# items

title: Automating SQLMap with data from wapiti By Brandon Perry
author: noreply@blogger.com (Sumate jitpukdebodin)
source:
http://feedproxy.google.com/~r/r00tsecblog/~3/uJ2aK8U7bNg/automating-sqlmap-with-data-from-wapiti.html

description:
<p><a href="http://feedads.g.doubleclick.net/~a/GksInLn_mx3fK_1X5lvsoVBBrPw/0/da"><img src="http://feedads.g.doubleclick.net/~a/GksInLn_mx3fK_1X5lvsoVBBrPw/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/GksInLn_mx3fK_1X5lvsoVBBrPw/1/da"><img src="http://feedads.g.doubleclick.net/~a/GksInLn_mx3fK_1X5lvsoVBBrPw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/uJ2aK8U7bNg" height="1" width="1"/>


title: How to use SQLMap POST Request Injection
source: http://feedproxy.google.com/~r/r00tsecblog/~3/7TRpTpQOVxY/how-to-use-sqlmap-post-request.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/QlbE0mqijlzS9AtxJck2b2r2FYA/0/da"><img src="http://feedads.g.doubleclick.net/~a/QlbE0mqijlzS9AtxJck2b2r2FYA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/QlbE0mqijlzS9AtxJck2b2r2FYA/1/da"><img src="http://feedads.g.doubleclick.net/~a/QlbE0mqijlzS9AtxJck2b2r2FYA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/7TRpTpQOVxY" height="1" width="1"/>


title: jasagerpwn - Jasager attack vector script for BackTrack 5 and Ubuntu.
author: noreply@blogger.com (Sumate jitpukdebodin)
source:
http://feedproxy.google.com/~r/r00tsecblog/~3/3g6ohgl-3Ok/jasagerpwn-jasager-attack-vector-script.html

description:
<p><a href="http://feedads.g.doubleclick.net/~a/6SdLPTkf-vn5q2LRCdbmPRAcIzc/0/da"><img src="http://feedads.g.doubleclick.net/~a/6SdLPTkf-vn5q2LRCdbmPRAcIzc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/6SdLPTkf-vn5q2LRCdbmPRAcIzc/1/da"><img src="http://feedads.g.doubleclick.net/~a/6SdLPTkf-vn5q2LRCdbmPRAcIzc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/3g6ohgl-3Ok" height="1" width="1"/>


title: THC-Hydra password bruteforcing with john the ripper - http://funoverip.net
source: http://feedproxy.google.com/~r/r00tsecblog/~3/YThRlEVawkc/thc-hydra-password-bruteforcing-with.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/SOYVu6YBnLXc2woQAim352x4qUc/0/da"><img src="http://feedads.g.doubleclick.net/~a/SOYVu6YBnLXc2woQAim352x4qUc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/SOYVu6YBnLXc2woQAim352x4qUc/1/da"><img src="http://feedads.g.doubleclick.net/~a/SOYVu6YBnLXc2woQAim352x4qUc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/YThRlEVawkc" height="1" width="1"/>


title: SQLCake - an automatic sql injection exploitation kit
source: http://feedproxy.google.com/~r/r00tsecblog/~3/HaNgjc9s6tA/sqlcake-automatic-sql-injection.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/bW5XvKI_fVQo1O8tbc6GzgRsXUg/0/da"><img src="http://feedads.g.doubleclick.net/~a/bW5XvKI_fVQo1O8tbc6GzgRsXUg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/bW5XvKI_fVQo1O8tbc6GzgRsXUg/1/da"><img src="http://feedads.g.doubleclick.net/~a/bW5XvKI_fVQo1O8tbc6GzgRsXUg/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/HaNgjc9s6tA" height="1" width="1"/>


title: SSLsplit – transparent and scalable SSL/TLS interception
source: http://feedproxy.google.com/~r/r00tsecblog/~3/J7M3Jf6LZmY/sslsplit-transparent-and-scalable.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/ss1cfXqSv137ddWV1t9ROIA8nJE/0/da"><img src="http://feedads.g.doubleclick.net/~a/ss1cfXqSv137ddWV1t9ROIA8nJE/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/ss1cfXqSv137ddWV1t9ROIA8nJE/1/da"><img src="http://feedads.g.doubleclick.net/~a/ss1cfXqSv137ddWV1t9ROIA8nJE/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/J7M3Jf6LZmY" height="1" width="1"/>


title: Metasploit 4 on iPhone 4S & iPad 2
source: http://feedproxy.google.com/~r/r00tsecblog/~3/D5Uw5a_NKtM/metasploit-4-on-iphone-4s-ipad-2.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/UCk-KhI9Nb4mWkPRSWaRHr50yBw/0/da"><img src="http://feedads.g.doubleclick.net/~a/UCk-KhI9Nb4mWkPRSWaRHr50yBw/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/UCk-KhI9Nb4mWkPRSWaRHr50yBw/1/da"><img src="http://feedads.g.doubleclick.net/~a/UCk-KhI9Nb4mWkPRSWaRHr50yBw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/D5Uw5a_NKtM" height="1" width="1"/>


title: Simple Web Content Management System SQL Injection
source: http://feedproxy.google.com/~r/r00tsecblog/~3/eqRm66M9pK8/simple-web-content-management-system.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/nxofQsnBqsI8LQxSCW9iHcr4Mcc/0/da"><img src="http://feedads.g.doubleclick.net/~a/nxofQsnBqsI8LQxSCW9iHcr4Mcc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/nxofQsnBqsI8LQxSCW9iHcr4Mcc/1/da"><img src="http://feedads.g.doubleclick.net/~a/nxofQsnBqsI8LQxSCW9iHcr4Mcc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/eqRm66M9pK8" height="1" width="1"/>


title: Windows vs. Ubuntu 12.04: Setup Static IP Addresses from the Command Line
source: http://feedproxy.google.com/~r/LiberianGeek/~3/ezKbVHwGct4/
author: Richard
description:
<p>This brief guide shows you how to configure static IP addresses from the command line or console in both Windows 7 and Ubuntu 12.04 (Precise Pangolin). Both Windows 7 and Ubuntu 12.04 have easy-to-use desktop tools to configure network settings, and most people do use them. However, it’s also possible to accomplish the same goal using the command console in these systems, and this tutorial is going to show you how to do it. Although these systems are different, they are similar in many functions. Almost anything you do in Windows 7 can also be done in Ubuntu 12.04. And if you’re just starting out with Ubuntu, coming from Windows 7, then this tutorial will give you a better understand of how Ubuntu works.</p><p><span
id="more-25772"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Configure Static IP Addresses from the command console in both Windows 7 and Ubuntu 12.04</li><li>Enjoy!</li></ul><p>&#160;</p><p><strong><u><font
size="3">How to Setup a Static IP Address using the Command Prompt in Windows 7</font></u></strong></p><p>To setup a static IP Address in Windows 7 using the command prompt, go to <strong><em>Start –&gt; All Programs –&gt; Accessories –&gt;</em></strong> and right-click on <strong><em>Command Prompt</em></strong> then select <strong><em>‘Run as administrator’</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="static_ip_address_precise" border="0" alt="static_ip_address_precise" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_thumb.png" width="588" height="412" /></a></p><p>&#160;</p><p>Finally, copy and paste the commands below on the screen and press Enter.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 577px; padding-right: 5px; height: 47px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">netsh interface ip set address name=&quot;Local Area Connection&quot; static 192.168.0.2 255.255.255.0 192.168.0.1 1</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="static_ip_address_precise_1" border="0" alt="static_ip_address_precise_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_1_thumb.png" width="589" height="66" /></a></p><p>The first set of numbers represent the <strong>IP Address</strong>, second is <strong>Netmask </strong>, third <strong>Gateway </strong>followed by 1</p><p>&#160;</p><p>That’s it! Restart your computer and you’re done.</p><p>&#160;</p><p>&#160;</p><p><strong><u><font
size="3">How to Setup a Static IP Address in Ubuntu 12.04 (Precise Pangolin) from the console</font></u></strong></p><p>To get setup a static IP address in Ubuntu 12.04, press <strong><font
size="3">Ctrl – Alt – T</font></strong> on your keyboard to open terminal. When it opens, run the commands below to open the interfaces file.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 575px; padding-right: 5px; height: 43px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo vi /etc/network/interfaces</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_2.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="static_ip_address_precise_2" border="0" alt="static_ip_address_precise_2" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_2_thumb.png" width="589" height="76" /></a></p><p>&#160;</p><p>Finally, type the lines as shown below into the file and save it.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 576px; padding-right: 5px; height: 107px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">iface eth0 inet static</pre><pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">      address xxx.xxx.x.x</pre><pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">      netmask xxx.xxx.xxx.x</pre><pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">      gateway xxx.xxx.x.x</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_3.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="static_ip_address_precise_3" border="0" alt="static_ip_address_precise_3" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/static_ip_address_precise_3_thumb.png" width="590" height="219" /></a></p><p>&#160;</p><p>To insert characters into the file, press the letter (<strong> i</strong> ) . Use the arrow keys to move left to right, up, down. To save your work, press the <strong>Esc</strong> key, then type <strong><font
size="3">:wq</font></strong> and press Enter.</p><p>&#160;</p><p>Restart your computer and you’re done.</p><p>&#160;</p><p>Enjoy!</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04setup-static-dns-servers-from-the-command-prompt-console/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04:Setup Static DNS Servers from the Command Prompt / Console</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-how-to-enable-open-in-terminal-console/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: How to Enable Open in Terminal / Console</a></li><li><a
href="http://www.liberiangeek.net/2012/05/setup-static-dns-servers-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Setup Static DNS Servers in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2011/02/configure-a-static-ip-address-in-fedora-14-laughlin/" rel="bookmark" class="crp_title">Configure a Static IP Address in Fedora 14 (Laughlin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-how-to-change-your-computer-name/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: How to Change Your Computer Name</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/5O__dyeHWQk1BMNZuynLA_a0dEg/0/da"><img src="http://feedads.g.doubleclick.net/~a/5O__dyeHWQk1BMNZuynLA_a0dEg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/5O__dyeHWQk1BMNZuynLA_a0dEg/1/da"><img src="http://feedads.g.doubleclick.net/~a/5O__dyeHWQk1BMNZuynLA_a0dEg/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=ezKbVHwGct4:4J1uIO1UAFk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=ezKbVHwGct4:4J1uIO1UAFk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=ezKbVHwGct4:4J1uIO1UAFk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=ezKbVHwGct4:4J1uIO1UAFk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=ezKbVHwGct4:4J1uIO1UAFk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=ezKbVHwGct4:4J1uIO1UAFk:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/ezKbVHwGct4" height="1" width="1"/>


title: Wine 1.5.4 Released: How to Install it in Ubuntu 12.04 (Precise Pangolin)
source: http://feedproxy.google.com/~r/LiberianGeek/~3/AUXsDlVFw08/
author: Richard
description:
<p>Wine 1.5.4 has just been released and this brief tutorial is going to show you how to install it in Ubuntu 12.04. Wine is an open source application which lets you install and run programs designed for Microsoft Windows systems in Linux systems. Not all your Windows programs will run with Wine, but many popular software that you depend on which run in Windows will run perfectly in Ubuntu using Wine.</p><p>With this release, comes many enhancements and bug fixes from the previous released version. You can now run Microsoft Office 2003, 2007 properly, Adobe Premier Pro, support for .NET 4.0 and many other software. For a more detailed release note, <a
href="http://wiki.winehq.org/" target="_blank">click here</a>.</p><p><span
id="more-25777"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Install Wine 1.5.4 in Ubuntu 12.04</li><li>Enjoy!</li></ul><p>&#160;</p><p>To get started, press <strong><font
size="3">Ctrl – Alt – T</font></strong> on your keyboard to open Terminal. When it opens, run the commands below to add Wine PPA.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 576px; padding-right: 5px; height: 37px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo add-apt-repository ppa:ubuntu-wine/ppa</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/wine_1-5_precise.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="wine_1-5_precise" border="0" alt="wine_1-5_precise" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/wine_1-5_precise_thumb.png" width="590" height="97" /></a></p><p>&#160;</p><p>Finally, run the commands below to update your system and install Wine 1.5.4</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 575px; padding-right: 5px; height: 42px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo apt-get update &amp;&amp; sudo apt-get install wine1.5</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/wine_1-5_precise_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="wine_1-5_precise_1" border="0" alt="wine_1-5_precise_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/wine_1-5_precise_1_thumb.png" width="589" height="88" /></a></p><p>&#160;</p><p>Enjoy!</p><p>&#160;</p><p>PS: This installation will also work if you have Ubuntu 11.10.</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/03/wine-1-4-is-finally-here-install-it-in-ubuntu-11-10-oneiric-ocelot/" rel="bookmark" class="crp_title">Wine 1.4 is Finally Here! Install it in Ubuntu 11.10 (Oneiric Ocelot)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/gimp-2-8-is-releasedinstall-it-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">GIMP 2.8 is released&ndash;Install it in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/libreoffice-3-5-4-released-with-improved-performance-upgrade-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">LibreOffice 3.5.4 Released with Improved Performance: Upgrade in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/install-ubuntu-tweak-0-7-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Install Ubuntu Tweak 0.7 in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/install-virtualbox-4-1-14-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Install VirtualBox 4.1.14 in Ubuntu 12.04 (Precise Pangolin)</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/yVy1h-2untOkNt3NQf7MZv9yNDc/0/da"><img src="http://feedads.g.doubleclick.net/~a/yVy1h-2untOkNt3NQf7MZv9yNDc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/yVy1h-2untOkNt3NQf7MZv9yNDc/1/da"><img src="http://feedads.g.doubleclick.net/~a/yVy1h-2untOkNt3NQf7MZv9yNDc/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=AUXsDlVFw08:2EicxXwNbLw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=AUXsDlVFw08:2EicxXwNbLw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=AUXsDlVFw08:2EicxXwNbLw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=AUXsDlVFw08:2EicxXwNbLw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=AUXsDlVFw08:2EicxXwNbLw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=AUXsDlVFw08:2EicxXwNbLw:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/AUXsDlVFw08" height="1" width="1"/>


title: Windows 7 vs. Ubuntu 12.04: How to Format External Devices
source: http://feedproxy.google.com/~r/LiberianGeek/~3/nHoUQ9U5MlE/
author: Richard
description:
<p>This brief guide shows you how to format and erase all data on an external drive in both Windows 7 and Ubuntu 12.04 (Precise Pangolin). Almost all internal or external drives have some type of a filesystem or data on it. Whether it’s a USB thumb or flash drive, there’s most likely data on it. Now, this tutorial is about formatting and formatting allows you to change a filesystem on a particular drive and/or erase all data on it. Because Windows 7 and Ubuntu 12.04 are different operating systems, the method may be different be the goal is the same. And although they are different, they’re similar in many functions. Almost anything you do in Windows 7 can be done in Ubuntu 12.04. If you’re starting out with Ubuntu, coming from Windows, this tutorial will help you understand how Ubuntu works.</p><p><span
id="more-25788"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Format Internal/External Devices in Windows 7 and Ubuntu 12.04</li><li>Enjoy!</li></ul><p>&#160;</p><p><strong><u><font
size="3">How to Format Internal/External Devices in Windows 7</font></u></strong></p><p>To format an external device (USB drive), insert the drive into the computer and go to <strong><em>Start –&gt; Computer</em></strong>. Next right-click the drive and click <em><strong>‘Format’</strong></em></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_3.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="format_precise_windows_3" border="0" alt="format_precise_windows_3" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_3_thumb.png" width="589" height="359" /></a></p><p>&#160;</p><p>Finally, choose the files system type and click <strong><em>‘Start’</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_4.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="format_precise_windows_4" border="0" alt="format_precise_windows_4" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_4_thumb.png" width="589" height="455" /></a></p><p>&#160;</p><p>That’s it. Remember that all data on the drive will be erased.</p><p>&#160;</p><p><strong><u><font
size="3">How to Format External Drives in Ubuntu 12.04 (Precise Pangolin)</font></u></strong></p><p>To format external device in Ubuntu 12.04, insert the device into your computer. Next, go to Dash and launch <strong><em>‘Drive Utility’</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="format_precise_windows" border="0" alt="format_precise_windows" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_thumb.png" width="589" height="250" /></a></p><p>&#160;</p><p>Next, select the device on the left and click <strong><em>‘Format Volume’</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="format_precise_windows_1" border="0" alt="format_precise_windows_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_1_thumb.png" width="589" height="344" /></a></p><p>&#160;</p><p>Finally, select the file system type and click <strong><em>‘Format’</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_2.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="format_precise_windows_2" border="0" alt="format_precise_windows_2" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/format_precise_windows_2_thumb.png" width="589" height="401" /></a></p><p>&#160;</p><p>That’s it. Remember that all data on the device will be erased.</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/04/encrypt-your-external-usb-drives-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Encrypt your External USB Drives in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/02/encrypt-external-flash-drives-in-ubuntu-11-10-oneiric-ocelot/" rel="bookmark" class="crp_title">Encrypt External Flash Drives in Ubuntu 11.10 (Oneiric Ocelot)</a></li><li><a
href="http://www.liberiangeek.net/2011/07/from-windows-to-ubuntu-backing-up-your-system-part-i/" rel="bookmark" class="crp_title">[From Windows to Ubuntu] Backing Up Your Data&#8211;Part I</a></li><li><a
href="http://www.liberiangeek.net/2012/01/encrypt-usb-flash-drives-in-ubuntu-11-10-oneiric-ocelot/" rel="bookmark" class="crp_title">Encrypt USB Flash Drives in Ubuntu 11.10 (Oneiric Ocelot)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/dual-boot-windows-7-and-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Dual Boot Windows 7 and Ubuntu 12.04 (Precise Pangolin)</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/a6uDUIKmkiELPd0Uhp7nNEtDKng/0/da"><img src="http://feedads.g.doubleclick.net/~a/a6uDUIKmkiELPd0Uhp7nNEtDKng/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/a6uDUIKmkiELPd0Uhp7nNEtDKng/1/da"><img src="http://feedads.g.doubleclick.net/~a/a6uDUIKmkiELPd0Uhp7nNEtDKng/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=nHoUQ9U5MlE:3pEfTx7GDkE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=nHoUQ9U5MlE:3pEfTx7GDkE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=nHoUQ9U5MlE:3pEfTx7GDkE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=nHoUQ9U5MlE:3pEfTx7GDkE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=nHoUQ9U5MlE:3pEfTx7GDkE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=nHoUQ9U5MlE:3pEfTx7GDkE:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/nHoUQ9U5MlE" height="1" width="1"/>


title: Windows 7 vs. Ubuntu 12.04: How to Disable Auto-Mount on Media Insertion
source: http://feedproxy.google.com/~r/LiberianGeek/~3/w05EbZCCA_0/
author: Richard
description:
<p>This brief tutorial is going to show you how to turn off automount on media insertion in both Windows 7 and Ubuntu 12.04 (Precise Pangolin). Both systems come with features that automatically mount media or devices upon insertion. It&#8217;s also known as auto-run/AutoPlay in Windows.</p><p>When this feature is enabled, anytime you insert a device or media (USB, CD/DVD), your computer automatically prompts you to choose what to do with the device. It gives you options such as whether to open Windows Explorer or AutoPlay the media. In Ubuntu it prompts whether to open Nautilus or AutoRun. <br
/>Well, this tutorial is going to show you how to turn it off so that you don&#8217;t get prompted anytime a media or device is inserted. Windows 7 and Ubuntu 12.04 may be different operating systems, but they&#8217;re almost similar in many functions. Almost anything you do in Windows 7 can be done in Ubuntu 12.04. And if you&#8217;re just starting out with Ubuntu, coming from Windows 7, this tutorial will help you better understand Ubuntu.</p><p><span
id="more-25789"></span><strong><font
size="4">Objectives:</font></strong><ul><li>Disable AutoMount in both Windows 7 and Ubuntu 12.04</li><li>Enjoy!</li></ul><p>&#160;</p><p><strong><u><font
size="3">How to Disable AutoPlay in Windows 7</font></u></strong></p><p>To turn of this feature, click <strong><em>‘Start –&gt;</em></strong>&#160; and search for <strong><em>AutoPlay.</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/automount_precise_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="automount_precise_1" border="0" alt="automount_precise_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/automount_precise_1_thumb.png" width="589" height="389" /></a></p><p>&#160;</p><p>Finally, uncheck the box highlighted below: <em>‘Use AutoPlay for all media and devices’</em></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/automount_precise_2.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="automount_precise_2" border="0" alt="automount_precise_2" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/automount_precise_2_thumb.png" width="599" height="298" /></a></p><p>&#160;</p><p>That’s it. The next time you insert any media or device into your computer, it wouldn’t prompt you.</p><p>&#160;</p><p>&#160;</p><p><strong><u><font
size="3">How to Disable AutoMount on Media Insertion in Ubuntu 12.04 (Precise Pangolin)</font></u></strong></p><p>To turn this feature off in Ubuntu 12.04, press <strong><font
size="3">Ctrl – Alt – T</font></strong> on your keyboard to open Terminal. When it opens, run the commands below to disable it.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 575px; padding-right: 5px; height: 35px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">gsettings set org.gnome.desktop.media-handling automount false</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/automount_precise.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="automount_precise" border="0" alt="automount_precise" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/automount_precise_thumb.png" width="590" height="99" /></a></p><p>&#160;</p><p>That’s it!</p><p>Enjoy!</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-always-show-hidden-files-folders/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: Always Show Hidden Files &amp; Folders</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-how-to-enable-open-in-terminal-console/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: How to Enable Open in Terminal / Console</a></li><li><a
href="http://www.liberiangeek.net/2010/09/disableenable-auto-mount-ubuntu-10-0410-10-maverick-meerkat/" rel="bookmark" class="crp_title">Disable/Enable Auto-Mount in Ubuntu 10.04/10.10 Maverick Meerkat</a></li><li><a
href="http://www.liberiangeek.net/2012/03/disable-ubuntu-overlay-scrollbars-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Disable Ubuntu Overlay Scrollbars in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-how-to-change-system-workgroup/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: How to Change System Workgroup</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/5gYL2BADsSE9PMev74QXIlzQwrM/0/da"><img src="http://feedads.g.doubleclick.net/~a/5gYL2BADsSE9PMev74QXIlzQwrM/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/5gYL2BADsSE9PMev74QXIlzQwrM/1/da"><img src="http://feedads.g.doubleclick.net/~a/5gYL2BADsSE9PMev74QXIlzQwrM/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=w05EbZCCA_0:Abh8u3AqW3U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=w05EbZCCA_0:Abh8u3AqW3U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=w05EbZCCA_0:Abh8u3AqW3U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=w05EbZCCA_0:Abh8u3AqW3U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=w05EbZCCA_0:Abh8u3AqW3U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=w05EbZCCA_0:Abh8u3AqW3U:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/w05EbZCCA_0" height="1" width="1"/>


title: Windows 7 vs. Ubuntu 12.04: How to Enable Open in Terminal / Console
source: http://feedproxy.google.com/~r/LiberianGeek/~3/KfoZg9VKjw0/
author: Richard
description:
<p>This simple tutorial is going to show you how to activate<em> ‘Open in Command Prompt’</em> in Windows 7 or <em>‘Open in Terminal’</em> in Ubuntu 12.04 (Precise Pangolin). When these features are enabled, you should be able to open any folder in the terminal or command console in both Windows 7 and Ubuntu 12.04.</p><p>As I have been saying, Windows 7 and Ubuntu 12.04 may be different operating systems, but they’re almost similar in many functions. Almost anything you do in Windows 7 can be done in Ubuntu 12.04. And if you’re just starting out with Ubuntu, coming from Windows 7, this tutorial will help you understand Ubuntu better.</p><p><span
id="more-25804"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Enable Open in Terminal / Command Prompt in both Windows 7 and Ubuntu 12.04</li><li>Enjoy!</li></ul><p>&#160;</p><p><strong><u><font
size="3">How to Enable Open in Command Window in Windows 7</font></u></strong></p><p>This feature is already enabled in Windows 7. All you have to do to activate it is simply holding down the <strong>Shift Key</strong> on your keyboard and <strong><em>right-clicking</em></strong> the folder you wish to open in the command console.</p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="open_terminal_precise" border="0" alt="open_terminal_precise" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_thumb.png" width="590" height="299" /></a></p><p>&#160;</p><p>The file will be opened in the console as shown below.</p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="open_terminal_precise_1" border="0" alt="open_terminal_precise_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_1_thumb.png" width="590" height="141" /></a></p><p>&#160;</p><p>That’s it.</p><p>&#160;</p><p>&#160;</p><p><strong><font
size="3"><u>How to Enable Open in Terminal in Ubuntu 12.04 (Precise Pangolin)</u></font></strong></p><p>To enable the feature in Ubuntu 12.04, press <strong><font
size="3">Ctrl – Alt – T</font></strong> on your keyboard to open Terminal. When it opens, run the commands below to install the required package.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 575px; padding-right: 5px; height: 45px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo apt-get install nautilus-open-terminal</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_2.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="open_terminal_precise_2" border="0" alt="open_terminal_precise_2" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_2_thumb.png" width="591" height="86" /></a></p><p>&#160;</p><p>Next, run the command below to reset Nautilus.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 577px; padding-right: 5px; height: 38px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">nautilus -q</pre></pre><p>&#160;</p><p>Finally, <strong><em>right-click</em></strong> on any folder to open it in Terminal.</p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_3.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="open_terminal_precise_3" border="0" alt="open_terminal_precise_3" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/open_terminal_precise_3_thumb.png" width="591" height="276" /></a></p><p>&#160;</p><p>Enjoy!</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-always-show-hidden-files-folders/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: Always Show Hidden Files &amp; Folders</a></li><li><a
href="http://www.liberiangeek.net/2012/04/add-open-as-administrator-to-the-context-menu-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Add Open As Administrator to the Context Menu in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/enable-global-menu-for-libreoffice-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Enable Global Menu for LibreOffice in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/enable-nautilus-location-entry-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Enable Nautilus Location Entry in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-how-to-change-system-workgroup/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: How to Change System Workgroup</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/hVsfQQBO5iGnCGxgaaxxGFE4JqI/0/da"><img src="http://feedads.g.doubleclick.net/~a/hVsfQQBO5iGnCGxgaaxxGFE4JqI/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/hVsfQQBO5iGnCGxgaaxxGFE4JqI/1/da"><img src="http://feedads.g.doubleclick.net/~a/hVsfQQBO5iGnCGxgaaxxGFE4JqI/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=KfoZg9VKjw0:6SWnkV-wpCM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=KfoZg9VKjw0:6SWnkV-wpCM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=KfoZg9VKjw0:6SWnkV-wpCM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=KfoZg9VKjw0:6SWnkV-wpCM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=KfoZg9VKjw0:6SWnkV-wpCM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=KfoZg9VKjw0:6SWnkV-wpCM:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/KfoZg9VKjw0" height="1" width="1"/>


title: Enable Firefox Speed Dial in Ubuntu 12.04 (Precise Pangolin)
source: http://feedproxy.google.com/~r/LiberianGeek/~3/21KQ_mGSuuo/
author: Richard
description:
<p>Opera introduced Speed Dial while back and most modern web browsers, including Google Chrome now have it. By default, it is disabled in Firefox. This brief tutorial is going to show you how to enable it.</p><p>Speed Dial is a browser feature which puts your frequently visit web pages on every new tab so you can quickly access them. This is not the most used feature in Firefox, but a nice one to have. This tip will also work on Firefox in Windows or Mac systems. When it is enabled, everytime you open a new tab, Speed Dial will be displayed.</p><p><span
id="more-25817"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Enable Firefox Speed Dial in Ubuntu / Windows / Mac</li><li>Enjoy!</li></ul><p>To get started, open Firefox and type line below into the browser.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 574px; padding-right: 5px; height: 26px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">about:config</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="firefix_speedial" border="0" alt="firefix_speedial" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_thumb.png" width="591" height="215" /></a></p><p>&#160;</p><p>Next, click ‘<em>I’ll be careful, I promise!’</em> to continue.</p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="firefix_speedial_1" border="0" alt="firefix_speedial_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_1_thumb.png" width="591" height="404" /></a></p><p>&#160;</p><p>Then look for the line shown below, double-click it and change the value to:&#160;&#160; <strong><font
size="3">about:newtab</font></strong></p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 581px; padding-right: 5px; height: 41px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">browser.newtab.url</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_2.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="firefix_speedial_2" border="0" alt="firefix_speedial_2" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_2_thumb.png" width="593" height="409" /></a></p><p>&#160;</p><p>After that, find the next line shown below and change the value to: <strong><font
size="3">true</font></strong>.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 576px; padding-right: 5px; height: 38px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">browser.newtabpage.enabled</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_3.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="firefix_speedial_3" border="0" alt="firefix_speedial_3" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_3_thumb.png" width="593" height="331" /></a></p><p>&#160;</p><p>Enjoy! Everytime you open a new tab, Speed Dial will appear.</p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_4.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="firefix_speedial_4" border="0" alt="firefix_speedial_4" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_4_thumb.png" width="589" height="483" /></a></p><p>&#160;</p><p>If you want to make Speed Dial show up on your home page, go to <strong><em>Edit –&gt; Preferences</em></strong> and change the startup page to:</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 577px; padding-right: 5px; height: 39px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">about:newtab</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_5.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="firefix_speedial_5" border="0" alt="firefix_speedial_5" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/firefix_speedial_5_thumb.png" width="592" height="266" /></a></p><p>&#160;</p><p>That’s it!</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/05/display-system-resources-information-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Display System Resources / Information in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/install-virtualbox-4-1-14-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Install VirtualBox 4.1.14 in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/gimp-2-8-is-releasedinstall-it-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">GIMP 2.8 is released&ndash;Install it in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/add-open-as-administrator-to-the-context-menu-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Add Open As Administrator to the Context Menu in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/enable-global-menu-for-libreoffice-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Enable Global Menu for LibreOffice in Ubuntu 12.04 (Precise Pangolin)</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/1YwRKpxM3HMTj63nkiDjeHBRbgw/0/da"><img src="http://feedads.g.doubleclick.net/~a/1YwRKpxM3HMTj63nkiDjeHBRbgw/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/1YwRKpxM3HMTj63nkiDjeHBRbgw/1/da"><img src="http://feedads.g.doubleclick.net/~a/1YwRKpxM3HMTj63nkiDjeHBRbgw/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=21KQ_mGSuuo:ZmIcK2zXLNU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=21KQ_mGSuuo:ZmIcK2zXLNU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=21KQ_mGSuuo:ZmIcK2zXLNU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=21KQ_mGSuuo:ZmIcK2zXLNU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=21KQ_mGSuuo:ZmIcK2zXLNU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=21KQ_mGSuuo:ZmIcK2zXLNU:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/21KQ_mGSuuo" height="1" width="1"/>


title: LibreOffice 3.5.4 Released with Improved Performance: Upgrade in Ubuntu 12.04 (Precise Pangolin)
source: http://feedproxy.google.com/~r/LiberianGeek/~3/oeJjeYh0whY/
author: Richard
description:
<p>Here is a quick news for LibreOffice users. Version 3.5.4 has been released, and with increased performance. LibreOffice is an alternative productivity suite to Microsoft Office which is gaining followers, not just among Linux users, but Windows as well. This brief tutorial is going to show you how to upgrade to the latest released version in Ubuntu 12.04.</p><p>To read the full release notes, <a
href="http://www.libreoffice.org/download/release-notes/" target="_blank">click here</a>.</p><p><span
id="more-25826"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Upgrade to LibreOffice 3.5.4 in Ubuntu 12.04</li><li>Enjoy!</li></ul><p>To get started, press <strong><font
size="3">Ctrl – Alt – T</font></strong> on your keyboard to open Terminal. When it opens, run the commands below to add its PPA.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 576px; padding-right: 5px; height: 33px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo add-apt-repository ppa:libreoffice/ppa</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/libreoffice_precise.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="libreoffice_precise" border="0" alt="libreoffice_precise" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/libreoffice_precise_thumb.png" width="591" height="76" /></a></p><p>&#160;</p><p>Finally, run the commands below to update and upgrade your system.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 574px; padding-right: 5px; height: 35px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo apt-get update &amp;&amp; sudo apt-get upgrade</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/libreoffice_precise_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="libreoffice_precise_1" border="0" alt="libreoffice_precise_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/libreoffice_precise_1_thumb.png" width="591" height="76" /></a></p><p>&#160;</p><p>Enjoy!</p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/libreoffice_precise_2.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="libreoffice_precise_2" border="0" alt="libreoffice_precise_2" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/libreoffice_precise_2_thumb.png" width="591" height="324" /></a></p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/05/gimp-2-8-is-releasedinstall-it-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">GIMP 2.8 is released&ndash;Install it in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/enable-global-menu-for-libreoffice-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Enable Global Menu for LibreOffice in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/install-virtualbox-4-1-14-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Install VirtualBox 4.1.14 in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/04/install-ubuntu-tweak-0-7-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Install Ubuntu Tweak 0.7 in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/01/update-to-libreoffice-3-4-5-in-ubuntu-11-10-oneiric-ocelot/" rel="bookmark" class="crp_title">Update to Libreoffice 3.4.5 in Ubuntu 11.10 (Oneiric Ocelot)</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/6pQa0cyQ68HdKeGogEuAY4iyR9A/0/da"><img src="http://feedads.g.doubleclick.net/~a/6pQa0cyQ68HdKeGogEuAY4iyR9A/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/6pQa0cyQ68HdKeGogEuAY4iyR9A/1/da"><img src="http://feedads.g.doubleclick.net/~a/6pQa0cyQ68HdKeGogEuAY4iyR9A/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=oeJjeYh0whY:12zzoQBkk7M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=oeJjeYh0whY:12zzoQBkk7M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=oeJjeYh0whY:12zzoQBkk7M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=oeJjeYh0whY:12zzoQBkk7M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=oeJjeYh0whY:12zzoQBkk7M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=oeJjeYh0whY:12zzoQBkk7M:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/oeJjeYh0whY" height="1" width="1"/>


title: Windows 7 vs. Ubuntu 12.04:Setup Static DNS Servers from the Command Prompt / Console
source: http://feedproxy.google.com/~r/LiberianGeek/~3/7ysewJaRusk/
author: Richard
description:
<p>This tutorial will show you how to setup DNS server addresses in both Windows 7 and Ubuntu 12.04 (Precise Pangolin) from the command prompt / console. This might not be the most complicated tutorial, but will come in handy the day you’ll want to change your DNS server provider.</p><p>Almost all computers connected to the Internet use DNS services to locate websites. Not all DNS providers are the same. Some are faster than others, and others are more secured. So, if you need to change your DNS provider either in Windows or Ubuntu, then this tutorial is going to show you how to do it.</p><p><span
id="more-25837"></span><p><strong><font
size="4">Objectives:</font></strong></p><ul><li>Change DNS Servers in both Windows 7 and Ubuntu 12.04</li><li>Enjoy!</li></ul><p>&#160;</p><p><strong><u><font
size="3">How to Change DNS Server Addresses in Windows 7 from the Command Prompt</font></u></strong></p><p>To change your DNS servers in Windows 7, go to <strong><em>Start –&gt; All Programs –&gt; Accessories –&gt;</em></strong> and right-click on <strong><em>Command Prompt</em></strong> and select <strong><em>‘Run as administrator’</em></strong></p><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="windows_7_DNS" border="0" alt="windows_7_DNS" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_thumb.png" width="592" height="406" /></a></p><p>&#160;</p><p>Next, run the commands below to add your primary DNS server address:</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 574px; padding-right: 5px; height: 36px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">netsh interface ip add dns name=&quot;Local Area Connection&quot;&#160; x.x.x.x index=1</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_1.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="windows_7_DNS_1" border="0" alt="windows_7_DNS_1" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_1_thumb.png" width="600" height="101" /></a></p><p>&#160;</p><p>Then run the commands below to add your secondary DNS server address:</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 576px; padding-right: 5px; height: 40px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">netsh interface ip add dns name=&quot;Local Area Connection&quot;  y.y.y.y index=2</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_3.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="windows_7_DNS_3" border="0" alt="windows_7_DNS_3" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_3_thumb.png" width="591" height="112" /></a></p><p>&#160;</p><p>That’s it! Now your computer will be assigned the addresses you configured.</p><p>&#160;</p><p><strong><u><font
size="3">How to Setup Static DNS Servers in Ubuntu 12.04 (Precise Pangolin)</font></u></strong></p><p>To get setup static DNS servers in Ubuntu from the command prompt, press <strong><font
size="3">Ctrl – Alt – T</font></strong> on your keyboard to open Terminal. When it opens, run the commands below to open the dhclient.conf file.</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 574px; padding-right: 5px; height: 39px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">sudo gedit /etc/dhcp/dhclient.conf</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_4.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="windows_7_DNS_4" border="0" alt="windows_7_DNS_4" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_4_thumb.png" width="588" height="84" /></a></p><p>&#160;</p><p>Finally, find the line highlighted below and remove the comment ( <strong><font
size="4">#</font></strong> ) before it. Then add the new DNS addresses as shown below:</p><pre style="border-bottom: #cecece 1px solid; border-left: #cecece 1px solid; padding-bottom: 5px; background-color: #e5e5e5; min-height: 40px; padding-left: 5px; width: 577px; padding-right: 5px; height: 36px; overflow: auto; border-top: #cecece 1px solid; border-right: #cecece 1px solid; padding-top: 5px">
<pre style="background-color: #e5e5e5; margin: 0em; width: 100%; font-family: consolas,&#39;Courier New&#39;,courier,monospace; font-size: 14px">prepend domain-name-servers x.x.x.x, y.y.y.y;</pre></pre><p>&#160;</p><p><a
href="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_5.png"><img
style="background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px" title="windows_7_DNS_5" border="0" alt="windows_7_DNS_5" src="http://www.liberiangeek.net/wp-content/uploads/2012/05/windows_7_DNS_5_thumb.png" width="589" height="177" /></a></p><p>&#160;</p><p>Replace x.x.x.x with your primary DNS address and y.y.y.y with your secondary DNS server address.</p><p>&#160;</p><p>Restart your computer and the new addresses will be applied.</p><p>&#160;</p><p>Enjoy!</p><div
class="crp_related"><h4>You may also like:</h4><ul><li><a
href="http://www.liberiangeek.net/2012/05/setup-static-dns-servers-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Setup Static DNS Servers in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-vs-ubuntu-12-04-setup-static-ip-addresses-from-the-command-line/" rel="bookmark" class="crp_title">Windows vs. Ubuntu 12.04: Setup Static IP Addresses from the Command Line</a></li><li><a
href="http://www.liberiangeek.net/2012/05/gimp-2-8-is-releasedinstall-it-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">GIMP 2.8 is released&ndash;Install it in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/install-virtualbox-4-1-14-in-ubuntu-12-04-precise-pangolin/" rel="bookmark" class="crp_title">Install VirtualBox 4.1.14 in Ubuntu 12.04 (Precise Pangolin)</a></li><li><a
href="http://www.liberiangeek.net/2012/05/windows-7-vs-ubuntu-12-04-how-to-enable-open-in-terminal-console/" rel="bookmark" class="crp_title">Windows 7 vs. Ubuntu 12.04: How to Enable Open in Terminal / Console</a></li></ul></div><p><a
href="http://www.liberiangeek.net">Liberian Geek</a></p>
<p><a href="http://feedads.g.doubleclick.net/~a/Qp4YeTj678T9tx8WC25czoUx9Y0/0/da"><img src="http://feedads.g.doubleclick.net/~a/Qp4YeTj678T9tx8WC25czoUx9Y0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Qp4YeTj678T9tx8WC25czoUx9Y0/1/da"><img src="http://feedads.g.doubleclick.net/~a/Qp4YeTj678T9tx8WC25czoUx9Y0/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=7ysewJaRusk:r1bzeXzX60A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=7ysewJaRusk:r1bzeXzX60A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=7ysewJaRusk:r1bzeXzX60A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=7ysewJaRusk:r1bzeXzX60A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/LiberianGeek?a=7ysewJaRusk:r1bzeXzX60A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/LiberianGeek?i=7ysewJaRusk:r1bzeXzX60A:gIN9vFwOqvQ" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/LiberianGeek/~4/7ysewJaRusk" height="1" width="1"/>


title: Download Ubuntu 11.10 (Oneiric Ocelot) CD ISO / DVD Images
source: http://www.cyberciti.biz/tips/download-ubuntu-linux-11-10-iso-cd-dvd-images-oneiric-ocelot.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/ubuntu-linux' title='See all Ubuntu Linux related FAQ'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/ubuntu-logo.jpg' border='0' /></a></div> <span
class="drop_cap">U</span>buntu Linux (a GNU/Linux-based computer operating system) version 11.10 has been released and available for download. The new release includes some  enhancements to make your  experience even more enjoyable. The Default user interface is set to unity shell on top of GNOME 3.x. However, you will get a 2D version of Unity as a fallback for systems that lack the hardware resources for the 3D version. The good news is you will be able to install the entire GNOME 3 desktop along with GNOME Shell directly from the Ubuntu repos.
<p><a href="http://feedads.g.doubleclick.net/~a/-dfti9wTLg7sQOVvlDic7Zjm0SA/0/da"><img src="http://feedads.g.doubleclick.net/~a/-dfti9wTLg7sQOVvlDic7Zjm0SA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/-dfti9wTLg7sQOVvlDic7Zjm0SA/1/da"><img src="http://feedads.g.doubleclick.net/~a/-dfti9wTLg7sQOVvlDic7Zjm0SA/1/di" border="0" ismap="true"></img></a></p>


title: Download Fedora 16 CD / DVD ISO
source: http://www.cyberciti.biz/tips/fedora-linux-16-download-cd-dvd-iso.html
author: Vivek Gite
description:
<span
class="drop_cap">F</span>edora Linux version 16 (code name "Verne") has been released and available for download ( jump to <a
href="http://www.cyberciti.biz/tips/fedora-linux-16-download-cd-dvd-iso.html#dl">download</a> link ). Fedora Linux is a community-based Linux distribution which is sponsored by Red Hat, Inc. This release is dedicated <a
href="http://www.cyberciti.biz/tips/dennis-ritchie-dead-at-70.html">to Dennis Ritchie</a>, who co-invented Unix and the C language. Fedora is considered as the third most popular cutting edge distro, behind Ubuntu and Mint Linux for desktop and laptop usage.
<p><a href="http://feedads.g.doubleclick.net/~a/YIAt6Ji7IudT0R9wwa8Mz6Ps6JU/0/da"><img src="http://feedads.g.doubleclick.net/~a/YIAt6Ji7IudT0R9wwa8Mz6Ps6JU/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/YIAt6Ji7IudT0R9wwa8Mz6Ps6JU/1/da"><img src="http://feedads.g.doubleclick.net/~a/YIAt6Ji7IudT0R9wwa8Mz6Ps6JU/1/di" border="0" ismap="true"></img></a></p>


title: Linux: 25 PHP Security Best Practices For Sys Admins
source: http://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html
author: Vivek Gite
description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all PHP related tips/articles" href="http://www.cyberciti.biz/tips/category/php"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/php-logo.png" alt="" border="0" /></a></div> <span
class="drop_cap">P</span>HP is an open-source server-side scripting language and it is a widely used. The Apache web server provides access to files and content via the HTTP OR HTTPS protocol. A misconfigured server-side scripting language can create all sorts of problems. So, PHP should be used with caution. Here are twenty-five <strong>php security best practices for sysadmins</strong> for configuring PHP securely.
<p><a href="http://feedads.g.doubleclick.net/~a/MLM7jXXQxm-lVB84bmb2T39GFgY/0/da"><img src="http://feedads.g.doubleclick.net/~a/MLM7jXXQxm-lVB84bmb2T39GFgY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/MLM7jXXQxm-lVB84bmb2T39GFgY/1/da"><img src="http://feedads.g.doubleclick.net/~a/MLM7jXXQxm-lVB84bmb2T39GFgY/1/di" border="0" ismap="true"></img></a></p>


title: HowTo: Linux Update the Adobe Flash Player [ Firefox and Chrome Plugin ]
source: http://www.cyberciti.biz/tips/debian-ubuntu-mint-linux-upgrade-flash-player.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/mozilla' title='See all Mozilla FireFox related tips/articles'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/firefox.png' border='0' /></a></div> <span
class="drop_cap">T</span>he Adobe Flash Player plugin is use for viewing multimedia, and streaming video and audio, on a Firefox web browser. The same plugin is used by Google chrome and other browsers. Keeping your third-party plugins such as flash player up to date helps Firefox run safely and smoothly.
<p><a href="http://feedads.g.doubleclick.net/~a/EW2rPM7SxR4VVb47CcWuZvkDn9c/0/da"><img src="http://feedads.g.doubleclick.net/~a/EW2rPM7SxR4VVb47CcWuZvkDn9c/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/EW2rPM7SxR4VVb47CcWuZvkDn9c/1/da"><img src="http://feedads.g.doubleclick.net/~a/EW2rPM7SxR4VVb47CcWuZvkDn9c/1/di" border="0" ismap="true"></img></a></p>


title: Quick Tip: Find Hidden Processes and Ports [ Linux / Unix / Windows ]
source: http://www.cyberciti.biz/tips/linux-unix-windows-find-hidden-processes-tcp-udp-ports.html
author: Vivek Gite
description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all GNU/Linux related tips/articles" href="http://www.cyberciti.biz/tips/category/linux"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/linux-logo.png" alt="" border="0" /></a></div> <span
class="drop_cap">U</span>nhide is a little handy forensic tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. This tools works under both Linux / Unix, and MS-Windows operating systems. From the man page:<blockquote>It detects hidden processes using three techniques:<ol><li>The proc technique consists of comparing /proc with the output of <a
href="http://www.cyberciti.biz/faq/show-all-running-processes-in-linux/" title="Linux / Unix ps command">/bin/ps</a>.</li><li>The sys technique consists of comparing information gathered from <a
href="http://www.cyberciti.biz/faq/show-all-running-processes-in-linux/" title="Linux / Unix ps command">/bin/ps</a> with information gathered from system calls.</li><li>The brute technique consists of bruteforcing the all process IDs. This technique is only available on Linux 2.6 kernels.</li></ol></blockquote>
<p><a href="http://feedads.g.doubleclick.net/~a/Ncz4q5iMvqpWGxYVG9S-yQmQ90g/0/da"><img src="http://feedads.g.doubleclick.net/~a/Ncz4q5iMvqpWGxYVG9S-yQmQ90g/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Ncz4q5iMvqpWGxYVG9S-yQmQ90g/1/da"><img src="http://feedads.g.doubleclick.net/~a/Ncz4q5iMvqpWGxYVG9S-yQmQ90g/1/di" border="0" ismap="true"></img></a></p>


title: Download CentOS 6.1 CD / DVD ISO
source: http://www.cyberciti.biz/tips/centos-linux-6-1-download-cd-dvd-iso.html
author: Vivek Gite
description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all previously featured / recommended downloads" href="http://www.cyberciti.biz/tips/category/download-of-the-day"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/download_of_the.day.png" alt="" border="0" /></a></div> <span
class="drop_cap">C</span>entOS Linux version 6.1 has been released and available for the download. It is a community-supported operating system based on Red Hat Enterprise Linux (RHEL) version 6.1. CentOS Linux is considered as the most popular Linux distribution for web servers and general purposes usage.
<p><a href="http://feedads.g.doubleclick.net/~a/mcA2XQe5tHaMIJUH8v3LccCjQSc/0/da"><img src="http://feedads.g.doubleclick.net/~a/mcA2XQe5tHaMIJUH8v3LccCjQSc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/mcA2XQe5tHaMIJUH8v3LccCjQSc/1/da"><img src="http://feedads.g.doubleclick.net/~a/mcA2XQe5tHaMIJUH8v3LccCjQSc/1/di" border="0" ismap="true"></img></a></p>


title: Linux: 20 Iptables Examples For New SysAdmins
source: http://www.cyberciti.biz/tips/linux-iptables-examples.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/iptables' title='See all Firewall related tips/articles'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/firewall.png' border='0' /></a></div> <span
class="drop_cap">L</span>inux comes with a host based firewall called Netfilter. According to the official project site:<blockquote>netfilter is a set of hooks inside the Linux kernel that allows kernel modules to register callback functions with the network stack. A registered callback function is then called back for every packet that traverses the respective hook within the network stack.</blockquote> This Linux based firewall is controlled by the program called iptables to handles filtering for IPv4, and ip6tables handles filtering for IPv6. I strongly recommend that you first read our <a
href="http://www.cyberciti.biz/faq/rhel-fedorta-linux-iptables-firewall-configuration-tutorial/">quick tutorial that explains how to configure a host-based firewall called Netfilter</a> (iptables) under CentOS / RHEL / Fedora / Redhat Enterprise Linux. This post list most common iptables solutions required by a new Linux user to secure his or her Linux operating system from intruders.
<p><a href="http://feedads.g.doubleclick.net/~a/o6iuVLWHJlLutNrIkwHxj7RJCok/0/da"><img src="http://feedads.g.doubleclick.net/~a/o6iuVLWHJlLutNrIkwHxj7RJCok/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/o6iuVLWHJlLutNrIkwHxj7RJCok/1/da"><img src="http://feedads.g.doubleclick.net/~a/o6iuVLWHJlLutNrIkwHxj7RJCok/1/di" border="0" ismap="true"></img></a></p>


title: Linux / UNIX Desktop Fun: Let it Snow On Your Desktop
source: http://www.cyberciti.biz/tips/linux-unix-xsnow.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/download-of-the-day' title='See all previously featured / recommended downloads'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/download_of_the.day.png' border='0' /></a></div> <span
class="drop_cap">F</span>eeling lonely this holiday season? Try Xsnow. This little app will let is snow on the desktop. Santa and his reindeer will complete your festive season feeling with moving snowflakes on your desktop, with Santa Claus running all over the screen.
<p><a href="http://feedads.g.doubleclick.net/~a/KLJI7Oh2PC4WuzhowMVMz-vy9I0/0/da"><img src="http://feedads.g.doubleclick.net/~a/KLJI7Oh2PC4WuzhowMVMz-vy9I0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/KLJI7Oh2PC4WuzhowMVMz-vy9I0/1/da"><img src="http://feedads.g.doubleclick.net/~a/KLJI7Oh2PC4WuzhowMVMz-vy9I0/1/di" border="0" ismap="true"></img></a></p>


title: FAQ Updates: Dec/22/2011
source: http://www.cyberciti.biz/tips/faq-updates-dec222011.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/sys-admin' title='See all UNIX/Linux SysAdmin related news/tips'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/sysadmin-logo.jpg' border='0' /></a></div> <span
class="drop_cap">O</span>ur FAQ section is updated in last few days with new howto:<ul><li><a
href="http://www.cyberciti.biz/faq/linux-unix-command-findout-on-which-partition-file-directory-exits/">Linux: Find Out What Partition a File Belongs To</a></li><li><a
href="http://www.cyberciti.biz/faq/centos-redhat-debian-linux-neighbor-table-overflow/">Linux: Neighbour Table Overflow Error and Solution</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-centos-rhel-fedora-debian-fsck-ext3-on-luks-volume/">Linux: Run fsck On LUKS (dm-crypt) Based LVM Physical Volume</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-run-a-script-in-linux/">HowTo Run a Script In Linux</a></li><li><a
href="http://www.cyberciti.biz/faq/install-firefox-8-0-tar-bz2-in-linux/">HowTo Install firefox-8.0.tar.bz2 in Linux</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-unix-appleosx-bsd-curl-command-httpreferer/">Linux / Unix curl: Pass HTTP Referer</a></li><li><a
href="http://www.cyberciti.biz/faq/fedora-centos-rhel-linux-disable-zeroconf-route-169-254-0-0/">CentOS / RHEL: Remove Routes 169.254.0.0 / 255.255.0.0 From the System</a></li><li><a
href="http://www.cyberciti.biz/faq/rhel-redhat-centos-kernel-usb-reset-high-speed-ehci_hcd/">Linux: Reset High Speed USB Device Using ehci_hcd Error and Solution</a></li></ul><h3>Make the most of nixCraft FAQ Section</h3> Get intimated about our new howtos / faqs as soon as it is released via <a
href="http://www.cyberciti.biz/faq/feed/rss/?k=1">RSS feed</a> OR follow us on <a
href="http://twitter.com/#!/nixcraft">twitter</a> OR join our <a
href="https://facebook.com/nixcraft">16k+ facebook fans</a> for more tips and news about Linux.
<p><a href="http://feedads.g.doubleclick.net/~a/V0JyqKYfsIvcIBXooK8p-hmZg88/0/da"><img src="http://feedads.g.doubleclick.net/~a/V0JyqKYfsIvcIBXooK8p-hmZg88/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/V0JyqKYfsIvcIBXooK8p-hmZg88/1/da"><img src="http://feedads.g.doubleclick.net/~a/V0JyqKYfsIvcIBXooK8p-hmZg88/1/di" border="0" ismap="true"></img></a></p>


title: 30 Best Sources For Linux / *BSD / Unix Documentation On the Web
source: http://www.cyberciti.biz/tips/linux-unix-bsd-documentations.html
author: Vivek Gite
description:
<span
class="drop_cap">M</span>an pages are written by sys-admin and developers for IT techs, and are intended more as a reference than as a how to. Man pages are very useful for people who are already familiar with Linux, Unix, and BSD operating systems. Use man pages when you just need to know the syntax for particular commands or configuration file, but they are not helpful for new Linux users. Man pages are not good for learning something new for the first time. Here are thirty best documentation sites on the web for learning Linux and Unix like operating systems.
<p><a href="http://feedads.g.doubleclick.net/~a/FGrgYYfyeBj2SUGemF_aJ5cgkaM/0/da"><img src="http://feedads.g.doubleclick.net/~a/FGrgYYfyeBj2SUGemF_aJ5cgkaM/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/FGrgYYfyeBj2SUGemF_aJ5cgkaM/1/da"><img src="http://feedads.g.doubleclick.net/~a/FGrgYYfyeBj2SUGemF_aJ5cgkaM/1/di" border="0" ismap="true"></img></a></p>


title: Adobe Flash v11.2 and Above Will Only Be Available For Chrome Browser on Linux
source: http://www.cyberciti.biz/tips/flash-for-linux-will-only-be-available-for-chrome.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/mozilla' title='See all Mozilla FireFox related tips/articles'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/firefox.png' border='0' /></a></div> <span
class="drop_cap">A</span>dobe announced that the Flash player for Linux will only be available for Google Chrome browser on Linux and has announced their plans to abandon future updates of Flash player for Linux. From the blog post:<blockquote>For Flash Player releases after 11.2, <strong>the Flash Player browser plugin for Linux will only be available via the "Pepper" API as part of the Google Chrome browser distribution and will no longer be available as a direct download from Adobe</strong>. Adobe will continue to provide security updates to non-Pepper distributions of Flash Player 11.2 on Linux for five years from its release.</blockquote> One can safely assume that Adobe wants to kill Flash on Linux for all other browsers except Google Chrome.
<p><a href="http://feedads.g.doubleclick.net/~a/POiQQGpaabLgvbR68Me50kXVG-g/0/da"><img src="http://feedads.g.doubleclick.net/~a/POiQQGpaabLgvbR68Me50kXVG-g/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/POiQQGpaabLgvbR68Me50kXVG-g/1/da"><img src="http://feedads.g.doubleclick.net/~a/POiQQGpaabLgvbR68Me50kXVG-g/1/di" border="0" ismap="true"></img></a></p>


title: Video: Who Writes Linux Kernel?
source: http://www.cyberciti.biz/tips/video-how-linux-is-built.html
author: Vivek Gite
description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all GNU/Linux related tips/articles" href="http://www.cyberciti.biz/tips/category/linux"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/linux-logo.png" alt="" border="0" /></a></div> <span
class="drop_cap">L</span>inux kernel is the most prominent examples of free and open source software. The Linux kernel has received contributions from thousands of programmers and companies around the world. This professional video from the Linux foundation provides a quick insight into Linux building procedure. This is a powerful and inspiring story of how Linux has become a volunteer-driven phenomenon.
<p><a href="http://feedads.g.doubleclick.net/~a/DZZ8F-bh5jNIBfQlIJVRh3KTaYI/0/da"><img src="http://feedads.g.doubleclick.net/~a/DZZ8F-bh5jNIBfQlIJVRh3KTaYI/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/DZZ8F-bh5jNIBfQlIJVRh3KTaYI/1/da"><img src="http://feedads.g.doubleclick.net/~a/DZZ8F-bh5jNIBfQlIJVRh3KTaYI/1/di" border="0" ismap="true"></img></a></p>


title: FAQ Updates: April/03/2012
source: http://www.cyberciti.biz/tips/faq-updates-april032012.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/sys-admin' title='See all UNIX/Linux SysAdmin related news/tips'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/sysadmin-logo.jpg' border='0' /></a></div> <span
class="drop_cap">O</span>ur FAQ section has been updated. Here are latest howtos:<ul><li><a
href="http://www.cyberciti.biz/faq/howto-make-scp-copy-all-hidden-dot-files-under-bsd-appleosx/">Linux / Unix: scp Copy All Hidden Dot Files</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-bsd-appleosx-find-running-programs-all-arguments/">Unix / Linux: Find Information About The Process Including All Command Line Parameters</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-bash-add-identity-private-key-for-rsa-dsa-authentication/">Carry Private SSH RSA / DSA Key For Connection Using Unix / Linux Shell Script</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-unix-apple-osx-bsd-rsync-copy-hard-links/">Rsync: Preserve / Copy Hard Links ( Backup Rsnapshot Directory Tree )</a></li><li><a
href="http://www.cyberciti.biz/faq/install-libgobject-2-0-so-0-on-debian-ubuntu-linux/">Error While Loading Shared Libraries: libgobject-2.0.so.0 Error and Solution [ Debian / Ubuntu ]</a></li><li><a
href="http://www.cyberciti.biz/faq/network-statistics-tools-rhel-centos-debian-linux/">Linux Network Statistics Tools / Commands</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-gnu-compiler-version-used-to-compile-linux-kernel/">Linux Find Out GNU gcc Compiler Version Used To Compile Running Kernel</a></li><li><a
href="http://www.cyberciti.biz/faq/whatis-maximum-ram-supported-by-linux-server-computer-system/">Linux / Unix: Find Out Maximum RAM Supported By The Server BIOS / Motherboard</a></li><li><a
href="http://www.cyberciti.biz/faq/bash-tcsh-ksh-shell-howto-create-filename-by-day-of-week/">Linux / Unix Shell Scripting: Create Filename By Day Of The Week</a></li><li><a
href="http://www.cyberciti.biz/faq/rhel-centos-fedora-linux-command-to-get-dell-service-tag-2/">Red Hat / CentOS Command To Find Dell Service Tag</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-set-default-printer-bash-ksh-csh-unix-linux-shell/">Linux / Unix Shell: Set Default Printer</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-unix-flush-contents-of-memcached-instance/">HowTo: Flush Contents Of a Memcached Server Using Command Line</a></li><li><a
href="http://www.cyberciti.biz/faq/fedora-sl-centos-redhat6-enable-epel-repo/">CentOS / RHEL / Scientific Linux 6 Enable (Install) EPEL Repo</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-install-memcached-under-rhel-fedora-centos/">RHEL / CentOS 6 Linux Install Memcached High Performance Distributed Memory Object Cache Server</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-sed-substitute-find-replace-multiple-patterns/">Linux / Unix: Sed Substitute Multiple Patterns [ Find &#038; Replace ]</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-linux-unix-bsd-appleosx-reload-squid-conf-file/">Reload Squid Proxy Server Without Restarting Squid Daemon</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-unix-sysvinit-services-restart-vs-reload-vs-condrestart/">Linux / Unix: SysVinit Services Restart vs Reload vs Condrestart</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-find-total-open-files-descriptors/">Linux: Find Out Open Files [ Descriptors ] Command</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-appleosx-howto-disable-ssh-host-key-checking/">Linux / Unix: Disable OpenSSH Host Key Checking</a></li><li><a
href="http://www.cyberciti.biz/faq/centos-redhat-fedora-linux-yum-reinstall-package-command/">CentOS / RHEL: yum Command Reinstall Package</a></li><li><a
href="http://www.cyberciti.biz/faq/rhel-centos-feora-linux-change-copy-selinux-context/">CentOS / RHEL: Change / Copy File SELinux Security Context Command</a></li><li><a
href="http://www.cyberciti.biz/faq/rhel-fedora-centos-linux-yum-disable-certain-packages-from-being-installed/">RHEL / CentOS Yum Command: Blacklist Packages [ Disable Certain Packages ]</a></li><li><a
href="http://www.cyberciti.biz/faq/profiler-php-fatal-error-cannot-redeclare-wfprofilein/">Mediawiki PHP Fatal error: Cannot redeclare wfProfileIn() Error and Solution</a></li></ul><h3>Make the most of nixCraft FAQ Section</h3> Get intimated about our new howtos / faqs as soon as it is released via <a
href="http://www.cyberciti.biz/faq/feed/rss/?k=1">RSS feed</a> OR follow us on <a
href="http://twitter.com/#!/nixcraft">twitter</a> OR join our <a
href="https://facebook.com/nixcraft">20k+ facebook fans</a> for more tips and news about Linux.
<p><a href="http://feedads.g.doubleclick.net/~a/7sEQ9r75zXJ3s5jwpauu223v5lo/0/da"><img src="http://feedads.g.doubleclick.net/~a/7sEQ9r75zXJ3s5jwpauu223v5lo/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/7sEQ9r75zXJ3s5jwpauu223v5lo/1/da"><img src="http://feedads.g.doubleclick.net/~a/7sEQ9r75zXJ3s5jwpauu223v5lo/1/di" border="0" ismap="true"></img></a></p>


title: HowTo: Wake Up Computers Using Linux Command [ Wake-on-LAN ( WOL ) ]
source: http://www.cyberciti.biz/tips/linux-send-wake-on-lan-wol-magic-packets.html
author: Vivek Gite
description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all Linux/UNIX networking related tips/articles" href="http://www.cyberciti.biz/tips/category/networking"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/networking.png" alt="" border="0" /></a></div> <span
class="drop_cap">W</span>ake-on-LAN (WOL) is an Ethernet networking standard that allows a server to be turned on by a network message. You need to send 'magic packets' to wake-on-lan enabled ethernet adapters and motherboards, in order to switch on the called systems. Make sure you connect the NIC (eth0 or eth1) with the motherboard, and enable the WOL function in the BIOS. This is a quick guide to enable WOL under RHEL / Fedora / CentOS / Debian / Ubuntu Linux.
<p><a href="http://feedads.g.doubleclick.net/~a/EgobLA5CV3BZu63EIm4gMhDbdW0/0/da"><img src="http://feedads.g.doubleclick.net/~a/EgobLA5CV3BZu63EIm4gMhDbdW0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/EgobLA5CV3BZu63EIm4gMhDbdW0/1/da"><img src="http://feedads.g.doubleclick.net/~a/EgobLA5CV3BZu63EIm4gMhDbdW0/1/di" border="0" ismap="true"></img></a></p>


title: Is My Mac Computer Infected With The Flashback Trojan?
source: http://www.cyberciti.biz/tips/apple-mac-osx-find-and-remove-flashback-trojan-malware.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/os-x' title='See all Apple OS X related articles'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/osx-leopard.png' border='0' /></a></div> <span
class="drop_cap">T</span>he Flashback Trojan, is a trojan horse affecting personal computer systems running Apple Mac OS X. More than half a million Apple computers <a
href="http://www.bbc.co.uk/news/science-environment-17623422" target="_blank">have been infected</a> with the Flashback Trojan.
<p><a href="http://feedads.g.doubleclick.net/~a/O3PWAULzLErd1k7MeB0drakQrek/0/da"><img src="http://feedads.g.doubleclick.net/~a/O3PWAULzLErd1k7MeB0drakQrek/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/O3PWAULzLErd1k7MeB0drakQrek/1/da"><img src="http://feedads.g.doubleclick.net/~a/O3PWAULzLErd1k7MeB0drakQrek/1/di" border="0" ismap="true"></img></a></p>


title: 20 Examples: Make Sure Unix / Linux Configuration Files Are Free From Syntax Errors
source: http://www.cyberciti.biz/tips/check-unix-linux-configuration-file-for-syntax-errors.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/troubleshooting' title='See all Troubleshooting related tips/articles'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/configure.png' border='0' /></a></div> <span
class="drop_cap">I</span>n Linux and UNIX in general, services are configured using various text files,in the /etc/ directory trees. A typical server system could have dozens of configuration files. It is important that you check the validity of the configuration file. In some cases it is possible to to check the sanity of the special data (such as keys) or directories (such as /var/lib/cache/). Text files are easier to manage remotely. You can  use ssh and a text editor. If there is an error in configuration, server may not start. This may result into a disaster. In this article I will explains howto find out a syntax error for popular servers and test configuration file for syntax errors.
<p><a href="http://feedads.g.doubleclick.net/~a/e-H_ImCR1dbl5mY7nXCpwerrkkQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/e-H_ImCR1dbl5mY7nXCpwerrkkQ/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/e-H_ImCR1dbl5mY7nXCpwerrkkQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/e-H_ImCR1dbl5mY7nXCpwerrkkQ/1/di" border="0" ismap="true"></img></a></p>


title: Linus Torvalds Wins Millennium Technology Prize
source: http://www.cyberciti.biz/tips/linus-torvalds-wins-millennium-technology-prize.html
author: Vivek Gite
description:
<img
alt="Linus Torbalds" src="http://files.cyberciti.biz/uploads/bashwiki/thumb/6/69/Linus_Torvalds.jpeg/180px-Linus_Torvalds.jpeg" title="Linus Torbalds" class="alignright" width="180" height="229" /> <span
class="drop_cap">T</span>he Millennium Technology Prize is the largest technology prize in the world and it is awarded once every two years by Technology Academy Finland. The Awarded is given for life-enhancing technological innovation. Linux kernel creator Linus Torvalds and Dr. Shinya Yamanaka won the Millennium Technology Prize, the prominent award for technological innovation for 2012.
<p><a href="http://feedads.g.doubleclick.net/~a/vPYPEJ7k7CTC5FGRAFayROa01PE/0/da"><img src="http://feedads.g.doubleclick.net/~a/vPYPEJ7k7CTC5FGRAFayROa01PE/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/vPYPEJ7k7CTC5FGRAFayROa01PE/1/da"><img src="http://feedads.g.doubleclick.net/~a/vPYPEJ7k7CTC5FGRAFayROa01PE/1/di" border="0" ismap="true"></img></a></p>


title: FAQ Updates: May/03/2012
source: http://www.cyberciti.biz/tips/faq-updates-may032012.html
author: Vivek Gite
description:
<div
style='float:right;margin-top:0px;margin-left:5px;'><a
href='http://www.cyberciti.biz/tips/category/sys-admin' title='See all UNIX/Linux SysAdmin related news/tips'><img
src='http://files.cyberciti.biz/cbzcache/3rdparty/sysadmin-logo.jpg' border='0' /></a></div> <span
class="drop_cap">O</span>ur FAQ section has been updated. Here are latest howtos:<ul><li><a
href="http://www.cyberciti.biz/faq/unix-linux-script-sourced-by-bash-can-it-determine-its-own-location/">Bash source Command: $0 Can Not Determine It’s Own Location</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-color-man-pages-configuration/">Unix / Linux: Display Color Man Pages</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-unix-colored-man-pages-with-less-command/">Linux / Unix: Colored Man Pages With less Command</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-list-users-command/">Linux Command: List All Users In The System</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-appleosx-bsd-ssh-add-agent-command-set-lifetime/">OpenSSH: ssh-add / ssh-agent Command Set Maximum Lifetime In Seconds</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-appleosx-bsd-nginx-block-user-agent/">HowTo: Nginx Block User Agent</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-shell-get-third-field-separated-by-forward-slash-delimiter/">Unix / Linux Shell: Get Third Field Separated by Forward Slash (/) Delimiter</a></li><li><a
href="http://www.cyberciti.biz/faq/how-to-find-out-dns-for-router/">HowTo: Find Out DNS Server IP Address Used By My Router?</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-bsd-appleosx-bash-assign-variable-command-output/">Bash: Assign Output of Shell Command To Variable</a></li><li><a
href="http://www.cyberciti.biz/faq/where-is-the-xorg-conf-file-located-under-unix-linux-bsd/">Where Is The Xorg.conf File Located under Unix / Linux / BSD?</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-set-readonly-file-permission-in-linux-unix/">HowTo: Set Readonly File Permissions On Linux / Unix</a></li><li><a
href="http://www.cyberciti.biz/faq/howto-see-shares-on-nfs-server-exported-filesystems/">Linux / Unix: Show Shares on NFS Server [ Shared Directories ]</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-test-existence-of-file-in-bash/">Bash Shell: Check File Exists or Not</a></li><li><A
href="http://www.cyberciti.biz/faq/howto-shutdown-linux/">HowTo: Shutdown Linux System</a></li><li><a
href="http://www.cyberciti.biz/faq/unix-linux-iterate-over-a-variable-range-of-numbers-in-bash/">HowTo: Iterate Bash For Loop Variable Range Under Unix / Linux</a></li><li><a
href="http://www.cyberciti.biz/faq/how-to-installing-and-using-ssh-client-server-in-linux/">HowTo: Install ssh In Linux</a></li><li><a
href="http://www.cyberciti.biz/faq/reading-text-file-with-awk-in-unix-linux/">Linux / Unix AWK: Read a Text File</a></li><li><a
href="http://www.cyberciti.biz/faq/email-howto-send-text-file-using-unix-appleosx-bsd/">Howto: Send The Content Of a Text File Using mail Command In Unix / Linux</a></li><li><a
href="http://www.cyberciti.biz/faq/linux-unix-appleosx-bsd-could-not-chdir-to-home-directory/">Could not chdir to home directory /root: No such file or directory Error and Solution</a></li></ul><h3>Make the most of nixCraft FAQ Section</h3> Get intimated about our new howtos / faqs as soon as it is released via <a
href="http://www.cyberciti.biz/faq/feed/rss/?k=1">RSS feed</a> OR follow us on <a
href="http://twitter.com/#!/nixcraft">twitter</a> OR join our <a
href="https://facebook.com/nixcraft">21k+ facebook fans</a> for more tips and news about Linux.
<p><a href="http://feedads.g.doubleclick.net/~a/uI4J9EDXmxcuec8qE4WoJlaYEyE/0/da"><img src="http://feedads.g.doubleclick.net/~a/uI4J9EDXmxcuec8qE4WoJlaYEyE/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/uI4J9EDXmxcuec8qE4WoJlaYEyE/1/da"><img src="http://feedads.g.doubleclick.net/~a/uI4J9EDXmxcuec8qE4WoJlaYEyE/1/di" border="0" ismap="true"></img></a></p>


title: Create Custom URL Shortener For WordPress Based Blog In a Five Minutes
author: Vivek Gite
source:
http://www.cyberciti.biz/tips/create-custom-url-shortener-for-wordpress-based-blog-in-a-five-minutes.html

description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all Apache Webserver related tips/articles" href="http://www.cyberciti.biz/tips/category/apache"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/apachelogo.gif" border="0" alt="" /></a></div> <span
class="drop_cap">Y</span>ou can create URL redirection service for your blog within five minutes using nothing but web server's mod_redirect module. For example, when you type or share a url <a
href="http://io9.in/t/5159">io9.in/t/5159</a> you will be automatically redirected to http://www.cyberciti.biz/tips/my-10-unix-command-line-mistakes.html. In this quick post I will explain how to create url shortener and integrate your wordpress based blog without installing any new scripts.
<p><a href="http://feedads.g.doubleclick.net/~a/YBuFJmJjuEScUy5NHtr6gBTkmO4/0/da"><img src="http://feedads.g.doubleclick.net/~a/YBuFJmJjuEScUy5NHtr6gBTkmO4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/YBuFJmJjuEScUy5NHtr6gBTkmO4/1/da"><img src="http://feedads.g.doubleclick.net/~a/YBuFJmJjuEScUy5NHtr6gBTkmO4/1/di" border="0" ismap="true"></img></a></p>


title: Linux debugfs Hack: Undelete Files
source: http://www.cyberciti.biz/tips/linux-ext3-ext4-deleted-files-recovery-howto.html
author: Vivek Gite
description:
<div
style="float: right; margin-top: 0px; margin-left: 5px;"><a
title="See all GNU/Linux related tips/articles" href="http://www.cyberciti.biz/tips/category/linux"><img
src="http://files.cyberciti.biz/cbzcache/3rdparty/linux-logo.png" alt="" border="0" /></a></div> <span
class="drop_cap">U</span>ndeletion means restoring files which have been deleted from Linux ext3 file system using <a
href="http://www.cyberciti.biz/faq/howto-linux-unix-delete-remove-file/">rm command</a>. Deleted files can be recovered on ext3 or ext4 file systems using the debugfs program. This quick tutorial describes how to recover a file that was recently deleted using nothing but standard Linux command line utilities.
<p><a href="http://feedads.g.doubleclick.net/~a/f93xG26CiqFGe0TAVbFoW_kD1js/0/da"><img src="http://feedads.g.doubleclick.net/~a/f93xG26CiqFGe0TAVbFoW_kD1js/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/f93xG26CiqFGe0TAVbFoW_kD1js/1/da"><img src="http://feedads.g.doubleclick.net/~a/f93xG26CiqFGe0TAVbFoW_kD1js/1/di" border="0" ismap="true"></img></a></p>


title: Has Google been in touch yet?
source: http://jobs.linuxcareer.com/it-career-resources/28/Has-Google-been-in-touch-yet-.html
author: Anonymous
description:
If you’re an IT person in today’s world, you are living in charmed times. The job market is finally picking up after the lull of the recession induced by the global financial crisis. Big corporations and the small business sector alike are back in expansion mode and are seeking, in fact vying, to attract quality skilled human resources to make growth possible. With unemployment low, the job seekers pool is limited, forcing organisations to be more resourceful and proactive in their recruitment strategies in order to be competitive in attracting the right skills sets. Of course, this resourcefulness comes more easily to large organisations such as Google and Facebook, who have gargantuan HR budgets, and places small business at a distinct disadvantage.


title: Social Media’s Impact on IT Recruitment
source: http://how-to.linuxcareer.com/social-medias-impact-on-it-recruitment
author: Anonymous
description:
We live in a dynamic world where physical boundaries no longer bind us. In this virtual world, applications such as Facebook have revolutionised the way we interact with the people in our social circle and the way we make new connections with like minded people from around the world. 


title: Cloud Computing and the Linux Job Market
source: http://how-to.linuxcareer.com/cloud-computing-and-the-linux-job-market
author: Anonymous
description:
Given that Linux was the OS of choice for the top 10 supercomputers in June
<br>2011, Linux professionals are sitting pretty in “the cloud”.
<br>
<br>According to an article which recently appeared on LinuxInsider, “the biggest change and impact to the Linux landscape and market to date has been the advent of cloud computing”. The IT industry is headed towards a centralised data centre model once more with cloud computing gathering momentum and a swagger of big integrators and small start ups alike are offering services in this arena. Open source solutions such as Linux naturally thrive in the current environment where multiple platforms seek solace under the same apparent cloud.


title: Linux Certification Options for IT Professionals
source: http://how-to.linuxcareer.com/linux-certification-options-for-it-professionals
author: Anonymous
description:
To certify, or not certify? That is the question! Do you need Linux Certification to boost your IT career prospects? There are now an excellent range of flexible training options available but is it really necessary, and if it is, then which of the many options is appropriate for you?


title: How to configure NFS on Linux
source: http://how-to.linuxcareer.com/how-to-configure-nfs-on-linux
author: Anonymous
description:
The Network File System is certainly one of the most widely used network services. Network file system (NFS) is based on the Remote procedure call. It allows the client to automount Network File System and therefore, transparently access the remote file systems on the network.


title: What is DHCP and how to configure DHCP server in Linux
source: http://how-to.linuxcareer.com/what-is-dhcp-and-how-to-configure-dhcp-server-in-linux
author: Anonymous
description:
Standard DHCP server implementation available in various Linux distributions is an Open source version maintained by ISC ( Internet System Consortium ). There are currently 3 major versions 2, 3, 4 where version 3 supports backup servers, and version 4 supports IPv6. This article deals only with ISC DHCP v3.


title: Reach for the clouds! How will the Cloud affect your organisation?
source: http://how-to.linuxcareer.com/reach-for-the-clouds-how-will-the-cloud-affect-your-organisation
author: Anonymous
description:
If you’re an IT company that hasn’t invested resources into assessing the impact of Cloud Computing on our business, you’re already behind the eight ball. The giant integrators (Microsoft, IBM, Unisys, the list is too long) already have extensive cloud services available to meet the needs of all sizes of business. The Cloud phenomenon has also opened the door for many new and entrepreneurial start ups to flourish with rapid growth in the cloud service provision arena. If you’re a Linux shop, you’re in a good position to consider Cloud Services as an add-on service to your existing offering. Linux is shaping up to be the OS of choice of many big cloud implementations across the globe, so your Linux resources are highly prized for an expansion into cloud service provision space.


title: Does Linux Certification cut the mustard?
source: http://how-to.linuxcareer.com/does-linux-certification-cut-the-mustard
author: Anonymous
description:
For those pursuing a Linux career, is Linux certification a must have or an indication that you lack the real world experience that employers demand? 
<br>
<br>In the ever fast-paced and dynamic context of information technology, IT professionals need to be on their toes, constantly staying abreast of changes in the technology platforms on which they work. Operating systems are refined and improved in newer versions of technology, mandating systems administrators to constantly be on a learning curve to keep up with the changes. 


title: Future of Python programming language on a Linux platform
source: http://how-to.linuxcareer.com/future-of-python-programming-language-on-a-linux-platform
author: Anonymous
description:
Don’t believe the naysayer’s hype about Python! With increasing popularity among Linux communities and used by major corporations such as Google, Python is here to stay!
<br>
<br>Some sceptics have published articles and blogs over the last few years that have doubted the future of Python. However Python has been around since 1991 and the growth in popularity of this stable and comprehensive high level programming language, especially in the Linux user domain, would indicate that it is here to stay. 


title: Custom kernels in Ubuntu/Debian - how, when and why
source: http://how-to.linuxcareer.com/custom-kernels-in-ubuntudebian-how-when-and-why
author: Anonymous
description:
So, you've decided to try out this thing you heard others talk about, called 'compiling a custom kernel'. If you are trying this as a hobby, or because you want to learn a new skill, very well – read on.
<br>
<br>However, before we start, we will try to explain situations when this need arises and how to deal with it. Note that this is an extensive subject which needs much more in terms of space than we will provide here. You will learn the basics, what you need, what to do and what you'll achieve.


title: How to customize your Fedora packages
source: http://how-to.linuxcareer.com/how-to-customize-your-fedora-packages
author: Anonymous
description:
Last time, we talked about custom kernels in Debian-based systems. This time we go to "the other side" and will also talk about customizations, namely how to customize packages on Fedora systems. For this you are not required to have any prior experience on the matter in order to build packages, but a will to learn and read manual pages or other resources is always welcome.
<br>
<br>Our article will focus on Apache as packaged by Fedora, and what we will do is modify some of its build options in order to better fit our needs. After all, Linux and Open Source are all about customization, so why not get exactly what we want? With that being said, let's start with our tutorial.


title: Guide to bug submitting and bug tracking in Linux
source: http://how-to.linuxcareer.com/guide-to-bug-submitting-and-bug-tracking-in-linux
author: Anonymous
description:
Linux distributions and Open Source software in general are, before anything, community efforts. Every distribution lists somewhere on its' website ways to contribute and help to the effort. And it's quite an effort too, which programmers provide for free, working in their spare time. One recurrent theme on each of those "how to contribute" documents is "Submit bugs when found" although the exact wording may differ. Of course, if you can contribute in other ways back to the community that offers you a free, functional operating system, (like writing code, advocacy and so on), even better. This article however focuses on submitting bugs in some of the most popular distributions : Ubuntu, Mint, Fedora, Debian and OpenSUSE. If you have any prior development experience, fine, but that's not mandatory. If you are willing to offer some of your free time that's quite enough. The usual communication channels are mailing lists (subscriptions recommended), IRC and bug tracking software, as we will see.


author: Anonymous
title:
The Great Linux Migration: who’s made the move, why, and what’s in store for the future growth of Linux?

source:
http://how-to.linuxcareer.com/the-great-linux-migration-whos-made-the-move-why-and-whats-in-store-for-the-future-growth-of-linux

description:
Many organisations are navel gazing and assessing ways of increasing productivity and decreasing costs in order to stay afloat in the current business climate. As a company’s IT spend is one of the larger costs of running a business, it makes sense to look closely at how you run your IT shop. Linux may just answer both prayers: offering increased productivity at decreased cost. So why is Linux such a successful solution, which companies have made the switch, and how will the Linux jobs landscape change in the future?


title: A beginners howto to compiling from source on Linux systems
source: http://how-to.linuxcareer.com/a-beginners-howto-to-compiling-from-source-on-linux-systems
author: Anonymous
description:
When dealing with Linux/Unix systems, you will, sooner or later have to deal with source compilation. Some call it jokingly a rite of passage, others call it necessary knowledge. Whatever way you look at it, it's good-to-have. We will presume that you have little to no knowledge of how to use the command line or what a compiler is. So before we begin we will help you by listing a handful of tools you will use when living with the command line, plus the specific tools necessary when compiling source code. This tutorial is intended to be as practical as possible, so if you want to read about compiler theory or the steps necessary to get from the source code to a binary, use the documentation proposed below.


title: How To backup data with rsync under Linux
source: http://how-to.linuxcareer.com/how-to-backup-data-with-rsync-under-linux
author: Anonymous
description:
As a system administrator or just a backup-conscious home user, sooner or later (usually sooner) you will have to deal with backups. Disasters do happen, ranging from electrical storms to drive failures, and one needs to be prepared. We cannot stress enough the importance of having copies of important data. While the whole concept of backup is too long for this article, we will focus on rsync for what's called incremental backups.


title: Distro review : Dragora GNU/Linux
source: http://how-to.linuxcareer.com/distro-review--dragora-gnulinux
author: Anonymous
description:
It's time for a review here at Linux Career and we will focus for today's article on a relative newcomer : Dragora GNU/Linux. It is a Argentina-based distribution, started in 2007 by Matias A. Fonzo, a Linux enthusiast, along with just a few contributors. It is one of the few Linux distributions comprised of 100% Free/Libre Software, and endorsed by the Free Software Foundation. If you expect bells and whistles, think again : it's a distribution that focuses on simplicity, one application per task and it's aimed at people who want to learn about how a Linux system works. If this scares you, there's no need : we installed Dragora GNU/Linux 2.1 64-bit, tinkered with it, liked it, so we'll be able to get you started. Being a small community distro, at the moment Dragora GNU/Linux doesn't have much documentation online, but the manual pages are well written and if you ask on their identi.ca group you will likely get an answer. But before we start, we think it would be best if we offer you a few more information to get you prepared.  


title: Getting what you want on Arch and Slackware - AUR and Slackbuilds
source: http://how-to.linuxcareer.com/getting-what-you-want-on-arch-and-slackware-aur-and-slackbuilds
author: Anonymous
description:
Package management on Linux systems has always been the subject of endless discussions, flamefests and bickering. Nonetheless, regardless of what one prefers, there's something for everyone, if not in distro X, then maybe in distro Y. Some swear by binary package management, others say that the only true way is compilation from source. Today we will focus on two distributions that offer the best of both worlds : Arch Linux and Slackware.


title: Review - Taking PC-BSD 9.0 BETA for a spin
source: http://how-to.linuxcareer.com/taking-pc-bsd-90-beta-for-a-spin
author: Anonymous
description:
You may have heard about BSD systems, especially if you've been using Linux and/or other related systems like Solaris or AIX for some time. You also might have heard that "BSD is dead" or some other fantastic stories. Our article here, besides taking PC-BSD for a ride, also serves the purpose of shedding some light on BSD systems and debunking some myths as well. If you have some experience using BSD, the better, but this is not mandatory, we'll try to help you get used to using BSD in general and, of course, PC-BSD in special.


title: In-depth HOWTO on Linux kernel configuration
source: http://how-to.linuxcareer.com/in-depth-howto-on-linux-kernel-configuration
author: Anonymous
description:
While we talked before about kernel compilation and configuration, we focused on the general idea. This time we want to dig deeper into the configuration part, giving you useful advice you will need when tailoring a kernel to perfectly match your hardware. The main idea behind this is that you will need to know your hardware extremely well in order to have a kernel built exactly for it. At the beginning we will cover what you will need in order to compile your kernel and after that we move into Linux kernel configuration, compilation and installation. Please note that this time it's not very important if you compile a vanilla kernel or a distribution kernel. We will however, recommend a "modus operandi", which of course does not mean that you have to follow. After reading this guide you will be able to decide what suits you best. We expect some moderate knowledge about Linux system internals and development tools.


title: Using and configuring Samba under Linux/Unix
source: http://how-to.linuxcareer.com/using-and-configuring-samba-linux-unix
author: Anonymous
description:
If you are working in a heterogeneous environment, that is Windows and Linux/Unix, chances are sooner or later you will have to deal with Samba. Samba's name comes from Microsoft's SMB (Server Message Block), which is the protocol used for Microsoft's standard network file system. We will show you how to install, configure and use Samba, and what advantages it can bring to your network, be it at home or at work.


title: Virtualization solutions on Linux systems - KVM and VirtualBox
source: http://how-to.linuxcareer.com/virtualization-solutions-on-linux-systems-kvm-and-virtualbox
author: Anonymous
description:
Looking at the trends in the IT industry, virtualization has seen quite a boom in the last few years, because it fits the concepts of utility computing and/or software as a service. Virtualization can be useful to you if you are an enterprise architect, developer, a home user or basically everything in between. We will begin with a short introduction about virtualization in general, then we will specifically treat VirtualBox and KVM as they seem to be most popular open source full virtualization solutions.


title: How to fetch NYSE prices with a simple bash script
source: http://how-to.linuxcareer.com/how-to-fetch-nyse-prices-with-simple-bash-script
author: Anonymous
description:
Do you have a stock exchange portfolio with shares that you need to monitor on daily basis? With command line and your shell nothing can be easier. In this article we will show you how to download all NYSE stock exchange ticker symbols in matter of minutes using few lines of bash script. With some light modification this method can be applied to any stock exchange and any number of ticker symbols. This script can also be altered to behave as a monitoring tool and act upon your predefined instructions if combined with a website which displays intraday data.


title: Getting your hands dirty : installing and using Gentoo
source: http://how-to.linuxcareer.com/getting-your-hands-dirty-installing-and-using-gentoo
author: Anonymous
description:
If you ask around about Gentoo, chances are you will get mixed reviews : some will say it's a waste of time, others will say it's only for ubergeeks, yet others will tell you it's the only way, but no one can deny the power that Gentoo offers in terms of choices and speed. Gentoo is a rolling release distribution, which means it has no release numbers and it's updated continuously.Gentoo is also a source-based distribution, which means that everything you install you must compile first.


title: Using cron scheduler on Linux systems
source: http://how-to.linuxcareer.com/using-cron-scheduler-on-linux-systems
author: Anonymous
description:
If you already have some experience as a Linux system administrator, chances are you know what cron is and what it does. If you're just starting working with Linux, it's essential knowledge that will certainly serve you later. Either way, if you already have the knowledge, this article will refresh it. If not, you will get a guide to start you up. So you're only expected to have some basic knowledge of Linux systems and, as usual, a desire to learn.


title: Intrusion detection systems : Using tripwire on Linux
source: http://how-to.linuxcareer.com/intrusion-detection-systems--using-tripwire-on-linux
author: Anonymous
description:
Whether you're an experienced system administrator or a Linux beginner, whether you're managing an enterprise-grade network or just your home network, you must be aware of security issues. One common mistake is to think that if you're a home user with few world-facing machines you're exempt from malicious attacks. The attacker will not get from you what (s)he can get from a large corporate network, but that does not mean you're safe. The earlier you become security-aware, the better. While the subject of network security is huge, today we chose an interesting piece of software named tripwire, a HIDS (Host-based Intrusion Detection System).


title: One CD disk, multiple Linux distributions: Netboot CD
source: http://how-to.linuxcareer.com/one-cd-disk-multiple-linux-distributions-netboot-cd
author: Anonymous
description:
Every Linux user, after a while, starts creating a toolbox that he/she takes with him/her everywhere. However, that depends on the task at hand. You might need to install a distribution, you might just need a livecd, doing security-related work or just backup. And so the toolbox gets bigger and bigger, thus becoming less and less convenient. The subject of today's article is NetbootCD. NetbootCD is not a supplement for a live Linux environment, but rather it is designed to help you to install multiple Linux distributions using a single multiboot disk as oppose to requirement of 7 Linux installation disks. 


title: Network booting with Linux - PXE
source: http://how-to.linuxcareer.com/network-booting-with-linux-pxe
author: Anonymous
description:
This article here is somewhat related to our previous one, in that it treats the subject of booting and installing Linux using the network, be it local or not. This time we will treat installing Linux without optical, floppy or other removable media, by just using the LAN. You are expected to have at least two computers in your network, and the client will need a NIC and a BIOS capable of using PXE. We will guide you from beginning to end, but some basic networking and Linux configuration knowledge, plus the use of an editor of your choice are required. You will learn what PXE is, how to configure a DHCP server, how to configure a TFTP server so the client can have access to the files, plus lots of interesting things, as usual.


title: Creating a package repository on Linux : Fedora and Debian
source: http://how-to.linuxcareer.com/creating-a-package-repository-on-linux--fedora-and-debian
author: Anonymous
description:
This article at <a href="http://linuxcareer.com">LinuxCareer.com</a> is the logical continuation of our <a href="http://how-to.linuxcareer.com/network-booting-with-linux-pxe">PXE article</a>, because after reading this you will be able to network boot AND actually install the distribution of your choice. But there are other uses of creating your own repository. For example, bandwidth. If you manage a network and all the systems (or some) are running the same distribution, it's easier for you to just rsync in conjunction with a nearby mirror and serve updates yourself. Next, maybe you have some packages created by you that your distro won't accept in the main tree, but the users find them useful. Get a domain name, set up a webserver and there you go. We will not detail the setup of a webserver here, just basic installation tasks and the basic setup of a repository for Fedora or Debian systems. Hence you are expected to have the necessary hardware (the server and the necessary network equipment, depending on the situation) and some knowledge about Linux and webservers.


title: Linux process scheduling made easier: lance
source: http://how-to.linuxcareer.com/linux-process-scheduling-made-easier-lance
author: Anonymous
description:
I guess many old school admins reading this will "crucify" me for trying to say that there is another process scheduling system besides cron. While cron does its' job and does it well, other more recent systems offer new capabilities that might help the administrator one way or the other. One example is lance, a young project written in Python which offers, among others, remote task administration and web-based control. 


title: C development on Linux - Introduction - I.
source: http://how-to.linuxcareer.com/c-development-on-linux-introduction
author: Anonymous
description:
What you're just reading is the beginning of series of articles dedicated to development on Linux systems. However, with minor modifications (if any), you will be able to use this knowledge you will get by reading our series on any other system that uses the same tools (OpenIndiana, BSD...). This first article will deal gradually with the intricacies of writing C code on Linux. You are expected to have basic programming knowledge, either on Linux/Unix systems or on other platforms. The idea is that you should know the basics of programming, like what a variable is or how to define a structure. Even though, you will get this information from this article, we won't insist very much on beginner-level concepts.


title: Using MySQL to manage your music collection on Amarok
source: http://how-to.linuxcareer.com/using-mysql-to-manage-your-music-collection-on-amarok
author: Anonymous
description:
If you use Amarok and have a large music collection have you ever thought about using a database to manage your collection? This article will describe how to configure MySQL and Amarok to allow for the integration of one of the world's most popular databases to one of Linux's most popular media players.Works on any Linux Distro! This article covers Debian &amp; Ubuntu, Fedora and ArchLinux.


title: Creating packages for Pardus Linux with pisido
source: http://how-to.linuxcareer.com/creating-packages-for-pardus-linux-with-pisido
author: Anonymous
description:
Pardus Linux is a relative newcomer to the Linux scene. Version 1.0 was released at the end of 2005, and since then, the project started using version numbers that remind us of what Mandriva uses for some time. So, the latest stable version is 2011.2, which means it's the second release for 2011. Pardus Linux is a distribution sponsored and developed  by the Scientific &amp; Technological Research Council of Turkey. It's a easy to use distribution, with a series of unique tools like Pisi (Packages Installed Successfully as Intended), which is the package manager. We will not give you a Pardus review, instead we'll assume you have the distro already installed and running and we'll tell you about a tool named PiSiDo.


title: Linux system and hardware monitoring made efficient
source: http://how-to.linuxcareer.com/linux-system-and-hardware-monitoring-made-efficient
author: Anonymous
description:
Whether you're a home user or a system/network administrator at a large site, monitoring your system helps you in ways you possibly do not know yet. For example, you have important work-related documents on your laptop and one fine day, the hard drive decides to die on you without even saying goodbye. Since most users don't make backups, you'll have to call your boss and tell him the latest financial reports are gone. Not nice. But if you used a regularly started (at boot or with cron) disk monitoring and reporting piece of software, like smartd for example, it will tell you when your drive(s) start to become weary. Between us, though, a hard drive may decide to go belly up without warning, so backup your data.


title: How can you help the Linux community
source: http://how-to.linuxcareer.com/how-can-you-help-the-linux-community
author: Anonymous
description:
The whole Linux community is based on the concept of community and collaboration. Without it, Linus Torvalds' e-mail sent out 20 years ago would have been forgotten and none of us would have known about Linux. As time went by, it became easier and easier for users, regardless of experience and knowledge, to contribute to his/her favorite distribution. While we're at it, it's a common misconception that you have to be a programmer in order to help the Linux community. Well, nothing could be further from the truth.  Anyone can help, provided he or she has Internet access, and, more importantly, the will to help. 


title: How to Make a Basic Intrusion Detection System with Bash
source: http://how-to.linuxcareer.com/how-to-make-a-basic-intrusion-detection-system-with-bash
author: Anonymous
description:
As most of us already WEP encryption has become a joke.  WPA is quickly going the same way thanks to many tools such as Aircrack-ng. On top of this, wired networks are no strangers to unwanted guests as well.  Anyone serious about security should have a good Intrusion Detection system in their toolbox.
<br>
<br>There are already some very good IDS's (Intrusion Detection Systems) available.  Why would anyone want to re-invent the wheel in Bash???  There are a couple of reasons for this.  Obviously Bash scripts can be very light weight.  Especially compared to some of the GUI programs that are out there.


title: Making use of your older hardware with Linux/BSD
source: http://how-to.linuxcareer.com/making-use-of-your-older-hardware-with-linux-bsd
author: Anonymous
description:
Some of you may wonder what is the purpose of this article. First, because hardware nowadays is pretty cheap, you don't need older hardware anymore. Second, there are some articles across the Internet dealing with this already. The answer to the first problem is: well, you'll see in the article. The answer to the second is we have some experience with older hardware first-hand, and we found it to be very useful to this day, so we want to share this with you.


title: Alternatives to KDE and GNOME on Linux systems
source: http://how-to.linuxcareer.com/alternatives-to-kde-and-gnome-on-linux-systems
author: Anonymous
description:
Before anything, this article is for those using KDE and GNOME and start feeling the need for more, or something else. This is not a trolling article (we hate that), nor is a rant against the two DEs. We respect the freedom of choice, and the Open Source world is all about freedom of choice. With this article we only want to show you what other options you have, the pluses and the minuses, with no bias whatsoever. We'll go less than technical with this article, and we hope we'll widen your perspective and help you use something that's really fit for your needs. All you need is a working Linux machine and the minimal knowledge of knowing how to install software on it, plus the use of an editor of choice.


title: C development on Linux - Comparison between C and other programming languages - II.
author: Anonymous
source:
http://how-to.linuxcareer.com/c-development-on-linux-comparison-between-c-and-other-programming-languages

description:
Since in our first part of this article we said we expected you, the reader, to have some programming knowledge, in this part we want to help you get a on where C stands in comparison to other programming languages you might know. The choice of those languages was pretty tough because of various criteria, but in the end we stopped at C++, Perl and Python. Since programming languages can be classified in lots of ways (depending on paradigm, syntax or style, for example), we didn't try to find languages that are in the same category as C. Instead, since the aforementioned languages are pretty popular in the Linux world, we chose them, mentioning what every language's place is in the great scheme, what it's generally used for and of course, the differences between them and C. This article will be structured as follows: we'll start with important elements of every language, like variable declaration, typing or structure and compare that with how it's done with C.


title: Writing manual pages on Linux
source: http://how-to.linuxcareer.com/writing-manual-pages-on-linux
author: Anonymous
description:
 It's a very common fact that nobody likes to write documentation. Heck, nobody likes to read it either. But there are times when we have to read it in order to, say, finish the project on time, or, especially when working in software development, even write it. If you only have to read it, we always encouraged you to do so, but if you'll have to write the manual pages and need a kickstart, here's the article for you. If you worked previously with HTML your life will be easier, but if not it's alright. Writing manual pages for Linux is not that hard, despite the look of the pages when read in plain-text. So basically you'll need some Linux knowledge and the ability to use a text editor. You will learn (with examples, of course) the main concepts in text formatting as applied to man pages and how to write a simple manual page.


title: Steganography Made Easy in Linux
source: http://how-to.linuxcareer.com/steganography-made-easy-in-linux
author: Anonymous
description:
Steganography is the art of hiding messages within other messages or data. Most commonly we see this utilized with pictures. This is probably encryption at its finest. Mostly because it doesn't look like usual garbled text that we are used to seeing with encryption. The changes made by Steganography are so slight the human eye cannot perceive them. Even trained cryptographers may have an encoded message inside a picture and be unaware of it. 


title: The other side of Intrusion detection on Linux: Snort
source: http://how-to.linuxcareer.com/the-other-side-of-intrusion-detection-on-linux-snort
author: Anonymous
description:
You may wonder why the title contains the words " the other side". In our Tripwire article we've shown that there are two major types of Intrusion Detection Systems: network-based and host-based. While Tripwire is host-based, this time we will show you how to install and configure Snort, a network-based IDS/IPS. We will not repeat the theoretical introduction, because we already exposed it in the previous article. We'll go directly to installing and configuring snort for your needs. What we expect from you in terms of knowledge is thorough understanding of networks, security and system administration.


title: Comparison of Audio Codecs and Conversion Utilities on Linux
source: http://how-to.linuxcareer.com/comparison-of-audio-codecs-and-conversion-utilities-on-linux
author: Anonymous
description:
If you like music as much as me you may find yourself taking time pondering to yourself what would be the best way of creating lossy backups of your cd collection?. This article will discuss standard audio codecs and briefly cover common conversion tools available to *NIX Operating Systems. Article written for Debian &amp; Ubuntu, Fedora, and ArchLinux.


title: The Monkey HTTP daemon
source: http://how-to.linuxcareer.com/the-monkey-http-daemon
author: Anonymous
description:
Yes, I know: why another webserver tutorial when there are so many good Apache howtos on the Internet? Because this is about what we've been saying for a while: use the right tool for the right job. And while we don't want to badmouth Apache, which is indeed a quality webserver, it offers lots of capabilities that aren't needed on a small scale machine. That's like using a Hummer for commuting, when a Smart would do just fine, if not better. So, if you need to quickly be online and offer services with a small website, Monkey might be for you. We presume that you know what a webserver is and what it is exactly that you want to set up.


title: Using Adminer to Manage your Databases
source: http://how-to.linuxcareer.com/using-adminer-to-manage-your-databases
author: Anonymous
description:
If you find yourself interacting with a database system such as MySQL, PostgreSQL, MS SQL, Oracle, or even SQLite, sometimes you find that some of the tasks you perform are more conveniently executed using a GUI rather then using the default management utility (usually run from a CLI) provided by the database system itself. Some of you may already use other tools such as phpMyAdmin, or phpPgAdmin. This article will talk about another web based database management tool known as Adminer. Adminer allows for the management of all the database systems mentioned above.This article covers Debian (&amp; Ubuntu), Fedora, and ArchLinux.


title: C development on Linux - Types, variables, operators - III.
source: http://how-to.linuxcareer.com/c-development-on-linux-types-variables-operators
author: Anonymous
description:
As promised, starting with this part of our C development article, we will get started with learning, without further introduction. I couldn't find no better way to start other than this, because types, operators and variables are an essential part of C and you will use them all the time when writing your own programs. For example, you can write a simple C program without defining your own functions, but it's harder to do that without some variables, unless you wanna stick to "Hello, world!". A variable is nothing more than a location in memory holding a value that can be altered (hence the name). But before you declare a variable you must know what kind of value you want it to hold, and here you will use types. And in order to operate on those variables, you'll need...operators, of course. I intend to make this course as concise as possible, so I recommend attention and as usual, practice. Any questions can be addressed on our forums, and we will do our best to answer them.


title: Unix and Linux: a bit of history
source: http://how-to.linuxcareer.com/unix-and-linux-a-bit-of-history
author: Anonymous
description:
If you don't like history, don't worry, I'm not a big fan either. But this kind of history is different: it's (supposedly) fun, educative, and right on time. Right on time because not so long ago one of the founding fathers of Unix, Dennis Ritchie, passed away, so we felt this article was in order. This is not the kind of article where you're supposed to have some knowledge about this and that. Many people don't know the origins of their operating system of choice, and in order to understand it better, you should know where it's coming from.


title: Learning Linux commands: dd
source: http://how-to.linuxcareer.com/learning-linux-commands-dd
author: Anonymous
description:
What you're reading is only the first of the many articles from the "Learning Linux commands" series. Why would we want to do such a thing? Because it's useful to you to have every option and possible use of a widely used command all in one place. You will find some options or even some commands that you didn't even knew existed, and your life as a Linux user / admin will become easier. If you're not afraid of opening a terminal and know the basics of using a Linux system, this article is for you. If you seek further help or information consult manual pages or visit our new Linux forum.


title: Introduction to LaTeX on Linux
source: http://how-to.linuxcareer.com/introduction-to-latex-on-linux
author: Anonymous
description:
LaTeX is the typesetting system and a markup language that allows for the creation of documents. LaTeX is heavily utilized by the academic and scientific community. LaTeX produces beautiful type and is written in a language that is fairly intuitive. This article will discuss a brief history, introductory usage examples, front-ends, and further readings.


title: Comparison of major Linux package management systems
source: http://how-to.linuxcareer.com/comparison-of-major-linux-package-management-systems
author: Anonymous
description:
One of the major differences between various Linux distributions is package management. Many times, this is the reason somebody steers away from one distribution to another, because he/she doesn't like the way software is installed or because there is software needed that isn't available in the distro's repositories. If you are a beginner in the Linux world and are wondering about the differences between distributions, this will be a good start. If you've only used one or two distributions for some time and you want to see what's on the other side of the fence, this article also might be for you. Finally, if you need a good comparison and/or a reminder about major PM systems, you'll find something interesting too. 


title: Learning Linux Commands: sed
source: http://how-to.linuxcareer.com/learning-linux-commands-sed
author: Anonymous
description:
Welcome to the second part of our series, a part that will focus on sed, the GNU version. As you will see, there are several variants of sed, which is available for quite a few platforms, but we will focus on GNU sed versions 4.x. Many of you have already heard about sed and already used it, mainly as a substitution tool. But that is just a segment of what sed can do, and we will do our best to show you as much as possible of what you can do with it. The name stands for Stream EDitor, and here "stream" can be a file, a pipe or simply stdin.


title: Ubuntu Linux desktop tips
source: http://how-to.linuxcareer.com/ubuntu-linux-desktop-tips
author: Anonymous
description:
You might be surprised by the above title. Well, don't be, because we felt that we neglected desktop users and this is our first move in this direction. Every system administrator has a desktop or a laptop at home, and there's time for work and time for play. This article refers to the play part, but not only, and what distribution could we choose if not Ubuntu? Well, Xubuntu, actually, but the steps involved in our article are exactly the same for any *buntu. Another first for us is that what you're about to read is practically an article made out of more small articles, each one containing a tip for the casual home Linux user. There might be tips that you already know, in which case it's practical to have a small list, and if you didn't know about any of these, we hope you'll find them useful.


title: Learning Linux Commands: awk
source: http://how-to.linuxcareer.com/learning-linux-commands-awk
author: Anonymous
description:
In this case, the title might be a little misleading. And that is because awk is more than a command, it's a programming language in its own right. You can write awk scripts for complex operations or you can use awk from the command line. The name stands for Aho, Weinberger and Kernighan (yes, Brian Kernighan), the authors of the language, which was started in 1977, hence it shares the same Unix spirit as the other classic *nix utilities. If you're getting used to C programming or know it already, you will see some familiar concepts in awk, especially since the 'k' in awk stands for the same person as the 'k' in K&amp;R, the C programming bible.


title: Password cracking with John the Ripper on Linux
source: http://how-to.linuxcareer.com/password-cracking-with-john-the-ripper-on-linux
author: Anonymous
description:
For those of you who haven't yet heard about John the Ripper (hereby called John for brevity), it is a free password cracking tool written mostly in C. Before going any further, we must tell you that although we trust our readers, we do not encourage or condone any malicious activities that may be performed using this tool or any other tools we talked about in the past. Security-related tools are often like a double-edged sword, in that they can be used for good but also for bad things. So although it might sound tempting, we recommend you to refrain from any damaging activities, if for nothing else, just because you have great chances to land in a jail cell. 


title: C development on Linux - Flow Control - IV.
source: http://how-to.linuxcareer.com/c-development-on-linux-flow-control-iv
author: Anonymous
description:
You have already been exposed to a small part of what flow control is in our previous part, namely the section about relational operators. As you start writing more complex programs, you will feel the need to control the order in which your program executes various parts. Flow control is present in most programming languages in one form or another, and what you're about to read here is essential to writing C programs.Everything you might want to ask or discuss you can take to our new forums, as before.


title: Guide to rsnapshot and incremental backups on Linux
source: http://how-to.linuxcareer.com/guide-to-rsnapshot-and-incremental-backups-on-linux
author: Anonymous
description:
rsnapshot is a backup tool written in Perl that utilizes rsync as its back-end. rsnapshot allows users to create customized incremental backup solutions. This article will discuss the following: the benefits of an incremental backup solution, rsnapshot's installation, its configuration, and usage examples.


title: Automating Linux installations with Kickstart
source: http://how-to.linuxcareer.com/automating-linux-installations-with-kickstart
author: Anonymous
description:
Red Hat, and their community effort, Fedora, are more or less enterprise-oriented. That being said, it's only natural they offer enterprise-specific tools that don't quite make sense on other desktop oriented operating systems. In the enterprise environment, where the system administrator has to manage lots of machines and installations, one tool that helps a lot is one that facilitates automated installations on several computers, using the same options for each of them. Instead of installing each system separately, the administrator just boots the installation media, tells the system where to find the options for installation and comes back after an hour to check on the system. It's a tremendous advantage in terms of time and effort, especially when dealing with lots of systems. 


title: Dual boot Ubuntu and Windows 7
source: http://how-to.linuxcareer.com/dual-boot-ubuntu-and-windows-7
author: Anonymous
description:
You need Windows for a program you use for work, your favorite game runs only on Windows or you are a developer that works on some cross-platform project. And of course, you can't even think about giving up your favorite OS. Whatever the reason, you need Windows and a virtual machine won't cut it so all you're left with, if you don't have a spare machine, is dual-boot. I usually recommend against multiple-boot machines, but I can't argue with the fact that here are situations when the idea is very useful. So this is what this article is about: making sure you need a dual-boot system, acknowledging the requirements, making backups if need be and proceed.


title: C development on Linux - Functions - V.
source: http://how-to.linuxcareer.com/c-development-on-linux-functions-v
author: Anonymous
description:
The C standard library offers a plethora of functions for many usual tasks. Also there are lots of libraries for extra functionality, like GUI design (GTK+) or database interfacing (libpq). However, as you advance in the C programming world, you will soon find yourself repeating the same instructions in the same order over and over again and that will become time-consuming and inefficient. So you can just wrap all those instructions in a function and just call said function when you need it. Here's what you're gonna learn by reading this article, plus some useful tips that will make your life easier. Any suggestions or problems go to the forums, as before.


title: Remote GUI administration over SSH
source: http://how-to.linuxcareer.com/remote-gui-administration-over-ssh
author: Anonymous
description:
If you've ever been in charge of a network you've definitely had the need for a secure remote connection. Maybe you just need to keep an eye on employees or kids. Doing so can be a hassle to some while crossing networks and subnets. On top of that, many businesses may have Internet but no DHCP to more protected machines. Many do this to network machines while keeping employees from surfing the Web. Whatever the case, Linux has many great tools to enable remote encrypted GUI administration. Even better, we will get everything we need for free for accessing a Linux or Windows client.


title: C development on Linux - Pointers and Arrays - VI.
source: http://how-to.linuxcareer.com/c-development-on-linux-pointers-and-arrays-vi
author: Anonymous
description:
We have come to a crucial point in our series of articles regarding C development. It's also, not coincidentally, that part of C that gives lots of headaches to beginners. This is where we come in, and this article's purpose (one of them, anyway), is to debunk the myths about pointers and about C as a language hard/impossible to learn and read. Nonetheless, we recommend increased attention and a wee bit of patience and you'll see that pointers are not as mind-boggling as the legends say.


title: Learning Linux Commands: cut
source: http://how-to.linuxcareer.com/learning-linux-commands-cut
author: Anonymous
description:
If you think that you can do Linux System administration without cut command, then you are absolutely right. However, mastering this fairly simple command line tool will give you a great advantage when it comes to the efficiency of your work on a user as well administration level. To simply put, cut command is one of many text-filtering command line tools that Linux Operation System has to offer. It filters standard STDIN from another command or input file and sends the filtered output to STDOUT.


title: SysAid - IT helpdesk installation on Linux system
source: http://how-to.linuxcareer.com/it-helpdesk-sysaid-installation-on-linux-system
author: Anonymous
description:
This article describes an installation of SysAid software on a Linux system using tomcat and Apache. SysAid is a commercial web-based help desk software and if you were thinking to install either its free or paid version in your organization this guide should help you to achieve it. The default installation of SysAid IT help desk is quite very straight forward. On top of this basic installation this guide will provide you with some extra settings on how to configure Sysaid with apache's https service using AJP proxy.


title: Linux Desktop new goodies: Razor-Qt and Cinnamon
source: http://how-to.linuxcareer.com/linux-desktop-new-goodies-razor-qt-and-cinnamon
author: Anonymous
description:
While there's no doubt that the leaders in the Linux desktop contest are GNOME and KDE, that does not mean they are catered for everyone. Different people have different needs and there were and still are voices in the community that criticize some of the choices the designers of the two desktops made. We, as always, prefer not to take sides, but we noticed that, as it often happens in Open Source, alternatives started to appear, addressing the aforementioned issues. Today we'll talk about two of the alternatives, so you know you always have a choice. So, for GTK and/or Qt fans that know how to install software on their distro of choice, we give you Cinnamon, an alternative to Gnome3, and Razor-Qt, a lightweight alternative to KDE4.


title: Learning Linux Commands: top
source: http://how-to.linuxcareer.com/learning-linux-commands-top
author: Anonymous
description:
System monitoring is an important aspect of any more-or-less advanced Linux user, because there comes a time when you want to know what is taking precious resources or simply how much it does take. And despite what some people think, this is not applicable only to server systems. Desktop applications go haywire too, and you find your system slowed down to a crawl because some "rogue" app decided to eat up all your memory. For enterprise users there are lots of potent free or commercial solutions for monitoring, but for the old-school Linux user and/or someone that prefers to keep it simple, there is always top(1). If you're somewhat familiar with the command line, you will probably benefit more from this article, but that doesn't mean GUI-centric users won't.


title: Customize your Cinnamon desktop with Javascript
source: http://how-to.linuxcareer.com/customize-your-cinnamon-desktop-with-javascript
author: Anonymous
description:
We've seen, in the last years at least, a big rise of the Web in everything we do and everywhere we do it. Now, lots of people need only a browser window for work or for fun, making lots of previously-used pieces of software obsolete. With the launch of the Gnome 3 desktop environment, the Web made it's way inside our installed software in a very smart way: parts of the UI are actually writen in Javascript, a Web language by excellence. Or...maybe not that much. Fabrice Bellard wrote a PC emulator in Javascript, and here's another example: a desktop environment having important parts written in this language. So if you're feeling hacky and have some knowledge of Javascript, or even general programming concepts, this article is for you. Of course, you're expected to have access to a Gnome 3 and/or Cinnamon desktop machine.


title: Using DeVeDe to create DVDs on Linux
source: http://how-to.linuxcareer.com/using-devede-to-create-dvds-on-linux
author: Anonymous
description:
Your daughter's birthday was beautiful and you have lots of videos and pictures from the event that have to be organized in a nice-looking way. Your graduation party was a blast and you want to remember it properly. Whatever the occasion, whatever the content, a custom-created DVD will pack your memories nicely and will spike your geek cred because you created it and hey, it looks so cool. But what tool should you use? There are professional, paid-for programs that can help you in creating a DVD, but why use another OS and pay when you have free OSs and free software to do this? You can use the command-line approach from start to finish, but sometimes a GUI that will wrap around these utilities looks like a nicer solution. Such a solution is DeVeDe, and it even has a Windows version if you insist, but I will focus on Linux (of course!) in this article. If you have minimal video/multimedia knowledge, you can easily use DeVeDe. Let's see how to get it and be efficient with it.


title: Command-line programs for everyday use in Linux
source: http://how-to.linuxcareer.com/command-line-programs-for-everyday-use-in-linux
author: Anonymous
description:
I must admit, I'm a command line geek. Whenever I have the chance, regardless of desktop environment or distribution, I open a terminal and start fiddling something. This does not mean everyone must be like me, of course. If you're the person who is mouse and GUI-oriented, no problems. However, there are situations when all you have at your disposal for a while is the command line. One of those situations might be an upgrade of your kernel/graphics drivers that leave you high and dry until the bug is reported and the developers look at the issue. You have to send a very important e-mail or you have to check the evolution of prices of your favorite laptop. All the essential desktop tasks (with some exceptions, though) that you do on a GUI-enabled machine can be done on a CLI-only machine as well, so if you're interested...


title: How to setup a basic firewall in Ubuntu Linux
source: http://how-to.linuxcareer.com/how-to-setup-a-basic-firewall-in-ubuntu-linux
author: Anonymous
description:
The first question you will ask yourself (probably) is "why on earth would I need a firewall? Linux is secure, right?" Right, and I know lots of desktop Linux users that never had to touch the subject or don't know what iptables or Netfilter is. Which is probably just fine, but that doesn't mean Linux is 100% safe from any attacks. Any sufficiently complex software has bugs, and many bugs can be exploited and become a security issue. So in the end it's all about some bored enough cracker to take advantage of some vulnerability (one example that springs to mind is the recently discovered sudo bug). What you will need in this case is a better protection than the default (I know Linux is a tough game to crack, but that doesn't make it impossible) while trying not to change in any way on how you use your computer. Consequently, this article will focus on the casual Ubuntu user that has some knowledge of security and networks (what a vulnerability is, what a port scan is, etc.) that wants to secure his/her system. 


title: C development on Linux - Structures - VII.
source: http://how-to.linuxcareer.com/c-development-on-linux-structures-vii
author: Anonymous
description:
We will continue in this part of our tutorial with the complex data types in C, and we will talk about structures. Many modern programming languages offer them, one shape or another, and so does C. As you will see later, structures allow you to manipulate data easier, by allowing you to store different variables of (possibly) different types under one single "roof".


title: Learning Linux Commands: ls
source: http://how-to.linuxcareer.com/learning-linux-commands-ls
author: Anonymous
description:
If you ever tried to work with Linux command line, ls command was surely one of the first commands you have executed. In fact, ls command is so frequently used, that its name is often considered as the best choice to name a Trojan Horse.  Even though you use ls command on daily basis, its wast number of options always makes you to reach for ls's manual page. Doing so you learn something new every time you open ls's manual page . This guide will try to do the same. ls command belongs to a group of core utilities on your Linux system and it was written by Richard M. Stallman and David MacKenzie many years ago.


title: Ubuntu command line basics for beginners: Part 1
source: http://how-to.linuxcareer.com/ubuntu-command-line-basics-for-beginners-part-1
author: Anonymous
description:
You may consider this article as somewhat of a "part two" of the article I wrote a few days ago. It's all about going step-by-step to get you, the user, proficient at the command-line and become envy material for your friends. The distribution chosen for this is Ubuntu, but these commands that are about to be exposed will work on any other Linux system you might encounter, and you will be warned when there are exceptions. What you will get is a how-to about how to accomplish various tasks using the command-line. And one of the advantages is that you can use these commands regardless of desktop environment or lack thereof. You are only required to have a minimal Linux knowledge base for this article, so get to your terminals and let's start.


title: Linux command line basics for beginners: Part 2
source: http://how-to.linuxcareer.com/linux-command-line-basics-for-beginners-part-2
author: Anonymous
description:
Hello, and welcome to part two of our Linux command line series. You will learn some more interesting tips that you can use to master your system, so hold on to your seats, because here we go. I must confess, this was a task that I had to do a long time ago in front of a terminal and had no idea how to do it. That is because I was used to the Gnome way of doing that but at the time I had no Gnome. So what to do? 


title: Linux command line basics for beginners: Part 3
source: http://how-to.linuxcareer.com/linux-command-line-basics-for-beginners-part-3
author: Anonymous
description:
Here's another installment of the Linux CLI basics series. This time we will deal with other interest-worthy tasks, like setting up your keyboard layout or using utilities to find files on your drive(s). We hope that the series will help you become a keyboard/terminal guru.When you're using some fancy desktop environment, changing the layout of your keyboard is simple and easy. A few clicks, you choose your preferred layout and maybe other localization settings and that's that. But what if you find yourself at a command-line-only machine and you have to use the machine, but the layout is set to French?


title: Learning Linux Commands: join
source: http://how-to.linuxcareer.com/learning-linux-commands-join
author: Anonymous
description:
Join command is yet another example of text processing utility under GNU/Linux. Join command combines two files based on the matching content lines found in each file. Using join command is quite straight forward and if used currently and in the right situation it can save lots of time and effort. This article requires very basic command line experience.


title: C development on Linux - Basic I/O - VIII.
source: http://how-to.linuxcareer.com/c-development-on-linux-basic-io-viii
author: Anonymous
description:
With this part of our C development on Linux article we are getting ready to get out of the theoretical zone and enter the real life one. If you followed the series until this point and tried to solve all the exercises, you will now have some idea about what C is about, so you need to get out in the wild and so some practical stuff, without which theory doesn't have much value. Some of the concepts you'll see below are already known, but they are extremely important for any C program on any Unix-like OS. Yes, the information is valid regardless of the OS, as long as it's some kind of Unix, but if you'll stumble onto something Linux-specific, you will know. We will treat concepts like standard input, output and error, in-depth printf() and file access, among others. Are you ready?


title: C development on Linux - Coding style and recommendations - IX.
source: http://how-to.linuxcareer.com/c-development-on-linux-coding-style-and-recommendations-ix
author: Anonymous
description:
You may wonder what is meant by the title. Code is code, right? It's important to be bug-free and that's that, what else? Development is more than writing code and testing/debugging it. Imagine you have to read someone else's work, and I suppose you already done that, and all the variables are named foo, bar, baz, var, etc. And the code isn't commented nor documented. You will probably feel the sudden urge to invoke unknown gods, then go to the local pub and drown your sorrows. They say that you should not do unto others what you don't want done unto you, so this part will focus of general coding guidelines, plus GNU-specific ideas that will help you have your code accepted. You are supposed to have read and understood the previous parts of this series, as well as solve all the exercises and, preferably, read and wrote as much code as possible.


title: Programmer's friend - the editor: Part 1 - Introduction and vim
source: http://how-to.linuxcareer.com/programmer-s-friend-the-editor-part-1-introduction-and-vim
author: Anonymous
description:
<p>As we're nearing the end of the C series it becomes more and more obvious that we need to learn more about the tools, about the practical side of programming. And one essential aspect is the editor. Of course, that's not to say that the editor is only needed when programming. While Linux has GUIs more and more advanced, given its' heritage you will sooner or later have to use the command line and an editor you are comfortable with to edit some config file. So choosing and knowing at least one editor that's available for Linux is more than important. Here's what our article is here to do, and the only thing expected from the reader is patience and some free time.
<br><b>Latest <a href="https://jobs.linuxcareer.com/">Linux Jobs</a></b><br>
<a href="https://jobs.linuxcareer.com/display-job/50141/Sr.-Systems-Engineer-%28Red-Hat-Linux%29.html">Sr. Systems Engineer (Red Hat Linux)</a> - Annapolis, United States<br>
<a href="https://jobs.linuxcareer.com/display-job/50140/Linux-Systems-Administrator.html">Linux Systems Administrator</a> - New York City, United States<br>
<a href="https://jobs.linuxcareer.com/display-job/50138/Senior-Technical-Consultant-Linux-Engineer.html">Senior Technical Consultant Linux Engineer</a> - Columbus, United States</p>


title: Programmer's friend - the editor: Part 2 - emacs
source: http://how-to.linuxcareer.com/programmer-s-friend-the-editor-part-2-emacs
author: Anonymous
description:
In part one we introduced you to Linux editors and gave a storm course on vim. It's now time to dismantle the rumors that we're subjective and talk about the other side, emacs. In some ways, the two editors are opposite one another, mainly from historical reasons, as you will see. We hope you will enjoy this tour and that we'll help you make up your mind.
<br>


title: Customizing emacs for development
source: http://how-to.linuxcareer.com/customizing-emacs-for-development
author: Anonymous
description:
First and foremost, a word of warning: while the previous articles were centered around the beginner, this article is for more advanced users, that already "speak" a programming language or two, and want to customize their editor towards it being ideal for the task. So you are expected to be more or less proficient in the ways of emacs, to be able to use it for day to day tasks and have the ability and desire to learn something new. After all, it will be for your own reward, and your programming tasks will become more efficient.


title: Customizing vim for development
source: http://how-to.linuxcareer.com/customizing-vim-for-development
author: Anonymous
description:
Of course, we wouldn't have had it any other way: we wanted to be fair, as pledged, so here is the vim article, which is a counterpart of our last one on how to make your editor the perfect programming environment. So you must have the following profile for this article to be really useful to you: you know your way around programming, so you subsequently know what you would like in an editor, and you also know your way around vim, preferably more than what we talked about in the article dedicated to it. If you read the customizing emacs article, you already have a good idea on how this article is going to be structured.


title: Learning Linux Commands: nice & renice
source: http://how-to.linuxcareer.com/learning-linux-commands-nice
author: Anonymous
description:
User's ability to attach a priority value to its own process upon execution determines whether you are being nice to your fellow users on the same system. Are you being nice or you simply abuse system resources for no apparent reason? In this article you will learn how to manage your processes in terms of how much processing power they consume and how to change a priority value of your processes using nice &amp; renice Linux command.  We will start with some basic theory about what is process, process scheduling, how to fork new process and then we move to nice command and explain how to change process priority value.


title: C development on Linux - Building a program - X.
source: http://how-to.linuxcareer.com/c-development-on-linux-building-a-program-x
author: Anonymous
description:
After all that theory and talking, let's start by building the code written through the last nine parts of this series. This part of our series might actually serve you even if you learned C someplace else, or if you think your practical side of C development needs a little strength. We will see how to install necessary software, what said software does and, most important, how to transform your code into zeros and ones. Before we begin, you might want to take a look at our most recent articles about how to customize your development environment:</p>
<ul>
<li><a href="/programmer-s-friend-the-editor-part-1-introduction-and-vim" target="_blank">Introduction to VIM editor</a></li>
<li><a href="/programmer-s-friend-the-editor-part-2-emacs" target="_blank">Introduction to Emacs</a></li>
<li><a href="/customizing-vim-for-development" target="_blank">Customizing VIM for development</a></li>
<li><a href="/customizing-emacs-for-development" target="_blank">Customizing Emacs for development</a></li>
</ul>


title: Understanding Regular Expressions
source: http://how-to.linuxcareer.com/understanding-regular-expressions
author: Anonymous
description:
Learning and understanding Regular Expressions may not be as straight forward as learning <a href="/learning-linux-commands-ls" title="linux ls command">ls command</a>. However, learning Regular Expressions and effectively implementing them in your daily work will doubtlessly reward your learning effort by greater work efficiency and time savings. Regular Expressions is a topic which can easily fill up entire 1000 pages long book. In this article, we only try to explain the basics of Regular Expressions in a concise, non-geeky and example driven manner. Therefore, if you ever wanted to learn Regular Expression basics now you have a viable chance.


source: http://feedproxy.google.com/~r/UpUbuntu/~3/OSrFm0dbJCM/greenfoot-simple-and-powerful-java-ide.html
author: S.R.
title:
Greenfoot: A Simple and Powerful Java IDE For Creating 2D Games and Simulations - Ubuntu 12.04/11.10


title: Penetration Testing for iPhone Applications- Part 2
source: http://feedproxy.google.com/~r/infosecResources/~3/vntD6VCZfTk/
author: Satish B.
description:
In the first part of this article, we discussed the iPhone application traffic analysis. In this part, we will take a look at the privacy issues and the application local data storage. Privacy issues...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/1tmbrm3GogD62m5sO5KqJ7MakEk/0/da"><img src="http://feedads.g.doubleclick.net/~a/1tmbrm3GogD62m5sO5KqJ7MakEk/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/1tmbrm3GogD62m5sO5KqJ7MakEk/1/da"><img src="http://feedads.g.doubleclick.net/~a/1tmbrm3GogD62m5sO5KqJ7MakEk/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/vntD6VCZfTk" height="1" width="1"/>


title: Passive Fingerprinting
source: http://feedproxy.google.com/~r/infosecResources/~3/zGdfGKjH93Q/
author: Sudhanshu Chauhan
description:
During penetration testing, the main objective of the auditor is to exploit and gain access. For that to happen, it is required to have some information about the system/network being exploited, and...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/CPfReWxcMDhExAcwKs3SzFWLqnA/0/da"><img src="http://feedads.g.doubleclick.net/~a/CPfReWxcMDhExAcwKs3SzFWLqnA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/CPfReWxcMDhExAcwKs3SzFWLqnA/1/da"><img src="http://feedads.g.doubleclick.net/~a/CPfReWxcMDhExAcwKs3SzFWLqnA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/zGdfGKjH93Q" height="1" width="1"/>


title: CISO Interview Series- Doug Steelman: CISO Dell SecureWorks
source: http://feedproxy.google.com/~r/infosecResources/~3/IlgHIgrQEQc/
author: Tim Heard
description:
Profile Subject: Doug Steelman Doug Steelman is the Chief Information officer of Dell SecureWorks, where he leads the defense of Dell SecureWork&#8217;s networks. Before joining Dell SecureWorks,...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/_dMpT6dTiBdw6OC_jDEnpN1rdgI/0/da"><img src="http://feedads.g.doubleclick.net/~a/_dMpT6dTiBdw6OC_jDEnpN1rdgI/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/_dMpT6dTiBdw6OC_jDEnpN1rdgI/1/da"><img src="http://feedads.g.doubleclick.net/~a/_dMpT6dTiBdw6OC_jDEnpN1rdgI/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/IlgHIgrQEQc" height="1" width="1"/>


title: ISACA Changes CISM Exam for 2012
source: http://feedproxy.google.com/~r/infosecResources/~3/komN-vR7Zc8/
author: Kenneth Magee
description:
According to ISACA, the CISM certification is changing to reflect the new CISM job practice analysis. (Source: ISACA’s CISM Review Manual 2012 p. iii) ISACA has reformatted the CISM changing it from...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/4HIhbK9oPP1fIzReeu3rdeD7I9E/0/da"><img src="http://feedads.g.doubleclick.net/~a/4HIhbK9oPP1fIzReeu3rdeD7I9E/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/4HIhbK9oPP1fIzReeu3rdeD7I9E/1/da"><img src="http://feedads.g.doubleclick.net/~a/4HIhbK9oPP1fIzReeu3rdeD7I9E/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/komN-vR7Zc8" height="1" width="1"/>


title: Hacking WolframAlpha – The Anatomy
source: http://feedproxy.google.com/~r/infosecResources/~3/lJ4P38NCP3A/
author: Israel Torres
description:
Preview Sharing source code with peers is one thing; sharing secrets over a public medium is another. The all-seeing eye of Google has no mercy, and once the secret has been seen, indexed, and copied...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/oQpLLY_mgIIantZijiZYunEemUA/0/da"><img src="http://feedads.g.doubleclick.net/~a/oQpLLY_mgIIantZijiZYunEemUA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/oQpLLY_mgIIantZijiZYunEemUA/1/da"><img src="http://feedads.g.doubleclick.net/~a/oQpLLY_mgIIantZijiZYunEemUA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/lJ4P38NCP3A" height="1" width="1"/>


title: Hacking AutoUpdate by Injecting Fake Updates
source: http://feedproxy.google.com/~r/infosecResources/~3/F9Y8eJM5-p4/
author: Hari Krishnan
description:
Works against Java, AppleUpdate, Google Analytics, Skype, Blackberry and more Introduction We all know that hackers are constantly trying to steal private information by getting into the...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/NLxfQ3JJi3YM_SDzMLiC4w8lD88/0/da"><img src="http://feedads.g.doubleclick.net/~a/NLxfQ3JJi3YM_SDzMLiC4w8lD88/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/NLxfQ3JJi3YM_SDzMLiC4w8lD88/1/da"><img src="http://feedads.g.doubleclick.net/~a/NLxfQ3JJi3YM_SDzMLiC4w8lD88/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/F9Y8eJM5-p4" height="1" width="1"/>


title: AlienVault OSSIM Review – Open Source SIEM
source: http://feedproxy.google.com/~r/infosecResources/~3/6AEdbjA-E-E/
author: Tamir Lkhamsuren
description:
Introduction As logs never lie, it&#8217;s very important to aggregate and analyze the internal and external network logs constantly so that companies can prevent breach or perform incident response...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/HaPoosw5m5hLFE8r23xFOnQ-ICY/0/da"><img src="http://feedads.g.doubleclick.net/~a/HaPoosw5m5hLFE8r23xFOnQ-ICY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/HaPoosw5m5hLFE8r23xFOnQ-ICY/1/da"><img src="http://feedads.g.doubleclick.net/~a/HaPoosw5m5hLFE8r23xFOnQ-ICY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/6AEdbjA-E-E" height="1" width="1"/>


title: Broken Authentication and Session Management
source: http://feedproxy.google.com/~r/infosecResources/~3/pOyFQIfbylU/
author: Deepanker Verma
description:
In general, web developers care for some common vulnerability in web applications. But there are some dangerous and less known vulnerabilities, which widely exist on web applications. Most developers...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/ddYUEzl3v82H2Wpb1rDuzkpG-Ws/0/da"><img src="http://feedads.g.doubleclick.net/~a/ddYUEzl3v82H2Wpb1rDuzkpG-Ws/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/ddYUEzl3v82H2Wpb1rDuzkpG-Ws/1/da"><img src="http://feedads.g.doubleclick.net/~a/ddYUEzl3v82H2Wpb1rDuzkpG-Ws/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/pOyFQIfbylU" height="1" width="1"/>


title: Understanding the Origins of the China – Philippine Cyber War
source: http://feedproxy.google.com/~r/infosecResources/~3/Wch-1acvtyc/
author: Jay Turla
description:
For many years, there has been a territorial dispute between China and Philippines over the Scarborough Shoal (Philippine Term: Panatag Shoal) or Huangyan Island (Chinese Term) and the Spratlys...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/REwb95iSJho_i831FXHWk5zsZio/0/da"><img src="http://feedads.g.doubleclick.net/~a/REwb95iSJho_i831FXHWk5zsZio/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/REwb95iSJho_i831FXHWk5zsZio/1/da"><img src="http://feedads.g.doubleclick.net/~a/REwb95iSJho_i831FXHWk5zsZio/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/Wch-1acvtyc" height="1" width="1"/>


title: iPhone Forensics – Analysis of iOS 5 backups : Part 1
source: http://feedproxy.google.com/~r/infosecResources/~3/doMaRl0UcKA/
author: Satish B.
description:
iPhone forensics can be performed on the backups made by iTunes or directly on the live device. This Previous article on iPhone forensics detailed the forensic techniques and the technical challenges...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/JXrDMJOimMHj4Nj86RBeCzABOvY/0/da"><img src="http://feedads.g.doubleclick.net/~a/JXrDMJOimMHj4Nj86RBeCzABOvY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/JXrDMJOimMHj4Nj86RBeCzABOvY/1/da"><img src="http://feedads.g.doubleclick.net/~a/JXrDMJOimMHj4Nj86RBeCzABOvY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/doMaRl0UcKA" height="1" width="1"/>


title: Chapter 6 – End-user Device Security
source: http://feedproxy.google.com/~r/infosecResources/~3/ijOeZkDsU-A/
author: Tom Olzak
description:
This is Chapter 6 in Tom Olzak&#8216;s book, &#8220;Enterprise Security: A practitioner’s guide.&#8221; Chapter 5 is available here: VLAN Network Segmentation and Security- Chapter 5 Chapter 4 is...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/QtB-GAp01hepyY-D1rSyT86RYl4/0/da"><img src="http://feedads.g.doubleclick.net/~a/QtB-GAp01hepyY-D1rSyT86RYl4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/QtB-GAp01hepyY-D1rSyT86RYl4/1/da"><img src="http://feedads.g.doubleclick.net/~a/QtB-GAp01hepyY-D1rSyT86RYl4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/ijOeZkDsU-A" height="1" width="1"/>


title: Scanning the Web with Ammonite
source: http://feedproxy.google.com/~r/infosecResources/~3/4LN1GeGCgCE/
author: Prateek Gianchandani
description:
Introduction Ammonite is a Fiddler extension used to scan web applications for common vulnerabilities like verbose and blind SQL injection, OS commanding, local file inclusion, buffer overflows,...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/8KUW2VDu1PWqVc0FvlXS1FlDgrQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/8KUW2VDu1PWqVc0FvlXS1FlDgrQ/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/8KUW2VDu1PWqVc0FvlXS1FlDgrQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/8KUW2VDu1PWqVc0FvlXS1FlDgrQ/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/4LN1GeGCgCE" height="1" width="1"/>


title: Man in the Browser Attack vs. Two Factor Authentication
source: http://feedproxy.google.com/~r/infosecResources/~3/S2feHzw2-pU/
author: Irfan Shakeel
description:
Authentication or E-authentication (Electronic authentication) is the way, technique, and method to establish a connection between two entities. This connection is based on confidence and...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/WIwdmmlY9LlROxF4cKzLAyKS-B8/0/da"><img src="http://feedads.g.doubleclick.net/~a/WIwdmmlY9LlROxF4cKzLAyKS-B8/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/WIwdmmlY9LlROxF4cKzLAyKS-B8/1/da"><img src="http://feedads.g.doubleclick.net/~a/WIwdmmlY9LlROxF4cKzLAyKS-B8/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/S2feHzw2-pU" height="1" width="1"/>


title: Firewall Security Testing
source: http://feedproxy.google.com/~r/infosecResources/~3/0_WaFObREag/
author: John Maher
description:
Testing firewall and IDS rules is a regular part of penetration testing or security auditing. However, because of the unique complexity involved of different environments, automated scanners are not...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/Nfn3kf5Hzw0t5vWmCfniMXDcSmI/0/da"><img src="http://feedads.g.doubleclick.net/~a/Nfn3kf5Hzw0t5vWmCfniMXDcSmI/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Nfn3kf5Hzw0t5vWmCfniMXDcSmI/1/da"><img src="http://feedads.g.doubleclick.net/~a/Nfn3kf5Hzw0t5vWmCfniMXDcSmI/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/0_WaFObREag" height="1" width="1"/>


title: w3af walkthrough and tutorial part 4 – w3af tools, profiles and scripting
source: http://feedproxy.google.com/~r/infosecResources/~3/xLbL95Ha8wQ/
author: Prateek Gianchandani
description:
This is part 4 in a series. Part 1 is available here:w3af Tutorial Part 1 Part 2 is available here:Discovery and Audit plugins Part 3 is available here: Remaining plugins In the previous articles in...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/0WpFgISXFxnhRZOX5WAsvbkB8jg/0/da"><img src="http://feedads.g.doubleclick.net/~a/0WpFgISXFxnhRZOX5WAsvbkB8jg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/0WpFgISXFxnhRZOX5WAsvbkB8jg/1/da"><img src="http://feedads.g.doubleclick.net/~a/0WpFgISXFxnhRZOX5WAsvbkB8jg/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/xLbL95Ha8wQ" height="1" width="1"/>


title: Checking Out Backdoor Shells
source: http://feedproxy.google.com/~r/infosecResources/~3/BfW3C0QPjrw/
author: Jay Turla
description:
A backdoor shell can be a PHP, ASP, JSP, etc. piece of code which can be uploaded on a site to gain or retain access and some privileges on a website. Once uploaded, it allows the attacker to execute...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/gpGv_L0r3_Bja8gS2BefhvfD41Q/0/da"><img src="http://feedads.g.doubleclick.net/~a/gpGv_L0r3_Bja8gS2BefhvfD41Q/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/gpGv_L0r3_Bja8gS2BefhvfD41Q/1/da"><img src="http://feedads.g.doubleclick.net/~a/gpGv_L0r3_Bja8gS2BefhvfD41Q/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/BfW3C0QPjrw" height="1" width="1"/>


title: Easy Website Keylogging with Metasploit
source: http://feedproxy.google.com/~r/infosecResources/~3/NPT_U9CjESk/
author: Rupesh Hankare
description:
Hello all, you all know how to create phishing pages. Here is a little preview about creating fake pages. The History of Phishing: The Phishing Method was established in 1987, and it was first...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/xas4asOJFABalDL5WutK_oKK64I/0/da"><img src="http://feedads.g.doubleclick.net/~a/xas4asOJFABalDL5WutK_oKK64I/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/xas4asOJFABalDL5WutK_oKK64I/1/da"><img src="http://feedads.g.doubleclick.net/~a/xas4asOJFABalDL5WutK_oKK64I/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/NPT_U9CjESk" height="1" width="1"/>


title: iPhone Forensics – Analysis of iOS 5 backups : Part 2
source: http://feedproxy.google.com/~r/infosecResources/~3/HaBfj5RmkjA/
author: Satish B.
description:
In the first part of this article, we discussed the techniques to read iTunes backups. The following article discloses the procedure to extract protection class keys from the Backup Keybag and covers...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/KwePOUUzoUuGvz8zZwv1cMLP26c/0/da"><img src="http://feedads.g.doubleclick.net/~a/KwePOUUzoUuGvz8zZwv1cMLP26c/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/KwePOUUzoUuGvz8zZwv1cMLP26c/1/da"><img src="http://feedads.g.doubleclick.net/~a/KwePOUUzoUuGvz8zZwv1cMLP26c/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/HaBfj5RmkjA" height="1" width="1"/>


title: Defending yourself from Google hackers
source: http://feedproxy.google.com/~r/infosecResources/~3/3DJF8QmwkpI/
author: Hari Krishnan
description:
Before looking how we can prevent ourselves from Google hackers, let&#8217;s see what Google hacking is. Google Hacking: Google hacking is a hacking technique that uses Google Search and other Google...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/JaNLavCBhiefqqUNKrGwFOZs2gA/0/da"><img src="http://feedads.g.doubleclick.net/~a/JaNLavCBhiefqqUNKrGwFOZs2gA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/JaNLavCBhiefqqUNKrGwFOZs2gA/1/da"><img src="http://feedads.g.doubleclick.net/~a/JaNLavCBhiefqqUNKrGwFOZs2gA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/3DJF8QmwkpI" height="1" width="1"/>


title: Traffic Anomaly Detection – TCP and DNS
source: http://feedproxy.google.com/~r/infosecResources/~3/wL2II5xr72s/
author: rishi
description:
Ever since the computer and the critical data it holds came into headlines, so did the malicious programs, attacks and the threat landscape. We have thousands of cases of malware infection, zombies...<br/>
<br/>
Go on to the site to read the full article
<p><a href="http://feedads.g.doubleclick.net/~a/SDhVLCN_LulniWc5W14MkILwi7k/0/da"><img src="http://feedads.g.doubleclick.net/~a/SDhVLCN_LulniWc5W14MkILwi7k/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/SDhVLCN_LulniWc5W14MkILwi7k/1/da"><img src="http://feedads.g.doubleclick.net/~a/SDhVLCN_LulniWc5W14MkILwi7k/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/infosecResources/~4/wL2II5xr72s" height="1" width="1"/>


title: Political Hacking and Cracking
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/lEkA1pt7mzc/
author: z_edian
description:
<p style="text-align: justify;"><span style="font-family: Times New Roman,serif;"><span style="font-size: small;">Last week, I reported about how web defacements can be a constructive tool of political communication and vulnerability testing. The perspective was opposing common perception that web defacements are a destructive approach to embarrass someone. Today&#8217;s article focuses on the difference between political cracking and political hacking, where web defacement is a subcategory.</span></span></p>
<p style="text-align: justify;"><span style="font-family: Times New Roman,serif;"><span style="font-size: small;">The difference between hacking and cracking has already been discussed here and elsewhere sufficiently. However, for those who are not so familiar with it: hacking is the attempt to show vulnerabilities where cracking serves lower goals such as financial advantages or reputation boosting. Hacking and cracking both, are illegal under most state&#8217;s laws.</span></span></p>
<p style="text-align: justify;"><span style="font-family: Times New Roman,serif;"><span style="font-size: small;">I read an article today about a group of tech-savvy guys who allegedly hacked the portal of the German social democrats (SPD) and other sites such as European and American Space agencies (#ESA #NASA) as well as ministries and military facilities around the globe. They call themselves &#8216;Unknown&#8217; and claimed not to be motivated by anti-American or anti-capitalist spirits but to show vulnerable websites.</span></span></p>
<p style="text-align: justify;"><span style="font-family: Times New Roman,serif;"><span style="font-size: small;">Web defacements are normally a good way to show that the websites indeed were vulnerable and subsequently penetrated. If it is not made public that a website is insecure most administrators would not react. For all of you who are wondering why they do not just simply email the admin and tell him how they hacked his website (#socialconstructivism).</span></span></p>
<p style="text-align: justify;"><span style="font-family: Times New Roman,serif;"><span style="font-size: small;">What Unknown did was not hacking anymore, it was cracking. They did not just simply deface the website as proof of penetration, they dumped the whole set of login data on the Internet. They of all should know that people are usually too lazy to take precautions and therefore use the same email and password combinations on other sites. Thus, every leaked account potentially leads to a lot of scam, account abuse and trouble for those who have an account with the cracked website.</span></span></p>
<p style="text-align: justify;"><span style="font-family: Times New Roman,serif;"><span style="font-size: small;">Being aware of the of the far-reaching effects this crack can have, I think you have to be very oblivious to your environment or a liar to say that you did it only to proof existing vulnerabilities. I believe they are just oblivious to the outcome of their &#8216;security advocacy&#8217;, but nevertheless I believe that Unknown should step up their game if they want to become credible as an information security (#infosec) crew rather than a cracker group.</span></span></p>
<p style="text-align: justify;">T<span style="font-family: Times New Roman,serif;"><span style="font-size: small;">o most they might appear like outlaws no matter what their intentions and approach are but for others it does indeed make a difference.</span></span></p>

<p><a href="http://feedads.g.doubleclick.net/~a/Irr9LHHMtOAHU-kl396e8H6lycE/0/da"><img src="http://feedads.g.doubleclick.net/~a/Irr9LHHMtOAHU-kl396e8H6lycE/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Irr9LHHMtOAHU-kl396e8H6lycE/1/da"><img src="http://feedads.g.doubleclick.net/~a/Irr9LHHMtOAHU-kl396e8H6lycE/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/lEkA1pt7mzc" height="1" width="1"/>


title: shipcode will be archiving Malwares, Backdoors, and IRC Bots He Found in the Wild
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/MOerB9Umddw/
author: shipcode
description:
<p style="text-align: justify;">It&#8217;s been a while since I haven&#8217;t wrote an article for this blog and thank God that the contributors have taken place and wrote some few good things in this blog during my absence. Anyway I have an important announcement for all of you fellow readers&#8230;.</p>
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/computervirus.jpg"><img class="aligncenter" title="computervirus" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/computervirus.jpg" alt="malware" width="320" height="320" /></a></p>
<p style="text-align: justify;">It just came to my mind yesterday that it will be cool if I will also be archiving and collecting malware samples, backdoor shells, and IRC bots that are found  in web applications, pastebin, and in the wild. In each malware sample, backdoor shell or IRC Bots; I will paste their scripts and codes in a text file and upload it in a post that will be containing its details.</p>
<p style="text-align: justify;">I have always been fascinated with backdoor shells since I started this blog together with kapitanluffy, in fact I wrote an article about backdoor shells recently in Infosec Institute which can be found <a href="http://resources.infosecinstitute.com/checking-out-backdoor-shells/">here</a>.</p>
<p style="text-align: justify;">If you are interested to contribute in malware hunting and in honeypot logs, or would like to write about your malware analysis and reverse engineering escapades then contact me @ shipcodez@gmail.com.</p>
<p style="text-align: justify;">I already have my first entry about a backdoor shell named <a href="http://www.theprojectxblog.net/analysis-on-mma-php-backdoor-shell/">mma.php</a> in this blog so you might wanna read that short writeup.</p>
<p style="text-align: justify;"><strong>NOTE: </strong>Files on my archives are malicious! (duh) So be safe everyone and I am not responsible if what are you going to do with the samples because the archives are just for educational purposes =)</p>

<p><a href="http://feedads.g.doubleclick.net/~a/gXAf0uyTekly0bBeFGYy1RSGe1s/0/da"><img src="http://feedads.g.doubleclick.net/~a/gXAf0uyTekly0bBeFGYy1RSGe1s/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/gXAf0uyTekly0bBeFGYy1RSGe1s/1/da"><img src="http://feedads.g.doubleclick.net/~a/gXAf0uyTekly0bBeFGYy1RSGe1s/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/MOerB9Umddw" height="1" width="1"/>


title: Perl IRC Bot by Pitbul then Modded by w3tw0rk
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/5DXqMNjPCaA/
author: shipcode
description:
<p style="text-align: justify;">Okay, now time for my first text archive of an IRC Bot written in Perl that has malicious functions like udpflood and tcpflood which means it can be used to initiate DoS or DDoS attacks. This bot was originally written by Pitbul and modified by w3tw0rk. This has been out in the wild a few years ago. This IRC bot can also be considered as a backdoor since it allows you to execute *nix commands by typing !bot &lt;command_here&gt; (For example: !bot uname -a). By typing the command <em>!bot @commands,</em> it lists its commands and functions:</p>
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/perl_IRCbot.png"><img class=" wp-image-3708 aligncenter" title="perl_IRCbot" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/perl_IRCbot-1024x557.png" alt="perl_IRCbot" width="819" height="446" /></a></p>
<blockquote><p>#-[w3tw0rk B0T Commands List]-<br />
#&#8212;&#8211;[Hacking Based]&#8212;&#8211;<br />
# !bot @multiscan &lt;vuln&gt; &lt;dork&gt;<br />
# !bot @socks5<br />
# !bot @sql2 &lt;vuln&gt; &lt;dork&gt; &lt;col&gt;<br />
# !bot @portscan &lt;ip&gt;<br />
# !bot @logcleaner<br />
# !bot @sendmail &lt;subject&gt; &lt;sender&gt; &lt;recipient&gt; &lt;message&gt;<br />
# !bot @system<br />
# !bot @cleartmp<br />
# !bot @rootable<br />
# !bot @nmap &lt;ip&gt; &lt;beginport&gt; &lt;endport&gt;<br />
# !bot @back &lt;ip&gt;&lt;port&gt;<br />
# !bot @linuxhelp<br />
# !bot @cd tmp:. | for example<br />
#&#8212;&#8211;[Advisory-New Based]&#8212;&#8211;<br />
# !bot @packetstorm<br />
# !bot @milw0rm<br />
#&#8212;&#8211;[DDos Based]&#8212;&#8211;<br />
# !bot @udpflood &lt;host&gt; &lt;packet size&gt; &lt;time&gt;<br />
# !bot @tcpflood &lt;host&gt; &lt;port&gt; &lt;packet size&gt; &lt;time&gt;<br />
# !bot @httpflood &lt;host&gt; &lt;time&gt;<br />
# !bot @sqlflood &lt;host&gt; &lt;time&gt;<br />
#&#8212;&#8211;[IRC Based]&#8212;&#8211;<br />
# !bot @killme<br />
# !bot @join #channel<br />
# !bot @part #channel<br />
# !bot @reset<br />
# !bot @voice &lt;who&gt;<br />
# !bot @owner &lt;who&gt;<br />
# !bot @deowner &lt;who&gt;<br />
# !bot @devoice &lt;who&gt;<br />
# !bot @halfop &lt;who&gt;<br />
# !bot @dehalfop &lt;who&gt;<br />
# !bot @op &lt;who&gt;<br />
# !bot @deop &lt;who&gt;<br />
#&#8212;&#8211;[Flooding Based]&#8212;&#8211;<br />
# !bot @msgflood &lt;who&gt;<br />
# !bot @dccflood &lt;who&gt;<br />
# !bot @ctcpflood &lt;who&gt;<br />
# !bot @noticeflood &lt;who&gt;<br />
# !bot @channelflood<br />
# !bot @maxiflood &lt;who&gt;</p></blockquote>
<p>It&#8217;s also just easy to configure this script, all you need to do is to change the lines below:</p>
<blockquote><p>############################################<br />
my @adms=(&#8220;name of the bot owner&#8221;);<br />
my @canais=(&#8220;#channgel&#8221;);<br />
#Put your channel here<br />
my @nickname = (&#8220;nickname of the bot&#8221;);<br />
my $nick = $nickname[rand scalar @nickname];<br />
#Nickname of bot<br />
my $ircname =&#8217;pxbloggers&#8217;;<br />
chop (my $realname = &#8216;pxcrew&#8217;);<br />
#IRC name and Realname<br />
$servidor=&#8217;irc.freenode.net&#8217; unless $servidor;<br />
my $porta=&#8217;6666&#8242;;<br />
############################################</p></blockquote>
<p>To hunt this kind of Perl IRC Bot, you can just grep its common functions like: <strong>grep -RPn &#8220;(system|shell|tcp|grep) *\(&#8221; /var/www</strong></p>
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/detecting_malware.png"><img class="size-full wp-image-3711 aligncenter" title="malware detection" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/detecting_malware.png" alt="malware detection" width="658" height="456" /></a></p>
<p>Well, that&#8217;s it for now. I will just be updating my archives soon =) See yah!</p>
<p>Owh and I almost forgot, here is the full script:</p>
<p><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/perlbot.txt">perlbot</a></p>

<p><a href="http://feedads.g.doubleclick.net/~a/LCySwQfAOQvkLNgliivV1RPLe14/0/da"><img src="http://feedads.g.doubleclick.net/~a/LCySwQfAOQvkLNgliivV1RPLe14/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/LCySwQfAOQvkLNgliivV1RPLe14/1/da"><img src="http://feedads.g.doubleclick.net/~a/LCySwQfAOQvkLNgliivV1RPLe14/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/5DXqMNjPCaA" height="1" width="1"/>


title: Another Perl IRC Bot that have DoS/DDoS functions
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/-PO-Kgx4vPY/
author: shipcode
description:
<p style="text-align: justify;">Yesterday, I wrote an article about my new archive which is a Perl IRC bot that has malicious functions like udpflood and tcpflood functions written by Pitbul then modded by w3tw0rk and today I will add another text archive that has similar functions to Pitbul&#8217;s bot but doesn&#8217;t have sql flood, mailer, bug dorking, and automatic log cleaner functions.It&#8217;s another Perl IRC Bot written by an Indonesian (because of the word banyak). And because it is similar to Pitbul&#8217;s IRC bot, it allows you to execute *nix commands on the bot by typing <em>!bht &lt;command_here&gt;</em> (For example : !bht cat /etc/issue). The difference is that Pitbul&#8217;s IRC bot has a lot of codes in it and has a lot of more functions than this Perl IRC bot I will be showing today. I call this IRC Bot &#8216;Banyak&#8217;. LOL</p>
<p style="text-align: justify;">To see all the possible commands for this bot (In my case, the name of my bot is Charles-220513), you need to type: <em>!bht @help</em></p>
<blockquote><p>-Charles-220513- (@Command List shipcode_jjt)<br />
-Charles-220513- (@Copyright (C) 2007)<br />
-Charles-220513- &lt;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&gt;<br />
-Charles-220513- (!bht) (@help)<br />
-Charles-220513- (!bht) (@portscan) &lt;IP/domain Name&gt;<br />
-Charles-220513- (!bht) (@udpflood) &lt;IP&gt; &lt;packet-size&gt; &lt;time&gt;<br />
-Charles-220513- (!bht) (@tcpflood) &lt;IP&gt; &lt;port&gt; &lt;time&gt;<br />
-Charles-220513- (!bht) (@httpflood) &lt;www.website.com&gt; &lt;time&gt;<br />
-Charles-220513- (!bht) (@say) &lt;msg&gt;<br />
-Charles-220513- (!bht) (@join) &lt;#&gt;<br />
-Charles-220513- (!bht) (@part) &lt;#&gt;<br />
-Charles-220513- (!bht) (@nick) &lt;nick&gt;<br />
-Charles-220513- (!bht) (@msg) &lt;#/nick&gt;<br />
-Charles-220513- (!bht) (@tsunami) &lt;banyak pesan&gt; &lt;#/nick&gt; &lt;msg&gt;<br />
-Charles-220513- (!bht) (@op) &lt;nick&gt;<br />
-Charles-220513- (!bht) (@deop) &lt;nick&gt;<br />
-Charles-220513- (!bht) (@voice) &lt;nick&gt;<br />
-Charles-220513- (!bht) (@devoice) &lt;nick&gt;<br />
-Charles-220513- (!bht) (@reset)<br />
-Charles-220513- (!bht) (@die) &lt;msg&gt;<br />
-Charles-220513- Charles (@back) &lt;ip&gt; &lt;port&gt;<br />
-Charles-220513- Charles (@command² di atas)<br />
-Charles-220513- &lt;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&gt;</p></blockquote>
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/ircbotnet.png"><img class=" wp-image-3720 aligncenter" title="ircbotnet" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/ircbotnet-1024x557.png" alt="irc botnet" width="737" height="401" /></a></p>
<p style="text-align: justify;">To run this bot the attacker can just type in the shell or in the terminal : <em>perl filename &lt;irchost&gt; &lt;port&gt; &lt;channel&gt; &lt;admin of the bot&gt; &lt;fakeproccess&gt;</em></p>
<p style="text-align: justify;">He  or she doesn&#8217;t need to add the nickname of the bot and don&#8217;t need to append &#8216;#&#8217; before the IRC channel.</p>
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/osc_bot.png"><img class=" wp-image-3722 aligncenter" title="perl bot" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/osc_bot.png" alt="perl bot" width="592" height="410" /></a></p>
<p style="text-align: justify;">The reason why he doesn&#8217;t need to input the nickname of the bot is because it automatically generates its own nickname based on the script:</p>
<blockquote><p>my @nickname = (&#8220;Ackerman&#8221;,<br />
&#8220;Adams&#8221;,<br />
&#8220;Addison&#8221;,<br />
&#8220;Adelstein&#8221;,<br />
&#8220;Adibe&#8221;,<br />
&#8220;Adorno&#8221;,<br />
&#8220;Ahlers&#8221;,<br />
&#8220;Alavi&#8221;,<br />
&#8220;Alcorn&#8221;,<br />
&#8220;Alda&#8221;,<br />
&#8220;Aleks&#8221;,<br />
&#8220;Allison&#8221;,<br />
&#8220;Alongi&#8221;,<br />
&#8220;Altavilla&#8221;,<br />
&#8220;Altenberger&#8221;,<br />
&#8220;Altenhofen&#8221;,<br />
&#8220;Amaral&#8221;,<br />
&#8220;Amatangelo&#8221;,<br />
&#8220;Ameer&#8221;,<br />
&#8220;Amsden&#8221;,<br />
&#8220;Anand&#8221;,<br />
&#8220;Andel&#8221;,<br />
&#8220;Ando&#8221;,<br />
&#8220;Andrelus&#8221;,<br />
&#8220;Andron&#8221;,<br />
&#8220;Anfinrud&#8221;,<br />
&#8220;Ansley&#8221;,<br />
&#8220;Anthony&#8221;,<br />
&#8220;Antos&#8221;,</p>
<p>&#8212;&#8212;&#8212; More &#8212;&#8212;&#8212;</p></blockquote>
<p>And because I always trust the power of the grep command, I can just type <em>grep -RPn &#8220;(system|shell|tcp|grep) *\(&#8221; /var/www</em>  to hunt this kind of malicious bots.</p>
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/power_grep.png"><img class=" wp-image-3728 aligncenter" title="powerful grep command" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/power_grep.png" alt="powerful grep command" width="520" height="365" /></a></p>
<p><strong>Full Script Disclosure Here:</strong></p>
<p>-= <a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/perlIRC.txt">perlIRC</a> =-</p>

<p><a href="http://feedads.g.doubleclick.net/~a/rzewM8-z_oGYuixRdBJYoRg8SYw/0/da"><img src="http://feedads.g.doubleclick.net/~a/rzewM8-z_oGYuixRdBJYoRg8SYw/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/rzewM8-z_oGYuixRdBJYoRg8SYw/1/da"><img src="http://feedads.g.doubleclick.net/~a/rzewM8-z_oGYuixRdBJYoRg8SYw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/-PO-Kgx4vPY" height="1" width="1"/>


title: Where L33t H4x0r Privacy Standards Become Public Benefit ~ WikiLeaks ‘New Encrypted Facebook’
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/i-VXriFH3AQ/
author: PamelaDrew
description:
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/wikileaks_car.jpg"><img class="size-full wp-image-3739 aligncenter" title="wikileaks_car" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/wikileaks_car.jpg" alt="wikileaks_car" width="500" height="375" /></a></p>
<p style="text-align: justify;">What we see is very much a function of what we know and where we stand, but after way too many years of watching the #Bankster Boys spinning everything from black hole prisons and torture to Monsanto RoundUp Ready feeding experiment in America it is time for hide the truth games to end.</p>
<p style="text-align: justify;">No better place to start than the Wall Street darling Facebook. What began as a pure social benefit for yearbook school friends, became a corporate data mining, PR infested PsyOps &amp; $ales realm.</p>
<p style="text-align: justify;">What a rich realm it is too with the #Banksters chomping at the bit to squeeze more small time investors who will back a market that values a company that makes nothing but cqan pull profits out their a$$ swapping information. Just like all the other hot air scams that make money by wagering and trading secrets. It&#8217;s a system so distorted there money made on every up and down swing in the markets that produce nothing at all for a global economy &amp; generate billions, yet what we can&#8217;t afford is to pay workers who are the source of production for everything. Hmm, seems a bit off when it shakes out that way.<br />
Facebook is the poster child for distorted corporate values and too scary a place for me to go, permeated with zealous information gatherers poking their big noses way too far.</p>
<p style="text-align: justify;">How wonderful that WikiLeaks has an andidote and a social networking platform that&#8217;s about individuals and respect for their privacy.</p>
<p style="text-align: justify;">It may be an ironic twist of fate that a competitive alternative to Facebook, that offers a different user benefit with privacy protection, is a textbook example of a true Free Market Principle at work. While the MPAA whine about their replication revenues &amp; want Congress &amp; law enforcement to hunt their profits and toss in we must defend the free market as a sound bite to spin their always most favored status.</p>
<p style="text-align: justify;">It is a free market answer and gift of enormity with the skill, time and vision I can&#8217;t begin to imagine but the generosity and opportunity are enormous, let&#8217;s thank our lucky stars and make the most of it.</p>
<p style="text-align: justify;">Details and story relating to WikiLeaks announcement are with thanks to @Doemeia CyberGuerilla</p>
<p style="text-align: justify;">The WikiLeaks Twitter feed announced on 20 May 2012 that the WL Friends/Friends of WikiLeaks (FoWL) network is ready to launch an ‘encrypted Facebook’. This comes amidst growing concern for user privacy and safety at the Facebook website.</p>
<p style="text-align: justify;">Facebook recently came out in support of CISPA, a proposed US law that infringes on privacy and freedom of speech. Facebook’s attitude towards user privacy has led some to leave the site. “…I think it’s important to not use services that you have issues with, even if they are free,” wrote Engadget and Gizmodo cofounder Peter Rojas, and artist Hazel Dooney recently cited the same issues on her blog as her reason for leaving.</p>
<p style="text-align: justify;">http://www.cyberguerrilla.info/?p=5675</p>

<p><a href="http://feedads.g.doubleclick.net/~a/RTRVOrANSbdxQi6IKS81x0YLKqg/0/da"><img src="http://feedads.g.doubleclick.net/~a/RTRVOrANSbdxQi6IKS81x0YLKqg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/RTRVOrANSbdxQi6IKS81x0YLKqg/1/da"><img src="http://feedads.g.doubleclick.net/~a/RTRVOrANSbdxQi6IKS81x0YLKqg/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/i-VXriFH3AQ" height="1" width="1"/>


title: Hashing a Password in PHP
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/agK0xIjQlPE/
author: tux
description:
<p align="center"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/ID-10046524.jpg"><img class="size-full wp-image-3748 aligncenter" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/ID-10046524.jpg" alt="passwords" width="400" height="250" /></a></p>
<p>&nbsp;</p>
<p style="text-align: justify">One important thing to do in developing a software is securing a user password.  With so many algorithms i&#8217;m curious and interested on how you secure passwords with speed in mind.  The 3 basic strategy I secure a password is to create a dynamic string such as the entry date and time then hash it with the password and re-hash it with a modern cryptographic function.  Below is a simple approach on how I do a simple login  using dynamic salt and <a href="http://en.wikipedia.org/wiki/SHA512">sha512</a> algorithm assuming that the inputs are already sanitized.</p>
<pre>$conn = mysql_connect('localhost','username','*$a7Z^Ha');
mysql_select_db('filesharing',$conn) or die(mysql_error());</pre>
<pre>$username = 'admin';
$password = '!@Da&amp;dP8';</pre>
<pre>$sql = mysql_query("select entry_date from fs_users where username='$username'");
$result = mysql_fetch_object($sql);
$num_rows = count($proc_data);</pre>
<pre>if($num_rows &gt; 0) {
 $password = hash('sha512', md5($proc_data-&gt;entry_date . $password));
 $sql = mysql_query("select * from fs_users where username='$username' and password='$password'");
 $result = mysql_fetch_object($sql);
}</pre>
<div></div>
<div></div>
<div></div>
<div></div>

<p><a href="http://feedads.g.doubleclick.net/~a/aigItsW0iIfRzhNyFG18xCUGLg4/0/da"><img src="http://feedads.g.doubleclick.net/~a/aigItsW0iIfRzhNyFG18xCUGLg4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/aigItsW0iIfRzhNyFG18xCUGLg4/1/da"><img src="http://feedads.g.doubleclick.net/~a/aigItsW0iIfRzhNyFG18xCUGLg4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/agK0xIjQlPE" height="1" width="1"/>


title: APT Espionage
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/-2NxNYPAS1M/
author: z_edian
description:
<p style="text-align: justify;">I just finished preparing the basis for the presentation I will give at the 6th rootcon (#rootcon) conference in September 2012. The annual Philippe hacker and security conference taking place in Cebu asked me to present on the topic of &#8216;Espionage in Cybertopia: A Government&#8217;s Tale&#8217;. One day later, I discovered an awesome infographic from our friends from Trend Micro (https://blog.trendmicro.com/connecting-the-apt-dots-infographic) which helped me to resemble an interesting picture.</p>
<p style="text-align: justify;">While my presentation focuses on what the government or the public sector can do to increase its cyber resiliency, it also has to explain the groups and individuals (#stakeholders), name to tools (#scripts #programs), come up with a definition and all that buzz.</p>
<p style="text-align: justify;">Having spent some time digesting the reports about an espionage network targeting Tibetian political institutions (#ghostnet), I took it as a starting point for putting the tools used in cyber espionage on the slides. Things I came up with were backdoors, trojans but also social engineering as point of entry. What I realized only later, glancing at the infographic, was that all of that taken together can be addressed as advanced persistent threat (#apt). At that point I was not quiet sure about the social engineering component of conducted espionage. It struck me when I was reading &#8216;Zen and the Art of Information Security&#8217; by Winkler (#irawinkler): Social Engineering is part of penetration testing, though less technical and more physical.</p>
<p style="text-align: justify;">Taking all those components together, an APT consists of:</p>
<ol style="text-align: justify;">
<li>Intelligence Gathering,</li>
<li>Point of Entry,</li>
<li>Stealthily Gaining Control of the System,</li>
<li>Exfiltrate Date,</li>
<li>Cover Your Tracks,</li>
</ol>
<p style="text-align: justify;">whereas the first two steps heavily rely on social engineering.</p>
<p style="text-align: justify;">Ghostnet was &#8211; and parts of it still are (#shadownetwork) &#8211; working the same way. Two nuances might be added to the list above however: 1. backdoors were kept open and 2. all the compromised computers led to the same nodes, the command and control servers. If not one but several computer systems or even networks are targeted, these two points are also part of an APT.</p>
<p style="text-align: justify;">APT can therefore regarded as the most sophisticated cyber weapon in order to conduct cyber espionage, or in the correct terms: APT is the the digital dagger and the virtual cloak for cyber espionage.</p>
<p style="text-align: justify;"><em>P.S.: from a technical point of view, an APT might be or contain several characteristics which can make it a e.g. virus, trojan horse, backdoor or worm at the same time.</em></p>

<p><a href="http://feedads.g.doubleclick.net/~a/kGSr3J73vsncmO49r9MzjDLwJoc/0/da"><img src="http://feedads.g.doubleclick.net/~a/kGSr3J73vsncmO49r9MzjDLwJoc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/kGSr3J73vsncmO49r9MzjDLwJoc/1/da"><img src="http://feedads.g.doubleclick.net/~a/kGSr3J73vsncmO49r9MzjDLwJoc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/-2NxNYPAS1M" height="1" width="1"/>


title: (IN)SECURE Magazine (June 2012) Issue 34 is out! Download Now!
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/qEZPfUhlI4w/
author: shipcode
description:
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/issue-34.jpg"><img class="size-full wp-image-3767 aligncenter" title="Securing Android " src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/issue-34.jpg" alt="Securing Android " width="304" height="430" /></a></p>
<p style="text-align: justify;">Hey there Information Security enthusiasts, Hackers, and Penetration Testers. (IN)SECURE Magazine (June 2012) Issue 34 is out now and you can download it <a href="http://www.net-security.org/insecuremag.php">here</a> for free.</p>
<p style="text-align: justify;"><strong>What&#8217;s inside?</strong></p>
<ul>
<li>Fitness as a model for security</li>
<li>Security and migrating to the cloud: Is it all doom and gloom?</li>
<li>Solid state drives: Forensic preservation issues</li>
<li>Introduction to Android malware analysis</li>
<li>Hack in The Box Conference 2012 Amsterdam</li>
<li>ISO 27001 standard: Breaking the documentation myth with Dejan Kosutic</li>
<li>Preparing a breach response plan</li>
<li>Security beyond the operating system: Into the cloud and beyond</li>
<li>Amphion Forum 2012 Munich</li>
<li>The challenges of data recovery from modern storage systems</li>
<li>Two-factor authentication for the cloud: Does it have to be hard?</li>
</ul>

<p><a href="http://feedads.g.doubleclick.net/~a/YWCxXMta8aCG_fs9WzHf0ILt3y0/0/da"><img src="http://feedads.g.doubleclick.net/~a/YWCxXMta8aCG_fs9WzHf0ILt3y0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/YWCxXMta8aCG_fs9WzHf0ILt3y0/1/da"><img src="http://feedads.g.doubleclick.net/~a/YWCxXMta8aCG_fs9WzHf0ILt3y0/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/qEZPfUhlI4w" height="1" width="1"/>


title: Follow shipcode in PenTest Laboratory >
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/wNeUvhZSeyw/
author: shipcode
description:
<p style="text-align: center;"><a href="http://www.theprojectxblog.net/wp-content/uploads/2012/05/pentest_lab.jpg"><img class="size-full wp-image-3771 aligncenter" title="pentest_lab" src="http://www.theprojectxblog.net/wp-content/uploads/2012/05/pentest_lab.jpg" alt="pentest_lab" width="290" height="290" /></a></p>
<p style="text-align: justify;">As what you have noticed these days, I am not that active in this blog. And that is because of school works, part time jobs, and I&#8217;m currently the new Blog Manager of <a href="http://pentestlab.org/">PenTest Laboratory</a>. PenTest Laboratory is the on-line IT Security training portal from the creators of PenTest Magazine. In cooperation with Jeremy Faircloth, IT Security professional with 20 years of experience, author of Penetration Tester’s Open Source Toolkit 3rd Edition book, they created the unique portal to deliver the quality trainings for their customers and share free articles in their official blog. The form of their subscription-based courses allows the student to take out the maximum of the given information.</p>
<p style="text-align: justify;">But don&#8217;t worry I will not be leaving The ProjectX Blog. I will still try my best to contribute articles to the blog and that kapitanluffy, z_edian, impeldown, PamelaDrew and the others are still here so no need to worry. kapitanluffy is one of the founders of this blog so you can just contact or email him if you want to join the crew, for now I will be busy maintaining the PenTest Laboratory and of course linking back some of my original papers and articles here. <img src='http://www.theprojectxblog.net/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p style="text-align: justify;">See yah guys and follow me at PenTest Lab too!</p>
<p style="text-align: justify;"><strong>PenTest Laboratory Facebook</strong>: <a href="https://www.facebook.com/PenTestLab">https://www.facebook.com/PenTestLab</a></p>
<p style="text-align: justify;"><strong>PenTest Laboratory Twitter: </strong><a href="http://twitter.com/#!/PenTest_Lab">http://twitter.com/#!/PenTest_Lab</a></p>
<p style="text-align: justify;"><strong>PenTest Laboratory Blog: </strong><a href="http://pentestlab.org/category/blog/">http://pentestlab.org/category/blog/</a></p>
<p style="text-align: justify;"><strong>PenTest Magazine:</strong> <a href="http://pentestmag.com/">http://pentestmag.com/</a></p>

<p><a href="http://feedads.g.doubleclick.net/~a/qHK53DGz5zwLDaHT_OdoY_mrm7g/0/da"><img src="http://feedads.g.doubleclick.net/~a/qHK53DGz5zwLDaHT_OdoY_mrm7g/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/qHK53DGz5zwLDaHT_OdoY_mrm7g/1/da"><img src="http://feedads.g.doubleclick.net/~a/qHK53DGz5zwLDaHT_OdoY_mrm7g/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/wNeUvhZSeyw" height="1" width="1"/>


title: Stuxnet – America’s Olympic Games
source: http://feedproxy.google.com/~r/theprojectxblogz/~3/HCeSYvj9wbY/
author: z_edian
description:
<p style="text-align: justify;">Finally, we know it for sure &#8211; or better put: it is official now, Stuxnet has been developed and employed by the Americans. Any possible involvement of Israel, especially in employment phase still remains unclear as of now. Not that it really surprised anyone who spent some time digging into this and related topics but for public relation purposes and academia it does make a difference.</p>
<p style="text-align: justify;">It will be quiet difficult for our American friends now to deny involvement in the development and employment of other similar coded malware (#duqu #flame) which mae their ways thru the Internet as an advanced persistent threat (#apt). However, I guess no one will try to stick all apt out there to the Americans. Ghostnet would have been hell of a deception if the Americans amd not the Chinese would really have been behind it. Then again: we don&#8217;t know.</p>
<p style="text-align: justify;">After all the hype on this issue settled down, people will start discussing what implications can be and are being derived from the American ownership of Stuxnet. Was it an act of war or sabotage and therefore espionage? Will it be treated like espionage or like an act of war? If the latter, will the United Nations convene to decide if the United States attacked a sovereign state? We can not be sure about it and even if those things are decided on, it is not because the existing frameworks enable these decisions. Legal and political frameworks are still too blurred on this area. They don&#8217;t guide you through events such as Stuxnet. This is true for individual states, the United Nations and even the Nord Atlantic Treaty Organization (#nato). On 9/11 the NATO/US invoked article 5 of the NATO Treaty, thereby declaring that an act of war happened. Wasn&#8217;t it simply a terrorist plot? This was a conventional attack, just imagine in how much troublr you get looking for provisions which cover cyber attacks and definitions thereof &#8211; good luck. The discovery that Stuxnet has indeed been developed and carried out by a nation-state might give us empirical input to finally start working on fixing those gaping holes.</p>
<p style="text-align: justify;">On another note, it was argued that Stuxnet and the like will be the generation of precise weapons we need to get the job done in situations like now with Iran without escalation of the conflict. I don&#8217;t know with you but I can only laugh at this comment &#8211; for a variety of reasons. Firstly, if Iran had the capabilities to attack the US, it would certainly do so after this revelation, with good reason. For the US it is a better weapon because it does not produce so many pictures of dead children&#8217;s bodies and is more cost efficient. Smart bombs and superior air power could have accomplished the same. The public outcry was less, for now. Secondly. Just imagine the containment of this virus going haywire and it spreads to countries it shouldn&#8217;t. Or imagine the Iranians catching it, reverse engineering it and using it against the US or even worse, the US allies. It sucks if you weapon shuts down systems of your allies. You would have a lot of explaining to do. It could create some level of chaos, I don&#8217;t see any precision there. Thirdly, for now it is regarded as crime or espionage or a boy&#8217;s playground. Once Stuxnet would be considered as a cyber weapon and subsequently its use an act of war, good luck with that.</p>
<p style="text-align: justify;">Stuxnet was the beginning of an era of cyber weapons. Although the Americans did not want any arms race in cyberspace this is what they have just done. Logic bombs and APTs will be the weapons to focus on if you want to be a major player in the cyber domain. Beware of the beginnings&#8230;.</p>

<p><a href="http://feedads.g.doubleclick.net/~a/jG6fw73HmCFh7jBUs3q_RavhpHI/0/da"><img src="http://feedads.g.doubleclick.net/~a/jG6fw73HmCFh7jBUs3q_RavhpHI/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/jG6fw73HmCFh7jBUs3q_RavhpHI/1/da"><img src="http://feedads.g.doubleclick.net/~a/jG6fw73HmCFh7jBUs3q_RavhpHI/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/theprojectxblogz/~4/HCeSYvj9wbY" height="1" width="1"/>


title: How to Set up your Pen Testing / Ethical Hacking Lab with a single Computer ?
author: noreply@blogger.com (BreakTheSec)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/vP3VfXggHao/how-to-set-up-your-pen-testing-ethical.html

description:
Hi BTS readers,  We have provide you plenty of Ethical hacking and Pentesting tutorial, still more article is going to come.  Meanwhile, i like to teach you how to set up your own Pen Testing/ hacking network Lab.

Use of your own Pen Testing Lab:
Free, free ,free..! It's free lab, because it is yours..
Only one system is enough
can Practice your pentesting/hacking skills 
can install any kind of
<p><a href="http://feedads.g.doubleclick.net/~a/OONDwlHC5ZHPIGmCKMIIzfEMd24/0/da"><img src="http://feedads.g.doubleclick.net/~a/OONDwlHC5ZHPIGmCKMIIzfEMd24/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/OONDwlHC5ZHPIGmCKMIIzfEMd24/1/da"><img src="http://feedads.g.doubleclick.net/~a/OONDwlHC5ZHPIGmCKMIIzfEMd24/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/vP3VfXggHao" height="1" width="1"/>


title: Free Unlimited 3G Internet hack for BSNL
author: noreply@blogger.com (BreakTheSec)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/tGkjgRm4RJ4/free-unlimited-3g-internet-hack-for.html

description:
We have removed the post as it is not working.. Sorry for posting the trick without verifying it...
<p><a href="http://feedads.g.doubleclick.net/~a/nzj7AEDiiaiMvIeLHUvRs_BBgYY/0/da"><img src="http://feedads.g.doubleclick.net/~a/nzj7AEDiiaiMvIeLHUvRs_BBgYY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/nzj7AEDiiaiMvIeLHUvRs_BBgYY/1/da"><img src="http://feedads.g.doubleclick.net/~a/nzj7AEDiiaiMvIeLHUvRs_BBgYY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/tGkjgRm4RJ4" height="1" width="1"/>


title: BTS got Page rank 4 and EHN got Page rank 3
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/xXO7bO7Zg_k/bts-got-page-rank-4-and-ehn-got-page.html

description:
Yahoo...!!  We are happy to announce this update. Our page rank is upgraded. 

BreakTheSecurity got page rank 4 and eHackingNews got page rank 3.
  
We got success because of your support..! 
Thank you BTS and EHN readers...!  

What's next? Let's move to the next level. 
<p><a href="http://feedads.g.doubleclick.net/~a/gfs3fKLQDcwd7Tg869uBNM7pI3I/0/da"><img src="http://feedads.g.doubleclick.net/~a/gfs3fKLQDcwd7Tg869uBNM7pI3I/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/gfs3fKLQDcwd7Tg869uBNM7pI3I/1/da"><img src="http://feedads.g.doubleclick.net/~a/gfs3fKLQDcwd7Tg869uBNM7pI3I/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/xXO7bO7Zg_k" height="1" width="1"/>


title: Complete Cross site Scripting(XSS) cheat sheets : Part 1
author: noreply@blogger.com (BreakTheSec)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/m4_HEB2RTDg/complete-cross-site-scriptingxss-cheat.html

description:
We are producing this XSS Cheat sheet after collecting the codes from hackers' techniques and different sites especially http://ha.ckers.org/xss.html .  This is complete list of XSS cheat codes which will help you to test xss vulnerabilities ,useful for bypassing the filters.  If you have any different cheat codes , please send your code.

Basic XSS codes:
----------------------------------
&lt;
<p><a href="http://feedads.g.doubleclick.net/~a/qRnBGW3fIJVKP3cBeoPkwFBLEmA/0/da"><img src="http://feedads.g.doubleclick.net/~a/qRnBGW3fIJVKP3cBeoPkwFBLEmA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/qRnBGW3fIJVKP3cBeoPkwFBLEmA/1/da"><img src="http://feedads.g.doubleclick.net/~a/qRnBGW3fIJVKP3cBeoPkwFBLEmA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/m4_HEB2RTDg" height="1" width="1"/>


title: Google dork "Index of /sh3llZ" allows you to find shell uploaded by hackers
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/zagawZwPhY8/google-dork-index-of-sh3llz-allows-you.html

description:
Usually hackers upload shell to victim's site using the vulnerability in that website. Shell allows hackers to hack/deface the website. Sometimes hackers left the shell in the vulnerable sites.  Here is simple google search allows you to find a shell uploaded by hackers. 

Use one of the following google dork to find the shell:
intitle:index of/sh3llZ
"Index of /sh3llZ"
"/sh3llZ/uploadshell/
<p><a href="http://feedads.g.doubleclick.net/~a/h6FYhOIdNKT4Rxff3XkuDpVQirQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/h6FYhOIdNKT4Rxff3XkuDpVQirQ/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/h6FYhOIdNKT4Rxff3XkuDpVQirQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/h6FYhOIdNKT4Rxff3XkuDpVQirQ/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/zagawZwPhY8" height="1" width="1"/>


title: BTS contest : Win Two * 1 year License key of Bitdefender Total Security 2012
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/xafYEnqhDNE/bts-contest-win-two-1-year-license-key.html

description:
Launching the best platform for my followers to promote you next level. It is the time we are learning the social surroundings  on a quest. much more exciting forms on further level here on.

a tie up contest for my followers from Bitdefender anti virus for the best of individuals.Every person on urge to win and eager to practice are encouraged.

Of course, you are interested to hear the
<p><a href="http://feedads.g.doubleclick.net/~a/M5UGBF0nfuUTWvhdi_tW_K6MSss/0/da"><img src="http://feedads.g.doubleclick.net/~a/M5UGBF0nfuUTWvhdi_tW_K6MSss/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/M5UGBF0nfuUTWvhdi_tW_K6MSss/1/da"><img src="http://feedads.g.doubleclick.net/~a/M5UGBF0nfuUTWvhdi_tW_K6MSss/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/xafYEnqhDNE" height="1" width="1"/>


title: How to hack a websites using Symlink Bypassing?
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/mSWCHRkES4A/how-to-hack-websites-using-symlink.html

description:
Symlink Bypassing:Symlink is a method to reference other files and folder on Linux, in order to make linux work faster.  Symlink Bypassing is a hacking technique used to gain unauthorized access to folders on a server. Using this technique an hackers are able to hack multiple sites on a shared web hosting service.

Here is Video tutorial that explain how to hack a website using Symlink Bypassing
<p><a href="http://feedads.g.doubleclick.net/~a/pHjs92G2kovAU1sz8xqfG7Bbrx4/0/da"><img src="http://feedads.g.doubleclick.net/~a/pHjs92G2kovAU1sz8xqfG7Bbrx4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/pHjs92G2kovAU1sz8xqfG7Bbrx4/1/da"><img src="http://feedads.g.doubleclick.net/~a/pHjs92G2kovAU1sz8xqfG7Bbrx4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/mSWCHRkES4A" height="1" width="1"/>


title: XSS attacks practical examples ~ Cross site Scripting Exploits
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/9lU3-uO7jSU/xss-attacks-practical-examples-cross.html

description:
Hello BTS readers,  So far i explained about XSS attacks and risks of this vulnerability; also i have provided guide to setup your own pentesting lab(using dvwa) to practice XSS attacks.

Dvwa is limited to few xss methods.  You may curious to know more about the practical examples for the XSS attacks. eHackingNews will help you to know more about the latest XSS attacks.

The XSS Vulnerability
<p><a href="http://feedads.g.doubleclick.net/~a/yUA_j3gWqaxaofV4Jp9Do7wnq-M/0/da"><img src="http://feedads.g.doubleclick.net/~a/yUA_j3gWqaxaofV4Jp9Do7wnq-M/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/yUA_j3gWqaxaofV4Jp9Do7wnq-M/1/da"><img src="http://feedads.g.doubleclick.net/~a/yUA_j3gWqaxaofV4Jp9Do7wnq-M/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/9lU3-uO7jSU" height="1" width="1"/>


title: List of High Page rank Dofollow Blogs collected by BTS ~ SEO Tricks,March 2012
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/BMSIEiIVpp4/list-of-high-page-rank-dofollow-blogs.html

description:
Hi blogger friends, are you searching for dofollow blogs to get backlinks?  Here is list of dofollow blogs collected by me.  Verified all blogs manually; They are 100% dofollow blogs. 

Please don't post spam comments;  verified by me

==================
List of  dofollow blogs(verified):==================
Pagerank 5 Blog:
http://w3blog.dk/
http://blondish.net/

PR 4:

http://
<p><a href="http://feedads.g.doubleclick.net/~a/_LeeGRcyG55zQ6YVLMPXvIOOll4/0/da"><img src="http://feedads.g.doubleclick.net/~a/_LeeGRcyG55zQ6YVLMPXvIOOll4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/_LeeGRcyG55zQ6YVLMPXvIOOll4/1/da"><img src="http://feedads.g.doubleclick.net/~a/_LeeGRcyG55zQ6YVLMPXvIOOll4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/BMSIEiIVpp4" height="1" width="1"/>


title: How to Bypass Two-Step Authentication in Facebook?
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/bIeIks1GQ6A/how-to-bypass-two-step-authentication.html

description:
A security researcher Christopher Lowson, has found a way to bypass the security feature called Two-Factor authentication.  If you login from unknown devices, Facebook will launch the Two-step authentication and asks users to enter code which is send to your phone. 

When Lowson try to login into Facebook , the Facebook asked him enter Login approvals code. As he faced some inconvenience in
<p><a href="http://feedads.g.doubleclick.net/~a/WNehdL8IUQbQdo9LRbJZuzijROw/0/da"><img src="http://feedads.g.doubleclick.net/~a/WNehdL8IUQbQdo9LRbJZuzijROw/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/WNehdL8IUQbQdo9LRbJZuzijROw/1/da"><img src="http://feedads.g.doubleclick.net/~a/WNehdL8IUQbQdo9LRbJZuzijROw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/bIeIks1GQ6A" height="1" width="1"/>


title: How to do Sql injection attack with Back Track 5 using sqlmap? [Hacking video Tutorials]
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/4UoDQeY_xEA/how-to-do-sql-injection-attack-with.html

description:
Hello BTS readers, here is PenTesting video tutorial that explains how to do SQL injection with Backtrack5 using Sqlmap tool. This tutorial is submitted by Anonymous Nepal.
<p><a href="http://feedads.g.doubleclick.net/~a/kCBo_hbgYotMGo7iIgtQPT6i4QY/0/da"><img src="http://feedads.g.doubleclick.net/~a/kCBo_hbgYotMGo7iIgtQPT6i4QY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/kCBo_hbgYotMGo7iIgtQPT6i4QY/1/da"><img src="http://feedads.g.doubleclick.net/~a/kCBo_hbgYotMGo7iIgtQPT6i4QY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/4UoDQeY_xEA" height="1" width="1"/>


title: How to Fetch Username and Password by Social Engineering Technologies?
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/6xp3cj0WSSY/how-to-fetch-username-and-password-by.html

description:
Security Researcher Ankit Sharma,from God of hackers group(GOH) presented a video tutorial which explains how to do social engineering attacks using Backtrack.

Social engineering is commonly understood to mean the art of manipulating people into performing actions or divulging confidential information. While it is similar to a confidence trick or simple fraud, the term typically applies to
<p><a href="http://feedads.g.doubleclick.net/~a/kMjs15lQRpT1grrgs_VRX0q4k8s/0/da"><img src="http://feedads.g.doubleclick.net/~a/kMjs15lQRpT1grrgs_VRX0q4k8s/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/kMjs15lQRpT1grrgs_VRX0q4k8s/1/da"><img src="http://feedads.g.doubleclick.net/~a/kMjs15lQRpT1grrgs_VRX0q4k8s/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/6xp3cj0WSSY" height="1" width="1"/>


title: 11 Year old Indian(Tamil) Girl Vishalini has highest IQ in the world
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/yqZkWumSWuo/11-year-old-indiantamil-girl-vishalini.html

description:
This post is nothing to do with our hacking topics. But this post will be interesting for you.  

K. Vishalini, Tirunelveli, TamilNadu, 11-year old girl ,has highest IQ in the World. She will be eligible for an entry in the Guinness only after she turns 14.

Her amazing Achievements:


 Vishalini’s IQ is around 225. It is higher than that of the Guinness record holder, Kim Ung-Yong, whose IQ
<p><a href="http://feedads.g.doubleclick.net/~a/t4NkQOYAHVKoWYZL4B9AA3CmHuE/0/da"><img src="http://feedads.g.doubleclick.net/~a/t4NkQOYAHVKoWYZL4B9AA3CmHuE/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/t4NkQOYAHVKoWYZL4B9AA3CmHuE/1/da"><img src="http://feedads.g.doubleclick.net/~a/t4NkQOYAHVKoWYZL4B9AA3CmHuE/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/yqZkWumSWuo" height="1" width="1"/>


title: How To Find SomeOne Else IP Address ? - Hacking Video Tutorial
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/vbkY4K9HmQk/how-to-find-someone-else-ip-address.html

description:
<p><a href="http://feedads.g.doubleclick.net/~a/jfzRZdJtOnbuSPWQYwCKA-x8x3g/0/da"><img src="http://feedads.g.doubleclick.net/~a/jfzRZdJtOnbuSPWQYwCKA-x8x3g/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/jfzRZdJtOnbuSPWQYwCKA-x8x3g/1/da"><img src="http://feedads.g.doubleclick.net/~a/jfzRZdJtOnbuSPWQYwCKA-x8x3g/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/vbkY4K9HmQk" height="1" width="1"/>


title: The Art of Human Hacking -Social Engineering(SE) tutorial series
source: http://feedproxy.google.com/~r/BreakTheSecurity/~3/_TKZgZktK2w/art-of-human-hacking-social.html
author: noreply@blogger.com (EHN Reporter)
description:
Hello BTS readers, here we come with an interesting tutorial written by my friend Mr.Ashish Mistry who is the founder of Hcon and author of 'HconSTF ' project.


Hello all,

after a long time I am again started writing, In a hope that my believe in “sharing the spirit of learning” fulfills well. So from today I am going to write series of tutorials on my favorite topic, 'Social Engineering' (SE)
<p><a href="http://feedads.g.doubleclick.net/~a/U8ZX0oOMWmAejiF1c6MG4V7nlwY/0/da"><img src="http://feedads.g.doubleclick.net/~a/U8ZX0oOMWmAejiF1c6MG4V7nlwY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/U8ZX0oOMWmAejiF1c6MG4V7nlwY/1/da"><img src="http://feedads.g.doubleclick.net/~a/U8ZX0oOMWmAejiF1c6MG4V7nlwY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/_TKZgZktK2w" height="1" width="1"/>


title: List of websites to check whether website is safe to use or not
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/tNtbguDfT3s/list-of-websites-to-check-whether.html

description:
In one of my posts, i explained how to check a website is safe or not using McAfee siteAdvisor add on.  But ,checking with one site is not enough.  To make sure whether site is free from malware or not, we have to verify the target-link with few more sites.

Here ,i list out some websites that helpful to identify whether site is safe or not :

1.MyWot:WOT is a community-based, free safe surfing
<p><a href="http://feedads.g.doubleclick.net/~a/1uZANngy-yCXNFNlj1IzRc38-ls/0/da"><img src="http://feedads.g.doubleclick.net/~a/1uZANngy-yCXNFNlj1IzRc38-ls/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/1uZANngy-yCXNFNlj1IzRc38-ls/1/da"><img src="http://feedads.g.doubleclick.net/~a/1uZANngy-yCXNFNlj1IzRc38-ls/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/tNtbguDfT3s" height="1" width="1"/>


title: Ravan , JavaScript based Distributed Password cracking
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/ELhO4m958Fo/ravan-javascript-based-distributed.html

description:
You want to crack a hash but your system speed is low?! No need to worry..! Here is solution for you , "Distributed Password Cracking". Let me introduce a new tool called "Ravan" developed by LavaKumar.
About Ravan:Ravan is a JavaScript based Distributed Computing system that can perform brute force attacks on salted hashes by distributing the task across several browsers. It makes use of HTML5
<p><a href="http://feedads.g.doubleclick.net/~a/PXSOeY-0H_dJ3a7NymFscvWwhsY/0/da"><img src="http://feedads.g.doubleclick.net/~a/PXSOeY-0H_dJ3a7NymFscvWwhsY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/PXSOeY-0H_dJ3a7NymFscvWwhsY/1/da"><img src="http://feedads.g.doubleclick.net/~a/PXSOeY-0H_dJ3a7NymFscvWwhsY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/ELhO4m958Fo" height="1" width="1"/>


title: How to Use Ravan for Password Cracking?
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/5SmPOd54170/how-to-use-ravan-for-password-cracking.html

description:
In my previous article, i explained about the Ravan Tool.  Now let us see how to use the Ravan for cracking passwords.


Requriments:Lot of Friends :Ravan is Distributed password cracking method.  So you will need lot of friends who have Pc with Internet connection. The speed of cracking will increase based on the number of pc contribute in the cracking.

How to use Ravan?Step1:
Go to http://
<p><a href="http://feedads.g.doubleclick.net/~a/zeRBjsomRfJUrwsE1v-wcfrsJZU/0/da"><img src="http://feedads.g.doubleclick.net/~a/zeRBjsomRfJUrwsE1v-wcfrsJZU/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/zeRBjsomRfJUrwsE1v-wcfrsJZU/1/da"><img src="http://feedads.g.doubleclick.net/~a/zeRBjsomRfJUrwsE1v-wcfrsJZU/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/5SmPOd54170" height="1" width="1"/>


title: DOM Based Cross Site Scripting(XSS) vulnerability Tutorial
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/qDuN6Bbkeo4/dom-based-cross-site-scriptingxss.html

description:
So far i have explained about the Traditional Cross site scripting that occurs because of insecure server-side code. In this post , i am going to explain the DOM Based Cross Site Scripting vulnerability. if you don't what cross site scripting is, then i recommend you to read the basics from here.

Before explaining about the DOM based xss, let me explain what DOM is. 


What is DOM?
DOM is
<p><a href="http://feedads.g.doubleclick.net/~a/d2VBSvhFnnnUWKCYT_WRbt7cKx4/0/da"><img src="http://feedads.g.doubleclick.net/~a/d2VBSvhFnnnUWKCYT_WRbt7cKx4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/d2VBSvhFnnnUWKCYT_WRbt7cKx4/1/da"><img src="http://feedads.g.doubleclick.net/~a/d2VBSvhFnnnUWKCYT_WRbt7cKx4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/qDuN6Bbkeo4" height="1" width="1"/>


title: Download Hash Code Verifier v1.0 : A tool to verify the File Integrity
author: noreply@blogger.com (EHN Reporter)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/FhSsiTrFq0Y/download-hash-code-verifier-v10-tool-to.html

description:
Hello BTS Readers,
we are happy to announce that we have released our second security tool 'Hash Code Verifier'.  Hash Code Verifier is a Cross-platform application to verify the Integrity of your download files. Hash Code verifier can be very useful if you want to check if a downloaded file is original and not corrupted or modified by hackers. 

In order prevent users from such problem,
<p><a href="http://feedads.g.doubleclick.net/~a/fVRTRygTrSsx7VHnOENQivEgFgQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/fVRTRygTrSsx7VHnOENQivEgFgQ/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/fVRTRygTrSsx7VHnOENQivEgFgQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/fVRTRygTrSsx7VHnOENQivEgFgQ/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/FhSsiTrFq0Y" height="1" width="1"/>


title: List of Best Ethical Hacking / Penetration Testing Tools
source: http://feedproxy.google.com/~r/BreakTheSecurity/~3/l3c7yPiNrfY/list-of-best-ethical-hacking.html
author: noreply@blogger.com (EHN Reporter)
description:
Here is list of useful and Best Software tools that helpful in Ethical Hacking and Penetration Testing, Forensics ...


MetaSploit :

Metsploit is a very Powerful PenTesting Tool . Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. The Metasploit Project is also well known for anti-forensic and evasion tools, some of which are built into
<p><a href="http://feedads.g.doubleclick.net/~a/fRH3v7LjCfxdLGXIdZH7m689DwM/0/da"><img src="http://feedads.g.doubleclick.net/~a/fRH3v7LjCfxdLGXIdZH7m689DwM/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/fRH3v7LjCfxdLGXIdZH7m689DwM/1/da"><img src="http://feedads.g.doubleclick.net/~a/fRH3v7LjCfxdLGXIdZH7m689DwM/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/l3c7yPiNrfY" height="1" width="1"/>


title: How to hack remote computer using Metasploit? Exploiting Java vulnerability CVE-2012-0507
author: noreply@blogger.com (BreakTheSec)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/OGXmMhVH77g/how-to-hack-remote-computer-using.html

description:
Whenever someone say PenTesting tool, the first thing come in our mind is MetaSploit .  Today, i am going to demonstrate how to use the Metasploit tool to exploit the popular java AtomicReferenceArray Type Violation vulnerability(CVE-2012-0507).
About MetaSploit:Metsploit is a very Powerful PenTesting Tool . Metasploit Framework, a tool for developing and executing exploit code against a remote
<p><a href="http://feedads.g.doubleclick.net/~a/G6q_EZDN8XLJggy6cHAKwgjyVmc/0/da"><img src="http://feedads.g.doubleclick.net/~a/G6q_EZDN8XLJggy6cHAKwgjyVmc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/G6q_EZDN8XLJggy6cHAKwgjyVmc/1/da"><img src="http://feedads.g.doubleclick.net/~a/G6q_EZDN8XLJggy6cHAKwgjyVmc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/OGXmMhVH77g" height="1" width="1"/>


title: Hacking Windows 7 & Xp with Fake Firefox add-on (XPI) : Metasploit Tutorials
author: noreply@blogger.com (BreakTheSec)
source:
http://feedproxy.google.com/~r/BreakTheSecurity/~3/Et00Yke1sGQ/hacking-windows-7-xp-with-fake-firefox.html

description:
Hello BTS readers, i believe you enjoyed my last tutorial ( Java AtomicReferenceArray type violation vulnerability and exploiting ).  So here is second tutorial for you ! In this tutorial i am going to explain how to hack any windows machine(xp,7) with the help of Metasploit.

Unlike last tutorial, we are not going to exploit any kind of vulnerabilities. We are going to use Social Engineering
<p><a href="http://feedads.g.doubleclick.net/~a/e6CXZlZUI-GsnfQg9MyyW3V9Mw0/0/da"><img src="http://feedads.g.doubleclick.net/~a/e6CXZlZUI-GsnfQg9MyyW3V9Mw0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/e6CXZlZUI-GsnfQg9MyyW3V9Mw0/1/da"><img src="http://feedads.g.doubleclick.net/~a/e6CXZlZUI-GsnfQg9MyyW3V9Mw0/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/Et00Yke1sGQ" height="1" width="1"/>


title: [VIDEO Tutorial] Exploiting Java AtomicReferenceArray Type violation vulnerability
source: http://feedproxy.google.com/~r/BreakTheSecurity/~3/WYjj7oU3cTw/video-tutorial-exploiting-java.html
author: noreply@blogger.com (BreakTheSec)
description:
The Text+Image version of this video is available here:
Exploiting Java vulnerability
<p><a href="http://feedads.g.doubleclick.net/~a/JOP2T3kE5aVge2ppeu7_qXJDFW4/0/da"><img src="http://feedads.g.doubleclick.net/~a/JOP2T3kE5aVge2ppeu7_qXJDFW4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/JOP2T3kE5aVge2ppeu7_qXJDFW4/1/da"><img src="http://feedads.g.doubleclick.net/~a/JOP2T3kE5aVge2ppeu7_qXJDFW4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/WYjj7oU3cTw" height="1" width="1"/>


title: Hash Code verifier v1.1 released - Generate Hash for multiple files
source: http://feedproxy.google.com/~r/BreakTheSecurity/~3/khU_7fbWO_U/hash-code-verifier-v11-released.html
author: noreply@blogger.com (BreakTheSec)
description:
Hello BTS readers, we have update our File Integrity verifying tool "Hash Code Verifier".  The new version 1.1 is available to download.

Changelog:
-----------------------
recursive directory traversal: Generate hash for all files in the given folder
 Clear Table Bug fixed
 Singl File comparing issue Fixed
 Right-Click copy menu
 null file creation fixed
 Hide/Show Columns options
User interface
<p><a href="http://feedads.g.doubleclick.net/~a/Q6OtG3iIMPwDrA8KmSPdDb8mDzA/0/da"><img src="http://feedads.g.doubleclick.net/~a/Q6OtG3iIMPwDrA8KmSPdDb8mDzA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Q6OtG3iIMPwDrA8KmSPdDb8mDzA/1/da"><img src="http://feedads.g.doubleclick.net/~a/Q6OtG3iIMPwDrA8KmSPdDb8mDzA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/BreakTheSecurity/~4/khU_7fbWO_U" height="1" width="1"/>


title: Jabber-SH — SH console via XMPP/Jabber (GTalk)
source: http://feedproxy.google.com/~r/EggsOnBread/~3/ob7NkayVpSY/
author: Philippe Creux
description:
<p><img class="alignnone size-full wp-image-38" style="border: 0pt none;" title="Screenshot-Jabber-SH on GTalk" src="http://eggsonbread.com/wp-content/uploads/2009/07/Screenshot-Jabber-SSH.png" alt="Screenshot-Jabber-SH on GTalk" width="385" height="343" /></p>
<p>I&#8217;ve just posted the <a title="Jabber-SH code" href="http://gist.github.com/258561">code of Jabber-SH</a> on GitHub. Jabber-SH is a ruby hack that allows you to administrate a remote computer via a command line through a Jabber client. It’s like SSH via GoogleTalk! :)</p>
<p>I coded it nine month ago then I planned to add some specs, to store the configuration in a yaml file, to make a gem out of it but&#8230; I didn&#8217;t and I won&#8217;t get a chance to do that. So <a href="http://gist.github.com/258561">here are</a> the 25 lines of code&#8230; hackish eh?!</p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Jabber-SH+%E2%80%94+SH+console+via+XMPP%2FJabber+%28GTalk%29+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D197" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/ob7NkayVpSY" height="1" width="1"/>


title: Move your Ubuntu system to another computer in 3 simple steps
source: http://feedproxy.google.com/~r/EggsOnBread/~3/_MgWI_--ULw/
author: Philippe Creux
description:
<p>You just got a brand new machine but you won&#8217;t like to spend hours tuning it to get the same configuration as the one you have used for years?</p>
<p>Let&#8217;s transfer your Ubuntu configuration and applications to your new computer in three simple steps.</p>
<p>This method is cross-architecture. I moved successfully my configuration and applications from an Ubuntu 9.04 32bit to a 64bit one.</p>
<h2>Prerequisites:</h2>
<p>The same version of Ubuntu is installed on both machines. The architecture (32/64 bit) can be different.</p>
<h2>Step 1: Store the list of installed packages</h2>
<p>Run the following command on the source machine to store the installed packages names in <code>~/pkglist</code>:<br />
<code>sudo dpkg --get-selections | sed "s/.*deinstall//" | sed "s/install$//g" &gt; ~/pkglist</code></p>
<h2>Step 2: Transfer your config</h2>
<p>Use <code>scp</code> or <code>rsync</code> or even a flash drive to transfer your home directory (<code>~/*</code>, <code>~/.*</code>), the source list (<code>/etc/apt/sources.list</code>) and any other files you customized or installed (like apache config under <code>/etc</code> or softwares on <code>/opt</code>) from the source machine to the target one.</p>
<h2>Step 3: Install packages</h2>
<p>On the target machine run the following command in a failsafe terminal session to install your packages:</p>
<p><code>sudo aptitude update &amp;&amp; cat pkglist | xargs sudo aptitude install -y</code></p>
<p>That&#8217;s all folks!</p>
<p>Log into your new machine and keep working as if you were using the previous one.</p>
<p><img class="alignnone size-full wp-image-207" title="clone-ubuntu" src="http://eggsonbread.com/wp-content/uploads/2010/01/clone-ubuntu.jpg" alt="A freshly transfered Ubuntu install" width="480" height="228" /></p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Move+your+Ubuntu+system+to+another+computer+in+3+simple+steps+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D205" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/_MgWI_--ULw" height="1" width="1"/>


title: Migrate Rubygems to Ruby Enterprise Edition (REE)
source: http://feedproxy.google.com/~r/EggsOnBread/~3/FT_nzj-_lHA/
author: Philippe Creux
description:
<p>If you have a server running the default Ruby interpreter (&#8220;Matz&#8217;s Ruby Interpreter&#8221; or &#8220;Ruby MRI&#8221;) and you want to switch to <a href="http://www.rubyenterpriseedition.com/">Ruby Enterprise Edition</a> (REE) the following script will help you migrating the gems.</p>
<p>Once you have installed Ruby Enterprise Edition run this script so that REE installs the gems installed on your default ruby environment.</p>
<p><script src="http://gist.github.com/303038.js?file=migrate_rubygems_to_ruby_enterprise_edition.rb"></script></p>
<p>That&#8217;s all folks!</p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Migrate+Rubygems+to+Ruby+Enterprise+Edition+%28REE%29+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D222" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/FT_nzj-_lHA" height="1" width="1"/>


title: (My) RSpec best practices and tips
source: http://feedproxy.google.com/~r/EggsOnBread/~3/51jzTwhOZak/
author: Philippe Creux
description:
<p>After a year using RSpec, I&#8217;m happy to share &#8220;(My) RSpec Best Practices and Tips&#8221;. Let&#8217;s make your specs easier to maintain, less verbose, more structured and covering more cases!</p>
<h2>Use shortcuts <em>specify {}</em>, <em>it {}</em> and <em>subject {}</em></h2>
<p>You think RSpec is verbose? In case your code doesn&#8217;t need any description, use a <em>specify block</em>!</p>
<pre class="brush: ruby; class-name: bad; title: ; notranslate">
it &quot;should be valid&quot; do
  @user.should be_valid
end
</pre>
<p>can be replaced with</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
specify { @user.should be_valid }
</pre>
<p>RSpec will generate a nice description text for you when running this expectation. Even better, you can use the <em>it block</em>!</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
describe User do
  it { should validate_presence_of :name }
  it { should have_one :address }
end
</pre>
<p>In case the subject is the not the class described, just set it with the <em>subject</em> method:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
subject { @user.address }
it { should be_valid }
</pre>
<h2>Start context with &#8216;when&#8217;/'with&#8217; and methods description with &#8216;#&#8217;</h2>
<p>Have you ever get a failed test with an incomprehensible error message like: </p>
<pre class="brush: plain; class-name: bad; title: ; notranslate">User non confirmed confirm email wrong token should not be valid</pre>
<p>Start your <em>contexts</em> with <em>when</em> and get nice messages like: </p>
<pre class="brush: plain; class-name: good; title: ; notranslate">User when non confirmed when #confirm_email with wrong token should not be valid</pre>
<h2>Use RSpec matchers to get meaningful messages</h2>
<p>In case of failure</p>
<pre class="brush: ruby; class-name: bad; title: ; notranslate">
specify { user.valid?.should == true }
</pre>
<p> displays:</p>
<pre class="brush: plain; class-name: bad; title: ; notranslate">
'User should == true' FAILED
  expected: true,
  got: false (using ==)
</pre>
<p>While </p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
specify { user.should be_valid }
</pre>
<p>displays:</p>
<pre class="brush: plain; class-name: good; title: ; notranslate">
'User should be valid' FAILED
  expected valid? to return true, got false
</pre>
<p>Nice eh?</p>
<h2>Only one expectation per <em>it block</em></h2>
<p>I often see specs where it blocks contain several expectations. This makes your tests harder to read and maintain.</p>
<p>So instead of that&#8230;</p>
<pre class="brush: ruby; class-name: bad; title: ; notranslate">
describe DemoMan do
  it &quot;should have expected attributes&quot; do
    demo_man = DemoMan.new
    demo_man.should respond_to :name
    demo_man.should respond_to :gender
    demo_man.should respond_to :age
  end
end
</pre>
<p>&#8230; do this:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
describe DemoMan do
  before(:all) do
    @demo_man = DemoMan.new
  end

  subject { @demo_man }

  it { should respond_to :name   }
  it { should respond_to :gender }
  it { should respond_to :age    }
end
</pre>
<h2>(Over)use describe and context</h2>
<p>Big specs can be a joy to play with as long as they are ordered and DRY. Use nested <em>describe</em> and <em>context</em> blocks as much as you can, each level adding its own specificity in the before block.<br />
To check your specs are well organized, run them in &#8216;nested&#8217; mode (<code>spec spec/my_spec.rb -cf nested</code>).<br />
Using <code>before(:each)</code> in each context and describe blocks will help you set up the environment without repeating yourself. It also enables you to use <em>it {}</em> blocks.</p>
<h3>Bad:</h3>
<pre class="brush: ruby; class-name: bad; title: ; notranslate">
describe User do

  it &quot;should save when name is not empty&quot; do
    User.new(:name =&gt; 'Alex').save.should == true
  end

  it &quot;should not save when name is empty&quot; do
    User.new.save.should == false
  end

  it &quot;should not be valid when name is empty&quot; do
    User.new.should_not be_valid
  end

  it &quot;should be valid when name is not empty&quot; do
    User.new(:name =&gt; 'Alex').should be_valid
  end

  it &quot;should give the user a flower when gender is W&quot; do
    User.new(:gender =&gt; 'W').present.should be_a Flower
  end

  it &quot;should give the user a iMac when gender is M&quot; do
    User.new(:gender =&gt; 'M').present.should be_an IMac
  end
end
</pre>
<h3>Good:</h3>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
describe User do
  before { @user = User.new }

  subject { @user }

  context &quot;when name empty&quot; do
    it { should not be_valid }
    specify { @user.save.should == false }
  end

  context &quot;when name not empty&quot; do
    before { @user.name = 'Sam' }

    it { should be_valid }
    specify { @user.save.should == true }
  end

  describe :present do
    subject { @user.present }

    context &quot;when user is a W&quot; do
      before { @user.gender = 'W' }

      it { should be_a Flower }
    end

    context &quot;when user is a M&quot; do
      before { @user.gender = 'M' }

      it { should be_an IMac }
    end
  end
end
</pre>
<h2>Test Valid, Edge and Invalid cases</h2>
<p>This is called <em>Boundary value analysis</em>, it&#8217;s simple and it will help you to cover the most important cases. Just split-up method&#8217;s input or object&#8217;s attributes into valid and invalid partitions and test both of them and there boundaries. A method specification might look like that:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
describe &quot;#month_in_english(month_id)&quot; do
  context &quot;when valid&quot; do
    it &quot;should return 'January' for 1&quot; # lower boundary
    it &quot;should return 'March' for 3&quot;
    it &quot;should return 'December' for 12&quot; # upper boundary
  context &quot;when invalid&quot; do
    it &quot;should return nil for 0&quot;
    it &quot;should return nil for 13&quot;
  end
end
</pre>
<p>I hope this will help you improve your specs. Let me know if I missed anything! :)</p>
<p>You could also be interested in <a href="http://eggsonbread.com/2010/09/06/my-cucumber-best-practices-and-tips/">(My) Cucumber best practices and tips</a> or <a href="https://github.com/pcreux/rspec-set">rspec-set</a> a little gem that helps you speeding up your model specs.</p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=%28My%29+RSpec+best+practices+and+tips+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D227" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/51jzTwhOZak" height="1" width="1"/>


title: Get script/runner back in Rails 3
source: http://feedproxy.google.com/~r/EggsOnBread/~3/5MyDDyhTGZE/
author: Philippe Creux
description:
<p>EngineYard&#8217;s chef recipe for DelayedJob requires <code>script/runner</code>. To use this recipe with Rails 3 I&#8217;ve just made <code>script/runner</code> for Rails 3. Here is the code:</p>
<p><script src="http://gist.github.com/407026.js?file=runner"></script></p>
<p>Edit: Fix for rails 3.0</p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Get+script%2Frunner+back+in+Rails+3+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D278" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/5MyDDyhTGZE" height="1" width="1"/>


title: Speed up RSpec with set()
source: http://feedproxy.google.com/~r/EggsOnBread/~3/WUEjNWkNB68/
author: Philippe Creux
description:
<p>I enjoy using the <code>let()</code> method as it makes my specs easier to read and maintain than setting up instance variables in <code>before(:each)</code> blocks. The <code>let()</code> method can be used like this:</p>
<pre class="brush: ruby; title: ; notranslate">
describe Account do
  let(:account) { Factory(:account) }

  subject { account }

  it { should be_enabled }

  context &quot;when #disable!&quot; do
    before do
      account.disable!
    end

    it { should be_disabled }
  end
end
</pre>
<p>My main concern was that the block gets evaluated everytime the method is called. In the example above, <code>Factory(:account)</code> will run and create a new record for every single spec. </p>
<p>To increase our specs performances let&#8217;s refactor this and setup the <em>account</em> in a <code>before(:all)</code> block.</p>
<pre class="brush: ruby; title: ; notranslate">
describe Account do
  before(:all) do
    @account = Factory(:account)
  end

  let(:account) { @account.reload }
  #...
end
</pre>
<p>The <em>account</em> is now setup once before the specs get run. Each spec will be run in a separate transaction to prevent side effects. The <em>account</em> will be rolled back to its initial state before each spec then. Since ActiveRecord is not aware of the rollback we reload the <em>account</em> object from the database every time it&#8217;s called.</p>
<p>Specs are now faster but I want them to be as pretty as they were. Let&#8217;s make a little helper called <code>set()</code>. </p>
<p><script src="http://gist.github.com/423097.js"> </script></p>
<p>Sweeeet! You can now write the following:</p>
<pre class="brush: ruby; title: ; notranslate">
describe Account do
  set(:account) { Factory(:account) }

  #...
end
</pre>
<p>The records created by <code>set()</code> will remain in your database. You can use <a href="http://github.com/bmabey/database_cleaner">DatabaseCleaner</a> with the <code>:truncation</code> strategy to clean up your database. So far in RSpec 2.0, <code>before(:all)</code> runs before all <em>describe/context/it</em> while <code>after(:all)</code> runs after every single <em>describe/context/it</em>. Just make sure that you call <code>DatabaseCleaner.clean</code> in a <code>before(:all)</code> or <code>after(:suite)</code> blocks then. :)</p>
<p>I hope you&#8217;ll enjoy using this little helper. It&#8217;s very young and it has been tested with RSpec 2 only, so fill free to fill up the comments with enhancements and bug reports!</p>
<p><strong>rspec-set is now available <a href='https://github.com/pcreux/rspec-set'>as a gem</a></strong></p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Speed+up+RSpec+with+set%28%29+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D284" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/WUEjNWkNB68" height="1" width="1"/>


title: Get Integrity to play well with Rails 3 and Bundler 1.0
source: http://feedproxy.google.com/~r/EggsOnBread/~3/_rDmCms7Xt0/
author: Philippe Creux
description:
<p>The latest &#8220;stable&#8221; version of Integrity (v22) doesn&#8217;t play well with Rails 3 (or any other application using bundler 1.0). Basically the Integrity&#8217;s Gemfile is used in place of the application&#8217;s Gemfile when running the tests.</p>
<p>With a Rails 3 application you are likely to get:
<pre>no such file to load -- rails/all</pre>
<p><img src="http://eggsonbread.com/wp-content/uploads/2010/08/integrity_fail.png" alt="Integrity fails to run with Rails 3 and Bundler 1.0" title="integrity_fail" width="480" height="275" class="alignnone size-full wp-image-312" /></p>
<p>A patched version of integrity v22 for bundler 1.0 is available on <a href="http://github.com/pcreux/integrity/tree/v22-bundler-1.0.0.rc">http://github.com/pcreux/integrity/tree/v22-bundler-1.0.0.rc</a>.</p>
<p>You also need to force your Rails application to use its Gemfile. To do so, update the file <code>/config/boot.rb</code> with the following:</p>
<pre class="brush: ruby; title: ; notranslate">
require 'rubygems'
# Set up gems listed in the Gemfile.
GEMFILE_PATH = File.expand_path('../../Gemfile', __FILE__)
if File.exist?(GEMFILE_PATH)
  # Force the rails 3 application to use its Gemfile
  ENV['BUNDLE_GEMFILE'] = GEMFILE_PATH
  require 'bundler'
  Bundler.setup
end
</pre>
<p>That should make the trick!<br />
<img src="http://eggsonbread.com/wp-content/uploads/2010/08/integrity_success.png" alt="Patched Integrity and custom boot.rb makes integrity working with Rails 3" title="integrity_success" width="480" height="132" class="alignnone size-full wp-image-313" /></p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Get+Integrity+to+play+well+with+Rails+3+and+Bundler+1.0+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D308" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/_rDmCms7Xt0" height="1" width="1"/>


title: (My) Cucumber best practices and tips
source: http://feedproxy.google.com/~r/EggsOnBread/~3/Ts5JpBkZSHU/
author: Philippe Creux
description:
<p>After <a href="http://eggsonbread.com/2010/03/28/my-rspec-best-practices-and-tips/">(My) RSpec best practices and tips</a>, I&#8217;m happy to share my Cucumber best practices and tips!</p>
<p>This article will help you organize, clarify and reduce the size of your cucumber scenarios.</p>
<h2>1. Organize your garden</h2>
<p>Keep your feature files organized by grouping them by business object, then action and context if any.  I put all the feature files in the same directory. For instance:</p>
<pre class="brush: plain; class-name: good; title: ; notranslate">
bank_account_add.feature
bank_account_delete.feature
user_signup.feature
user_signup_when_invited.feature
user_login.feature
</pre>
<p>The steps specific to the application should be organized by business object as well (<code>bank_account_steps.rb</code>, <code>user_steps.rb</code>&#8230;). Keep the file organized grouping the steps by <code>Given</code> / <code>When</code> / <code>Then</code>. </p>
<p>Do not overload the files generated by Cucumber like <code>step_definitions/web_steps.rb</code> and <code>support/env.rb</code> with your own steps, helpers or setup code. These files are likely to get overwritten when you update Cucumber so store your stuff in your own files.</p>
<h2>2. Custom steps make your scenario DRY and accessible</h2>
<p>Scenarios should have the same lifecyle as your code: Red, Green, <strong>Refactor</strong> to make them DRY and easy to read. </p>
<p>Group multiple steps together. For instance:</p>
<pre class="brush: ruby; class-name: bad; title: ; notranslate">
  Given I follow &quot;Send money&quot;
  When I fill in &quot;Email&quot; with &quot;mukmuk@example.com&quot;
  And I fill in &quot;Amount&quot; with &quot;10&quot;
  And I select &quot;Bank account&quot; from &quot;Source&quot;
  And I press &quot;Send&quot;
  Then I should see &quot;You've sent $10 to mukmuk@example.com&quot;
</pre>
<p>&#8230; could be refactored to:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
  Given I send &quot;$10&quot; to &quot;mukmuk@example.com&quot; from my &quot;Bank account&quot;
</pre>
<p>This step definition is the following:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
  Given %{I send &quot;$amount&quot; to &quot;$email&quot; from my &quot;$source&quot;} do |amount, email, source|
    Given %{I follow &quot;Send money&quot;}
    When %{I fill in &quot;Email&quot; with &quot;#{email}&quot;}
    And %{I fill in &quot;Amount&quot; with &quot;#{amount.delete('$')}&quot;}
    And %{I select &quot;#{source}&quot; from &quot;Source&quot;}
    And %{I press &quot;Send&quot;}
    Then %{I should see &quot;You've sent $#{amount} to #{email}&quot;}
  end
</pre>
<p>This step can then be easily reused in other scenario keeping your features DRY. It also decouples the scenario from the UI so that you won&#8217;t have to change dozens of feature files when the UX guru changes translations or user flows.</p>
<h2>3. Background: setup the DRY way</h2>
<p>Make the feature focus on one business object/action/context and the <a href="http://wiki.github.com/aslakhellesoy/cucumber/background">background</a> will get longer than the scenarios.</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
  Feature: A user can cancel a transaction unless it's claimed by the recipient

    Background:
      Given I am logged in
      And I send &quot;$10&quot; to &quot;mukmuk@example.com&quot; from my &quot;Bank account&quot;

    Scenario: I can cancel as long as the payment is not claimed
      When I cancel my latest transaction
      Then I should see a cancellation confirmation

    Scenario: I can't cancel once the payment is claimed
      Given &quot;Mukmuk&quot; claimed the latest transaction
      Then I can't cancel my latest transaction
</pre>
<h2>4. Scenario outlines: scenario with variables!</h2>
<p>A <a href="http://wiki.github.com/aslakhellesoy/cucumber/scenario-outlines">scenario outline</a> contains variables allowing you to test multiple context using a truth table. For instance I use them to make sure that validation errors are displayed properly:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
  Scenario Outline: Add invalid bank account displays inline errors
    Given I follow &quot;Add Bank Account&quot;
    When I fill in &quot;&lt;field&gt;&quot; with &quot;&lt;value&gt;&quot;
    And I press &quot;Add Bank Account&quot;
    And I should see the inline error &quot;&lt;error&gt;&quot; for &quot;&lt;field&gt;&quot;

    Examples:
      | field   | value         | error                    |
      | Account |               | Can't be blank           |
      | Account | Sixty five    | Should be 1 to 12 digits |
      | Account | 1234567890123 | Should be 1 to 12 digits |  
</pre>
<h2>5. Multi-line step arguments: give your step a table for lunch!</h2>
<p>A step can take a <a href="http://wiki.github.com/aslakhellesoy/cucumber/multiline-step-arguments">multi-line table as an argument</a>. This is a great way to load up a bunch of data or to test the rendering of lists and tables. For instance:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
  Given I sent &quot;$25&quot; to &quot;mukmuk@example.com&quot; from my &quot;Bank account&quot;
  Then I should see the following transaction history:
    | create     | complete    |
    | deposit    | in_progress |
    | transfer   | pending     |
    | withdrawal | pending     |
</pre>
<p>The step definition looks like the following:</p>
<pre class="brush: ruby; class-name: good; title: ; notranslate">
  Then &quot;I should see the following transaction history:&quot; do |table|
    table.raw.each do |event, state|
      page.should have_css(&quot;tr.#{event}.#{state}&quot;)
    end
  end
</pre>
<p>I hope that these tips will help you growing healthy cucumber features!</p>
<p>Want more? Check out the <a href="http://wiki.github.com/aslakhellesoy/cucumber/">Cucumber wiki</a>, <a title="15 Expert Tips for Using Cucumber - By Dave Astels on  Engine" href="http://www.engineyard.com/blog/2009/15-expert-tips-for-using-cucumber/">15 Expert Tips for Using Cucumber</a> by <a href="http://www.engineyard.com/blog/author/daveastels/">Dave Astels</a>, <a href="http://elabs.se/blog/15-you-re-cuking-it-wrong">You&#8217;re Cuking It Wrong</a> by <a title="Agile web development shop in Gothenburg, Sweden" href="http://elabs.se/">Elabs</a> and <a href="http://antonymarcano.com/blog/2010/08/youre-almost-cuking-it/">You’re almost cuking it…</a> by <a href="http://antonymarcano.com/Site/Home.html" title="Co-founder of RiverGlide and an agile software development coach, trainer, speaker and consultant.">Antony Marcano</a>. You could also like <a href="http://eggsonbread.com/2010/03/28/my-rspec-best-practices-and-tips/">(My) RSpec best practices and tips</a>. :)</p>
<p>Happy BDD!</p>
<blockquote><p>Thanks to <a href="http://wwww.21croissants.com/" title="Développeur Senior,  Ruby, Ruby, Rails, Agile, RSpec, Cucumber, TDD, BDD, Trilingue">Jean-Michel Garnier</a> for reviewing this article.</p></blockquote>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=%28My%29+Cucumber+best+practices+and+tips+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D323" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/Ts5JpBkZSHU" height="1" width="1"/>


title: Siggyfeed — Share your Blog, Twitter, Flickr in your email signature
source: http://feedproxy.google.com/~r/EggsOnBread/~3/HRXiosY4imc/
author: Philippe Creux
description:
<p><a href="http://ca.linkedin.com/in/jamiepalexander" title="Participant at Ryerson Digital Media Zone - Founder at SiggyFeed - Founder and Chief Architect at Dub Selector - Founder at Whatimwear.in">Jamie Alexander</a> and I have just released <a href="http://siggyfeed.com">Siggyfeed</a>: a web service to share any feed (from your Blog, Twitter, Flickr gallery&#8230;) in your email signature.</p>
<p>Here is a siggy for my blog <a href="http://eggsonbread.com">eggsonbread.com</a>:</p>
<table width='600px' style='border: none' >
<tr style='border: none'>
<td> <a href='http://t.siggyfeed.com/22/1/0'> <img alt='' src='http://i.siggyfeed.com/22/1/0.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/22/1/1'> <img alt='' src='http://i.siggyfeed.com/22/1/1.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/22/1/2'> <img alt='' src='http://i.siggyfeed.com/22/1/2.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/22/1/3'> <img alt='' src='http://i.siggyfeed.com/22/1/3.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/22/1/4'> <img alt='' src='http://i.siggyfeed.com/22/1/4.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/22/1/5'> <img alt='' src='http://i.siggyfeed.com/22/1/5.png' style='border: none' /> </a> </td>
</tr>
</table>
<p>This signature will change as I add more posts to my blog. You can change the title, the number of entries, the source to display and these changes will be reflected on your siggy right away. Each line is clickable and goes right to the blog post it displays.</p>
<p>You can also share pictures:</p>
<table width='600px' style='border: none'>
<tr style='border: none'>
<td> <a href='http://t.siggyfeed.com/19/1/0'> <img alt='' src='http://i.siggyfeed.com/19/1/0.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/19/1/1'> <img alt='' src='http://i.siggyfeed.com/19/1/1.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/19/1/2'> <img alt='' src='http://i.siggyfeed.com/19/1/2.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/19/1/3'> <img alt='' src='http://i.siggyfeed.com/19/1/3.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/19/1/4'> <img alt='' src='http://i.siggyfeed.com/19/1/4.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/19/1/5'> <img alt='' src='http://i.siggyfeed.com/19/1/5.png' style='border: none' /> </a> </td>
</tr>
</table>
<p>There pictures are from my Flickr gallery but any feed containing pictures will work! For instance here are my latest videos on Vimeo:</p>
<table width='600px' style='border: none'>
<tr style='border: none'>
<td> <a href='http://t.siggyfeed.com/21/1/0'> <img alt='' src='http://i.siggyfeed.com/21/1/0.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/21/1/1'> <img alt='' src='http://i.siggyfeed.com/21/1/1.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/21/1/2'> <img alt='' src='http://i.siggyfeed.com/21/1/2.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/21/1/3'> <img alt='' src='http://i.siggyfeed.com/21/1/3.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/21/1/4'> <img alt='' src='http://i.siggyfeed.com/21/1/4.png' style='border: none' /> </a> <a href='http://t.siggyfeed.com/21/1/5'> <img alt='' src='http://i.siggyfeed.com/21/1/5.png' style='border: none' /> </a> </td>
</tr>
</table>
<p>Give it a try! Go on <a href="http://siggyfeed.com">http://siggyfeed.com</a>, put the your URL of your blog / twitter / flickr / whatever, generate your siggyfeed and set the snippet of html code provided as your email signature! Easy peasy, eh!</p>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Siggyfeed+%E2%80%94+Share+your+Blog%2C+Twitter%2C+Flickr+in+your+email+signature+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D399" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/HRXiosY4imc" height="1" width="1"/>


title: Disable / Enable Nagios notifications from command line
source: http://feedproxy.google.com/~r/EggsOnBread/~3/o4WDUxtI9gk/
author: Philippe Creux
description:
<p>Your a lazy devops, you want to deploy your application in one click BUT you don&#8217;t want Nagios to send alerts while you&#8217;re deploying. Solution: disable Nagios notifications while deploying.</p>
<ul>
<li>
Disable Nagios Notifications:<br />
<code><br />
curl -d "cmd_mod=2&#038;cmd_typ=11" "http://NAGIOS_HOST/cgi-bin/nagios3/cmd.cgi" -u "USERNAME:PASSWORD"<br />
</code><br/>
</li>
<li>
Re-Enable Nagios Notifications:<br />
<code><br />
curl -d "cmd_mod=2&#038;cmd_typ=12" "http://NAGIOS_HOST/cgi-bin/nagios3/cmd.cgi" -u "USERNAME:PASSWORD"<br />
</code>
</li>
</ul>
<div class="tweetthis" style="text-align:left;"><p> <a target="_blank" rel="nofollow" class="tt" href="http://twitter.com/intent/tweet?text=Disable+%2F+Enable+Nagios+notifications+from+command+line+by+%40pcreux+http%3A%2F%2Feggsonbread.com%2F%3Fp%3D423" title="Post to Twitter"><img class="nothumb" src="http://eggsonbread.com/wp-content/plugins/tweet-this/icons/en/twitter/tt-twitter6.png" alt="Post to Twitter" /></a></p></div><img src="http://feeds.feedburner.com/~r/EggsOnBread/~4/o4WDUxtI9gk" height="1" width="1"/>


title: Al Qaeda continues to frighten the U.S, the cyber war is begun
author: paganinip
source:
http://securityaffairs.co/wordpress/5745/intelligence/al-qaeda-continues-to-frighten-the-u-s-the-cyber-war-is-begun.html

description:
<p>Many experts are convinced that the death of Bin Laden marked the end of an ideological group that has been beheaded of its leaders and that began to slowly fall apart. The same experts are convinced that from the rubble of the group might begin small groups, definitely dangerous, but without a central coordination that can make them really offensive as the original organization.</p>
<p>Other security experts believe that the historical group is changing its skin exploring new offensive ways, in particular they are convinced that next wave of attacks will come from the cyber space.</p>
<p>A a secret report issued December 21 by the Canadian Office of Critical Infrastructure Protection and Emergency Services raises the specter of a possible future cyber attack by agents or sympathizers of Osama bin Laden’s al Qaeda terrorist organization. Although to date there is no proof of the al Qaeda’s interest in a cyber offensive the possibility of conducting a cyber attack is high considering the huge financial resources of the group to purchase the equipment required and to acquire the needed expertise.</p>
<blockquote><p>“Bin Laden’s vast financial resources, however, would enable him or his organization to purchase the equipment and expertise required for a cyber attack and mount such an attack in very short order.”</p></blockquote>
<p>In one of its interviews bin Laden has spoken regarding the possible constitution of a cyber army.</p>
<blockquote><p>“hundreds of Muslim scientists were with him who would use their knowledge … ranging from computers to electronics against the infidels,”</p></blockquote>
<p>according to the Canadian report bin Laden may have planned a cyber attacks against the West.</p>
<p>Recently it has been published on internet an <a title="Cyber terrorism, cyber attacks against al Qaeda 2.0" href="http://securityaffairs.co/wordpress/3986/cyber-crime/cyber-terrorism-cyber-attacks-against-al-qaeda-2-0.html" target="_blank">Al Qaeda</a> video of six-minute and that instructs Al Qaeda followers regarding U.S. vulnerability to cyberattacks inviting Muslims to the battle.</p>
<p>Susan Collins and Joe Lieberman, chairman of the Senate Homeland Security Committee , consider it very disturbing, they declared in fact:</p>
<blockquote><p>“This tape is really alarming,”</p>
<p>“It&#8217;s essentially instructing anybody who&#8217;s sympathetic with Al Qaeda&#8217;s ideology to engage in cyberattacks, and the tape is telling them how easy it is to do so.”</p></blockquote>
<p>The US official are scared by the video, sources of intelligence have  confirmed in recent months that many terroristic groups are trying to arrange a cyber offensive against US. Recent public reports have demonstrated that Western <a title="US Cybersecurity capability. National Preparedness Report" href="http://securityaffairs.co/wordpress/5003/cyber-crime/us-cybersecurity-capability-national-preparedness-report.html" target="_blank">critical infrastructures</a> are still too vulnerable to cyber attacks and for this reason is trying to engage a cyber war against its enemy.</p>
<p>Cyber security experts are continuously alerting US government regarding the increasing of number of attacks against control systems of critical infrastructure of the country.</p>
<p>The senators Lieberman confirmed that the Homeland Security Department responded to 100,000 cyber incidents in 2011, and informing that there has been a spike in cyber intrusions maybe made by Iranian hackers.</p>
<p>It’s clear that in this scenario Al Qaeda could collaborate with other hostile countries to attacks the US and also to acquire capacity and knowledge to drive an attack against US.</p>
<blockquote><p>“There is real evidence that the Al Qaeda groups want to pursue and are beginning to pursue the capacity to launch a cyberattacks against America,”</p>
<p>“I mean, that is the real and present danger and that Iran will share that cyberattack capacity with terrorist groups.”</p></blockquote>
<p>The US monitoring is focused on cyber terrorism threat, new subversive groups are planning to attack US on its soil compromising strategic plants such as nuclear facilities or power grids. CIA and international intelligence agencies have started a massive campaign of prevention that has as objective the monitor of the web to prevent cyber attacks or the organization of terroristic events.  US cyber army is also attacking the principal web site used by Al Qaeda for activities of propaganda.</p>
<p>Last month Al-Qaeda’s main internet forums have been attacked, they were offline for several days,many others sites were downed during last weeks including two of the terrorist organization’s top sites, al-Fida and Shamukh al-Islam.  The nature of the attacks suggested the intervention of groups of hackers hired by governments committed to the fight against terrorism.</p>
<p>Recently the State Department has launched several covert cyber operations against al-Qaida hacking into al-Qaida websites in Yemen, secretary of State Hillary Clinton confirmed that cyber experts based at the State Department hacked Yemeni tribal websites, replacing al-Qaeda propaganda that bragged about killing Americans.</p>
<blockquote><p>&#8220;Within 48 hours, our team plastered the same sites with altered versions of the ads that showed the toll al-Qaeda attacks have taken on the Yemeni people,&#8221;</p></blockquote>
<p><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/Clinton.jpg"><img class="aligncenter size-full wp-image-5756" title="Clinton" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/Clinton.jpg" alt="" width="480" height="360" /></a></p>
<p>Yemen&#8217;s al-Qaida in the Arabian Peninsula, is considered one of the most active and dangerous cells, responsible of several attacks that have killed hundreds of Yemeni soldiers and accused to be organizers for several attacks against US.</p>
<p>Clinton also added that the cyber attacks have been arranged creating dedicated a task force of specialists, including special operators and intelligence analysts, housed at the State Department.</p>
<p>Authors of the success are the experts of the Center for Strategic Counterterrorism Communications, that patrol the Internet and <a title="CIA and the intelligence components of the things" href="http://securityaffairs.co/wordpress/3379/intelligence/cia-and-the-intelligence-components-of-the-things.html" target="_blank">social media</a> gathering information on al-Qaida&#8217;s, on its propaganda and on its recruiting campaign.</p>
<blockquote><p>&#8220;Together, they will work to pre-empt, discredit and outmaneuver extremist propaganda,&#8221; Clinton said.</p></blockquote>
<p>As described confirms the importance of a cyber strategy which seeks to defend the major U.S. facilities and work to prevent cyber attacks against the American people.<br />
This is just another battle that the U.S. must prepare for.</p>
<p>Pierluigi Paganini</p>
<p>&nbsp;</p>


title: DDoS attack against 123-reg, the Chinese paranoia
author: paganinip
source:
http://securityaffairs.co/wordpress/5769/hacking/ddos-attack-against-123-reg-the-chinese-paranoia.html

description:
<p>The UK’s companies 123-reg, the biggest domain provider,  was hit this week by a “massive” <a title="DDoS, detailed analysis of the phenomenon" href="http://securityaffairs.co/wordpress/4468/cyber-crime/ddos-detailed-analysis-of-the-phenomenon.html" target="_blank">DDoS attack</a> that caused interruption of the services provided.</p>
<p>The company hosts three million domain names and more than 1.4 million sites. According a press published on the company web site, later removed, the attack came from a Chinese source on Wednesday morning.</p>
<p>In a statement reported on the 123-reg service status page the company blamed attackers in China:</p>
<blockquote><p><strong>From 11:30 to 22:50 our network was undergoing a massive distributed denial of service attack from China. Due to the nature and size of this attack the firewall systems in place needed to be reconfigured to block the bad traffic and allow the good traffic through.</strong></p></blockquote>
<p>The attack has lasted the entire day, but the company prompted reply reconfiguring its network defense system to mitigate the problem.</p>
<p>The CEO of 123-reg , Thomas Vollrath, has declared:</p>
<blockquote><p>“As the largest domain provider in the UK, and coupled with the increase of these types of attacks across Europe in particular, we know we are a prime target. We are still in the process of resolving this,”</p></blockquote>
<p>The CEO also reassured customers claiming that the company has the technical means to cope with this type of cyber threats that are becoming increasingly frequent.</p>
<blockquote><p>&#8220;Our network of back-up servers ensured we were able to move our traffic across very quickly,&#8221; he wrote.</p></blockquote>
<p>The success of these attacks against service provider, which should be prepared to face them, demonstrates their effectiveness and their potential destructive.  Sometimes the size of a DDoS attack can temporary overwhelm every defense system.</p>
<p>What is strange is the company has removed all references to the attack from its support pages, another interesting particular is that it is not the first time that a UK company was hit by similar attack, it&#8217;s already happened a month ago with another big UK service provider, the UK2.net.</p>
<p>What might be the reasons for such an attack? Hard to say without having additional information, the company may have been attacked because it offers services to some company or organization, or it may be the victim of an attack by competitors. In this case the Chinese origin does not provide additional elements of judgment and I doubt a direct involvement of government in Beijing.</p>
<p>&nbsp;</p>
<p><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/ddos-attack.gif"><img class="aligncenter size-full wp-image-5782" title="ddos-attack" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/ddos-attack.gif" alt="" width="480" height="324" /></a></p>
<p>We all know the huge potential of <a title="Concerns for Chinese firms and the cyberespionage" href="http://securityaffairs.co/wordpress/5455/hacking/concerns-for-chinese-firms-and-the-cyberespionage.html" target="_blank">China</a> on <a title="China, cyber warfare and challenges for the future" href="http://securityaffairs.co/wordpress/4044/intelligence/china-cyber-warfare-and-challenges-for-the-future.html" target="_blank">cyber espionage</a> and cyber warfare, whose aggressive policy has offended repeatedly private Western companies.</p>
<p>The news circulated immediately after the attack on the Asian source ohas raised some controversy. Many are convinced that the operation was a government cyber attack , it is likely but in the absence of evidence it is useless to spread the word misleading. I refer of course to the media and not the company that handled the event well.</p>
<p>An attack from China is not necessarily attributable to the government, the nation now houses the major number of mobile devices in the world, a cyber threats such as a botnet could benefit from the presence of so many smartphones.</p>
<p>In a time when many have accused the Chinese government of its cyber strategy too aggressive, unfounded rumors such as this could complicate the difficult dialogue with Beijing.</p>
<h3><strong>More info regarding DDoS Attacks</strong></h3>
<p>Last year we have observer an impressive grow of distributed denial-of-service (<a title="DDoS, IPv6 is an excuse to talk about" href="http://securityaffairs.co/wordpress/2416/cyber-crime/ddos-ipv6-is-an-excuse-to-talk-about.html" target="_blank">DDoS</a>) attacks mainly related to operations arranged by group of <a title="They are Not What You Think They are … They are Hacktivists" href="http://securityaffairs.co/wordpress/4986/cyber-crime/they-are-not-what-you-think-they-are-they-are-hacktivists.html" target="_blank">hacktivists</a> such as <a title="Anonymous “United as one, divided by zero” a click for freedom" href="http://securityaffairs.co/wordpress/1881/hacking/anonymous-united-as-one-divided-by-zero-a-click-for-freedom.html" target="_blank">Anonymous</a>, they will continue into 2012 with a sensible increase of attacks related to cybercrime. According the Verizon report on cybercrime, hacktivism is one of the most dangerous phenomenon, and DDoS attacks are their typical attack mode, for this reason we will observe an impressive grow also supported by the worldwide spread of botnets. Regarding the attacked platforms we are observing a growing interest in the Mac world, it is expected a growth of OS X botnets able to perform DDoS attacks.</p>
<p>Other sensible contributions to the increment of this type of attacks are provided by the usage of mobile phones and devices as launch platform and also to imminent diffusion of IPV6 protocol.</p>
<p>We must also consider that DDoS attacks are largely used in warfare operations against enemy governments. Group of hackers are also engaged to attacks sensible targets with the intent make unusable services provided by agencies and institutions.It is happened earlier this year, when <a title="Israel under a cyber warfare escalation" href="http://securityaffairs.co/wordpress/1747/cyber-warfare-2/israel-under-a-cyber-warfare-escalation.html" target="_blank">Israel</a> has been victim of a true escalation in cyberwar, not identified attackers have in fact pulled down two principal national web sites, the Tel Aviv Stock Exchange and El Al, the national airline. Again financial istitution under attacks.</p>
<p>DDoS attacks are even more dangerous when they are used in conjunction with other types of offense. DDoS attacks are used as a diversionary strategy to distract opposing defenses from the real intent of the attackers. Precisely this strategy was occasionally adopted by organized criminals using botnets to paralyzed target defense systems and then proceed undisturbed in the development of fraud.</p>
<p>Pierluigi Paganini</p>


title: CIA, FBI, NSA, differents agencies for an unique intent…global monitoring
author: paganinip
source:
http://securityaffairs.co/wordpress/5798/cyber-crime/cia-fbi-nsa-differents-agencies-for-an-unique-intent-global-monitoring.html

description:
<p>We have discussed several times regarding the intention of the <a title="FBI,content monitoring,backdoors &amp; Going Dark…shake well before use" href="http://securityaffairs.co/wordpress/5050/intelligence/fbicontent-monitoringbackdoors-going-dark-shake-well-before-use.html" target="_blank">FBI</a> to create a special unit for internet <a title="Monitoring or censorship? The big fear" href="http://securityaffairs.co/wordpress/3042/intelligence/monitoring-or-censorship-the-big-fear.html" target="_blank">monitoring</a> and surveillance, a task force established to prevent and fight cyber crimes .In reality the Bureau already has different internal units that work with the same purpose and in the last years has promoted different projects for the development of tools and applications for the web monitoring.</p>
<p>The FBI has recently created a secret surveillance unit to project and develop technologic tools and software for Internet and wireless communications monitoring.</p>
<p>FBI is considered one of the most active agencies in this sense, in the last months it has publicly requested the design of a real time monitor for <a title="Social Media, exercise or not exercise the control" href="http://securityaffairs.co/wordpress/2134/intelligence/social-media-exercise-or-not-exercise-the-control.html" target="_blank">social networks</a> that have to be able to identify suspect behaviors that could be interpreted as indicator of presence for an ongoing crime.</p>
<p>The FBI has been lobbying top internet companies like Yahoo and Google to support a proposal that would force them to provide backdoors for government surveillance, according to CNET. The purpose of the collaboration between FBI and major IT companies and Internet services providers is tied to the will of the agency to arrive at the definition of legislation that allows law enforcement to have the controversial backdoor.</p>
<p>FBI desires the collaboration of the major player of the IT sector to implement specific backdoor stubs inside their products with intent to make them wiretap-friendly, the request is related to all those communication platforms, social network, email providers, chats and instant messaging.</p>
<p>The FBI has trying to maintain maximum reserve on the Unit called the Domestic Communications Assistance Center, for which the Senate committee has already allocated $54 million assigning to it the mission to create technologies for law enforcement to intercept and analyze communications data.</p>
<p>The power conferred to the unit is wide, every single communication through social networks and over internet in general should be intercepted by the hardware platforms and software applications that the the unit have to implement.</p>
<p>In February 2011, CNET reported that then-FBI general counsel Valerie Caproni was planning to warn Congress of what the bureau calls its “<a title="FBI,content monitoring,backdoors &amp; Going Dark…shake well before use" href="http://securityaffairs.co/wordpress/5050/intelligence/fbicontent-monitoringbackdoors-going-dark-shake-well-before-use.html" target="_blank">Going Dark</a>” problem, illustrating how the wiretapping capabilities were being reduced with the progress of technology.</p>
<blockquote><p><strong><em>Caproni singled out “Web-based e-mail, social-networking sites, and peer-to-peer communications” as problems that have left the FBI “increasingly unable” to conduct the same kind of wiretapping it could in the past.</em></strong></p></blockquote>
<p>“Going Dark” is the FBI’s codename for its project to extend its ability to real time wiretap communications, it is born inside the bureau, employing 107 full-time expert starting from 2009.</p>
<p>According the declaration of Electronic Frontier Foundation attorney Kevin Bankston FBI already can intercept messages on social-networking sites and Web-based e-mail services, the system used is known as Carnivore, later renamed DCS1000. The interception is possible because Facebook messages and Gmail messages travel in plain text over those same broadband wires for which the FBI demanded wiretapping capability.</p>
<p>The main problem is related to rapid technological evolution that make obsolescent surveillance systems in short time, due this reason the request of FBI to include a backdoor in any products that could be involved in communication, like social networking and also online <a title="Governments and gaming platforms, it’s time for warfare" href="http://securityaffairs.co/wordpress/4078/hacking/governments-and-gaming-platforms-its-time-for-warfare.html" target="_blank">games consoles</a>.</p>
<p>The Domestic Communications Assistance Center represents the technological factory of the &#8220;Going Dark&#8221; project for the internet wiretapping, the <a href="http://www.justice.gov/jmd/2013justification/office/fy13-dea-justification.docx">document</a>, FY 2013 Performance Budget Congressional Submission refers to the recent establishment of DCAC:</p>
<blockquote><p><em>While progress is expected through DEA’s participation in the recently established Department-wide Domestic Communications Assistance Center (DCAC) led by the FBI to address the growing technological gap between law enforcement’s electronic surveillance capabilities and the number and variety of communications devices available to the public, the foremost challenge confronting U.S. law enforcement is the diminishing ability to conduct lawful electronic intercepts on current and emerging communications technologies as communications providers continue to offer new and improved services and features to customers.  Addressing this issue is critical to maintain law enforcement’s ability to conduct lawful criminal intercepts.</em></p></blockquote>
<p>The position of the US authorities is worrying, they want to impose to every internet service provider to give full access to Government for surveillance purpose, according the amendment to CALEA, the Communications Assistance for Law Enforcement Act.</p>
<p>Contrary to what one might think about the news there is no noise, no political debate, confirming a will that seems a common intent.</p>
<p>To confirm that the FBI is allocating new skilled personnel to the unit a job announcement for the DCAC has been published with a deadline of May 2. Analyzing the announcement we can have an idea on the technological skills requested, such as a meaningful experience with &#8220;electronic surveillance standards&#8221; including PacketCable, QChat and T1.678 (VoIP communications). One required skill for the position, which pays up to $136,771 a year, is evaluating &#8220;electronic surveillance solutions&#8221; for &#8220;emerging&#8221; technologies.</p>
<p>&nbsp;</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/JobOffer.jpg"><img class="aligncenter  wp-image-5803" title="JobOffer" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/JobOffer-577x1024.jpg" alt="" width="519" height="922" /></a></p>
<p style="text-align: left;">Declan McCullagh, chief political correspondent for CNET, in an <a title="http://news.cnet.com/8301-1009_3-57439734-83/fbi-quietly-forms-secretive-net-surveillance-unit/" href="http://news.cnet.com/8301-1009_3-57439734-83/fbi-quietly-forms-secretive-net-surveillance-unit/" target="_blank">excellent </a>article on the argument has reported:</p>
<blockquote>
<p style="text-align: left;"><em>The NDCAC will have the functionality to leverage the research and development efforts of federal, state, and local law enforcement with respect to electronic surveillance capabilities and facilitate the sharing of technology among law enforcement agencies. Technical personnel from other federal, state, and local law enforcement agencies will be able to obtain advice and guidance if they have difficulty in attempting to implement lawful electronic surveillance court orders.</em></p>
<p><em>It is important to point out that the NDCAC will not be responsible for the actual execution of any electronic surveillance court orders and will not have any direct operational or investigative role in investigations. It will provide the technical knowledge and referrals in response to law enforcement&#8217;s requests for technical assistance.</em></p></blockquote>
<p>The project is really ambitious and without doubt it will involve all the main intelligence agencies of the country, such as Drug Enforcement Administration and National Security Agency.</p>
<p>NSA also is massive investing in monitoring technology, a couple of months ago we have learned that the agency is building the country’s biggest Spy Center in the little known city of Bluffdale. The center, named Utah Data Center is under construction by contractors with top-secret clearances.</p>
<p>Its purpose is to intercept, decipher, analyze every world’s communications under investigation using every kind of transmission.  The center will have a final cost of $2 billion and should be operative in September 2013. Its databases will be store all forms of communication, including the complete private emails, cell phone calls, search engine researches and every kind of digital data related to every individual. The imperative is to monitor everything!</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/ff_nsadatacenter2_f1.jpg"><img class="aligncenter  wp-image-5819" title="ff_nsadatacenter2_f" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/ff_nsadatacenter2_f1.jpg" alt="" width="460" height="515" /></a></p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/NSASpyNetwork.jpg"><img class="aligncenter  wp-image-5823" title="NSASpyNetwork" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/NSASpyNetwork-531x1024.jpg" alt="" width="478" height="922" /></a></p>
<p style="text-align: left;"><span style="text-align: left;">It&#8217;s clear the dimension of the project that has the purpose to cover monitoring need of every type includind of course satellite communication, phone calls, computer data and geostationary satellite data.  </span></p>
<p style="text-align: left;"><span style="text-align: left;"><em>Once the Data Center it&#8217;s operational it will be fed data collected by the agency’s eavesdropping satellites, overseas listening posts, and secret monitoring rooms in telecom facilities throughout the US. All that data will then be accessible to the NSA’s code breakers, data-miners, China analysts, counterterrorism specialists, and others working at its Fort Meade headquarters and around the world.</em></span></p>
<blockquote>
<p style="text-align: left;"><em>Someone has defined the project as the NSA monitoring cloud</em></p>
</blockquote>
<p>The information I&#8217;m proposing should not deceive, in reality the country is already littered with centers for the analysis of data traffic and phone interception that make use of sophisticated software programs that conduct “deep packet inspection,” examining Internet traffic as it passes through the 10-gigabit-per-second cables at the speed of light.</p>
<p>One of the main software has been developed by company called <a title="http://www.narus.com/" href="http://www.narus.com/" target="_blank">Narus</a> and is controlled remotely from NSA headquarters at Fort Meade in Maryland. Any suspicion communication is automatically recorded and transmitted to the NSA for futher analysis.</p>
<p>Also other agency are interested to monitoring and surveillance, let&#8217;s introduce project sponsorized by CIA, the intelligence agency is now interested to gather information from every intelligent devices that is surrounding us to spy on every US citizen. We have introduced months ago a spying project that has the intent to acquire information from gaming platform all over the world, a mine of data to collect and analyze.</p>
<p>Let&#8217;s me conclude the article speaking of the most interesting part of the web, the one defind <a title="What is the Deep Web? A first trip into the abyss" href="http://securityaffairs.co/wordpress/5650/cyber-crime/what-is-the-deep-web-a-first-trip-into-the-abyss.html" target="_blank">Deep Web</a>, that every agency is infiltrating, a volume of data impressive if compared to the ordinary web. the Deep Web represent today a mine of information with high level of interest, this invisible portion of web is considered infact the homeland for cybercrime, intelligence agancies and hacktivists, due this reason it is considered fundamental to be able to control this controversial cyberscenario.</p>
<p>In the Deep Web are hidden <span style="text-align: center;">protected data, government communications and noncommercial file-sharing between trusted peers. </span></p>
<blockquote><p><span style="text-align: center;">“The deep web contains government reports, databases, and other sources of information of high value to DOD and the intelligence community,” according to a 2010 Defense Science Board report. </span></p>
<p><span style="text-align: center;">“Alternative tools are needed to find and index data in the deep web … Stealing the classified secrets of a potential adversary is where the [intelligence] community is most comfortable.” </span></p></blockquote>
<p>It &#8217;clear that the huge investments mentioned are a blatant invasion of privacy in the name of security, but the scope of the projects suggests that no law or constitution can oppose.</p>
<blockquote><p><em><strong>What will invent the human intellect to escape this modern form of control?</strong></em></p></blockquote>
<p>Pierluigi Paganini</p>
<p>&nbsp;</p>
<p style="text-align: center;">


title: Call it Flame, Flamer or Skywiper … it’s a new cyber weapon
author: paganinip
source:
http://securityaffairs.co/wordpress/5858/malware/call-it-flame-flamer-or-skywiper-its-a-new-cyber-weapon.html

description:
<p>The day is come, The Iranian Computer Emergency Response Team (MAHER) <a title="http://www.certcc.ir/index.php?name=news&amp;file=article&amp;sid=1894" href="http://www.certcc.ir/index.php?name=news&amp;file=article&amp;sid=1894" target="_blank">announced</a> to have discovered a new targeted malware which has hit the country, that has been named Flame (also known as Flamer or Skywiper due the name of  its main modules).</p>
<p>In an official statement the Iranian experts declared that following the intensive researches on the malware <a title="Stuxnet &amp; Duqu, update on cyber weapons usage" href="http://securityaffairs.co/wordpress/4544/hacking/stuxnet-duqu-update-on-cyber-weapons-usage.html" target="_blank">Stuxnet</a> and <a title="Duqu – Cyber weapons factory still operating …  it’s just the beginning" href="http://securityaffairs.co/wordpress/3716/malware/duqu-cyber-weapons-factory-still-operating-its-just-the-beginning.html" target="_blank">Duqu</a> since 2010 they have detected a new agent responsible of a new wave of attacks. The malware has been named “Flamer” due one of the attack modules code isolated and decrypted.</p>
<p>What is really interesting is the capability of the malware to dynamically change its behavior thanks the possibility to receive and install different modules projected for specific goals. Another interesting feature is that the malware is actually able to be undetectable by all the 43 tested anti viruse software.</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/announcement.jpg"><img class="aligncenter  wp-image-5861" title="announcement" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/announcement.jpg" alt="" width="407" height="174" /></a></p>
<p>The Maher center has developed a specific detector delivered only to selected organizations and companies in first days of May, and it&#8217;s working on the realizzation of a removal tool that will be soon delivered.</p>
<ol>
<li>Following dome feature of the malware listed in the announced of the center:</li>
<li>Distribution via removable medias</li>
<li>Distribution through local networks</li>
<li>Network sniffing, detecting network resources and collecting lists of vulnerable passwords</li>
<li>Scanning the disk of infected system looking for specific extensions and contents</li>
<li>Creating series of user’s screen captures when some specific processes or windows are active</li>
<li>Using the infected system’s attached microphone to record the environment sounds</li>
<li>Transferring saved data to control servers</li>
<li>Using more than 10 domains as C&amp;C servers</li>
<li>Establishment of secure connection with C&amp;C servers through SSH and HTTPS protocols</li>
<li>Bypassing tens of known antiviruses, anti malware and other security software</li>
<li>Capable of infecting Windows Xp, Vista and 7 operating systems</li>
<li>Infecting large scale local networks</li>
</ol>
<p>The specialists of the center are sure that the malware is a new <a title="Cyber Weapons" href="http://securityaffairs.co/wordpress/3896/intelligence/cyber-weapons.html" target="_blank">cyber weapon</a>due its complexity level and propagation methods, they don&#8217;t exclude that recent mass data loss in Iran could be related to the attack of the malware.  The malware seems target mainly windows platform running Windows XP, Vista and Windows 7 and the isolated istances of the agents are capable of password and data stealing, sniffing network traffic, taking screenshots, recording audio conversations, intercepting the keyboard, and so on.  All the collected data could be sent to the to Flame’s command-and-control servers. Curious the usage of Bluetooth protocol, once the victim has the functionality turned on, Flame is able to collect information about discoverable devices nearby.</p>
<p>It&#8217;s not yet clear with is the entry point for Flame malware, the principal suspects address the exploit of a Microsoft vunerability.</p>
<p>According <a title="http://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers" href="http://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers" target="_blank">Kaspersky lab experts</a> the malware has hit mainly the Middle East area and it is considered a very sophisticated cyber weapon with main purpose of <a title="Cyberespionage and new opportunities for cybercrime" href="http://securityaffairs.co/wordpress/3158/cyber-crime/cyberespionage-and-new-opportunities-for-cybercrime.html" target="_blank">cyber espionage</a>. The team has defined Flame as a sophisticated attack toolkit which condenses the characteristics of a backdoor, a Trojan, and a worm. It&#8217;s able to spread itself within a local network and on removable media.</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/MiddleEast.png"><img class="aligncenter  wp-image-5867" title="MiddleEast" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/MiddleEast.png" alt="" width="378" height="246" /></a></p>
<blockquote><p>They have defined the malware as the most complex threats ever discovered. Flame is a sophisticated attack toolkit, which is a lot more complex than Duqu. It is a backdoor, a Trojan, and it has worm-like features, allowing it to replicate in a local network and on removable media if it is commanded so by its master.</p></blockquote>
<p>&nbsp;</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/208193529.png"><img class="aligncenter  wp-image-5870" title="208193529" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/208193529.png" alt="" width="396" height="368" /></a></p>
<p style="text-align: left;">The malware seems to be active since 2010, same period of Stuxnet, but analyzing its complexity the expert believe that is the result of a parallel intelligence project. Today several C&amp;C servers exist around the world, about a dozen different C&amp;C domains, run on several different servers.</p>
<p>Another feature of the malware is the size of its package, almost 20 MB including many different libraries and a LUA virtual machine. LUA is a cross-platform scripting language with &#8220;extensible semantics&#8221;. Many mosules of Flame have been written using the scripting language and interfacing it with subroutines and libraries compiled from C++, the use of LUAlanguage is very uncommon such as the large size of the toolkit. Generally, modern malware is small and written in really compact programming languages, which make it easy to hide. The practice of concealment through large amounts of code is one of the specific new features in Flame.</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/FlamesourceCode.png"><img class="aligncenter  wp-image-5877" title="FlamesourceCode" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/FlamesourceCode.png" alt="" width="476" height="321" /></a></p>
<p>The experts that have analyzed the malware noted an internal use of local databases with nested SQL queries, multiple methods of encryption, various compression algorithms, usage of Windows Management Instrumentation scripting, batch scripting and more, making the attack very significant.</p>
<blockquote><p>Who has developed the malware?</p></blockquote>
<p>Flame is really different form Stuxnet and Duqu, they are results of separated projects that have had the same target.</p>
<p>Assuming this is a cyber weapon we have the following scenarios:</p>
<ul>
<li>Two separate development groups sponsored by hostile governments have decided to adopt a cyber military option.</li>
<li>The same government or coalition of states has decided to unleash a powerful attack against Iran&#8217;s nuclear program, attacking on several fronts the country using Stuxnet as a powerful distraction to keep hidden over time agents such as Duqu and the new Flame.</li>
</ul>
<div>
<blockquote><p>Why do believe that Flame is a cyber weapon?</p></blockquote>
<p>Because cybercrime and hacktivism make a different usage of malware and because it has been used for targeted attacks in a confined geographic area.</p>
</div>
<p style="text-align: left;">The cyber war is begun</p>
<p style="text-align: left;">Pierluigi Paganini</p>
<p style="text-align: left;">


title: China-made US military chip, security backdoor or debugging functionality?
author: paganinip
source:
http://securityaffairs.co/wordpress/5889/security/china-made-us-military-chip-security-backdoor-or-debugging-functionality.html

description:
<p>During last days an insistent news circulated on internet, a microchip used by the US military and manufactured in China contains a secret &#8220;<a title="The nightmare backdoor , reflections on the case Huawei" href="http://securityaffairs.co/wordpress/1377/cyber-crime/the-nightmare-backdoor-reflections-on-the-case-huawei.html" target="_blank">backdoor</a>&#8221; that make possible a remote control of the devices.</p>
<p>The disclosure is attributed to Cambridge University&#8217;s Computing Laboratory, it’s clear the media impact of similar news in security environments, an earthquake that turned around in a big concern given the overwhelming problem of <a title="Hardware qualification, a must in a cyber strategy" href="http://securityaffairs.co/wordpress/1198/cyber-crime/hardware-qualification-a-must-in-a-cyber-strategy.html" target="_blank">qualification of hardware</a> with particular reference to the military.</p>
<p>The researcher of Cambridge University, Sergei Skorobogatov wrote in a <a title="http://www.cl.cam.ac.uk/~sps32/sec_news.html#Assurance" href="http://www.cl.cam.ac.uk/~sps32/sec_news.html#Assurance" target="_blank">draft document</a> that the chip is used in military and industrial applications. Skorobogatov declared that the backdoor has been discovered during testing of a new technique to extract the encryption key from chip, a techniques developed by the spin-off Quo Vadis Labs.</p>
<p>The existence of a backdoor could expose to serious risks of theft the intellectual property the victims and could give a complete control of the devices to the attackers. The researcher is sure of the backdoor existence as part of the chip and it isn&#8217;t related to the firmware.</p>
<blockquote><p>&#8220;The discovery of a backdoor in a military grade chip raises some serious questions about hardware assurance in the semiconductor industry,&#8221;</p></blockquote>
<p>wrote Skorobogatov.</p>
<p>A different view has been provided by Robert Graham, U.S. security consultancy at Errata Security, that has  <a title="http://erratasec.blogspot.it/2012/05/bogus-story-no-chinese-backdoor-in.html" href="http://erratasec.blogspot.it/2012/05/bogus-story-no-chinese-backdoor-in.html" target="_blank">declared</a> that the discovered bug hasn&#8217;t malicious purpose, it is an entry point installed by the manufacturer for debugging operations.</p>
<blockquote><p>&#8220;It&#8217;s remotely possible that the Chinese manufacturer added the functionality, but highly improbable. It&#8217;s prohibitively difficult to change a chip design to add functionality of this complexity.&#8221;</p></blockquote>
<p>Graham added that anyway a backdoor could pose a security threat</p>
<blockquote><p>&#8220;It not only allows the original manufacturer to steal intellectual-property, but any other secrets you tried to protect with the original [encryption] key.&#8221;</p></blockquote>
<p>Graham argues that the presence of backdoors is widespread, about 20% of home routers and around 50% of industrial control computers have a backdoor. Not all backdoors of course have a malicious purpose, in many cases they are used to debug software and firmware contained in the product.<br />
Graham added that chip designers project a chip from building-blocks, including a module with debug functionality such as JTAG. Many commercial products include the famous module for chip debugging.</p>
<p>The expert says that companies have to disable the debug feature in the final version but usually they don&#8217;t do it due great expenses to the design of the chip, they leave JTAG interface enabled just not connect the pins to it or if they connect the pins, they don&#8217;t route to the pins on the circuit board.</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/chip-with-jtag-debug_fig1.gif"><img class="aligncenter  wp-image-5900" title="chip-with-jtag-debug_fig1" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/chip-with-jtag-debug_fig1.gif" alt="" width="360" height="212" /></a></p>
<p>The chip in question (Microsemi/Actel ProASIC3) is a typical FPGA – a chip with a blank array of gates that can be programmed to emulate almost any other kind of chip. General purpose FPGA are chipest of real silicon chips so they are largely used.</p>
<p>It is clear the importance of the attention to devote to hardware devices in a more advanced technology scenario. Microcircuits and firmware are present in every device around us, from the control of our cars to satellite communications systems. Each product requires a careful analysis and the qualification of manufacturing processes that accompany it.</p>
<p>The ability to manage every aspect of what we have described must be part of a cyber strategy that each country must deploy and that is the only way to guarantee satisfactory security levels.</p>
<p>In the meantime, let&#8217;s wait for the final response of the Microsemi/Actel firm.</p>
<p>Pierluigi Paganini</p>


title: Flame malware, from genesis to the plot theory
author: paganinip
source:
http://securityaffairs.co/wordpress/5915/intelligence/flame-malware-from-genesis-to-the-plot-theory.html

description:
<p>In this article I desire to discuss about many personal doubts and beliefs regarding the <a title="Call it Flame, Flamer or Skywiper … it’s a new cyber weapon" href="http://securityaffairs.co/wordpress/5858/malware/call-it-flame-flamer-or-skywiper-its-a-new-cyber-weapon.html" target="_blank">Flame</a> malware, first my idea that we are facing with a new powerful cyber weapon.</p>
<p>In the same hours <a title="sKyWIper Analysis" href="http://www.crysys.hu/skywiper/skywiper.pdf" target="_blank"> the Iranian Computer Emergency Response Team Coordination CenterLab</a>,   <a title="sKyWIper Analysis" href="http://www.crysys.hu/skywiper/skywiper.pdf" target="_blank">CrySyS Lab</a> and <a title="The Flame: Questions and Answers" href="http://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers" target="_blank">Kaspersky Lab</a> have published news regarding the new malware that has been detected and that have hit mainly Windows systems of <a title="Fear Iran and escalation of cyber attacks" href="http://securityaffairs.co/wordpress/4799/intelligence/fear-iran-and-escalation-of-cyber-attacks.html" target="_blank">Middle East</a> area, specifically the <a title="A picture of the Iran threat" href="http://securityaffairs.co/wordpress/5249/intelligence/a-picture-of-the-iran-threat.html" target="_blank">Iran</a>.</p>
<p>This first information let me think that behind the development of what has been defined “very sophisticated <a title="Cyber Weapons" href="http://securityaffairs.co/wordpress/3896/intelligence/cyber-weapons.html" target="_blank">cyber weapon</a>” there is Israel or a Western Country.</p>
<p>Moshe Ya’alon, Israel’s vice premier,rejects every accusation by defining speculation the news that indicate Israel as responsible. But this is a story already seen in the Stuxnet case, all denied meanwhile intelligence and military experts have reported that Stuxnet was tested at the Dimona nuclear complex in Israel in a joint U.S.-Israeli effort to undermine the Iranian program.</p>
<blockquote><p>“Whoever sees the Iranian threat as a serious threat would be likely to take different steps, including these, in order to hurt them.”</p></blockquote>
<p>Richard Silverstein on Israel’s liberal <a href="http://www.richardsilverstein.com/tikun_olam/2012/05/28/flame-israels-new-contribution-to-middle-east-cyberwar/">Tikun Olam</a> Web site under the headline “The country that brought us Iranian nuclear assassinations, explosions at Iran missile bases, and Stuxnet, is at it again,” wrote :</p>
<blockquote><p>“Israel’s new contribution to Middle East cyberwar.”</p>
<p>“The goal is apparently to infiltrate the computers of individuals in Iran, Israel, Palestine and elsewhere who are engaged in activities that interest Israel’s secret police, including military intelligence,”</p></blockquote>
<p>suggesting Israeli intelligence might even be using the worm to spy on its own citizens.</p>
<p>I define erroneously the malware as “new”, but the experts are convinced that it is datable to 2010, exactly the same period of the predecessor <a title="Stuxnet &amp; Duqu, update on cyber weapons usage" href="http://securityaffairs.co/wordpress/4544/hacking/stuxnet-duqu-update-on-cyber-weapons-usage.html" target="_blank">Stuxnet</a>. Both malware appear to be very dangerous cyber threats but the complexity of Flame has no precedents.</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/timeline.jpg"><img class="aligncenter  wp-image-5934" title="timeline" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/timeline.jpg" alt="" width="448" height="99" /></a></p>
<h3><strong>Genesis of malware</strong></h3>
<blockquote><p>This first information let and arouses many questions, why two malware so innovative and profoundly different, circulated in the same period to hit Iran?</p></blockquote>
<p>The researchers of the several teams that are investigating on the discovery believe that the two agents were developed by different groups of experts with completely different development techniques and related to totally different projects. Flame is considered more complex due its intelligence features, but both are modular software.</p>
<p>I have hypothesized the following scenarios:</p>
<ul>
<li>Two separate development groups sponsored by hostile governments have decided to adopt a cyber military option, to steal information of the target and in a second phase attack it.</li>
<li>The same government or coalition of states has decided to unleash a powerful attack against Iran’s nuclear program, attacking on several fronts the country with Stuxnet as a powerful distraction to keep hidden over time agents such as Duqu and the new Flame that could be used for information gathering but also ready to became attacks</li>
</ul>
<h3>Viewing the source code</h3>
<p>Very interesting is the composition of the Flame source code, written in C++ and Lua, that has been published on different web site.  The total size of the package is almost 20 MB including many different libraries and a LUA virtual machine.</p>
<blockquote><p>The size is really significant for a malware, and it justified by the large number of features provided, but how is it possible that an agent of this size has eluded so many years the leading manufacturers of security systems?</p>
<p>Why has been used Lua and which info can we derive from its usage?</p></blockquote>
<p>To the first question I have no answers, personally I believe it’s incredible how long the malware has been invisible to the security word. For at least two years experts from around the world, following the Stuxnet case, have failed to isolate the malware despite the world community was on alert. The malware as we shall soon was recognized as a powerful tool for cyber espionage, unusual in its composition by size and complexity, qualities that would make it extremely noisy. Consider also that the antivirus industry evolves daily to respond to cyber threats, however Flame malware remained transparent to them, a sign that it has changed over time with security systems, remains lawful why do not we have heard about it before.</p>
<p>Regarding Lua, its usage let me believe that the developer have great skill, the choice of the scripting language is mainly motivated by the following factors:</p>
<ul>
<li>Complete portability of the source code and simple integration with C and C++ languages.</li>
<li>It is a dynamic programming language.</li>
<li>The Lua virtual machine is extremely compact, less of 200Kb.</li>
</ul>
<p>All this characteristics let me thing that we are facing with an ongoing project, open to the development of new module, maybe with offensive purpose, and portable, this means that in the future it will be available new offensive modules that could address different platform, not only Windows machines.</p>
<p><strong>Response of Security Firms and antivirus supplier</strong></p>
<p>Despite the complexity of the agent, the principal antivirus supplier have immediately worked to the development of a removal kit,  Bitdefender released a tool to find and remove the Flamer attack toolkit (Download the <a href="http://labs.bitdefender.com/wp-content/plugins/download-monitor/download.php?id=TrojanFlamer_BDRemovalToolDropper_x86.exe" target="_new">32-bit</a> or the <a href="http://labs.bitdefender.com/wp-content/plugins/download-monitor/download.php?id=TrojanFlamer_BDRemovalToolDropper_x64.exe" target="_new">64-bit</a> removal tools).</p>
<p>Catalin Cosoi Bitdefender’s Chief Security Researcher declared:</p>
<blockquote><p>“Flamer is the scariest cyber espionage tool we’ve yet seen. It goes places where other spyware doesn’t go, retrieves information others don’t retrieve, and ensures the infected computer has no privacy whatsoever,”</p>
<p>“Luckily, the Bitdefender removal tool makes it easy to eliminate from your computer.”</p></blockquote>
<h3><strong>Rumors of a plot</strong></h3>
<p>According to some experts the announcement of the malware detection was first provided by Kaspersky Lab researchers but Iran claims the discovery, anyway ready was the response of the leading manufacturers of security systems. This information together with the one related to malware dating on 2010, would be to think that the majors security companies were aware of the project Flame and have been silent for agreements with Western governments. Just in the last months Western countries have decided to suspend the supply of <a title="Stopped antivirus for Iran, controversial penalty" href="http://securityaffairs.co/wordpress/2725/malware/stopped-antivirus-for-iran-controversial-penalty.html" target="_blank">antivirus</a> systems to Iran for penalty forcing the country to develop its own antivirus system, maybe this development has rapidly brought to the discovery of the agent. If confirmed why the antivirus companies haven’t detected it before? Is it a coincidence?</p>
<p>As Kaspersky team declared the malware is datable on 2010 and it has been isolated only in Middle East area, no incidents have been reported to western <a title="Duqu – The worst may still have to come for critical infrastructures" href="http://securityaffairs.co/wordpress/782/cyber-crime/duqu-the-worst-may-still-have-to-come-for-critical-infrastructures.html" target="_blank">critical infrastructures</a>.</p>
<p><img class="aligncenter" title="Flame area" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/MiddleEast.png" alt="" width="378" height="246" /></p>
<blockquote><p>Why the cyber threat hasn’t impacted worldwide infrastructures in the last couple of years?</p></blockquote>
<h3>The possible impact on critical infrastructures</h3>
<p>Now that the malware has been detected is correctly started a global alert on its possible impact on critical infrastructures. Flame is a powerful cyber espionage toolkit that could steal sensible information and that thank to its modularity could be instructed to attacks victims systems.</p>
<p>According the Reuters agency an United Nations (UN) agency official has expressed him concerns regarding the impact of the malware on critical infrastructures of member states. UN will provide a detailed alert on the cyber threat and the International Telecommunications Union (ITU) will also coordinate collection of virus samples.</p>
<blockquote><p>&#8220;This is the most serious (cyber) warning we have ever put out,&#8221; said Marco Obiso, cyber security coordinator for the U.N.&#8217;s Geneva-based International Telecommunications Union.</p>
<p>&#8220;They should be on alert,&#8221;</p></blockquote>
<h3><strong>Has Flame a direct impact on SCADA and ICS systems?</strong></h3>
<p>According to official reports, none of the instances identified shall be able to attack industrial control systems, however, concern is high due the complexity of the malware that could allow the agent to change its behavior simply by integrating a module written for the purpose. At this time Flame is a powerful tool for information gathering, there is no evidence that it has components to attack SCADA or ICS, this particular makes more similar it to Duqu that is known to steal information rather than destroying equipments.<br />
The scalability of the malware is not something new, let&#8217;s remind a similar features in Stuxnet and <a title="Duqu – Cyber weapons factory still operating …  it’s just the beginning" href="http://securityaffairs.co/wordpress/3716/malware/duqu-cyber-weapons-factory-still-operating-its-just-the-beginning.html" target="_blank">Duqu</a>.  <a href="http://www.symantec.com/connect/blogs/flamer-highly-sophisticated-and-discreet-threat-targets-middle-east" target="_blank">Symantec</a> reported that Flame appears to be the same worm that hit the Iranian Oil Ministry during the last weeks impacting its facilities at the Kharg Island terminal.</p>
<p>The cyber war is reality</p>
<p>Pierluigi Paganini</p>
<p>&nbsp;</p>


title: Israel and Iran, expense, capabilities and cyber strategies
author: paganinip
source:
http://securityaffairs.co/wordpress/5950/intelligence/israel-and-iran-expense-capabilities-and-cyber-strategies.html

description:
<p>In recent days the discovery of <a title="Call it Flame, Flamer or Skywiper … it’s a new cyber weapon" href="http://securityaffairs.co/wordpress/5858/malware/call-it-flame-flamer-or-skywiper-its-a-new-cyber-weapon.html" target="_blank">Flame</a> malware  has captured the attention of the media, the internet is monopolized by related news, many experts have identified Israel as the author of the technological miracle, a perfect tool for cyber espionage that could suddenly mutate in an offensive cyber threat. It’s clear that <a title="Fear Iran and escalation of cyber attacks" href="http://securityaffairs.co/wordpress/4799/intelligence/fear-iran-and-escalation-of-cyber-attacks.html" target="_blank">Iran</a> share same conviction, the government of Teheran beliefs that behind the last wave of attacks there are the Western enemies and Israel, of course these countries known to be possible targets of  attacks and retaliation, and the cyber space is most probable scenarios.</p>
<p>Government of Israel is massive investing on cyber security demonstrating a great attention to incoming <a title="McAfee Report on alarming growth of cyber threats" href="http://securityaffairs.co/wordpress/5684/malware/mcafee-report-on-alarming-growth-of-cyber-threats.html" target="_blank">cyber threats</a>, it has announced that it will expend more than $13 million in the coming years to develop new technologies for cyber defence.</p>
<p>Networks, <a title="MASINT discipline &amp; critical infrastructures" href="http://securityaffairs.co/wordpress/2012/intelligence/masint-discipline-critical-infrastructures.html" target="_blank">critical infrastructures</a>, military environments and private companies must be protected from foreign cyber attacks.</p>
<p>Israeli networks are daily goal of thousands of <a title="Israel under a cyber warfare escalation" href="http://securityaffairs.co/wordpress/1747/cyber-warfare-2/israel-under-a-cyber-warfare-escalation.html" target="_blank">cyber attacks</a> conducted by hostile governments, hacktivist and independent hackers who want to compete with one of the most advanced nations, for obvious reasons are reported only in presence of substantial losses or sensational data breach.</p>
<p>The National Cyber Committee, a department under direct control of the Prime Minister’s Office, will coordinate with the Science and Technology Ministry the project during at least three years,  reserving each year $525,000 for advanced cyber security projects sponsored by corporations, and $80,000 to generation with scholarships.</p>
<p>The government of course has a great interest to improve security of its critical infrastructures, due this reason it will push the researchers to develop project that will cover there delicate areas such as banking, defence, government and smart grids in general.</p>
<p>The project will not cover only the development of cyber defence systems but it will support the researches on cyber-psychology, analyzing the user’s reaction to a cyber attacks and the capability to identify groups of hackers and <a title="Al Qaeda continues to frighten the U.S, the cyber war is begun" href="http://securityaffairs.co/wordpress/5745/intelligence/al-qaeda-continues-to-frighten-the-u-s-the-cyber-war-is-begun.html" target="_blank">terrorists cell</a> anticipating  cyber operations against the national security.</p>
<p>National Cyber Committee is actual under retired general Yitzhak Ben Yisrael that during an interview expressed the importance to support private firms in the cyber security matter.</p>
<blockquote><p>“This is not a government program to encourage people to install anti-virus software. That kind of thing is better done by the private sector. What we want to do is work with the private sector, to guide them on the kinds of products and services needed to ensure that our data remains safe.”</p></blockquote>
<p>Really interesting the opinion of Prime Minister Benjamin Netanyahu regarding the committee that view in the project an opportunity of business, exporting developed technologies to member of alliances to extend their cyber security.</p>
<blockquote><p>What is Iran&#8217;s position on cyber warfare? Why the government of Tehran invests so much in cyber security?</p></blockquote>
<p>Giving a look at the comparative strengths of the Iranian and Israeli forces we will note an impressive discrepancy in capabilities and numbers of enlisted troops. Despite Iran population is ten times bigger than Israel&#8217;s, the situation of its military hardware is disastrous due to the decennial arms embargo.</p>
<p style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/IranVsIsrael.jpg"><img class="aligncenter  wp-image-5955" title="IranVsIsrael" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/05/IranVsIsrael.jpg" alt="" width="382" height="254" /></a></p>
<p>Iran is also aware of the potential effects of a cyber attacks against its enemy, the critical infrastructures all over the world are still too vulnerable and the cyber warfare gives the opportunity to move covert offensive. Of course also foreign government are aware of this, that’s way the new battle field is become the cyber space, Stuxnet, Duqu and  Flame are the demonstration.</p>
<p>On December Tehran has announced an ambitious plan to improve its cyber-warfare capabilities investing $1 billion in developing new technologies and creating new team of cyber experts.</p>
<p>Fearing cyber attacks, the Israel Defence Forces has also drafted a multi-year plan to lead to a major boost in military capabilities over the coming five years involving Military Intelligence’s <a title="http://en.wikipedia.org/wiki/Unit_8200" href="http://en.wikipedia.org/wiki/Unit_8200" target="_blank">Unit 8200</a>.</p>
<p>The Unit in collaboration with the C4I Corps, the national Teleprocessing Corps, are working to improve cyber capabilities.</p>
<p>A new division has been created within the C4I Directorate, it is run by former commander of Matzov with the intent to protect the IDF networks.</p>
<blockquote><p>Are Israeli facilities safe? Is Israel able to reject any attack?</p></blockquote>
<p>Chairman of the Israel Electric Corporation Maj.-Gen. (res.) Yiftach Ron- Tal declared that Israel was not adequately prepared to defend its infrastructure.</p>
<blockquote><p> “Israel is under a threat and we could already have experienced a silent infiltration that will be activated when the enemy wants,” “We need to be prepared for the possibility that critical infrastructure will be paralyzed.”</p></blockquote>
<p>Let&#8217;s conclude with a statement pronounced by a senior Israeli official that synthetize the great effort of Israel in cyber security and their ambitions.</p>
<blockquote><p>“We are not where we want to be when it comes to our defences,”</p></blockquote>
<p>Pierluigi Paganini</p>
<p>&nbsp;</p>


title: Wake up Anonymous, the world is getting used to you!
author: paganinip
source:
http://securityaffairs.co/wordpress/5985/cyber-crime/wake-up-anonymous-the-world-is-getting-used-to-you.html

description:
<p>What is happening to <a title="Anonymous Reloaded. Yesterday, today, tomorrow" href="http://securityaffairs.co/wordpress/4935/cyber-crime/anonymous-reloaded-yesterday-today-tomorrow.html" target="_blank">Anonymous</a>? His media energy seems to be at risk addiction just when major security firm are beginning to consider it as one of the most dangerous <a title="Terrorism acts vs cyber threats, new offense scenarios" href="http://securityaffairs.co/wordpress/2217/cyber-crime/terrorism-acts-vs-cyber-threats-new-offense-scenarios.html" target="_blank">cyber threat</a>.</p>
<p>The feeling that comes from outside is that the group of <a title="They are Not What You Think They are … They are Hacktivists" href="http://securityaffairs.co/wordpress/4986/cyber-crime/they-are-not-what-you-think-they-are-they-are-hacktivists.html" target="_blank">hacktivist</a> is slowly falling apart, the feeling is that within the group are mixed stirring souls. Some groups are more aware on media effect of the operations while others cells continue to pursue the goals of behind its genesis.</p>
<p>During last week the name of Anonymous has been linked to F1 circus, the famous hackers have threatened to attack the Montreal’s Grand Prix race planned for the next week.</p>
<p><strong>Which are the motivations of the attack?</strong></p>
<p>Anonymous is in opposition to a Canadian act, known as Bill 78, it is an emergency law passed on 18 May 2012 by the National Assembly of Quebec, Canada to restricts freedom of assembly, protest, or picketing on or near university grounds, and anywhere in Quebec without prior police approval.</p>
<p>The group of hacker has planned to attack the IT infrastructures used during the event, web sites, networks and any other correlated services are at risks.</p>
<p>It&#8217;s clear that an attack to a sporting event has a great media echo and depending on the real intent could have serious consequences. Interfering with the structures used during a similar event it is possible to stop an event so technological but it is also possible to open the door to other threats that could harm human lives.</p>
<p>In an official press Anonymous declared to intend to shut down websites and any other server behind the event, potentially disrupting the race.</p>
<p>In a public message the group announced:</p>
<blockquote><p>“wreck anything F1 related”</p>
<p>“We highly suggest that you join the boycott of the F1 in Montreal and we certainly recommend that you do not purchase any tickets or merchandise online,” the group said. “You have been warned.”</p></blockquote>
<p>For now we note that the hackers have hit the ticketing sector leaving 131 people who purchased tickets in Montreal exposed. As usual the leak comes from Anonymous and was published via pastehtml with information related price paid for ticks, first and last names, telephone numbers, emails and other data.</p>
<p>It&#8217;s not first time that Anonymous attack the F1 world, it&#8217;s already happened during Grand Prix race in Bahrain when they shut down the official Formula One website publishing messages against the regime of Hamad bin Isa bin Salman Al Khalifa to protest against the government crackdown on opposition groups.</p>
<p>Other published messages was directed to F1 CEO Bernie Ecclestone, following some statements</p>
<blockquote><p>“evil and greedy man.”</p>
<p>“As we did in Bahrain – Anonymous intends to wreck Mr. Ecclestone’s little party,”</p></blockquote>
<p>Despite the demonstrative act has been successful there were no impact on the race, but Anonymous claims to have has accessed to personal information including credit card numbers that were stored on the F1 website.</p>
<p>Anonymous is trying to exploit popularity of F1 race to attack the government of Quebec, they have in fact already hit it during last month, bringing down many Quebec government and police websites naming the operation  #OpQuebec.</p>
<p style="text-align: center;"> <a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/anonymous-quebec1-580-75.jpg"><img class="aligncenter  wp-image-5986" title="anonymous-quebec1-580-75" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/anonymous-quebec1-580-75.jpg" alt="" width="348" height="196" /></a></p>
<p>At this point one might wonder about the effectiveness of these operations, I have always considered an opportunity the comparison with the group policy, from both  technical and social point of view, however, as many I have observed a tendency to &#8220;get used&#8221; to the effects of a <a title="DDoS, IPv6 is an excuse to talk about" href="http://securityaffairs.co/wordpress/2416/cyber-crime/ddos-ipv6-is-an-excuse-to-talk-about.html" target="_blank">DDoS attack</a>. Such attacks are long interesting for media and even the same companies are raising the level of security against these cyber threats.</p>
<p><strong>Who benefits from the offensive by Anonymous?</strong></p>
<p>I personally think that at this stage are the same security firms to benefit from the operations of the group, having had the opportunity to increase sales of its systems.</p>
<p>Stopping a website is something different from damaging IT infrastructures of an event blocking it, the group is weakened from this point of view, you need a wave of innovation that can be related to offensive techniques but also to their way to deal with the public and addressing social issues.</p>
<p>Do not forget that despite many experts consider these people <a title="Verizon Report, the wind of hacktivism pushes cybercrime" href="http://securityaffairs.co/wordpress/3524/cyber-crime/verizon-report-the-wind-of-hacktivism-pushes-cybercrime.html" target="_blank">criminals</a>, they have often brought to the <a title="Anonymous vs FBI, threat or voice to listen?" href="http://securityaffairs.co/wordpress/2300/cyber-crime/anonymous-vs-fbi-threat-or-voice-to-listen.html" target="_blank">attention</a> on social and political issues of great interest.</p>
<p><em><strong>I reiterate my thought, the group is at a crossroads, change or die</strong></em></p>
<p>Pierluigi Paganini</p>
<p>&nbsp;</p>


title: How to use Tor Metrics to discover censorship, the Ethiopia case
author: paganinip
source:
http://securityaffairs.co/wordpress/6018/intelligence/how-to-use-tor-metrics-to-discover-censorship-the-ethiopia-case.html

description:
<h2>Tor Metrics</h2>
<p><a title="CIA, FBI, NSA, differents agencies for an unique intent…global monitoring" href="http://securityaffairs.co/wordpress/5798/cyber-crime/cia-fbi-nsa-differents-agencies-for-an-unique-intent-global-monitoring.html" target="_blank">Cyber intelligence units</a> are working to develop tools and applications for a deep inspection of the hidden web with the intent of steal classified secret documents of a potential adversary and to maintain the control over <a title="Analysis of cybercrime and its impact on private and military sectors" href="http://securityaffairs.co/wordpress/4631/cyber-crime/analysis-of-cybercrime-and-its-impact-on-private-and-military-sectors.html" target="_blank">cybercrime </a>and terrorists activities and communications.</p>
<p><strong><em>Let’s start from the beginning, which are the available metrics to analyze the status of TOR networks?</em></strong></p>
<p>The Tor Metrics Portal gives a set of useful the instruments to monitors the workload of the <a title="What is the Deep Web? A first trip into the abyss" href="http://securityaffairs.co/wordpress/5650/cyber-crime/what-is-the-deep-web-a-first-trip-into-the-abyss.html" target="_blank">TOR networks</a>, it proposes a complete collection of tools and documentations for statistical analysis regarding the activities of relays and bridges.</p>
<p>The main areas covered by the metrics are:</p>
<p>-        statistics on the network of relays and bridges</p>
<p>-        statistics on the number of users accessing to the network</p>
<p>-        statistics on the number of packages requested from GetTor</p>
<p>-        collection of active and passive performance measurements of the Tor network</p>
<p>As we will demonstrate the metrics could also be used for intelligence purpose, for example analyzing principal network metrics it is possible to investigate on the application of <a title="Monitoring or censorship? The big fear" href="http://securityaffairs.co/wordpress/3042/intelligence/monitoring-or-censorship-the-big-fear.html" target="_blank">monitoring system</a> inside a country for <a title="The business of Censorship. Golden Shield Project, but not only …" href="http://securityaffairs.co/wordpress/204/cyber-crime/business-of-censorship-golden-shield-project-but-not-only.html" target="_blank">censorship</a> purpose. Recently in many area of the planet similar systems have been used to suppress media protest and to persecute dissidents, avoiding the circulation of unconformable information outside the country. It is happened for example in <a title="Syria drama and impact on cyberspace" href="http://securityaffairs.co/wordpress/2350/intelligence/syria-drama-and-impact-on-cyberspace.html" target="_blank">Syria</a> and in <a title="Fear Iran and escalation of cyber attacks" href="http://securityaffairs.co/wordpress/4799/intelligence/fear-iran-and-escalation-of-cyber-attacks.html" target="_blank">Iran</a>, country where the control of the web is a major concern of the government. These situations are expression of a political sufferance of a country and could give a further element of evaluation to the analysts.</p>
<h3>Network of relays and bridges</h3>
<p>Tor protects users against traffic analysis using a network of onion routers (also called relay), managed by volunteers, which allow anonymous outbound traffic and the creation of anonymous hidden services.  Bridge relays are Tor relays that aren&#8217;t listed in the main Tor directory. They are common referred when a filtering of connection is made by Internet Services Providers (ISP) to all the known Tor relays. It is important to specify that to directly access to a bridge it is necessary to know its address.</p>
<p>The Tor Metrics Portal provides in the Network many information regarding the network composition, in particular with the available statistics it is possible to analyze:</p>
<p>-        average daily number of relays and bridges in the network</p>
<p>-        the average daily number of relays by country</p>
<p>-        Relays with Exit, Fast, Guard, and Stable flags</p>
<p>-        Relays by version</p>
<p>-        Relays by platform</p>
<p>-        Total relay bandwidth in the network</p>
<p>-        Relay bandwidth by Exit and/or Guard flags</p>
<p>-        Number of bytes spent on answering directory requests</p>
<p>The portal provides also statistics on the number of users that access to the TOR network via bridges to avoid monitoring systems put in place by government for surveillance purpose. The data could give an indication of the response of local government to the dissident communications.</p>
<p>The following graphs display an estimate of Tor users via bridges based on the unique IP addresses as seen by a few hundred bridges.</p>
<p style="text-align: center;" align="center"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/BrigesUsers1.png"><img class="aligncenter  wp-image-6019" title="BrigesUsers" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/BrigesUsers1.png" alt="" width="458" height="407" /></a></p>
<p align="center">Figura 1 &#8211; Bridge users from all countries</p>
<p>&nbsp;</p>
<h3>Users accessing to the network</h3>
<p>The Portal collects about the Tor network producing graphical representation regarding the analyses performed, for example it could be interesting to monitor a critical area and the access of population to the TOR network. In days for example in Syria a dictatorial regime is suppressing with military attacks the opponents to the government, in the same time it is using technological applications to avoid that population could transmit information regarding the suppression out of the country. The cyber experts of president Bashar al-Asad have also used several types of RAT (Remote Administration Tool) to prosecute dissidents.</p>
<p style="text-align: left;" align="center">Let’s analyze the number of directly connected users from the region in the last months.</p>
<p style="text-align: center;" align="center"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Connecting-Users-during-Syrian-protests.png"><img class="aligncenter  wp-image-6020" title="Connecting Users during Syrian protests" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Connecting-Users-during-Syrian-protests.png" alt="" width="470" height="371" /></a></p>
<p align="center">Figura 2 &#8211; Connecting user during Syrian protests</p>
<p>In the above picture the graphs related to the period between December 2011 and May 2012 that shows the progressive usage of the network in concomitance to political event. Very interesting a beta feature proposed by the web site that plots on the same graph with a different color possible censorship events.</p>
<p>Every time users are connected to a TOR network need to regular refresh their list of running relays. The users to save bandwidth of the directory authorities send their requests to one out of a few hundred directory mirrors, counting the number of the requests is possible to provide an estimate of the number of connected users. The graphs provide an estimate of recurring Tor users based on the number of sent  requests received by few dozen directory mirrors.</p>
<p>Similar information could be used by intelligence services to monitor political evolution in specific areas.</p>
<p>The metric page also provides the list of Top-10 countries by directly connecting users and Top-10 countries by possible censorship events in beta version.</p>
<p style="text-align: center;"> <a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Top-10-countries-by-directly-connecting-users.jpg"><img class="aligncenter  wp-image-6023" title="Top-10 countries by directly connecting users" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Top-10-countries-by-directly-connecting-users-1024x368.jpg" alt="" width="491" height="177" /></a></p>
<p align="center">Figura 3 &#8211; Top-10 countries by directly connecting users</p>
<p>&nbsp;</p>
<h3>Packages requested from GetTor</h3>
<p>The functionality GetTor allows users to fetch the Tor software via email, one of the proposed metrics on the portal shows the number of packages requested from GetTor daily.</p>
<p>Crossing this information with statistics about the network usage, and in particular related to access mode through Tor bridges, it&#8217;s possible verify the real motives behind the use of the network, the increasing of accessing users and the number of bridges it is fair to conclude that the intended audience is confronted with some form of censorship.</p>
<p>&nbsp;</p>
<p style="text-align: center;"> <a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/number-of-packages-requested-from-GetTor-daily..png"><img class="aligncenter  wp-image-6025" title="number of packages requested from GetTor daily." src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/number-of-packages-requested-from-GetTor-daily..png" alt="" width="471" height="388" /></a></p>
<p align="center">Figura 4 &#8211; Number of packages requested from GetTor daily.</p>
<p>&nbsp;</p>
<h3>Collection of active and passive performance measurements of the Tor network</h3>
<p>The portal contains a set of graphs related the performance of the Tor network such as:</p>
<ul>
<li>the average (median) time to request files of three different sizes over Tor network</li>
<li>fraction of timeouts and failures of downloading files over Tor as experienced by users. Following the definition for TOR Timeout and TOR Failure
<ul>
<li>A timeout occurs when a 50 KiB (1 MiB, 5 MiB) download does not complete within 4:55 minutes (29:55 minutes, 59:55 minutes).</li>
<li>A failure occurs when the download completes, but the response is smaller than 50 KiB (1 MiB, 5 MiB).</li>
<li>fraction of connections that is used uni- or bi-directionally. Each connection is classified as &#8220;Mostly reading&#8221; or &#8220;Mostly writing,&#8221; and &#8220;Both reading and writing.&#8221;</li>
</ul>
</li>
</ul>
<p style="text-align: center;"> <a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Performance-Indicators.bmp"><img class="aligncenter  wp-image-6027" title="Performance Indicators" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Performance-Indicators.bmp" alt="" width="495" height="386" /></a></p>
<p align="center">Figura 5 &#8211; Performance Indicators</p>
<p>&nbsp;</p>
<h2>Case Study &#8211; Ethiopia Introduces Deep Packet Inspection</h2>
<p>The Ethiopian Telecommunication Corporation, unique telecommunication service provider of the country, has deployed for testing purpose a Deep Packet Inspection (DPI) of all Internet traffic.</p>
<p>Let’s try together to use the metrics to verify the existence of monitoring systems. Let’s set a time interval from the beginning of the year to date.</p>
<p style="text-align: center;"> <a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Ethiopia-Tor-network-usage.png"><img class="aligncenter  wp-image-6030" title="Ethiopia Tor network usage" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/Ethiopia-Tor-network-usage-1024x374.png" alt="" width="491" height="179" /></a></p>
<p align="center">Figura 6 &#8211; Ethiopia Tor network usage</p>
<p>It’s simple to note that in the last week of May the Tor Network was not accessible from the country even with trying to use bridged access, evidence of the presence of filtering system for Deep Packet Inspection.</p>
<p>Websites such as https://gmail.com/, https://facebook.com/, https://twitter.com/, and even https://torproject.org/ continue to work. The graphs below show the effects of this deployment of censorship based on Deep Packet Inspection:</p>
<p>Technically the filtering is made interfering with the handshake between Tor clients and Bridge servers, blocking the “TLS server hello” messages from the TOR bridges in response to a “TLS client hello”.</p>
<p>Pierluigi Paganini</p>
<p><strong>Reference</strong></p>
<h3>If you are searching for a Deep Web expert, GaTo is right man!</h3>
<p style="text-align: center;"><a title="http://uscyberlabs.com/blog/" href="http://uscyberlabs.com/blog/" target="_blank"><img class="aligncenter  wp-image-6042" title="cropped-uscyberlabs_Logo_99" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/cropped-uscyberlabs_Logo_99.jpg" alt="" width="480" height="144" /></a></p>
<p>&nbsp;</p>


title: “Olyimpic Games” and boomerang effect, it isn’t sport but cyber war
author: paganinip
source:
http://securityaffairs.co/wordpress/6048/intelligence/olyimpic-games-and-boomerang-effect-it-isnt-sport-but-cyber-war.html

description:
<p class="MsoNormal">For years, we discuss the authorship of what is considered one of the most offensive <a title="Cyber Weapons" href="http://securityaffairs.co/wordpress/3896/intelligence/cyber-weapons.html" target="_blank">cyber weapon</a> of history, <a title="Stuxnet &amp; Duqu, update on cyber weapons usage" href="http://securityaffairs.co/wordpress/4544/hacking/stuxnet-duqu-update-on-cyber-weapons-usage.html" target="_blank">Stuxnet</a>, a thousand voices were compared on the difficult question alternating assertions and denials.</p>
<p class="MsoNormal">Always the principal international experts have suggested the U.S. as the authors of the <a title="Cyber threats from military sector to business" href="http://securityaffairs.co/wordpress/1575/security/cyber-threats-from-military-sector-to-business.html" target="_blank">cyber threat</a>, but the main U.S. authorities have consistently denied, leaving that suspects will also concentrate on the work of <a title="Israel and Iran, expense, capabilities and cyber strategies" href="http://securityaffairs.co/wordpress/5950/intelligence/israel-and-iran-expense-capabilities-and-cyber-strategies.html" target="_blank">Israel</a> intelligence.</p>
<blockquote>
<p class="MsoNormal"><strong><em>But when it was developed Stuxnet and by whom?</em></strong></p>
</blockquote>
<p class="MsoNormal">The planning of the deadly cyber weapon started under the administration of George Bush Junior as part of a military operation named &#8220;Olympic Games&#8221;, but the Obama administration has been pushing a more energetic on the offensive program. The uncomfortable truth was <a title="http://www.nytimes.com/2012/06/01/world/middleeast/obama-ordered-wave-of-cyberattacks-against-iran.html?pagewanted=all" href="http://www.nytimes.com/2012/06/01/world/middleeast/obama-ordered-wave-of-cyberattacks-against-iran.html?pagewanted=all" target="_blank">disclosed</a> by The New York Times that could have shed light on one of the most disturbing questions of global security landscape. The article is adapted from journalist David Sanger&#8217;s forthcoming book, <em>Confront and Conceal: Obama’s Secret Wars and Surprising Use of American Power</em>, and it confirms that both the US and Israeli governments developed and deployed Stuxnet.</p>
<p class="MsoNormal">The real problem as we will see is the damage caused by the uncontrolled spread of dangerous virus to computing facilities across the world.</p>
<p class="MsoNormal">Stuxnet was designed with the intent to interfere and destroy the control systems inside the Iranian nuclear plan in which it assumes is being carried out the dangerous design of President Ahmadinejad to develop a nuclear arsenal with which to threaten the Western enemy. But the U.S. does not have acted alone, as it has been suspected they had the precious collaboration of Israeli computer scientists who have contributed to strengthening the malware.</p>
<p class="MsoNormal">The development has been conducted with intensive collaboration of the the NSA and the secret Israeli 8200 unit, a complex work of intelligence to realize a dangerous cyber weapon able to attack <a title="SCADA and vulnerabilities to critical infrastructures" href="http://securityaffairs.co/wordpress/754/cyber-crime/scada-and-vulnerabilities-to-critical-infrastructure.html" target="_blank">SCADA</a> system in <a title="From the mosaic theory to the stuxnet case" href="http://securityaffairs.co/wordpress/566/cyber-crime/from-the-mosaic-theory-to-the-stuxnet-case.html" target="_blank">Natanz plant</a>.</p>
<p class="MsoNormal">Striking are the backgrounds on the tests revealed the malware being developed, once it was completed the United States began building replicas of Iran’s P-1 centrifuges, a project that <a title="Iran vs West, cyber war or media conflict?" href="http://securityaffairs.co/wordpress/4737/intelligence/iran-vs-west-cyber-war-or-media-conflict.html" target="_blank">Iran</a> purchased from Abdul Qadeer Khan, the Pakistani nuclear chief.</p>
<p class="MsoNormal">The US fortunately already owned a P-1s model because when Colonel Qaddafi gave up his nuclear weapons program in 2003, he turned over the centrifuges he had bought from the Pakistani nuclear ring, and they were placed in storage at a weapons laboratory in Tennessee. The results of the test were satisfactory, the malware demonstrated its efficiency to shut down operations in the test site.</p>
<p class="MsoNormal">Mr. Obama decided to accelerate the attacks even after, for an apparently error, the virus was spread outside the Iran infecting machines also in other countries. The article published by The New Your Times reports of a tense meeting in the White House Situation Room, within days of the cyber offensive, attended by President Obama, Vice President Biden Jr. and the director of the Central Intelligence Agency at the time, Leon E. Panetta.</p>
<p class="MsoNormal">During the meeting was discussed the opportunity to stop the diffusion of the malware outside Iran</p>
<blockquote>
<p class="MsoNormal">“Should we shut this thing down?” President Obama asked</p>
</blockquote>
<p class="MsoNormal">The effectiveness of cyber operation that was causing damage to the systems of SCADA components of Iran&#8217;s nuclear plants led to the decision to continue with the attacks, despite the virus was spreading outside Iran. Considering the potential offensive threat this decision is really questionable, the virus could damage other critical infrastructures, including Western countries, with unpredictable consequences.</p>
<p class="MsoNormal"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/dynamic-internet-services.jpg"><img class="aligncenter size-full wp-image-6062" title="dynamic-internet-services" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/dynamic-internet-services.jpg" alt="" width="425" height="319" /></a></p>
<p class="MsoNormal">President Obama concluded the secret summit declaring that when it came to stopping Iran, the United States had no other choice.</p>
<p class="MsoNormal">During the next week at least two new version of the malware have hit the Natanz nuclear plant and other facilities in Iran.</p>
<p class="MsoNormal">The NYT has collected during the last 18 months reserved information from former American, European and Israeli officials involved in the operations declaring to keep secret their identities.</p>
<p class="MsoNormal">What is considerable are the results obtained with the usage of cyber weapons by US against a historical enemy, demonstrating how much aggressive could be also a covert operation in cyberspace. The US was secretly working on cyber weapon development <a title="Why the use of a cyber weapon has proved a winner?" href="http://securityaffairs.co/wordpress/1321/intelligence/why-the-use-of-a-cyber-weapon-has-proved-a-winner.html" target="_blank">achieving</a>, with malware, what until then could be accomplished only by conventional military operations.</p>
<p class="MsoNormal"><strong>“Previous cyberattacks had effects limited to other computers,” </strong>Michael V. Hayden, the former chief of the CIA, said, declining to describe what he knew of these attacks when he was in office. <strong>“This is the first attack of a major nature in which a cyberattack was used to effect physical destruction,”</strong> rather than just slow another computer, or hack into it to steal data.</p>
<p class="MsoNormal">“Somebody crossed the Rubicon,” he said.</p>
<p class="MsoNormal">According the information collected, once Obama has taken the place of Bush authorized the attacks to continue requesting to be constantly updated on the event and requesting its express authorization to proceed for each phase of the operation.</p>
<p class="MsoNormal"><strong> “From his first days in office, he was deep into every step in slowing the Iranian program — the diplomacy, the sanctions, every major decision,”</strong> a senior administration official said.</p>
<p class="MsoNormal">But do not forget that these days Iran was the scene of a new cyber attack, malware <a title="Call it Flame, Flamer or Skywiper … it’s a new cyber weapon" href="http://securityaffairs.co/wordpress/5858/malware/call-it-flame-flamer-or-skywiper-its-a-new-cyber-weapon.html" target="_blank">Flame</a> seems to have infected Iranians systems for years with a very aggressive agent with purposes of cyber espionage. Again U.S. and Israel have denied every responsibility, however it is clear that we encounter a new and powerful weapon used for purposes of espionage and ready to be turned into a formidable offensive weapon.</p>
<p>Despite enormous differences with Stuxnet it’s clear that Flame could be another face of the US offensive against Iran, but according the opinion of several expert, this time also the industry of antivirus system could be involved the noisy behavior of the agent. It&#8217;s not first time that private industry help government in covert operations, it <a title="http://www.dw.de/dw/article/0,,15453150,00.html" href="http://www.dw.de/dw/article/0,,15453150,00.html" target="_blank">happened</a> for example in German, where a private company, DigiTask , developed and sold a spyware program for public authorities in Bavaria.  Of course in this case we are speaking of a different kind of help, making for example invisible the malware to the common antivirus systems.</p>
<p>On the question Mikko Hypponen, Chief Research Officer of F-Secure, declared:</p>
<blockquote><p>A couple of days ago, I received an e-mail from Iran. It was sent by an analyst from the Iranian Computer Emergency Response Team, and it was informing me about a piece of malware their team had found infecting a variety of Iranian computers. This turned out to be Flame: the malware that has now been front-page news worldwide.</p>
<p>When we went digging through our archive for related samples of malware, we were surprised to find that we already had samples of Flame, dating back to 2010 and 2011, that we were unaware we possessed. They had come through automated reporting mechanisms, but had never been flagged by the system as something we should examine closely. Researchers at other antivirus firms have found evidence that they received samples of the malware even earlier than this, indicating that the malware was older than 2010.</p>
<p>What this means is that all of us had missed detecting this malware for two years, or more. That’s a spectacular failure for our company, and for the antivirus industry in general.</p></blockquote>
<p>and again</p>
<blockquote><p>Stuxnet, Duqu and Flame are not normal, everyday malware, of course. All three of them were most likely developed by a Western intelligence agency as part of covert operations that weren’t meant to be discovered. The fact that the malware evaded detection proves how well the attackers did their job.</p>
<p>The truth is, consumer-grade antivirus products can’t protect against targeted malware created by well-resourced nation-states with bulging budgets. They can protect you against run-of-the-mill malware: banking trojans, keystroke loggers, and e-mail worms.</p></blockquote>
<p class="MsoNormal">Examining the cyber operation form a political perspective it&#8217;s clear that a cyber operation has a great efficiency, the damage caused by Stuxnet have postponed or stopped an imminent conventional strike of Israel against Iran.</p>
<p class="MsoNormal">What is not acceptable are the risks to which a not controlled cyber weapon have exposed computer systems all over the world, the same US critical infrastructures have been exposed to the cyber weapon.</p>
<p class="MsoNormal" style="text-align: center;"><a href="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/obama.jpg"><img class="aligncenter  wp-image-6067" title="obama" src="http://securityaffairs.co/wordpress/wp-content/uploads/2012/06/obama.jpg" alt="" width="448" height="298" /></a></p>
<p class="MsoNormal">The problems begun during the summer of 2010 when the diffusion of the malware gone out of control, starting to spread itself out of Natanz plant. It was not clear the reason of the unexpected spread:</p>
<blockquote>
<p class="MsoNormal"><strong>“We think there was a modification done by the Israelis,”</strong></p>
</blockquote>
<p class="MsoNormal">one of the briefers told the president,</p>
<blockquote>
<p class="MsoNormal"><strong>“and we don’t know if we were part of that activity.”</strong></p>
</blockquote>
<p class="MsoNormal">Mr. Biden reported to the President</p>
<blockquote>
<p class="MsoNormal"><strong>“It’s got to be the Israelis,” “They went too far.”</strong></p>
</blockquote>
<p class="MsoNormal">If the news will be confirmed it could represent an historical event, the usage of a cyber weapon has substituted a military strikes obtaining same results, destroying enemy line.</p>
<p class="MsoNormal">The question is:</p>
<blockquote>
<p class="MsoNormal">How many Stuxnet like malware are operating around the word and where?</p>
</blockquote>
<p class="MsoNormal"><a title="Syria,uncomfortable assumptions on the control of dissidents" href="http://securityaffairs.co/wordpress/5419/intelligence/syriauncomfortable-assumptions-on-the-control-of-dissidents.html" target="_blank">Syria</a>, <a title="North Korea, why too many see it as a cyber threat?" href="http://securityaffairs.co/wordpress/1487/intelligence/north-korea-why-too-many-see-it-as-a-cyber-threat.html" target="_blank">N. Korea</a>, <a title="China, cyber warfare and challenges for the future" href="http://securityaffairs.co/wordpress/4044/intelligence/china-cyber-warfare-and-challenges-for-the-future.html" target="_blank">China</a> and Russia could be under attack with a new generation of cyber weapons.</p>
<p class="MsoNormal"><span style="text-align: left;">The <a title="http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf" href="http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf" target="_blank">International Strategy for Cyberspace</a> describes the cyber attacks are serious and dangerous business. The US in fact reserves the right to use even military force to respond to similar attacks. </span></p>
<blockquote>
<p class="MsoNormal"><span style="text-align: left;">&#8220;All states possess an inherent right to self-defense, and we recognize that certain hostile acts conducted through cyberspace could compel actions under the commitments we have with our military treaty partners,&#8221; </span></p>
<p class="MsoNormal"><span style="text-align: left;">&#8220;We reserve the right to use all necessary means—diplomatic, informational, military, and economic—as appropriate and consistent with applicable international law.&#8221;</span></p>
</blockquote>
<p class="MsoNormal">In the coming years will see an increasing number of similar events, will leave vulnerable antivirus systems architectures powerless over the planet, the same nations attackers could suffer the dreaded boomerang effect due to the uncontrolled spread of cyber weapons. Fortunately, to date no catastrophes have happened, but in future the effects could be unpredictable.</p>
<p class="MsoNormal">The cyber war is begun and we must consider that these cyber threats could be used against every country and adopted in covert operations for several years.  Are we really prepared?</p>
<p class="MsoNormal">Pierluigi Paganini</p>
<h3></h3>


title: Facebook Hacker V1.0 - A Keylogging Software
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/O6SzIOfW3Rk/facebook-hacker-v10-keylogging-software.html


title: NSA Building the World's Biggest Spy Center ever
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/PkyaEoxWWog/nsa-building-biggest-spy-center-ever.html


title: Hacker Arrested For leaking 6 Million Passwords
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/ELy6sSNlK_U/hacker-arrested-for-leaking-6-million.html


title: Hijacking Facebook Users With Clickjacking Attack
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/rYnwxMy7yxs/hijacking-facebook-users-clickjacking.html


title: Android Malware Detected - "Roar of the Pharaoh"
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/7RxkWgIrb5g/android-malware-detected-roar-of.html


title: @Al-Qaeda Goes Dark For 12 Days
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/oVwo-QFu7CE/al-qaeda-goes-dark-for-12-days.html


title: Facebook Hacking: Remote File Inclusion Attack
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/uzxhGQarYyc/facebook-hacking-remote-file-inclusion.html


title: New Malware Detected in "Angry Birds Space"
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/WebCenMWSfY/malware-detected-angry-birds-space.html


title: How To Bypass Surveys For Free
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/f_eYGk6WkoQ/how-to-bypass-surveys-for-free.html


title: elearnSecurity Penetration Testing Professional V2 - Review
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/ZpGvLds5erU/elearnsecurity-penetration-testing.html


title: How To Hack Windows 7 And Bypass Firewall And Kaspersky Antivirus
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/3LhBCV8yBW0/hack-windows-7-and-bypass-antivirus.html


title: Penetration Testing In Real World - "Codename: Samurai Skills"
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/F1khSODOprU/penetration-testing-in-real-world.html


title: Protect Your Website Against SQL Injection
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/Cg9k-sSRx9A/protect-your-website-against-sql.html


title: Nikjju Injection Compromises More Than 180,000 Pages !
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/wlWjTC_Lfmo/nikkju-injection-compromises-more-than.html


title: Anonymous Hacks Formula 1 Website
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/VnSlSRd7RIg/anonymous-hacks-formula-1-website.html


title: Hack Facebook Accounts With Reverting
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/vLyrrFnHvHQ/hack-facebook-accounts-with-reverting.html


title: Google Raises Bug Bounty - Great News For Hackers
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/TLUWMg-oVjI/google-raises-bug-bounty-great-news-for.html


title: Officially Launching IncomeFigure
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/OVyVMtBitrg/officially-launching-incomefigure.html


title: Facebook Strengthen's It's Security By Launching Antivirus MarketPlace
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/NFFRpoxrkG0/facebook-strengthens-its-security.html


title: Hacking Software - oclHashcat-plus v0.08
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/st1HaywS-gs/hacking-software-oclhashcat-plus-v008.html


title: Learn How To Hack With MrCracker InnerCircle
author: Rafay Baloch
source:
http://feedproxy.google.com/~r/HackingAndCracking/~3/fHnTe1Ag84g/learn-how-to-hack-with-mrcracker.html


title: Metasploit网马的免杀
source: http://brk.dis9.com/the-metasploit-net-horse-to-avoid-killing.html
author: admin
description:
关于网马 近几年国内网站挂马呈现井喷式的增长，网马解密也逐步为人们所重视 网马就是在网页中植入木马，你打开网页就运行了木马程序，使你在不知不觉中中毒。 网页木马实际上是一个HTML网页，与其它网页不同的是该网页是黑客精心制作的，用户一旦访问了该网页就会中木马。 为什么说是黑客精心制作的呢？因为嵌入在这个网页中的脚本恰如其分地利用了IE浏览器的漏洞，让IE在后台自动下载黑客放置在网络上的木马并运行（安装）这个木马，也就是说，这个网页能下载木马到本地并运行（安装）下载到本地电脑上的木马，整个过程都在后台运行，用户一旦打开这个网页，下载过程和运行（安装）过程就自动开始。 关于metasploit metasploit聚合了上百的网马，你可以随心使用喜欢的shellcode，让渗透更加简单，但是在这工程中，如果对方按张了防火墙咋办？ 就像下图： 网马免杀 哪最新的midiOutPlayNextPolyEvent Heap Overflow来说 ，先生成一个普通的 msf &#62; use exploit/windows/browser/ms12_004_midi msf &#160;exploit&#40;ms12_004_midi&#41; &#62; show options &#160; Module options &#40;exploit/windows/browser/ms12_004_midi&#41;: &#160; &#160; &#160;Name &#160; &#160; &#160; &#160;Current Setting &#160;Required &#160;Description &#160; &#160;---- &#160; &#160; &#160; &#160;--------------- &#160;-------- &#160;----------- &#160; &#160;OBFUSCATE &#160; false &#160; &#160; &#160; &#160; &#160; &#160;no &#160; [...]


title: kioptrix level_4
source: http://brk.dis9.com/kioptrix-level_4.html
author: admin
description:
作者： adrain &#38; Dis9Team /  Source : http://forum.dis9.com/viewthread.php?tid=1327 以前看到过9区大牛写的破解level_4的过程，照着教程自己做了，这个教程主要是使用的sqlmap，我只不过在这里用中文写下自己的过程，后面再加上自己使用burp suite破解的过程。提权部分去掉，自己提权不行。 一、使用sqlmap： 很简单，就是随便你使用什么工具截取浏览器post数据的过程为： &#160; &#160; myusername=admin&#38;mypassword=admin&#38;Submit=Login myusername=admin&#38;mypassword=admin&#38;Submit=Login ，后面就使用sqlmap进行注入了， &#160; &#160; sqlmap -u url --data=&#34;myusername=admin&#38;mypassword=admin&#38;Submit=Login&#34; --level=5 --risk=4 --dbs sqlmap -u url --data="myusername=admin&#38;mypassword=admin&#38;Submit=Login" --level=5 --risk=4 --dbs 等等得到用户名和密码就可以了，后面直接ssh登入。 二、使用burp suite： 这个比较费劲，主要涉及到文件路径泄漏、cookies注入等方法。主要过程就是找到目标主机的nc，使用反向链接，操作。使用的工具就是burp suite，这个工具貌似会用的话挺神奇的。据说facebook的一个漏洞就是使用这个工具发现的。 首先打开burp suite工具，点击proxy把on改为off，然后设置浏览器的代理，具体使用google下，很简单的。然后在level4网站的登入页面输入用户名和密码：admin和admin。这样提交后，burp就能截获到post数据。 然后在上面的post处点击右键选择发送到repeater，在这里可以对提交的参数值进行修改。 把密码值修改为万能密码 &#160; &#160; ' or 1=1 -- - ' or 1=1 -- - 点击上面的go，发送数据，可以看到 [...]


title: Analysis & pownage of herpesnet botnet
source: http://brk.dis9.com/analysis-pownage-of-herpesnet-botnet.html
author: admin
description:
Introduction We received a new sample from our submit mecanism. This sample is a botnet HTTP client called HerpesNet. The md5 of the sample is db6779d497cb5e22697106e26eebfaa8. We started the analysis when we found a way to manage the command &#38; control&#8230; Tools IDA 5.0 free The idb of file are available: (db6779d497cb5e22697106e26eebfaa8.idb). sqlmap. your favorite [...]


title: Oracle Database Attack
source: http://brk.dis9.com/the-oracle-database-attack.html
author: admin
description:
希望继续补充 : blackrootkit@gmail.com An Introduction to SQL Injection Attacks for Oracle Developers Oracle SQL Injection Cheat Sheet Oracle Java Web Start Plugin Command Line Argument Injection


title: 中间人攻击的38课 端口劫持 最炫的民族风
author: admin
description: 半年长期培训中的视频，太垃圾 发出来 我的新浪微博：weibo.com/u/1882572124 每礼拜送一个培训邀请码 求关注
source:
http://brk.dis9.com/38-class-port-of-the-man-in-the-middle-attack-to-hijack-the-most-unusual-national-wind.html


source: http://blog.emrullahakdemir.com/2012/05/turkiyenin-bilisim-gundemini-gereksiz.html
author: Emrullah Akdemir
title:
Türkiyenin Bilişim Gündemini Gereksiz Şekilde Meşgul Eden Olaylar ve Bunlara Halkın ve Medyanın Katkısı


title: News Update
source: http://pulsecms.com/blog.php?d=26
author: Anonymous
description:
<p>	Yesterday it came to my attention that Pulse Pro had been leaked onto some illegal file sharing sites. &nbsp;After some digging around, I identified the customer who was responsible. &nbsp;The files have been taken down and the user has been contacted and warned. &nbsp;So because of this, I had to change the assigned download URL&#39;s to lock things down a bit. &nbsp;Please use the contact form and send me a message to receive your new download link. &nbsp;Make sure to include the email address you used to place the order through paypal. &nbsp;I apologize for the inconvenience.</p>


title: Pulse Pro 1.3.8 Released
source: http://pulsecms.com/blog.php?d=27
author: Anonymous
description:
<p>	This update fixes a security vulnerability that could potentially allow an unauthorized user to delete a blog post. &nbsp;If you want to replace only the changed files, they are as follows:</p><p>	-edit-post.php<br />	-del-post.php<br />	-manage-blog.php</p>


title: Pulse Pro 1.4
source: http://pulsecms.com/blog.php?d=28
author: Anonymous
description:
<h3>	<img alt="" src="/admin/data/img/uploads/folder.png" style="border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; margin-left: 10px; margin-right: 10px; margin-top: 5px; margin-bottom: 5px; float: left; width: 59px; height: 42px; " />Folders</h3><p>	This release of Pulse Pro brings several highly requested features, most notably, folders. &nbsp;For those with larger collections of blocks, folders will be a big help in organizing content. Blocks can now be created inside a folder or outside in the root as before. Another new feature is that you can move blocks from one folder to another in case you need to reorganize. The third new feature related to block management is the ability to delete blocks.&nbsp;</p><h3>	Language</h3><p>	Many users have requested Pulse to be translated into their native language and some have even generously submitted translated versions of Pulse. &nbsp;While there will not be any official translations included with Pulse, there is now a central language file so that it can be more easily translated. &nbsp;Instead of having to search through and edit 30 different files, all the wording in Pulse is now condensed into one file (lang.php) making the task of translating quick and easy. I encourage users to upload and share their &ldquo;unofficial&rdquo; translations in the forum.</p><h3>	Upgrade Notes:</h3><p>	Due to the new folders feature, a slight change to the file structure had to be made. &nbsp;All user data is now stored in a folder called &ldquo;data&rdquo;. &nbsp;Within that are 4 folders:</p><p>	-backups<br />	-blocks<br />	-blog<br />	-img</p><p>	Unfortunately, this means that existing embed codes will need to be modified to work after you upgrade. &nbsp;To fix this, just add &ldquo;data&rdquo; before &ldquo;blocks&rdquo; in the path like so:</p><p>	include(&quot;/homepages/12/d278165188/htdocs/pulsecms/demo/blocks/Events.html&quot;);&nbsp;</p><p>	include(&quot;/homepages/12/d278165188/htdocs/pulsecms/demo/data/blocks/Events.html&quot;);&nbsp;</p>


title: Tips and Tricks
source: http://pulsecms.com/blog.php?d=29
author: Anonymous
description:
<p>	<br />	<img alt="" src="/admin/data/img/uploads/tip-final.png" style="border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; margin-left: 10px; margin-right: 10px; margin-top: 5px; margin-bottom: 5px; float: left; width: 29px; height: 29px; " />A few users brought up the idea of a tips and tricks section a few weeks ago and I thought it was a good idea. &nbsp;So I have created a new page within the support section for this purpose. &nbsp;There are just a few basic tips for now, but I will continue to build out this section as we go. &nbsp;Let me know via the contact form if you have anything you would like to see in there. &nbsp;Thanks.</p>


title: Regarding reCAPTCHA (1.4.1)
source: http://pulsecms.com/blog.php?d=30
author: Anonymous
description:
<p><img alt="" src="/admin/data/img/uploads/recap.gif" style="margin-left: 10px; margin-right: 10px; margin-top: 5px; margin-bottom: 5px; float: left; width: 196px; height: 75px; " />Since implementing reCAPTCHA, there have been some complaints about its looks, limited customization and difficulty reading the words. &nbsp;While it does do a very good job at eliminating spam, its not perfect. Recently, there have also been issues on some servers where the outgoing connection to the reCAPTCHA server was blocked by a firewall. I never liked the idea of relying on a 3rd party server for this exact reason.</p><p>So today I am releasing a new version with a custom captcha that is very simple, can be customized and will stop spammers. &nbsp;It is based on a question and answer system that you can edit in config.php. &nbsp;For example, what color is the sky? &nbsp;What is 3+5? If the user does not answer with the answers you choose, they cannot submit a comment. &nbsp;You can have as many questions in your config as you want and they will randomly rotate.</p><p>The new system is already on the Pulse blog as well as the demo so feel free to try it out.</p><p>Only two files changed, blog.php and config.php so if you want a quick upgrade, just replace those files. I would be a good idea to just rename the old files in case you need to revert.</p>


title: Pulse Pro 1.4.2 Released
source: http://pulsecms.com/blog.php?d=31
author: Anonymous
description:
<p>	Pulse Pro 1.4.2 is released and available for download. &nbsp;Here is a breakdown of whats new:</p><p>	-New gallery format<br />	-Two bugs fixed in blog&nbsp;<br />	-CKEditor 3.4&nbsp;<br />	-Embeds re-designed (Hidden)</p><p>	Pro users can get the new version here:&nbsp;<a href="http://pulsecms.com/getpro/">http://pulsecms.com/getpro/</a></p>


title: Pulse Pro 1.4.3 Now Available - Gallery Options
source: http://pulsecms.com/blog.php?d=32
author: Anonymous
description:
<p>	I just released an update to Pulse Pro that allows the user to easily change gallery formats. &nbsp;You can choose from the new slider style gallery or the old, more simple thumbnail layout. &nbsp;You just need to edit a setting in config.php and it will automatically switch between formats. &nbsp;Thats the only change in this update, just wanted to get it out there to give people who use the old format an upgrade path.</p><p>	You can view both gallery styles on the demo page:&nbsp;<a href="http://pulsecms.com/demo/">http://pulsecms.com/demo/</a></p>


title: Pulse Pro 1.4.4 Released
source: http://pulsecms.com/blog.php?d=33
author: Anonymous
description:
<p>Pulse Pro 1.4.4 is released and now available for download. &nbsp;Pro customers, use the link and serial # in your sales email to get the latest version. &nbsp;For instructions on how to upgrade your installation, see here:&nbsp;<a href="http://pulsecms.com/support.php">http://pulsecms.com/support.php</a></p><h3><strong>What&#39;s New?</strong></h3><p>A new settings page (<a href="http://pulsecms.com/demo/index.php?p=settings">see demo</a>) is now visible in the admin user interface. &nbsp;This allows you to edit all the settings in config.php right from a browser. &nbsp;For those who wish to hide this from clients, simply edit a setting in config.php ($settings_page = false;).</p><p>A security patch has been applied to the blog.</p><p>A bug was fixed in the thumbs version of the gallery.</p><p>Zip &amp; Doc files can now be uploaded from the file manager in blocks and blog entries.</p><p>Blog html output formatting has been cleaned up</p>


title: Pulse Pro 1.4.5 - Drag & Drop Upload
source: http://pulsecms.com/blog.php?d=34
author: Anonymous
description:
<p>Pulse Pro 1.4.5 implements a new drag and drop image uploader for the Gallery from the open source project <a href="http://plupload.com" target="_blank">http://plupload.com</a>.</p><p>Chrome and Firefox users can now drag and drop images to upload as well as select multiple files at once.</p><p>Other browsers that do not support new HTML5 functionality yet will automatically fall back to a HTML4 version of the uploader.</p><p><strong>Other Items in this release:</strong></p><p>-The default CKEditor toolbar now includes the table tool.<br />-CKEditor updated to 3.4.2<br />-jQuery updated to 1.4.3</p>


title: Pulse Pro 1.4.5.1
source: http://pulsecms.com/blog.php?d=35
author: Anonymous
description:
<p>Pulse Pro 1.4.5.1 is a small update that addresses a bug in the RSS feed that was introduced with the new settings page. &nbsp;Only one file is affected (rss.php) so you can download and just replace that one file to fix the issue.</p>


title: Pulse Pro 1.4.6 - Dates
source: http://pulsecms.com/blog.php?d=36
author: Anonymous
description:
<p>Pulse Pro is another small update that adds a blog date format option to the settings page. &nbsp;This is aimed at making things a bit easier for international users and eliminates the need to modify any code to change the format.</p><p>There are now two options for the blog dates: &nbsp; MM/DD/YYYY &nbsp;or &nbsp;DD/MM/YYYY</p><p>The update also addresses an issue with the gallery that affected some users with Solaris based hosting.</p><p><a href="http://pulsecms.com/getpro">http://pulsecms.com/getpro</a></p>


title: Pulse Pro 1.4.7 - Blog Teaser
source: http://pulsecms.com/blog.php?d=37
author: Anonymous
description:
<p>Pulse Pro 1.4.7 adds the ability to truncate a blog post and add a &quot;Read More&quot; button. There is a new button in the toolbar when editing blog posts (Far right). When clicked, it will insert a special tag that tells Pulse you wish to stop here, insert the button and display the rest inside. You can also manually create the break by typing the tag&nbsp;anywhere in your post.</p><p>Also in this update is an image deletion bug fix for the gallery. &nbsp;</p><p>This will be the last update for the year, with lots more coming in 2011, happy holidays to all Pulse users and thanks for your support :)</p><p>Mark</p><p>PS</p><p>Let me squeeze this into this post also, I&#39;m playing around with a simple front end design pack that utilizes all the Pulse features (Block, Blog, Gallery). Just two files, index.php and style.css. Will eventually package it up and post for free if anyone wants to use it as a starting point for a simple personal blog site. &nbsp;Here is the demo:&nbsp;<strong><a href="http://pulsecms.com/front/">http://pulsecms.com/front/</a></strong></p>


title: Free Design Pack Available
source: http://pulsecms.com/blog.php?d=38
author: Anonymous
description:
<p>A few weeks ago I mentioned I was playing around with a free &quot;design pack&quot; for Pulse Pro. (<a href="/front/">Preview Here</a>) &nbsp;I am making it available for download today for anyone who wants it. &nbsp;Its a very simple concept site that utilizes all the major features of Pulse Pro (Blog, Gallery &amp; Blocks). &nbsp;It&#39;s just two files and a couple images and should enable anyone to set up a quick blog site in a matter of minutes. &nbsp;</p><p>To set it up, just edit index.php and place your Pulse Pro embed codes in the areas noted in the file. &nbsp;Thats it. &nbsp;</p><p>Let me know if you find any browser incompatibilities or other issues. &nbsp;Thanks!</p><p>To download, go to the download page <a href="/download.php">here</a>.</p>


title: Pulse Pro 1.5 - Contact
source: http://pulsecms.com/blog.php?d=39
author: Anonymous
description:
Pulse Pro 1.5 has been released and is now available for download. &nbsp;This release adds a major new feature, a fully functioning contact form that can be embedded into any page. &nbsp;See <a href="http://pulsecms.com/demo/index.php?p=manage-form">demo here</a>.<br /><br />Just like all the other features in Pulse, you simply copy and paste the embed code into any .php page and you have a working form. &nbsp;The only configuration required is to set the destination email on the settings page. &nbsp;<br /><br />The form will check that all fields have been completed and that a valid email address was used. &nbsp;If the requirements are not met, the email will not be sent. &nbsp;It also includes a hidden honeypot field that is only visible to spam bots. &nbsp;If this field is filled in, the email will not be sent.<br /><br />If you want to edit the colors, fonts, etc of the form, all style is stored in css/form.css.<br /><br />Existing users, please use the serial # and URL from your sales email to download the update.


