Sec+ 2.2 Notes

Virtual machine (VM) escape refers to an unauthorized user taking control of a host machine through a VM.

Container virtualization isolates and protects applications from other parts of the system and uses fewer resources than a standard virtualized system.

Virtualization sprawl is a phenomenon that occurs when the number of VMs on a network reaches a point where the administrator can no longer manage them effectively.

A public cloud model is maintained by a cloud service provider. The provider makes shared resources available to the general public over the internet.

A private cloud is defined as computing services offered either over the internet or within a private internal network. Only certain authorized users can access private cloud infrastructure, such as employees in an organization. Resources are only for the organization. A little cloud within the cloud just for your organization.

A hybrid cloud model is an environment that uses a mix of public, community, and private cloud concepts with a single management platform.

A Community cloud is a collaborative effort in which infrastructure is shared between several organizations that share a common interest. For example, local public entities or locally clustered law firms might use a community cloud to save money.

A Software Defined Network (SDN) separates data and control planes in a network. It uses virtualization to route traffic to its intended destination, instead of using proprietary hardware.

A Virtual Private Network (VPN) extends a private network across a public network. It allows users to send and receive data from an internal network across a public network.

The Trusted Platform Module (TPM) is a hardware-based encryption solution that is embedded in the system and provides secure key storage for full disk encryption.

A Hardware Security Module (HSM) is a device used to generate, maintain and store cryptographic keys. It can be an external device and can easily be added to a system. The HSM will maintain the integrity of the key.

Saas – Software as a Service. Rather than installing software on client machines, SaaS acts as software on demand.

Paas – Platform as a Service. This is a marketing term used to describe the offering of computer platforms in the cloud.

IaaS – Infrastructure as a Service. Rather than needing data centers businesses can contract for utility computing as needed. Think Microsoft Azure or AWS.

Sec+ 1.1 Notes

With consensus/social proof impersonation, an attacker fools users into believing that a malicious website is legitimate by posting fake reviews.

In a hoax attack, an email alert or web pop-up will claim to have identified some kind of infection and include a download link to an antivirus. It’s actually a link to a trojan app.

Pharming is a way to redirect users from a legitimate website to a malicious one by corrupting the way the victim’s computer performs Internet name resolution.

SPIM – Spam over text/instant messaging app.

Sec+ Exam 1.8 Notes

Persistence, followed by further reconnaissance, occurs when the pen tester attempts to map out the internal network.

OSINT – Open-source intelligence gathering. Using web tools and social media to find out more about a target. This step is also called passive reconnaissance.

Having obtained a foothold on the network and performed internal reconnaissance, the next objective is to obtain a pivot point and compromise other network systems.

Purple Team- A team comprised of both red and blue teamers constructed to facilitate an excercise.

Cleanup – The last step after a hack. Includes removing logs, backdoors, tools, and any other evidence of the hack.

Esports Club at Cornell Reflects National Trend

Tracer
Tracer is a playable character in the hero-based shooter Overwatch. Overwatch is one of the most popular esports right now, and the only esport to have a league with region-based teams, similar to traditional sports. Image courtesy of Activision-Blizzard

Once relegated to seedy arcades and the basements of trade shows, the world of competitive gaming has since grown into an international phenomenon. Esports, competitive gaming at the professional level, has millions of fans worldwide . Streaming services and sponsorship deals let some professional players earn serious salaries, sometimes in the seven figure range. While the stakes may be smaller at the collegiate level, the passion is the same.

Ansar Lemon, a senior at Cornell, is president of the Esports at Cornell club. The club was started in 2016 as an Overwatch and Starcraft club, but has since grown to be about esports in general. Lemon said the club has seen massive growth since its conception.

“We have 300+ members, and we have a variety of games,” Lemon said. “Overwatch, League of Legends, Hearthstone, Counter Strike: GO, and we’re still adding on games.”

Lemon first became interested in esports because he was a fan of Blizzard Entertainment’s Starcraft series, a sci-fi-themed real-time strategy game where players try to destroy an enemy player’s base while defending their own. The first Starcraft was released in 1998, and is frequently credited for starting the esports scene in South Korea. The second Starcraft game, released in 2010, is commonly considered to be the game responsible for popularizing esports internationally. In recent years the series has declined in popularity, due to newer and more technologically advanced games being released.

ansar
Ansar Lemon is a senior at Cornell and the president of the Esports at Cornell club. He became interested in esports through the Starcraft series. Photo credit Silas White/Ithaca Week

Starcraft used to be the pinnacle of esports, it was like the example of esports,” Lemon said. “I really loved that game, I loved watching tournaments and competitive players compete. That got me interested in esports.”

Lemon became interested in Overwatch, also developed by Blizzard Entertainment, when it was released in 2016. He had wanted to start a club for the game, but instead decided to merge with the Starcraft club, which eventually became the current Esports at Cornell club as more games and teams were added to the roster.

Esports at Cornell is sponsored by Tespa, a network of college esports clubs that provides members with event support, merchandise and cash prizes, including scholarship money. Tespa has over 270 chapters across the U.S. and Canada, and is one of the largest organizers of collegiate tournaments.

Lemon said many teams compete against other collegiate teams in official tournaments. Last semester the club had four separate Overwatch teams enter into an official Tespa tournament, but they failed to be among the top performers. As an Overwatch fan and player himself, Lemon said improving the Overwatch teams is one of his goals.

“Our A team is actually very good, but the semester is very busy for everyone …  we try to have plenty of time to practice but finding the schedule that works for everyone is tricky,” Lemon said.

Starcraft 2
Starcraft II is widely considered to be the game responsible for popularizing esports outside of South Korea, the birthplace of esports. While the game has waning popularity, it has an almost mythical status for being the game that started it all. Image courtesy of Activision-Blizzard.

Some colleges, like University of California at Irvine, offer scholarships for esports players. Lemon said he expects more colleges to offer scholarships and officially recognize esport teams in the near future.

“Some tournaments are already being shown on ESPN,” Lemon said. “I think that’s going to become the norm. At the collegiate level, I think more and more schools are going to offer scholarships for esports teams, and have dedicated coaches hired by the university itself.”

According to ESPN, more than 50 colleges already have officially recognized esport teams, and the number is continuously growing. If the numbers are any indication, esports are here to stay.

Esports is making its way to Ithaca College as well. Manny Sanchez is a freshman at IC and part of the college’s unofficial League of Legends club. The club doesn’t hold official meetings as it is still going through the process of legitimizing itself, but members like Manny are passionate about the game.

 

IC Student Holds World Record as Videogame ‘Speedrunner’

what is Zelda
The box for The Legend of Zelda: Breath of the Wild. The game was released in 2017 and received a large amount of critical acclaim. It has sold over 17 million units worldwide. Photo Silas White/Ithaca Week

The Legend of Zelda: Breath of the Wild is one of the most sprawling, massive video games to be released for a Nintendo console. It’s a game designed to eat entire weekends, as players spend dozens, or even hundreds of hours finding every little secret the world has to offer. Finishing it is a serious time investment.

For Ithaca College senior Benjamin LeBlanc, it’s Tuesday.

LeBlanc is a speedrunner, somebody who plays a video game as quickly as possible to finish the game in a fraction of the time it would take someone playing the game normally. Typically this is accomplished by having advanced knowledge of the game’s mechanics, or knowing how to perform certain exploits. Speedruns for games are sometimes split into two or more categories depending on certain criteria, such as the amount of content that needs to be cleared, or whether or not specific software bugs are allowed. Software bugs, commonly just called bugs, are unintentional failures in a game’s code that allow for scenarios not planned for by the game developers.

LeBlanc is the world record holder in one of several categories for Breath of the Wild speedrunners, the all-shrines run, which requires a player to clear 120 mini-challenges within the game. His time is seven hours, 38 minutes and 49 seconds. LeBlanc said one of the hard parts of the run is staying focused for such a long amount of time.

“Sometimes you end up making a big mistake, and it’s kind of rattling when you know you have so much more to go,” LeBlanc said. “That’s one of the challenges. It’s very easy to perform all the tricks, but it’s another challenge just to be able to perform well for that long.”

Ben
Benjamin LeBlanc is a senior at Ithaca College. He is a world record speedrunner for The Legend of Zelda: Breath of the Wild. LeBlanc said the run isn’t as popular as other Zelda games, but he wants to be a trailblazer and popularize the run. Photo Silas White/Ithaca Week

The first game to be widely played for speedruns was the original Doom in 1994, during the early days of the internet. Since then the community has grown. The website speedrun.com, created for posting the time it takes to finish a game, has 174,294 registered users.

Even though LeBlanc holds the world record for Breath of the Wild, he still attempts the run roughly once a week to try and improve his own time. He said one of the barriers of performing the run is its length, because he must balance schoolwork and a social life.

“I have to plan everything ahead of time to know how much time I can actually spend playing the game,” he said.

LeBlanc also livestreams himself performing the run on Twitch, a livestreaming platform owned by Amazon. Twitch users typically stream themselves playing video games, although other creative content is also supported. LeBlanc streams under the username ILoveVark, and has 4,614 followers.

“It’s kind of humbling, and kind of cool that a lot of people like to watch it,” LeBlanc said. “It’s something so dumb to me, that anyone would actually want to watch it, but I think it’s pretty cool people like to watch one of my interests.”

LeBlanc has done speedruns of other games in the past. He said the game he took most seriously before Breath of the Wild was Luigi’s Mansion, a game about capturing ghosts and exploring a haunted mansion, for Nintendo Gamecube. LeBlanc held several world records across multiple categories for Luigi’s Mansion through 2017, but all of his times have since been beaten.

LeBlanc is planning on attending the next Games Done Quick, a semi-annual charity marathon where gamers speedrun games to raise money for non-profits. Speedruns are streamed on Twitch for viewers at home, but the event also serves as a mini-convention for speedrunners to network.  LeBlanc attended a previous GDQ held in January of this year, where he said he had a positive experience.

“It was really fun … you build a certain friendship [with other runners], and it was really cool to go for the first time,” he said. “A lot of them are my age and also going to school and living normal lives outside of [speedrunning].”

LeBlanc said he might speedrun other games in the future, but for now his sole focus is improving his time for Breath of the Wild.

 

 

In the video, LeBlanc shows us a trick to save time. Normally this shrine would take a few minutes, but LeBlanc said without explaining himself step-by-step his process takes 30-40 seconds.

Fantastik Festival Brings Horror and the Occult to Ithaca

Cinemapolis
Cinemapolis will be showing several cult films, horror films, science fiction films, and more during the ten-day run of the Ithaca Fantastik Festival. Photo credit Silas White/Ithaca Week

Horror. Fantasy. Science fiction. The supernatural. The seventh annual Ithaca Fantastik film festival will have it all.

This year the festival will be returning to downtown Ithaca from Oct. 26-Nov.4, and will feature a selection of independent and vintage films screening at Cinemapolis. The community-driven festival started in 2012 as a three-day film festival and has since grown into something larger. In its current iteration, the festival will also feature art shows, live Q&As with filmmakers, virtual reality experiences and special events like a  Drunken Cinema night.

Justin Langlois, a panel moderator and programmer for the festival, said festivals like Ithaca Fantastik are appealing because they expose audiences to something new.

“These genre festivals… bring out these true and really fantastic perspectives that you don’t regularly get in the multiplexes,” he said.

Poster
The first Ithaca Fantastik Festival was in 2012, and it has since become an annual festivity. Pictured above are the posters of festivals past. Photo credit Silas White/Ithaca Week

Langlois said cult movies hold a special appeal that traditional films don’t always have.

“It’s a unique experience to get a taste of fresh talent, a taste of a cult classic that maybe didn’t get it’s play in its day,” he said. “It’s cool to see it on a big screen instead of on a torrent or something … the communal experience of seeing something in the theater is always fantastic.”

Mike Skvarla, another volunteer for the festival, said genre films reach audiences in ways that traditional films sometimes can’t.

“This genre of film is so extreme, it’s so outlandish, it’s two steps above what other movies sort of settle for,” Skvarla said. “This fantastic genre can go above and beyond and really challenge the audience in terms of what they think about things.”

Langlois has also done volunteer work with the Fantasia Film Festival in Montreal. He said his experience working for Ithaca Fantastik has given him the chance to have a louder voice.

“Fantasia is just huge and ever-growing, but Ithaca is great because there’s more breathing room,” he said. “It’s really nice to have a seat on the big boy’s table… and have my two cents go really far. I suggested the Drunken Cinema night, and now we’re doing it.”

Ithaca Fantastik-pic
The lobby of Cinemapolis has a banner for fans to take photos in front of. Movie tickets can be purchased individually, or fans can buy a full-festival badge. Photo credit Silas White/Ithaca Week

Langlois said film had always been a passion of his, but he didn’t used to take it seriously. He used to host zombie movie nights for his friends, and as a high school teacher at Chateauguay Valley Regional High School he started teaching a class on film, which made him realize he could pursue film as an academic field. Langlois pursued a master’s degree in film from Concordia University in Montreal and has continued to study it.

“I’ve just been so drawn to horror and genre cinema that I’ve just consistently written about it,” Langlois said.

Featured films are curated by Langlois and other programmers. Films are grouped into series connected by theme, such as Cinema Pur, international, and throwback thrillers. Nellie Wallace, a writer for the festival, said members of the curation team go to other film festivals and pick films they think the Ithaca audience will gravitate towards. Some movies are followed by a Q&A panel with filmmakers, producers and actors, which Wallace said is part of the festival’s appeal.

“It’s a great way to get some educational information about films and the filmmaking process while you’re enjoying these great films as well,” Wallace said.

Skvarla said the festival is possible in a town like Ithaca because of the open-minded population.

“This town has a lot of creativity, a lot of arts, a lot of people who think differently,” he said. “We just want to show them a wide variety of things and expand their mind and get their creative energy fix.”

Below is my video coverage of Ithaca Underground and Ithaca Fantastik’s Fright Nite at Sacred Root Kava Bar.

Better Help and Mental Health

mental-health-3337026_1280
Photo courtesy of Pixabay.com under the Creative Commons

If you’re into the YouTube scene, you may be aware of the website betterhelp.com, which offers cheap online therapy with licensed therapists. It’s been promoted by several prominent YouTubers, the most influential of whom is probably Philip DeFranco. If you want to be caught up to speed, give this Polygon article a quick read. Or, watch this PewDiePie video (Yes, PewDiePie. I know what you’re saying to yourself, but he makes some solid points even if the overall presentation is silly.)

I’d just like to take the time to say if you feel you need to see a therapist, counselor, psychologist, or other mental health professional, please see what your available options are for in-person visits near you. Mental health issues should not be treated lightly, and I re-iterate that you should seek treatment just the same as you would for a physical health issue.

In our current climate, at least for young adults, mental health issues have become fetishized. People claim that it’s never been easier to talk about mental health issues, but in reality there is still a huge stigma around it. It’s still painted in a false light in the media in both news and entertainment, and it’s still hard to have a conversation about it.

Given this difficulty, and the ease of access of using the internet, I can see why people might find Better Help attractive. User reviews on Better Help seem mixed however, and dependant on the specific therapist. There’s not enough information to claim Better Help is acting maliciously, as some might suggest. But I can’t help but feel a sour taste in my mouth that so many YouTubers shared a potentially damaging site that is unsure of its own identity. As PewDiePie points out (again, I know) the site both claims to be a substitute for seeing a therapist in person, but also says in its terms and conditions it is not a substitute for seeing a therapist in person. Therapy is not something that should be mass produced and consumed.

In the end, if there is a lesson to be learned it is to always have a healthy dose of skepticism. If something sounds too good to be true, maybe it is.

After all, you don’t want to be known as the person who jumped on a bandwagon only to be exposed by PewDiePie. Right?

 

Rockstar Employees work “100-hour weeks”

Rockstar co-founder Dan Houser has recently gotten flack for a comment he made in a Vulture article, that Rockstar employees worked several “100-hour weeks.” On social media, this sparked a conversation over the “crunch” period of video game development, where developers are often forced to work long hours without overtime pay to meet a deadline, … Continue reading “Rockstar Employees work “100-hour weeks””

rdr2-officialart-3840x2160
Photo Courtesy of Rockstar Games

Rockstar co-founder Dan Houser has recently gotten flack for a comment he made in a Vulture article, that Rockstar employees worked several “100-hour weeks” during the final leg of development for Red Dead Redemption 2. On social media, this sparked a conversation over the “crunch” period of video game development, where developers are often forced to work long hours without overtime pay to meet a deadline, and also sparked a conversation about American work ethic in general. Houser later clarified in an interview with Kotaku that nobody was forced to work these hours and that it was done voluntarily by only a few senior level employees. In general, this sentiment has been echoed by Rockstar employees on social media.

There is a larger conversation to be held around how deadlines and “crunch” work in the video game industry in general. The video game industry is the only entertainment medium I can think of where release dates are set years in advance — and regularly broken. As consumers, we’ve grown accustomed to seeing games delayed, or undergo radical change, far beyond the original deadline. Looking at you Square Enix.

Some companies, like Blizzard, eschew from this problem by releasing games “when they’re done” and not setting a release date ahead of schedule. It’s harder to generate hype and regularly market your game when there is no release date, but a company might eliminate the potential backlash that comes from a delay, or avoid the “crunch” period of several weeks of overtime to meet an arbitrary deadline. On the other hand, a deadline could be seen as necessary motivation.

Does this model need reform, or is it fine as is? Is “crunch” a necessary evil, or a product on an unhealthy work environment?

Sony Finally Allows for Cross-Play

8704d4d5ffd1c315ac8e2c805a585764
Courtesy of Epic Games

Sony has finally allowed for cross-play through Fortnite, something fans have long been requesting. The official story is that Sony had been doing internal testing to make sure the feature would function properly, and while many fans (including myself) speculate there may have been a monetary reason behind the delay, our skepticism matters not because cross-play has finally happened.

While for now we can only play Fortnite cross-console, the future holds exciting potential if Sony continues this trend. Overwatch between PS4 and Xbox One? Rocket League? Minecraft? The potential is unlimited.

I wouldn’t hold my breath, knowing Sony, but I can’t help but feel some excitement. What game would you like to see made available for cross-play?