That is the only one I could find. En will have to do for now. I also forgot to mention that you have to do the Help->Check for Updates. To actually get the 3.1b4 version as an update.
Tom Listons Following the Bouncing Malware from ISC SANS has some amazing info. He did a complete analysis of www.yahoogamez.com. That site gave him some great infections.
It's called: "The age of Wallmart: Inside America's most powerful company". It has been on MSNBC lately and Tivo says it will be comming on again 11-25-04. It has a lot of info on Walmart and their business practices. Also, there is a section on their technology and how they use it.
This page has a similar picture. It is from NASA's SEAWIFS project. It shows the same fires in a larger area and zoomed out to give a better perspective. Click on the smaller picture to get a gigantic version of the smaller one.
How's about and update for 1st gen Windows IPod!
on
New iPod Firmware Released
·
· Score: 4, Informative
In April the message on Apple's site was "Windows version available in Mid May" to the current one "Windows version available soon". Looks like some IPod owners are getting sent to the back of the line.
1.Hershey, Pennsylvania. Tour the Hershey chocolate factory to see how they make all that tasty chocolate. Hit the amusement park while your there to kill the rest of the day.
2. The best tour I've ever done in my life is the Disney World Backstage Tour. You pick the park you want to do the tour in because each park has their own tour. I have only done the main Disney park which after listening to the description of each tour sounded the coolest. You get into a group of about 10-15 people and walk around the park listening to the guide talk about the history of the park and about how the park is run. The guide speaks about Disney's philosophy and what it's like to be a Disney employee. But the best part of the tour is when you get to actually go backstage. You start off in the huge underground tunnels that connect the park (the park is built on a huge mound of dirt).You'll see wardrobe, storage, cast members,floats,etc. You also get on the rides in the park (you go to the front of the line on each time) and get the history of each ride. It really goes on and on. The tour is 12 and over (some age cutoff that is low) because you will see the characters with their heads off so if you have kids under 12 or so it will be a no go for you. Really a great tour. I plan on going on the other tours (MGM,EPCOT,Animal) the next time I go back there.
"I can't help but feel like I'm being shaken down by the hi-tech version of Tony Soprano, what should I do?"
Use DIVIX! If you only have 20 something odd movies then converting them to DIVIX should not be that hard. Then they won't have a reason to shake you down.
Why DIVIX?
1. Codec is distrubuted on many platforms. Linux,Windows,MAC,BE,etc.This should include most of your customers.
2. Easy and quick to install the codec.
3. It's source is open.
Currently I have a Inspiron 8100 with a Raedon 7500.My one friend has a Inspiron 8200 with a GeForce2Go. My other friend has a Inspiron 8200 with a GeForce4Go.
The performance from these laptops are good enough for the games we play.UT2003, Empire Earth, Warcraft III, Quake3, etc. If the settings are left at medium most frame rates from these laptops are very playable. The strategy games are a breeze with these video chipsets. Hell, on a cruise to Alaska my friend and I brought our laptops and a crossover cable and played games at downtimes. Games while waiting for delayed flights and "On Ship Days" are great fun and kills time quickly.
Throwing together a LAN party with mostly laptops is much eaiser than lugging huge heavy monitors and towers. People are much more likely to come to the party if they don't have to lug a huge ammount of stuff to it.
My friends and I have seen the light of powerful video chipsets in laptops. Yes we usually play only in places that have outlets (because of processor stepping) so this leaves planes out but it does include trains, airports, ships, hotels, cabins, campers, etc.
We choose Dell for the laptops because they are one of the only companies that sold the high end video chipsets in laptops. Also, I've got to have Debian on this laptop so I knew Dell laptops don't have many problems with Linux. At least in my expierence with them they don't. I have not had any problems with Linux on my Insprion 8100 Raedon 7500.
Yes this can be solved with a firewall. Some other responses have mentioned this. If your being used as a zombie then the first packets you see are SYN/ACK or RST packets.The first packet of a valid connection should only be a SYN packet. If your seeing SYN/ACK or RST as the first packet of a new connection then something fishy is probally going on.So setup some type of decent firewall in front of this cluster (I can't believe you don't have one now) here some ideas from a few rulesets.Start with a default deny policy.
With OpenBSD's PF the rule "scrub in on $ext_if all" takes care of these nasty packets. This was mentioned before. With IPF this is taken care of by limiting connections to valid open ports by only allowing SYN packets (flag) to start the connection. It is done with a rule like "pass in quick on interface proto tcp from any to 192.168.0.50 port = 80 flags S keep state"
Any firewall worth its weight will give you the ability to limit TCP packets by flags. Linux's Netfilter does it too. Refer to the post with this. I think it was "iptables -A INPUT -p all -m state --state ESTABLISHED,RELATED -j ACCEPT".
From all of my college clases I heard that HD's are so sensitive.I've also heard that the drives are sealed so dust won't get into it and screw the drives up. Lastly, the space between the platters and the heads is less than a hairs width. With all of this talk of sensitivity I amazed any of this works. Have I been fooled by my teachers and readings?
I know you do this only in an emergency but it really sounds like HD sensitivity is not what is made out to be.
Even if this worm does bust your webserver then compiles itself and starts listening on udp port 2002 a default deny policy for incomming and outgoing traffic would curb connections to this obscure port.
Patching your server should be the first thing you do but if you don't get to it in time your server won't be DOSing other servers.
To comment on my own story. It looks like NSA has gotten some of its code merged into 2.5.27 and.29. Sorry for not looking first. I think this would have made a good story for Slashdot also.
If we could get some of the stuff NSA has been working on merged in we could really make 2.5 lookin sharp.
The DCLUG had a great speaker from NAI labs give a talk on their contributions to SELINUX. Mandatory Access Controls looked like something GNU/Linux could really use.
Slashdot Mirror
That is the only one I could find. En will have to do for now. I also forgot to mention that you have to do the Help->Check for Updates. To actually get the 3.1b4 version as an update.
This might tide you over.
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-1.9.1-linux/1236876773/firefox-3.1b4pre.en-US.linux-x86_64.tar.bz2
LJ had a good article on this a few months back.
http://www.linuxjournal.com/node/8368/print
Here is the better article from Wired all about these types of reactors.
m l
http://www.wired.com/wired/archive/12.09/china.ht
Tom Listons Following the Bouncing Malware from ISC SANS has some amazing info. He did a complete analysis of www.yahoogamez.com. That site gave him some great infections.
FTBM - Part I -
http://isc.sans.org/diary.php?date=2004-07-23/
FTBM - Part II -
http://isc.sans.org/diary.php?date=2004-08-23/
FTBM - Part III -
http://isc.sans.org/diary.php?date=2004-11-04/
FTBM - PART IV -
http://isc.sans.org/diary.php?date=2004-11-24/
It's called: "The age of Wallmart: Inside America's most powerful company". It has been on MSNBC lately and Tivo says it will be comming on again 11-25-04. It has a lot of info on Walmart and their business practices. Also, there is a section on their technology and how they use it.
Roadwired.com has a whole site dedicated to Computer Bags and Carrying cases.
I would suggest the Mega Media Bag. I really like mine.
This page has a similar picture. It is from NASA's SEAWIFS project. It shows the same fires in a larger area and zoomed out to give a better perspective. Click on the smaller picture to get a gigantic version of the smaller one.
In April the message on Apple's site was "Windows version available in Mid May" to the current one "Windows version available soon". Looks like some IPod owners are getting sent to the back of the line.
Quick Loading Headlines From 190+ Tech Sites. Pick the sites you want to see headlines for and they give it to you.
Can't live without it!
1.Hershey, Pennsylvania. Tour the Hershey chocolate factory to see how they make all that tasty chocolate. Hit the amusement park while your there to kill the rest of the day.
2. The best tour I've ever done in my life is the Disney World Backstage Tour. You pick the park you want to do the tour in because each park has their own tour. I have only done the main Disney park which after listening to the description of each tour sounded the coolest. You get into a group of about 10-15 people and walk around the park listening to the guide talk about the history of the park and about how the park is run. The guide speaks about Disney's philosophy and what it's like to be a Disney employee. But the best part of the tour is when you get to actually go backstage. You start off in the huge underground tunnels that connect the park (the park is built on a huge mound of dirt).You'll see wardrobe, storage, cast members,floats,etc. You also get on the rides in the park (you go to the front of the line on each time) and get the history of each ride. It really goes on and on. The tour is 12 and over (some age cutoff that is low) because you will see the characters with their heads off so if you have kids under 12 or so it will be a no go for you. Really a great tour. I plan on going on the other tours (MGM,EPCOT,Animal) the next time I go back there.
3. Also the SeaWorld backstage tour is great.
"I can't help but feel like I'm being shaken down by the hi-tech version of Tony Soprano, what should I do?"
Use DIVIX! If you only have 20 something odd movies then converting them to DIVIX should not be that hard. Then they won't have a reason to shake you down.
Why DIVIX?1. Codec is distrubuted on many platforms. Linux,Windows,MAC,BE,etc.This should include most of your customers.
PS: I dig the site!2. Easy and quick to install the codec.
3. It's source is open.
Currently I have a Inspiron 8100 with a Raedon 7500.My one friend has a Inspiron 8200 with a GeForce2Go. My other friend has a Inspiron 8200 with a GeForce4Go.
The performance from these laptops are good enough for the games we play.UT2003, Empire Earth, Warcraft III, Quake3, etc. If the settings are left at medium most frame rates from these laptops are very playable. The strategy games are a breeze with these video chipsets. Hell, on a cruise to Alaska my friend and I brought our laptops and a crossover cable and played games at downtimes. Games while waiting for delayed flights and "On Ship Days" are great fun and kills time quickly.Throwing together a LAN party with mostly laptops is much eaiser than lugging huge heavy monitors and towers. People are much more likely to come to the party if they don't have to lug a huge ammount of stuff to it.
My friends and I have seen the light of powerful video chipsets in laptops. Yes we usually play only in places that have outlets (because of processor stepping) so this leaves planes out but it does include trains, airports, ships, hotels, cabins, campers, etc.
We choose Dell for the laptops because they are one of the only companies that sold the high end video chipsets in laptops. Also, I've got to have Debian on this laptop so I knew Dell laptops don't have many problems with Linux. At least in my expierence with them they don't. I have not had any problems with Linux on my Insprion 8100 Raedon 7500.
Yes this can be solved with a firewall. Some other responses have mentioned this. If your being used as a zombie then the first packets you see are SYN/ACK or RST packets.The first packet of a valid connection should only be a SYN packet. If your seeing SYN/ACK or RST as the first packet of a new connection then something fishy is probally going on.So setup some type of decent firewall in front of this cluster (I can't believe you don't have one now) here some ideas from a few rulesets.Start with a default deny policy.
With OpenBSD's PF the rule "scrub in on $ext_if all" takes care of these nasty packets. This was mentioned before. With IPF this is taken care of by limiting connections to valid open ports by only allowing SYN packets (flag) to start the connection. It is done with a rule like "pass in quick on interface proto tcp from any to 192.168.0.50 port = 80 flags S keep state"
Any firewall worth its weight will give you the ability to limit TCP packets by flags. Linux's Netfilter does it too. Refer to the post with this. I think it was "iptables -A INPUT -p all -m state --state ESTABLISHED,RELATED -j ACCEPT".
From all of my college clases I heard that HD's are so sensitive.I've also heard that the drives are sealed so dust won't get into it and screw the drives up. Lastly, the space between the platters and the heads is less than a hairs width. With all of this talk of sensitivity I amazed any of this works. Have I been fooled by my teachers and readings?
I know you do this only in an emergency but it really sounds like HD sensitivity is not what is made out to be.
Even if this worm does bust your webserver then compiles itself and starts listening on udp port 2002 a default deny policy for incomming and outgoing traffic would curb connections to this obscure port. Patching your server should be the first thing you do but if you don't get to it in time your server won't be DOSing other servers.
To comment on my own story. It looks like NSA has gotten some of its code merged into 2.5.27 and .29. Sorry for not looking first. I think this would have made a good story for Slashdot also.
http://www.nsa.gov/selinux/news.html
If we could get some of the stuff NSA has been working on merged in we could really make 2.5 lookin sharp.
The DCLUG had a great speaker from NAI labs give a talk on their contributions to SELINUX. Mandatory Access Controls looked like something GNU/Linux could really use.
One day.