KeesCook

Differences between revisions 11 and 25 (spanning 14 versions)
⇤ ← Revision 11 as of 2006-10-03 16:34:15 →
Size: 5264
Editor: sites
Comment: qa emblem, tweaks
← Revision 25 as of 2011-09-23 15:08:24 → ⇥
Size: 4274
Editor: kees
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
||<tablestyle="float:right; font-size: 0.9em; width:30%; background:#F1F1ED; margin: 0 0 1em 1em;" style="padding:0.5em;"> '''Launchpad''': || [https://launchpad.net/people/keescook keescook] ||
||<|2(> '''IRC''': || '''keescook''' (''freenode'') ||
|| '''kees''' (''oftc'', ''linuxnet'') ||
||<|3(> '''Email''': || [email protected] ||		 ||<tablestyle="float:right; font-size: 0.9em; width:30%; background:#F1F1ED; margin: 0 0 1em 1em;" style="padding:0.5em;"> '''Launchpad''': || [[https://launchpad.net/~kees|kees]] ||
|| '''IRC''': || '''kees''' (''freenode'', ''oftc'', ''linuxnet'') ||
||<|4(> '''Email''': || kees@ubuntu.com ||
|| kees@outflux.net ||
Line 6: Line 6:
|| kees@canonical.com ||
|| '''GPG''': || [http://outflux.net/public_key.asc 0x17063E6D] ||		 || keescook@google.com ||
|| '''GPG''': || [[http://outflux.net/public_key.asc|0xDC6DC026]] ||
Line 9: Line 9:
|| '''Jabber''': || [email protected] ||
|| '''Location''': || [http://en.wikipedia.org/wiki/Woodstock%2C_Portland%2C_Oregon Portland, Oregon, USA] ||		 || '''Location''': || [[http://en.wikipedia.org/wiki/Woodstock%2C_Portland%2C_Oregon|Portland, Oregon, USA]] ||
Line 13: Line 12:
Hi! I work for Canonical as an Ubuntu Security Engineer. My work is to stay alert, curious, and creative while keeping one step ahead of the bad guys. When I'm not working, I've been known to play with MythTV and generally poke around at video formats. Hi! I work for Google on ChromeOS security. Previously, I worked for 5 years at Canonical as an Ubuntu Security Engineer. My work is to stay alert, curious, and creative while keeping one step ahead of the bad guys. When I'm not working, I've been known to play with MythTV and generally poke around at video formats.  (My name is pronounced 'case', but uses the Dutch spelling -- I was named after my grandfather.)
Line 16: Line 15:
I've only recently become involved in the Ubuntu community, but have been using Ubuntu since Hoary. (I had been a Debian user for a few years prior to Ubuntu.) As the lead sysadmin at [http://www.osdl.org/ OSDL], I chose Ubuntu as the default distro for all new servers, replaced most of the aging RedHat systems, and kept the visitor lobby stocked with fresh Ubuntu CDs. Nothing beats having a Debian system with a regular release cycle. I became involved in the Ubuntu community around Dapper, but have been using Ubuntu since Hoary. (I had been a Debian user for a few years prior to Ubuntu.) As the lead sysadmin at [[http://www.osdl.org/|OSDL]], I chose Ubuntu as the default distro for all new servers, replaced most of the aging RedHat systems, and kept the visitor lobby stocked with fresh Ubuntu CDs. Nothing beats having a Debian system with a regular release cycle.
Line 18: Line 17:
More recently, I have been involved in:
 * '''IRC'''. I'm frequently on #ubuntu-devel, #ubuntu-motu, #ubuntu-bugs, and #ubuntu.
 * '''Wiki updates'''. I've made a few small changes around [https://wiki.ubuntu.com/Bugs/CommonTasks?action=diff&rev2=40&rev1=39 triage] and [https://wiki.ubuntu.com/Backtrace?action=diff&rev2=15&rev1=13 debugging].
 * '''Bug triage''' (and submission). I have [https://launchpad.net/people/keescook/+packagebugs adopted several packages] I have familiarity with. For fun, I hunted and solved all the long standing bugs against the side-scroller "abuse", as well as sending patches [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338834 upstream]. I made a launchpad [http://outflux.net/qa/ emblem] for the QA Team, which [https://launchpad.net/people/dholbach dholbach] quickly adopted.
 * '''Packaging'''. I have uploaded two [http://revu.tauware.de/details.py?upid=3236 new] [http://revu.tauware.de/details.py?upid=3239 packages] to ["REVU"]. Additionally, I have successfully [http://qa.debian.org/[email protected] started the process] of getting these packages into Debian directly.
 * '''Security'''. I work with [https://launchpad.net/people/pitti pitti] in the [https://launchpad.net/people/ubuntu-security Ubuntu Security Team], and already several security fixes I've [https://launchpad.net/people/keescook/+packages worked on] have been released (and others are pending).		  * '''IRC'''. I'm frequently on #ubuntu-devel, #ubuntu-hardened, #ubuntu-motu, and #ubuntu-bugs.
 * '''Security'''. I work with the [[SecurityTeam|Ubuntu Security Team]], and have produced many [[https://lists.ubuntu.com/archives/ubuntu-security-announce/|security updates]].
 * '''Debian'''. In addition to my Ubuntu work, I am also a [[http://qa.debian.org/[email protected]|Debian Developer]]
Line 25: Line 21:
Outside of Ubuntu, I'm involved in other communities. I am a [http://kernel.org/ kernel.org] admin, where I work on maintaining the mirror network for the Linux Kernel, as well as handling user accounts. I am a lurker/janitor for the [http://inkscape.org/ Inkscape] project, through which I'm also involved in the [http://openclipart.org/ Open Clip Art Library] and [http://creativecommons.com/ Creative Commons]. I have [http://conferences.oreillynet.com/cs/os2006/view/e_sess/9252 presented] for two years running at [http://conferences.oreillynet.com/os2006/ OSCON], and I attend [http://defcon.org/ DefCon] annually. This year, with the rest of my team, we won the [http://nopsr.us/ctf2006/ Capture The Flag] security competition. Outside of Ubuntu, I'm involved in other communities. I am a [[http://kernel.org/|kernel.org]] admin, where I work on maintaining the mirror network for the Linux Kernel. I am a lurker/janitor for the [[http://inkscape.org/|Inkscape]] project, through which I'm also involved in the [[http://openclipart.org/|Open Clip Art Library]] and [[http://creativecommons.com/|Creative Commons]]. I have [[http://conferences.oreillynet.com/cs/os2006/view/e_sess/9252|presented]] for two years running at [[http://conferences.oreillynet.com/os2006/|OSCON]], and I attend [[http://defcon.org/|DefCon]] annually. In 2006 and 2007, with the rest of my team, we won the [[http://nopsr.us/ctf2006/|Capture The Flag]] security competition.
Line 28: Line 24:
 * Author of [http://sendpage.org/ Sendpage] alphanumeric paging daemon
 * Maintainer of Perl Module [http://search.cpan.org/~cook/Device-SerialPort/SerialPort.pm Device::SerialPort]
 * Author of [http://outflux.net/software/pkgs/mp3cd/ mp3cd] (as seen in the [http://tldp.org/HOWTO/MP3-CD-Burning/intro.html Linux MP3 CD Burning HOWTO])
 * Author of [http://gopchop.org/ GOPchop] MPEG2-PS editor
 * Contributor to [http://inkscape.org/ Inkscape]
 * Fiddler with lots of [http://freshmeat.net/~kees/ other] [http://outflux.net/?see=software stuff]		  * Author of [[http://sendpage.org/|Sendpage]] alphanumeric paging daemon
 * Maintainer of Perl Module [[http://search.cpan.org/~cook/Device-SerialPort/SerialPort.pm|Device::SerialPort]]
 * Author of [[http://outflux.net/software/pkgs/mp3cd/|mp3cd]] (as seen in the [[http://tldp.org/HOWTO/MP3-CD-Burning/intro.html|Linux MP3 CD Burning HOWTO]])
 * Author of [[http://gopchop.org/|GOPchop]] MPEG2-PS editor
 * Contributor to [[http://inkscape.org/|Inkscape]]
 * Fiddler with lots of [[http://freshmeat.net/~kees/|other]] [[http://outflux.net/?see=software|stuff]]
Line 38: Line 34:
In the near-time, I want to start doing manual code audits of as much of Ubuntu as I can get my arms around. I want to help define and implement protected execution environments. Some of the task has already been done ([http://en.wikipedia.org/wiki/NX_bit NX bit], [wiki:GccSsp SSP]), but there will always be work in other areas (["SELinux"], AppArmor, [http://www.grsecurity.net/ grsecurity]). Security is a moving target. In the near-time, I want to start doing manual code audits of as much of Ubuntu as I can get my arms around. I've helped implement a great deal of the available Linux [[Security/Features|Security Features]], but there will always be work in other areas ([[SELinux]], AppArmor, [[http://www.grsecurity.net/|grsecurity]]). Security is a moving target.

About Me

Hi! I work for Google on ChromeOS security. Previously, I worked for 5 years at Canonical as an Ubuntu Security Engineer. My work is to stay alert, curious, and creative while keeping one step ahead of the bad guys. When I'm not working, I've been known to play with MythTV and generally poke around at video formats. (My name is pronounced 'case', but uses the Dutch spelling -- I was named after my grandfather.)

Community

I became involved in the Ubuntu community around Dapper, but have been using Ubuntu since Hoary. (I had been a Debian user for a few years prior to Ubuntu.) As the lead sysadmin at OSDL, I chose Ubuntu as the default distro for all new servers, replaced most of the aging RedHat systems, and kept the visitor lobby stocked with fresh Ubuntu CDs. Nothing beats having a Debian system with a regular release cycle.

Outside of Ubuntu, I'm involved in other communities. I am a kernel.org admin, where I work on maintaining the mirror network for the Linux Kernel. I am a lurker/janitor for the Inkscape project, through which I'm also involved in the Open Clip Art Library and Creative Commons. I have presented for two years running at OSCON, and I attend DefCon annually. In 2006 and 2007, with the rest of my team, we won the Capture The Flag security competition.

Software

Future

I have been an advocate of free software since I first understood what the GPL meant. I love tweaking and patching and helping make things better; I've always had a knack for getting software to behave in unexpected ways. I think finding security problems is fun, and I want to spend my time hunting down and squashing those problems where ever I can find them. Free software already has a strong security reputation, and I want to help keep it that way.

In the near-time, I want to start doing manual code audits of as much of Ubuntu as I can get my arms around. I've helped implement a great deal of the available Linux Security Features, but there will always be work in other areas (SELinux, AppArmor, grsecurity). Security is a moving target.

In the long-term, I want to contribute to developing code analysis tools (both static and dynamic), so that more software can be examined for common problems automatically.

CategoryHomepage

KeesCook (last edited 2011-09-23 15:08:24 by kees)