it's hard to see. I mean it's not, it's going to mess up the menu if I do it any bigger, so sorry about that. You can kind of see it's mostly a blur. But if you notice, is it gone now? It was. Number four, change, the name changed from unknown to red team. Man, I'm getting a lot of stuff in here. I figured there'd be more paranoid people. It doesn't pick it up very far. So the device, the scanning for Bluetooth, the initial scan detects the device based on the MAC address and then does a follow-up scan for the name. So some of the times if you're, you know, if you're using this to do something like war driving, you will need to be in an area where you're actually going to have a persistent amount of time with the device that you're scanning. You can, if you want to capture that information because it takes 10 seconds to a minute to complete a scan. The initial scan is actually very, very quick, but the follow-up scan for the name takes a long time. So if you notice that things change on there or that you're not getting the name, that's the reason why. So it's just, this only works with discoverable devices. Sorry, he asked if it was just with discoverable devices. This only works with discoverable devices. Through this, I've actually started another project called the Bluetooth Profiling Project. It's similar to a family with Josh Wright. He's doing a very similar project and collecting a lot more information on specific devices. I'm only looking at a little bit. So what this project is, it's trying to map the MAC address range of Bluetooth devices. So for those who aren't familiar, each type of device, every manufacturer gets their own, I thought I had in the slide, forget exactly what it's called. It's basically the first six characters in the MAC address are manufacturer specific and then the rest of them are randomly given to the devices. So if you can figure out, and that range is the same on all devices of a particular type. So if you can get the range of those by you keep scanning and you find that whatever type of phone and you see, oh, well there's a pattern here. I see that all these types of phones have between this and this. Then you can use something else to, oh, it will help out with other projects. Actually, I'll talk about that in just a minute. So right now I've collected about 1,500 devices, which is surprising. It really is surprising how many devices are out there in discover mode because they really shouldn't be. I listed about 1,000 of them on my website right now. I'll try to get more. Yeah, so actually I just went into this a little bit more than on the previous slide. So yeah, using Red Fang, as I mentioned, Red Fang finds devices in non-discoverable mode by attempting connections essentially. So it has to run through the entire list and it takes forever. Like you couldn't actually run the whole gambit and I don't know what the number is, I don't want to quote it, but it's years and years and years and years. So this will help narrow that down. If a device, if only 1,000 models of a certain device are made and you can get that range, well then you have a lot higher than whatever the MAC range, the possibility of MAC ranges is. The other thing is to match the model with the address. Yeah, let's talk about a little more of the research. A big part of it that I've discovered is actually the disclosure of sensitive information. I feel like a lot of people don't realize what's being disclosed by the name of their Bluetooth enabled device. Oh, sorry. Yeah. So we went through this just a minute ago. That's the OUI. That was the number I was looking for. This is the sensitive one. So a lot of them are giving out things like the first name, the nickname, location, device model. I've seen things like URLs actually in the name because people name the computer the same name as its URL. So then you can see it that way. All kinds of stuff that, you know, I'm sure they don't know that that's the name of it or that anybody walking by can just get the information. But my findings are about 30% of Bluetooth devices that I scan gave away an individual's first name. And that's just me just getting through them. I might not recognize a name off the bat, but that's roughly it. About 20% give out last names, locations. The device model, I considered that sensitive information only for exploitation purposes. So if you know what the device is, then you can target your attacks. So that's, you know, but I understand naming it that way. I'm not saying don't name the device whatever, but it is possibly sensitive information if people are going to try to exploit a particular device. You change the name to something else. Other than, as I said, the MAC range figuring out that way, it makes it very difficult to determine what the device is right off the bat. Contributing. I'd love to have an enormous list of profiles. The more that people contribute, the better, the better, the more accurate things will be. There's a couple caveats to that. So I wanted the name, the address in the class. No more or less. I don't care where you got it. I don't care how you got it. Just as long as you post those three things. I want to sanitize the information. It is publicly available information, so there should be no problem with it. But just to be nice. Sanitizing things like the name. Anything that looks like a name. Replace it. The place information or other is for the category that if you're like, this is kind of, this might be sensitive. I wonder if I could ask him. Just replace it with other. It's not that important to have the name for everything except for, as I said, the statistics earlier. That's the most of the reason I don't just replace the name right off the bat. It could help with some other research down the road. So I've created a forum on my website where people can just post the logs that they find. And I will update the full list as I get more posts.  I thought this would bring point the home. I just phrased that completely wrong. So this is just a couple of them. I've been scanning all of DEF CON. Congratulations. People do actually do hacking stuff at DEF CON.  But, yeah, I don't know how many clients didn't get a list. I'm going to go with about 250 different profiles that I found here. When I wasn't even, this wasn't like an effort I made. I didn't try to get every room or go all around. It's mostly been sitting in the Hackers or Charity booth. So if you went to the vendor area, you probably got scanned there or walking around a little bit. So this is just a couple of them. I liked Fail Phone, clever naming. I removed the star, star, star, is actually people's real names. And you can see what devices give those out. This is, yeah, as I said, just a couple. So be aware that whatever you name it, if you don't know what you've named it, you're probably giving something out.  If you don't know what it's named, you might want to check that out. And I meant to say this list was inspired by the Wall of Sheep guys. So I'm going to be posting some of this stuff with them later on. So this is a short list. If you want to see that you were scanned, you might be going to check out the Wall of Sheep a little later. So that's the obfuscation side. That's the, you know, data collection and everything like that. Now we'll get into the offensive side of things. So a vCard. So this is one of the tools that I've been working on called vCard Blaster. A vCard is a virtual business card, essentially. You probably have used them before. A lot of places have them for download or information on people. It works, syncs up with like Outlook. It creates the profile. It's good for your contact list. And it's heavily used in Bluetooth. A lot of the Bluetooth-enabled phones will be able to share things over vCards, which makes things a lot easier instead of all the business cards going around.  But some of them that allow it, sometimes it'll come up with a prompt that says, you know, would you like to allow this vCard? And you're like, oh, yeah, sure. I just met that guy. You know, we need to pair before you can send that over. Some of them, however, don't do that for this particular feature. And I can understand why in the development of it they decided, oh, well, obviously, if you're just going to send a vCard over, there's nothing bad about it. But there could be. What vCard Blaster does is it allows you to send a constant stream of vCards to a particular device or to all devices in range. One, a couple of different things. Let's see, yeah. A couple of different things this can do. One is potentially fill up the disk drive. vCards, while they can just contain email or your name or your phone number, they can actually contain a lot more than that, like images. So if you could send a constant stream of vCards with very large file types, you could potentially fill up the disk of something that's a very small PDA with a very low amount of memory or if it's partitioned memory. The other thing is you can add contacts to people's devices. So that could be interesting just to see what you want to add. The other thing is, actually, if you want to add a ton of random names in there, you've officially made it very hard for them to make a phone call because if the contact list had 100 people and now it's got 10,000 people in it, they're never going to find mom, mom, mom, mom, where is it down there? And I don't know of any quick way to remove new contacts most of the time. I'm pretty sure it's a manual process. So unless they have some sort of backup of their contact list, they have to go in and manually remove all of it. Something I'm going to be working on is actually the random name generation. So that's not in there right now, but I'm going to be adding that so it will randomly generate a name. You can't have the same name but a lot of times they'll get angry about that and say, are you sure you want to replace this? And you don't want to make the user aware that this attack is going on. So it randomly generates and doesn't double up on the name so you can fill it up that way and they look like legitimate ones because right now I just have a random character of string so they can pretty much tell that it's not legit. So this is what the attack looks like. I can demo it... I can demo one, sorry, it's dead. But this is exactly what it would look like. So the flag's up there. Can you guys? You can't really see it that well. So I'll describe what it is. It has a jasg flag for generating a dash i20 to say run it 20 times instead of 10,000 times. The dash t, it has to do with the threading to see if it times out. So it'll continue to work so it'll freeze up. So you want to add a time out option in there. And then just the director, you can either select a specific vCard or vCard Blaster will generate one for you and then send that information on. So that's pretty much what's going on here. I have a string that I gave it, big brother, and it's randomly generating text after that so that it won't prompt the user to replace the current contact. So this one, I wish I could show how quick it runs. And once that they initially connect, it's milliseconds to copy these over. So you can fill up a contact list pretty darn quick. Yeah, the live demo thing, not going to happen. Blooper is actually a very similar type of program. It's exactly the same, except for it's not vCards, it's any type of other file. So the process for sending these files is the same. However, when it gets on the PDA side, they know that vCards are supposed to be interpreted this way and possibly other files are interpreted in certain other ways, and then the rest of them are for download. So it's basically the same principle except... Not to single you out or anything. I'll just hold on here. Yeah, so it's the same principle, but it has a different kind of denial of service. Well, I guess it's similar as the first one I mentioned. So what it does is I found on specific devices, actually this specific device, that what happened is normally when you just want to transfer a file, and some of you might have done this through Bluetooth before, you either need to make a connection, it says somebody wants to connect, and then you connect, and then it says, okay, now I want to transfer a file, or it says Bob is transferring a file to you, do you accept? When you click accept, it starts downloading it. I found on a particular device it would cache the file, and then prompt the user for the download. I don't know where it would cache, because forensics on PDAs is very difficult, and I haven't actually found how it caches it or where it caches it, but it caches it nonetheless, and that's before it prompts the user that the interaction is going on. That's assuming a couple of things, like it allows anonymous connections. So this is only one specific device that I've tested it on. It might work on a lot of others, and people don't like to give me their phones anymore for some reason. So what you can do is, as I mentioned before, you can fill up a disk of a device with a low disk space, and this one works a lot better, because the vCard one, you might have 20 lines of text you're sending. This one you can actually generate a file of whatever size you want and send that. So you can send a specific file if you want, which is fine by me, but I thought I would just offer to randomly generate a file, because what's important here isn't the file, it's that it's causing it to fill up the disk space. So you can generate a file of 10 kilobytes or, you know, 5 gig, if you really wanted to. Of course, 5 gig over Bluetooth would take forever and ever and ever. Bluetooth is not designed for heavy use. You don't want to pass an ISO over Bluetooth. That generally will not go very well. It's a very low data rate compared to Wi-Fi. It's 2 megabits slash 3-ish megabits and that's, you know, like theoretical Mac stuff. So it does take a while. That's the one caveat of this thing, of this attack is you really have to be next to somebody for a very, very long time. This isn't going to be very effective at a coffee shop. If you're going to be performing this attack, it's got to be a device that's for an extended period of time, hours, maybe a day depending on how much this space there is and if the attack is effective. Oh, yeah. I put the, it can cause it to crash. So when I was testing this, once I accidentally hit OK, I sent a bunch of files at once. You can send one file or a lot of files. However, if you want to test it with the device to see what's more effective.  Do you want to say OK for this file or do you want to download them all? And I just happened to actually accidentally click accept all. And so long story short, it took what was in this memory which was almost full and it tried to write it over into the real file system. So we completely ran out of disk space. And I don't know if it ran into the memory because a lot of these devices actually, you know, they're hard drive space and they're RAM are actually, you know, the same actual physical chip or flash or something like that. So what happened is it actually completely fried the device and I had to do a factory reset. Which was fun. It took me forever to figure out what was going on and it died. And then bringing it back up, it would not boot. It would not boot. So I actually had to do the manual factory reset to get that to work. So that's a nice little attack when you completely break the system into the manual factory reset. So this is what it looks like. I can attempt the demo over here. Yeah. Actually, I'll do the demo and then come back to see what this looks like. So to scan for a Bluetooth device in Linux, HCI tool, scan. You could use Spoof Toof. This is just quick and easy. The advantage over just running a script that will do this is that Spoof Toof only logs it once. So if you're doing a... Thank you. Thank you, whoever out there. It's hard to see. It says Ronin's mum. Fanboy. Thank you. Okay. So I'm sure people have been pounding on this thing because it's a Bluetooth app and I enabled Bluetooth on this. So we're going to try to run this. Let's see. Wow. So. Sorry. Let's see if I can boost this up a little bit. That didn't do anything. It's a little better. One more. Yeah, okay. So that's the command I'm going to run against my Dell AXM up here. And should have just copied and pasted that like I just did. What would have been faster? Oh. I should... I need... I'm actually trying to upload a file that doesn't exist. Evil file. Wait. That's not good. Okay. Well that didn't work at all. I don't know. I know why I haven't updated this system. I apologize for that. But the attack would have looked exactly like this. So that's actually the system's fault. The program should work fine. I guess I should mention that a lot of these are actually generating a script internally. So that's why actually that failed, because I didn't include some of the code. I actually just end up bundling into a script. The new versions that I'm working on right now will have everything in it. So you don't have to install some of these tools, some of these additional packages. And that's the reason that failed right now. But anyway, so what I have here that's hard to see is it's going through five iterations and it's using a file generating of size 10,000. And you can select the file name, the current file name, and you can... And then you can tell it what the file name should be on the other end. So it doesn't have to be the same. So you just have to say that this is some sort of whatever file, maybe someone would accept it actually or something that looks nonchalant. And then target the device and you can kind of see the iterations. Each of it finds the device. It's sending the file and then it's done. But it does take quite a while for a size. This probably took 10 minutes to send the size of 10,000 K. So, yeah, it will take a little bit of time. And then on the other end, you can kind of see it has a little pop-up. That pop-up, you can either... So save all in the bottom right left. That's what I clicked in. That was the downfall of the device. Imagine a user would probably notice if I send a file that says evil file. It generates a counter too. You have that option so the files can look differently and that's how I knew how many were up there if you're testing. It makes it a lot easier because another sort of denial of service in this kind of falls into both of them. Pop-up menu, denial of service. If you're sending a constant stream of files that are very small, this is another option, and they click no and it pops right back up. So unless they get away from you, they can't actually disable Bluetooth unless there's some hardware setting because they can't get the start menu because they click start menu and that pop-up is a higher priority than the start menu. So all you do and this happened to me and I was like, no, stop. Crap, I can't go over the other side because it kept popping up and I couldn't actually do anything on the device because of the pop-up menus. So if you really want to annoy somebody, that's a good way to do it. Another tool I've been working on is a PoneTooth. This is an attack suite, essentially. I've tried to bundle together some common Bluetooth attacks other than the ones I mentioned here. None of these are mine, but I figured I'd make a little bit of an easier way for certain people to do pen testing. There's a really good actual suite in Backtrack that's...  It steps you through things. Mine does not do a step-through. What this is is it basically allows you to run a script and it will scan for everything and only run the attacks once against it. So it's a binary file, but it could have been a script file, but it only runs the attack list once. You provide the list of attacks through the tools. So there's no point in click or anything, or you're not just selection.  You can say one specific device, you can say all devices in range, and it'll run all those against it at a time. I don't do any report generation. I probably won't do any report generation maybe, possibly, but all you get is the output of the actual attack. It's not going to provide the information that says this succeeded, this failed, whatever. But it's mostly there to make... I worked on a project where I had to run a lot of attacks... Excuse me, I had to run attacks a lot of times against a device, and then I have to type in the Mac every time, and it got to be a little bit of a pain. So this is more just the automatic way to do things. So here's the config file. The configuration file uses a star and inserts the MAC address. So a lot of them will tell you this is where the MAC address should be when you're running the command. That's basically all it really does, other than it could just be a bash script except for that it scans and only runs at once. This is the default area where the file is installed. And it will... You can run it multiple times through, so you can say I want to actually run this script as many times as you want, and that's just an example of this specific log file that you want to log the information out to and the scanning it 10 times. So you can specify a different configuration file if you want, but this just makes your life a little bit easier if you're going to be running lots of attacks against a single device or in an area of devices.  An example. So Pound is to keep it from being read in. So the list comes with examples. It's got some default ones. And I tried to put some in there, some of the commands, because I know some of these tools, while awesome, are not as, you know, widely used. So there's not a whole lot of documentation and examples of things. So I tried to include examples of how to use them in a way that I would normally use them. So that should help you out if you are new to this in getting started. So I've provided a couple of examples. You can add whatever you want, as long as you use the wildcard, it'll insert the address in there and run whatever you want. Here's a couple of project pages for the different things. And I'm up for Q&A. So anybody? It's something I started years ago. I just decided to put it up there and then ever since, every presentation I do has a bunny. So, yeah. We have any questions? Do you know what time it is? Not good. Any questions? Nobody cares? All right. The problem with the, you have to find it when it's nondiscoverable and that's a big pain. There is actually some presentations. I think they did a great job. I'm using a USSRP to monitor the bandwidth, the frequencies, and getting it that way. But that's frequency analysis. So you can discover devices there and you might be able to pull out the MAC and it's very complicated and long. But Red Fang is a great option to find nondiscoverable devices, but it takes so long, it's not terribly practical. Yeah, actually we've got some swag here. If anybody wants it, you can come on up and throw some too. Will people want this stuff? All right. I'm going to see how far I can get out. Almost to the back. Deflected. All right. I'm going to be in room 114 if you have questions about that or maybe about this.


This is our deeper dive in WHM session, so we're going to talk about WHM, Web Host Manager, I believe, is what it stands for. Sounds right. Yeah. And if in our ecosystem of tools used to manage Domain of One's Own, just as a reminder, we've got the WordPress wrapper of Domain of One's Own that most people are going to be interacting with, WHM CS, which lets you look at people and what they have access to, basically, with a lot of other little things in there, too, that are related to what folks have access to. And then WHM is really focused on the server and accounts themselves. So it's, I think, kind of an important distinction to make when we talk about accounts, most of the time we're talking about hosting accounts or cPanel accounts, right? You can, in a lot of cases, accounts are related to people, but technically, a person can have more than one account, right? We saw that in the WHM CS demo that Pilot just did where there was a previous account and an existing account that you had access to, well, you had access to one of them because the other one was gone. So that's kind of an important distinction, I think, is that accounts. So WHM can manage the server and individual accounts. It doesn't have a lot of information about what people have access to things. So yeah, we're going to kind of showcase what you can do in here. There's a lot of stuff in WHM, frankly, an overwhelming, insane amount of stuff. I'm still learning a lot about it, and I work at Reclaim. You don't need to post it. Yeah. As a domain of One's Own admin, I think there's a couple key areas that you'll want to use, or at least know exist, but you're not going to need a lot of it. A lot of this is stuff that actually we use to manage your server that you won't really need to get into too much. So with that, Pilot, I'll get your screen ready to go and we'll dig into WHM. You ready? Yeah, sounds good. All right. So this is the WHM homepage. Once you log in, this is what you're going to see. You're depending on your version of WHM, it might look a little different, but I think most servers have this rolled out now. Our documentation is still we're working on updating that and getting that up to date with this, but the principles are sound. And basically the only difference between the documentation theme that that you'll see there in this is that this one has a search bar at the top that is mostly a duplicate for the search bar on the left because the left will search for tools in that big long list of tools. And the top one will also search for tools. It'll also directly search for accounts, which is kind of handy. But then the big stuff about like what things are called and what they look like, that's all really exactly the same at this point. None of that has actually changed. It's really more just the theme of blue and white and orange and those search bars. Yeah, so with that, we're going to just get started on these sort of core tools that Taylor was talking about earlier. And I think the most important one is list accounts, which, you know, it's first because it's important. Top tool, they say it is a top tool on the old theme. It was also a top tool, but it was listed over here, rather than, you know, upfront, right, the first thing, which I thought was a little misleading. But, you know, this is it's right here. It's easy now. So we're going to hop into list accounts right away and list accounts. We're going to just quickly search for mine. List accounts is has a list of all the accounts on the server. You saw a bunch of accounts just now, but that the this is it. This is what on account listing looks like. They're all they're all going to look like this. If they're suspended, they'll be highlighted in red. This one isn't suspended, but this is the account that you just saw me using in WHMCS in the last session. So accounts have different data associated with them. They have the domain, the C panel IP address, username, contact, email, set update, all of this stuff. The particular things to look at right now are the quota, disk usage and package, because that's all stuff we're going to talk about a little bit later. But this is just a pretty good place. If you want to get an overview of particularly these three, which is data that you can find in WHMCS, but it's a little bit less centralized. It's a little bit you have to go to each account, each C panel account page individually. So just taking that into account, I think the next thing actually we're going to look at disk usage real quick. So this is the disk usage section for a for my account. I'm using one megabyte, which isn't a lot. The quota, which is the maximum amount I'm allowed to use is 500 megabytes. Luckily, I'm nowhere near close to going over. But if I was, I would start getting emails around the 75, 80 percent mark, which would say, hey, you're creeping up on your maximum. You maybe want to either clear some stuff out or talk to your admin about that. And those emails would just be sent to my contact email. It is possible to have an infinite quota. I we don't recommend doing that.  Ones up by default that way, unless you ask. Yeah, and it's not a great idea for long term. Management. Yeah, exactly. In part, first thing, because you will never get those, hey, do you want to maybe take a look at your account and clean it up a little emails because you're never going to hit 75 percent of infinity. And also just because if a user keeps using up space, lots and lots of space, there is a maximum amount of space that you can use on the server, which is 250 gigabytes per 500 C panel accounts. So that goes up in blocks the same way the number of accounts does. You can add more storage. You can just say, hey, can we add 200 more gigabytes? We don't want 500 more accounts for not using that right now. But can you just add an extra 200, 250 gigabytes onto the account? We're happy to do that. That's priced at like 10 cents per gigabyte per month. So for 200 gigabytes, it would be $20 a month. And that's. Sorry, I was going to say, and it's it's important to note that that limit, that 250 gigabyte or whatever, you know, if you expand it limit is that's what the server has attached to it for storage, right? So if you meet that and we will we will be emailing you if you get close to that. But if you if you get close to that and actually hit it, that's very bad for the server. That means your server is out of space. If you've ever completely used up the hard drive on like a laptop you own, you know that it's not a great time. So that is kind of a hard limit. I mean, we can expand it, right? But my point being, you would never want a individual user to have the capability to just use up all the space on your server without you even noticing. So that would be that would be kind of rough. And there's all kinds of things that could do it, right? Like you could have, of course, someone just uploading a lot of stuff, but also more innocuous things. Maybe they're running a strange plug-in or application, you know, that is just writing data to their account and they don't even notice. Comments, spam comments are the one that we often talk about is just if someone leaves a whole bunch of comments that can add up. Yeah, we'll talk about spots a little bit more tomorrow, but many of them make it easy for public contribution to a site, including images, sometimes video, audio. And if you just have like hundreds of people upload really large images, and again, maybe the user is not even really thinking of that or they're not aware. So having that quota be a cutoff and say, like, look, you're almost there or you're done, you use your one gig, half gig, two gig, whatever the quota you set, right? It's a really good checkpoint, even if you're just going to allow them to go beyond that and say, all right, let's move you up to five. Yeah, I think it's a good checkpoint. Yeah, it is possible to adjust the quota for a user on a per user basis as well. So if you have a couple of just like one or two heavy hitters, people who are doing larger projects, you can say, all right, you guys get five gigabytes, you guys get maybe 10 gigabytes because your projects are really big. I would caution against making that policy, the general policy, where if a user comes to you and says, can I have some more? You just automatically give it to them, because if you give a mouse a cookie, they're going to want more storage space, which is a perfect metaphor. Yes, exactly. It sets a precedent for the user that if no matter how they're managing their space, they can always get more. It's functionally infinite for them, which we've just talked about like why that's not always a great idea. We also try and encourage just good image management. So, for example, if art students are making portfolios, they might be uploading print resolution images when they really don't need that. That's not going to be useful to them on the web, and those will take up a lot more space. So, it is a good opportunity to talk about just responsible account management. And give them some tools to deal with that, right? Like, in the example of an art student, you can, maybe they need to be resizing their images in Photoshop or something and mentioning that. And I will say, when I was an admin at a school, I made that connection a couple of times between the student and faculty member who was like, great, they're taking my Photoshop class next semester. And that was kind of great to bridge that gap. But then there's also other tools that are easier to use or more accessible, like not expensive like Photoshop is. So, they're one of my favorite recommendations. One of my favorite WordPress plugins in the world is called Insanity, I-M-S-A-N-I-T-Y, and it resizes your images for you as you upload them. And that's super great for folks that kind of just don't want to have to worry about it. There's all kinds of things. We're happy to make those recommendations, by the way, if you're looking for something, reach out to us at Reclaim. We can send you suggestions, depending on what you need. But I think it's a good place to meet that and say, all right, it looks like this is using up a lot of your storage. So, you may want to consider this and have that kind of... It's a learning opportunity. Conversation with them a little bit, via email, in person, whatever works, right? But... Yeah. Yeah. It's just a good learning opportunity, I think. It's good. Totally. Yeah. And actually, pivoting on that, pivoting, I don't know, looking at quota disk usage. And we'll come back to package as well. We can hop over to the Disk Usage tool, Show Current Disk Usage. So, List Accounts is great for looking at which accounts are taking up the most or how much a particular account is using. You can use the Show Current Disk Usage tool to see how much of the available storage you're using. So, you can see we're using about 40, 50 gigs and we have about 100 gigs available. We are using 34% of our available storage space. And that's, you know, totally fine. Once you start getting up towards that 75, 80% mark on the entire server, we're going to start sending you emails just saying, like, hey, how do you want to think about managing growth? It's always important to think about what the future of the project looks like. How do you want to manage that sort of thing? That's pretty much all you can do with this tool. It's really more of an information gathering tool than it is a management tool. But I like to let people know it's here because it's just a good way to do a spot check. It's just useful. We're going to hop over to Installatron real quick. Installatron applications installer. So, earlier in the WordPress session, actually, Amanda and I showed off some of the applications that are available through Installatron and then we walked through installing WordPress using Installatron. So, this is the section of WHM that controls the settings and the tools that Installatron offers. So, you can use this section as a sort of bird's-eye view to take a look at all of the applications that have been installed on the server. So, if I had installed a site, I did install a site earlier on my previous account during the WordPress demo session, that would be in this list. But so would a site that Taylor had installed if Taylor had installed a site on his account on this server. Everybody says. If you want to look for one, there should be one called Community for the Community Showcase. It's on the state unit. Oh, yeah. Community Showcase. I don't know if the word Showcase will be in there. Oh, it is perfect. So, these are actually sites that we showed off earlier. Amanda and I took a look at these, both the Community Documentation Templates for StateU. Those are running a little behind. And the Community Showcase Template for Domain and One Zone, or not for Domain and One Zone for StateU, which is a template that you can get installed on your server if you want. Talk to us about it. So, yeah. You can also look at all of the backups if you need to use them and the applications browser. We're not going to look at that right now because we're actually here. We're here for that. And we're also here for another tool called Access Control. These two are probably the big two, I think. In terms of earlier, we talked about there are a lot of applications available through Instaltron. You can see them all here. We have, I think, most, if not all of them, made available to users. We have a couple of them highlighted, graph, known. At some place in here, probably close to the top is WordPress because everybody loves WordPress. But we have lots and lots of options. Okay, here's one that's not enabled. Great, that's a perfect example. So, up here, we have the Power button. We have the Feature button. And then we have a couple of others that I have never used. The Power button dictates whether it's available on a given to users, basically. So, all of these are available, but OpenBiblio is not. We've decided not to make that available to our users on state.u.org. Just because I am not familiar with the reasons. I know someone decided that on purpose. Yeah, I think I've never actually seen that one before and I'm not familiar with it. But there's a lot of reasons you may want to not have an application.  It may be something where the application is not really being updated and doesn't work properly or doesn't work the way you would expect it to work. It may be a lot of different reasons, right? So, whatever your reason is, it's pretty easy to prune this list if you'd like to. Yeah, so, for example, we have a section on e-commerce and business. Some schools have this as a portfolio site for their business school, I believe. If there is not a school that's doing that, there's definitely a school that could. That's super possible. And they'd probably want those applications to be on there. Other schools have a section in their tech terms of use that say if it's something that the school is providing you, software, hardware, whatever, we don't want you using this for commercial purposes. Please don't do that. And so you can just go through and turn off all of the e-commerce and business options, and then they're gone. I will say you can turn them off. You can also come to us and say, here's a list of things. Please get rid of them. And we're happy to do that work for you. We do this tour of WHM because we want you to feel comfortable to know what's going on so that things aren't necessarily a mystery to you. You can sort of think through your options, but we are also happy to manage this for you. You can always come to us and say, please change these settings for me. I don't want to touch WHM. No, thanks. Taylor? I just wanted to mention the... Well, and I don't know if you're going to move on to another tool, but I wanted to mention one other thing in Stalatron that we'll talk about a little bit tomorrow. Planting the seed is there's a template section in here that lets you make site templates. And so we're going to talk a little bit about that tomorrow in a session. Amanda and I did mention that actually, so we can take a look at that real quick. Yeah. So from here, you can manage templated content. Basically, you can take a WordPress site in most cases, but it works for a bunch of every application on this list here. And kind of save the content in there and make that something that folks can install WordPress with, say, some demo content, some plugins configured, all the kinds of stuff. We've got the empty content is just the empty WordPress install, but there's... You can see in here there's a... The domains community site template is in here and it looks like Lauren at one point made a template. You can see the minimum version. Basically, that's probably when it was made. But a template doesn't deploy with an old version of WordPress by default. So you can actually... They'll actually be updatable. That's totally easy to do. It's a really great tool. I've seen admins use it to make a starter site for blogging in a course or maybe podcasting or all kinds of things that are possible with templates. And we'll, like I said, we'll go more into it, but it's a really powerful tool. When I was an admin, the studio or department was interested in making portfolios available to the majors in general and who weren't necessarily familiar with WordPress, with how to do things in WordPress. And so they asked, we collaborated on a template that had good image forward options, just thinking through things to make it easy for the studio art majors. And then we turned that into a template. Yeah, that's awesome. I did something similar when I was an admin. It was really nice to be able to have... They laid out a structure for the students of like, here's a page we'd like to see. You may want to include this. And they literally wrote that on the page. Right? So it was pretty clear and kind of well documented in that way. And that's a really good use of this option, I think. Yeah. The other thing I wanted to mention in here too is that in the main My Applications page, and we don't have to really showcase this too much, but because you get a list of every single application on the server, those clone tools that you would normally get inside of a C-Panel account also work, except here, they'll let you clone things to a different account if you want to. So that can be really powerful if you have a situation where you need to move a WordPress site from one account to somebody else's account. That's something you can totally do. Just note that when you're working with Installatron with a ton of applications like this, in this case, it's 148. So it's actually not that many. A lot of times on a domain in one's own setup, you'll see closer to like 1,000 or 500 or something like that and more. When you click these clone buttons and the info buttons, sometimes it takes 10, 15, 20 seconds for it to load that screen.  That's just one thing that I always notice when I'm showing people this is that it looks broken, but no, it just takes a second. Like if you click that clone button pilot, you'll kind of, folks will kind of see, in this case, it's really fast. Okay, so amazing. But sometimes when the list of accounts is really, sorry, when the list of applications is really high, that can take a little bit longer. You'll see a little indicator. So yeah, cool. Yeah, that is very cool. Thank you for pointing that out, Taylor, because I totally forgot that was an option. The next thing that we're going to do, this is sort of bouncing from access to control, control to something pretty similar. It's called feature manager. So earlier, if you remember in list accounts, I was showing off the quota, the disk use, disk usage, and then the package. And we're going to get to quota as well. We're talking about the package in general, and then the quota will be a specific feature of that. But first, we're going to look at the feature manager. So by search package here, you can see there's a couple of different options. Add, delete, edit, and feature manager. So we'll start there. So the deal with a package is it defines the settings for a particular account. So that includes the quota. That includes processes. It includes what applications are available, not necessarily an install-tron, although you can use install-tron to say, in this particular package, only these applications are available or all these applications are available. And how do packages get rolled out to users? Like, how does that determine? So we have default packages. It says there's a system default. We usually configure a different default that is specifically designed for domain one zone. And so the feature manager controls all of the C-panel tools that are available. So when a user signs in and gets their account set up, like Amanda and I were showing earlier, you can, that WHM CS connection is saying create an account using the default, basically. And this is something that you can change with SSO. So for example, if you want to have different types of packages available to students versus to faculty, you want faculty to have a higher quota, you want students to have fewer tools available to them because they don't need everything. They just need to know these particular things for what they're doing. You can create two different packages, one that's called maybe faculty and one that's called student, and change those settings. And then- You can also change them after the fact, right? That's true. If you wanted to do that manually, you could have a different package for more storage. Faculty with two gigs of storage or something like that. Exactly. Yeah. And that's something that you can change in WHM CS. You can change it in WHM, but in a similar thing that we were talking about in the last session, WHM CS is a really good place to do any of that because that's where the logs live. So you can find the packages in WHM and you can apply them in WHM CS. Exactly. And so a single sign-on would just look at a user and say, oh, this user is a student. We'll give them the student package.  We'll give them the faculty package. There is, by default, one default package that everybody gets, but we can work with you to get multiple packages set up if that's something you need. So we are going to- We'll look at the feature list. Yes? I was going to say WordPress in the classroom is the default one in StateU, if you want to look at that one. Yeah, so we'll take a look at that. And we'll just hit Edit. And this has a list of all of the potential tools that are available in C-Panel. You'll notice some of them are checked and some of them are not. The ones that are unchecked, users just won't be able to see. They won't have access to those tools in their toolkit. And there's different reasons to do this. So for example, we have email accounts disabled on this server. Email has some particular settings. It's just not something that we want to make available on this server. We have it on our shared hosting servers, but not here. A school, schools will often ask for the email account section to be disabled because you guys are providing email through your own systems. The users don't necessarily need to have their own email accounts set up through their C-Panel. And so that's just something that you can change with the feature manager. It's just pretty similar to Installatron, which is why I wanted to go here first because it seemed like a pretty good transition. But there are other things, other settings that you can control with the package. And we're just going to hop over to that because we were talking about quotas, what the quota is, for example. So we're going to hop into WordPress in the classroom again. And here you'll see this is very different from feature manager. What this is defining is the maximum amount of space, the maximum monthly bandwidth, a couple of other different settings that can be defined here, that if you want to change them, that's definitely possible. And again, that's something that we can talk to you about and help you with if you want to change how quotas are defined. But this is just the place where you would change settings for a particular package. So the C-Panel theme is set here, the feature list, you would say the default feature list, you would say which ones you want. It's a bit odd that WordPress in the classroom doesn't use the WordPress in the classroom feature list. Confusingly, yeah, that's not lined up. To be fair, state U is sometimes our testing ground, so sometimes it's configured in strange ways. But normally it's a good practice to name the feature list the same as the package if there's a one-to-one matchup. Sometimes there's not, right? Sometimes you've got like, we have one faculty list that apply, sorry, one feature list, maybe called faculty that applies to multiple packages that faculty could have, right? There are times when that is a little bit different, but very often for folks, they've got a feature list that goes with the package or just one feature list and one package, right, for everybody. Yeah, this is, I think, most of what I wanted to cover, is there anything that you think we should hop into? I think we're almost out of time as well. That's really all you're going to need for administering things in here, is knowing that, hey, you can check out the accounts, you can also log in the C panels from that list account screen that we showed earlier, seeing how you can manage things in Installatron and manage packages. That's the main stuff. Like we mentioned at the beginning, there's a ton of stuff. Can you actually hit the little X button in your server bar for a second? Like there's whole categories of stuff that we haven't covered. In fact, there's entire categories of things that I personally haven't even used, including support ticket functionality that is not just reclaim support, right? Like that's its own support tickets inside of WHM that can be managed. It's a whole own thing. But a lot of this stuff is, if you have done any server management, you'll recognize, oh, here's like, I can look at the processes running on the server. If you find yourself getting in there for some reason, I think you're well into the point it's probably time to reach out to us for help, right? Because there's a ton of stuff in here that you're really not going to need.  So just mentioning it in there, it's in there if you want to look at something you can, but that's the point of which I think it's time to reach out to our support. And sort of a quick example, we're almost out of time, but just to say now, for example, this top tool, create a new account, let's you create new C panel accounts, don't bother with this. WHMCS also has an option for this. It gets logged to there and most often you won't even need it because users will be signing up for their own account. They usually only need one, maybe a faculty member needs two for some reason. They're managing a departmental account and their own personal account, something like that. But for example, this upfront looks quite useful. It's not really something you need at the server level. It is, it's something that the other tools are designed to help you with higher up. So yeah, I don't think I have much else. Can you stop the screen chair? Yep, absolutely. Okay. So I think up next, we're going to run right into the next session, which is how to talk about domains. So we'll see you all then. If you have any questions about this, of course put them in the Discord and we can touch on them throughout. And we also have some time at the end of the day today and tomorrow actually for Q&A and wrap up time at the end of the day today, stuff like that. So please put any questions you have in there and we can reach out. And also keeping in mind too, it's probably, it's been brought up I think already, but our support documentation, our support site has a lot of this stuff documented, especially there's a whole domain of one's own section that will have a lot of things available, which is also great to touch on things we just showed, but also kind of get into some of the more advanced stuff if you're interested of WHM and what's possible in there. That's all in the support, support.reclaimhosting.com. So check that out. Yeah. Thanks. Thank you all for joining us.